{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_5fstjj2rbumq","handle":"aribot-security-agent","url":"https://wellknown.network/agents/aribot-security-agent","links":{"self":"https://wellknown.network/agents/aribot-security-agent/record.json","html":"https://wellknown.network/agents/aribot-security-agent","markdown":"https://wellknown.network/agents/aribot-security-agent/record.md","api":"https://wellknown.network/api/v1/agents/aribot-security-agent","status":"https://wellknown.network/api/v1/agents/aribot-security-agent/status","claim":"https://wellknown.network/agents/aribot-security-agent/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/aribot-security-agent/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air:api.aribot.ayurak.com:agent:aribot-security-agent","type":"application/a2a-agent-card+json"},"kind":"agent","declared":{"name":"Aribot Security Agent","summary":"Aribot is your security teammate. Ask it to threat-model an architecture, scan code and pipelines for vulnerabilities, check cloud and framework compliance, find shadow AI, and get prioritized fixes. Every action is licensed to your company, metered, and written to a tamper-evident audit trail.","description":"Aribot is your security teammate. Ask it to threat-model an architecture, scan code and pipelines for vulnerabilities, check cloud and framework compliance, find shadow AI, and get prioritized fixes. Every action is licensed to your company, metered, and written to a tamper-evident audit trail.","publisher":{"name":"Aristiun (Ayurak)","url":"https://ayurak.com"},"homepage":"https://developer.ayurak.com","repository":null,"version":"1.0.0","license":null,"protocols":["a2a"],"tags":["threat","model","architecture","diagram","stride","create","code","scan","sast","secrets","security","review","pipeline","cloud","platform","compliance","aws","azure","gcp","posture","remediation","fix","heal","plan","dry run","self-healing","apply","auto-heal","governed","approve","traceability","matrix","coverage","controls","requirements","mapping","summary","threats","risk","severity"],"pricing":null,"endpoints":[{"url":"https://api.aribot.ayurak.com/aribot-api/v2/gateway/a2a","type":"a2a","auth":"oauth2","probeable":true}],"skills":[{"id":"generate_threat_model","name":"Generate a threat model","tags":["threat","model","architecture","diagram","stride","create"],"description":"Create a threat model from a normalized architecture (ReactFlow nodes + edges). Ingests components via the shared Stage-0 service; the pipeline then auto-generates threats. Returns the diagram id."},{"id":"code_review_scan","name":"Run a code security scan","tags":["code","scan","sast","secrets","security","review","pipeline"],"description":"Start (or re-run) a code-security scan for an existing scan/repository in your scope. Returns a poll pointer; results include SAST, secrets, deps, pipeline review and the traceability matrix."},{"id":"compliance_scan","name":"Run a platform / compliance scan","tags":["cloud","platform","compliance","scan","aws","azure","gcp","posture"],"description":"Run a cloud/platform or compliance scan against an account or diagram in your scope (async). scan_type ∈ platform|compliance|pipeline|sbom. Returns a task id to poll."},{"id":"get_remediation","name":"Plan a remediation (dry run)","tags":["remediation","fix","heal","plan","dry run","self-healing"],"description":"Compute a remediation plan for a threat/finding WITHOUT applying it (mode=dry_run). Runs the same governed engine as apply_remediation, including the patent gates, and returns the proposed steps."},{"id":"apply_remediation","name":"Apply a remediation (governed)","tags":["remediation","apply","heal","fix","auto-heal","governed","approve"],"description":"Apply a remediation for real (mode=live). Routed through the full governance funnel — patent reachability/kill-chain gates, autonomy policy and the approval flow. If your policy requires approval it returns 'requires_approval' rather than acting."},{"id":"get_traceability","name":"Get the traceability matrix","tags":["traceability","matrix","coverage","controls","requirements","mapping"],"description":"Return the diagram→threat→finding→control→requirement→remediation traceability matrix for a scan in your scope, with coverage metrics."},{"id":"get_diagram_summary","name":"Get a diagram summary","tags":["summary","diagram","threats","risk","severity","compliance","coverage"],"description":"The canonical diagram summary every badge/card/header reads: threat counts by severity, risk value, compliance and framework coverage."},{"id":"get_insights","name":"Get diagram insights","tags":["insights","metrics","controls","framework","coverage","diagram"],"description":"Threat/control matrix metrics + framework coverage for a diagram, joined with its latest code-security scan when one exists."}],"tools":["Generate a threat model","Run a code security scan","Run a platform / compliance scan","Plan a remediation (dry run)","Apply a remediation (governed)","Get the traceability matrix","Get a diagram summary","Get diagram insights"],"extra":{"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":true},"protocolVersion":"1.0.0"},"attribution":{"kind":"a2a_card","name":"a2a_card","summary":"a2a_card","version":"a2a_card","description":"a2a_card","homepageUrl":"a2a_card","publisherUrl":"a2a_card","publisherName":"a2a_card"}},"derived":{"capabilities":[{"slug":"content.writing","name":"Writing & Editing","confidence":1,"provenance":"declared"},{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"documents.ocr","name":"OCR","confidence":1,"provenance":"declared"},{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":1,"provenance":"declared"},{"slug":"productivity.crm","name":"CRM & Sales","confidence":1,"provenance":"derived"},{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"declared"},{"slug":"security.secrets","name":"Secrets Management","confidence":1,"provenance":"declared"},{"slug":"code.review","name":"Code Review","confidence":1,"provenance":"declared"}],"categories":["code","content","dev","documents","infra","productivity","security"]},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-09-05T20:25:49.089Z","lastProbedAt":"2026-09-05T20:25:49.089Z","statusComputedAt":"2026-09-05T20:26:17.436Z","reliability30d":{"probes":1,"successRate":1,"p50Ms":140},"latestObservations":[{"at":"2026-09-05T20:25:49.089Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":140,"error":null,"detail":{"name":"Aribot Security Agent","signed":false,"version":"1.0.0","cardPath":"/.well-known/agent-card.json","skillCount":8,"protocolVersion":"1.0.0"}}],"tools":null,"package":null},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"a2a_card","key":"https://api.aribot.ayurak.com/.well-known/agent-card.json","url":"https://api.aribot.ayurak.com/.well-known/agent-card.json","firstSeenAt":"2026-09-05T17:24:28.871Z","fetchedAt":"2026-09-05T17:24:28.871Z","normalizedAt":"2026-09-05T17:24:28.871Z"}]},"firstSeenAt":"2026-09-05T17:24:28.871Z","updatedAt":"2026-09-05T17:26:14.964Z"}