{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_bu2da3c6rndk","handle":"sigil-2","url":"https://wellknown.network/agents/sigil-2","links":{"self":"https://wellknown.network/agents/sigil-2/record.json","html":"https://wellknown.network/agents/sigil-2","markdown":"https://wellknown.network/agents/sigil-2/record.md","api":"https://wellknown.network/api/v1/agents/sigil-2","status":"https://wellknown.network/api/v1/agents/sigil-2/status","claim":"https://wellknown.network/agents/sigil-2/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/sigil-2/claim.json","badge":"https://wellknown.network/agents/sigil-2/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/sigil-2/history","tools":"https://wellknown.network/api/v1/agents/sigil-2/tools"},"ard":{"identifier":"urn:air:sigilsec.ai:agent:sigil-2","type":"application/a2a-agent-card+json"},"kind":"agent","declared":{"name":"Sigil","summary":"AI agent supply chain security scanner. Quarantines and scans repos, packages, and MCP servers before they run. Eight-phase static analysis with quarantine-first workflow. Runs as a CLI, MCP server with 12 tools, Claude Code plugin, or CI/CD step.","description":"AI agent supply chain security scanner. Quarantines and scans repos, packages, and MCP servers before they run. Eight-phase static analysis with quarantine-first workflow. Runs as a CLI, MCP server with 12 tools, Claude Code plugin, or CI/CD step.","publisher":{"name":null,"url":"https://nomark.ai"},"homepage":"https://nomark.ai","repository":null,"version":null,"license":null,"protocols":["a2a"],"tags":[],"pricing":null,"endpoints":[{"url":"https://sigilsec.ai","type":"a2a","auth":"none","probeable":true}],"skills":[{"id":"sigil_scan","name":"Scan File or Directory","tags":[],"description":"Scan a local file or directory for supply chain security threats. Runs eight-phase static analysis: install hooks, code patterns, network exfiltration, credentials, obfuscation, provenance, prompt injection, and skill security."},{"id":"sigil_scan_package","name":"Scan Package from Registry","tags":[],"description":"Download and scan a package from npm or PyPI. The package is downloaded into quarantine and scanned across all eight phases before anything is installed."},{"id":"sigil_clone","name":"Clone and Scan Repository","tags":[],"description":"Clone a git repository into quarantine and scan it. The repo is held in quarantine until explicitly approved or rejected."},{"id":"sigil_quarantine","name":"List Quarantined Items","tags":[],"description":"List all items currently held in quarantine with their status, source, risk score, and quarantine ID."},{"id":"sigil_approve","name":"Approve Quarantined Item","tags":[],"description":"Release a quarantined item from quarantine for installation or use. Moves the item out of the quarantine directory."},{"id":"sigil_reject","name":"Reject Quarantined Item","tags":[],"description":"Permanently delete a quarantined item. The downloaded files are removed from the quarantine directory."},{"id":"sigil_grade","name":"Grade Path","tags":[],"description":"Letter grade (A-F), recommendation, behaviour profile and key risks for a path. Cheaper to read than sigil_scan when only the verdict matters."},{"id":"sigil_residue_scan","name":"Scan Host for Agent-Tooling Residue","tags":[],"description":"Read-only scan of this machine for what installed agent tooling left behind: shell rc edits, cron/launchd/systemd persistence, git hooks, world-readable credential files, leftover tool directories, /etc/hosts redirects, global agent packages. Nothing is changed."},{"id":"sigil_residue_plan","name":"Plan Residue Cleanup","tags":[],"description":"Show the reversible fixes Sigil would make for host residue, without applying them. Apply and rollback are not exposed as tools; a human runs them in a terminal."},{"id":"sigil_check_package","name":"Check Package in Scan Database","tags":[],"description":"Look up a package or skill's risk assessment in the Sigil public scan database. Works for ClawHub skills, PyPI packages, npm packages, GitHub repos, and MCP servers. Does not require the Sigil CLI."},{"id":"sigil_search_database","name":"Search Scan Database","tags":[],"description":"Search the Sigil public scan database for packages by name or keyword. Returns scanned packages with their verdicts and risk scores. Does not require the Sigil CLI."},{"id":"sigil_report_threat","name":"Report Threat","tags":[],"description":"Report a malicious file to the Sigil threat intelligence database by its SHA256 hash. Requires the Sigil CLI and an authenticated session (sigil login). Reports are reviewed by the security team."}],"tools":["Scan File or Directory","Scan Package from Registry","Clone and Scan Repository","List Quarantined Items","Approve Quarantined Item","Reject Quarantined Item","Grade Path","Scan Host for Agent-Tooling Residue","Plan Residue Cleanup","Check Package in Scan Database","Search Scan Database","Report Threat"],"extra":{"capabilities":{}},"attribution":{"kind":"a2a_card","name":"a2a_card","summary":"a2a_card","description":"a2a_card","homepageUrl":"a2a_card","publisherUrl":"a2a_card"}},"derived":{"capabilities":[{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.911,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.554,"provenance":"derived"},{"slug":"dev.filesystem","name":"Filesystem","confidence":0.54,"provenance":"derived"},{"slug":"ai.agent-discovery","name":"Agent Discovery","confidence":0.54,"provenance":"derived"},{"slug":"data.database","name":"Databases","confidence":0.525,"provenance":"derived"}],"categories":["ai","data","dev"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 1h ago.","lastOkAt":"2026-10-18T17:31:38.406Z","lastProbedAt":"2026-10-18T17:31:38.406Z","statusComputedAt":"2026-10-18T17:33:30.067Z","reliability30d":{"probes":112,"successRate":1,"p50Ms":51,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":110,"ok":110,"authBoundaryOk":0,"serviceOk":110,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-18T17:31:38.406Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":20,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-18T11:27:59.265Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":27,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-18T04:29:24.527Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":26,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-17T22:26:36.389Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":26,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-17T16:29:29.554Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":17,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-17T09:25:51.668Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":20,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-17T03:24:48.218Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":208,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-16T21:32:23.481Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":55,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-16T15:29:45.664Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":21,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}},{"at":"2026-10-16T08:46:11.144Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":189,"error":null,"detail":{"name":"Sigil","signed":false,"cardPath":"/.well-known/agent-card.json","skillCount":12}}],"tools":null,"package":null,"toolSurface":null,"endpointFacts":[{"id":"ep_b9j52fmqwfwn","url":"https://sigilsec.ai","type":"a2a","factsCheckedAt":"2026-10-14T12:28:24.515Z","auth":null,"tls":{"observedAt":"2026-10-14T12:28:24.576Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"sigilsec.ai","issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validFrom":"2026-08-22T05:03:18.000Z","validTo":"2026-11-20T05:03:17.000Z","daysToExpiry":32,"sanCount":1,"fingerprint256":"81:71:02:CE:42:78:58:42:EA:8A:95:78:0E:97:73:2B:AB:79:E2:C1:80:30:9F:15:57:BD:46:8E:61:1C:34:D2"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"a2a_card","key":"https://sigilsec.ai/.well-known/agent-card.json","url":"https://sigilsec.ai/.well-known/agent-card.json","firstSeenAt":"2026-09-28T07:21:34.131Z","fetchedAt":"2026-10-12T18:28:45.482Z","normalizedAt":"2026-10-12T18:28:45.482Z"},{"source":"a2a_card","key":"https://www.sigilsec.ai/.well-known/agent-card.json","url":"https://www.sigilsec.ai/.well-known/agent-card.json","firstSeenAt":"2026-09-13T17:20:44.705Z","fetchedAt":"2026-09-13T17:20:44.705Z","normalizedAt":"2026-09-13T17:20:44.705Z"}]},"firstSeenAt":"2026-09-13T17:20:44.705Z","updatedAt":"2026-09-28T07:21:37.559Z"}