pi-secured-setup v1.1.0 maps against the OWASP AI Agent Security Cheat Sheet. HMAC-chained audit log, bash exfiltration detection, rate limiting, prompt injection scanner, and 14 Dependabot advisories closed.
Audit
A test suite can show good coverage and miss an obvious bug. To measure real quality, I look at four complementary axes, with a simple audit to apply to an existing project.