Skip to content

Add MseeP.ai badge #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mseep-ai wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add MseeP.ai badge #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/headyzhang-agent-audit-badge.png)](https://mseep.ai/app/headyzhang-agent-audit)

Comment on lines +1 to +2
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot Apr 28, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Privacy concern: External image loading enables user tracking.

Loading the badge image from mseep.net creates a privacy issue. Every user viewing this README on GitHub will trigger an HTTP request to mseep.net, which can collect IP addresses, user agents, timestamps, and referrer information without viewer consent. This data collection happens silently and could raise GDPR/privacy compliance concerns depending on your user base.

Consider one of these alternatives:

  • Host the badge image within your own repository (e.g., in a docs/badges/ directory)
  • Use a data URI to embed the badge directly in the markdown
  • Remove the badge if privacy is a priority
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@README.md` around lines 1 - 2, The README currently embeds an external image
URL ("https://mseep.net/pr/headyzhang-agent-audit-badge.png") which leaks viewer
metadata; replace that external badge reference by either adding the badge file
into the repo (e.g., docs/badges/headyzhang-agent-audit-badge.png) and updating
the README to use the relative path, or convert the badge to an inline data URI
and use that in place of the external URL, or remove the badge entirely—update
the markdown line containing the MseeP.ai Security Assessment Badge to point to
the chosen local/data-URI resource or be deleted.

⚠️ Potential issue | 🟠 Major

Note: This PR is self-promotional from the badge provider.

The PR author (mseep-ai) is the badge service provider themselves rather than an independent third party or a project maintainer. This changes the nature of the addition from an organic endorsement to self-promotion. Consider whether:

  • The "Audited" status has been independently verified
  • Users might misinterpret this as an official security certification
  • This sets a precedent for other third-party services to add their badges via PR
  • A disclosure or context about the badge's meaning would help users
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@README.md` around lines 1 - 2, The README currently embeds a third-party
badge image/link added by the badge provider; either remove this
self-promotional badge or replace it with a clearly labeled disclosure and
provenance statement. Update the README line containing the markdown image/link
("[![MseeP.ai Security Assessment
Badge](https://mseep.net/...)](https://mseep.ai/...)") to either delete that
markdown or prepend/replace it with a short note stating the badge is provided
by mseep-ai (self-submitted), whether the audit was independently verified, and
what the badge represents (e.g., scope, date, and non-official status) to avoid
implying an official certification.

# [Agent Audit](https://headyzhang.github.io/agent-audit/)

**Find security vulnerabilities in your AI agent code before they reach production.**
Expand Down