Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents

Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three tools have already passed.Key takeawaysEvery Inspector-vetted listing clears three gates: an automated check, a frontier model assessment, and human verification. Tenable uses Tenable One AI Exposure to screen for prompt injection and exposed secrets, and OpenAI GPT Cyber models to assess the code and threat model. Tenable security researchers then verify runtime behavior in a clean environment. The review tests 15 types of security issues across three layers of the stack. These issues range from conventional flaws like SSRF and path traversal vulnerabilities to agent-specific ones like excessive permissions and memory poisoning.Vetted tools are driving efficiencies: SOC Hunter has cut hunt times by 75% for Tenable’s security team. The CyberAgents Exchange currently has three Exchange Inspector-vetted listings: two built by Tenable and the other one by Splunk. These agents’ contributors report that they accelerate threat hunting, remediation triage, and cloud posture investigation.Ope…

≈