← Back to scannerDocumentation

Scan a repository before you trust it.

Krahanos is a source-only Python security scanner for agent repositories. It reports capabilities that deserve review without importing or executing the code.

Inputs

ZIP or public GitHub

Upload a repository ZIP up to 50 MB, or paste a public GitHub repository URL. GitHub sync does not request a token.

Output

Structured risk report

Reports include a bounded risk score, blast-radius heuristic, grouped KRNs, source locations, evidence, confidence, and recommendations.

CLI

Run it locally

krahanos scan .
krahanos scan . --format json

API

Integrate it

POST /api/v1/scan
POST /api/v1/scan/github
GET /health

Limits

Designed for a safe first pass.

50 MB compressed upload limit
10,000 archive entries maximum
200 MB extracted size maximum
Temporary workspace deleted after scanning
Malformed paths and uploaded symlinks rejected