I Audited 13 AI Agent Platforms for Security Misconfigurations — Here's the Open-Source Scanner I Built

30 MCP CVEs in 60 days. enableAllProjectMcpServers: true leaking your entire source code. Tool descriptions with invisible Unicode hijacking your agent's behavior. Hardcoded API keys in every other .mcp.json. This is the state of AI agent security in 2026. I built AgentAuditKit to fix it — 77 rules, 13 scanners, one command. The Problem Nobody's Talking About Every AI coding assistant — Claude Code, Cursor, VS Code Copilot, Windsurf, Amazon Q, Gemini CLI — adopted MCP (Model Contex...