LibreAI / AI Agents / agentdojo
// agents · ethz-spylab/agentdojo

agentdojo

Test your agents against prompt-injection attacks.

★ 897 stars⑂ 241 forksMITupdated 2026-06
▦ visual — this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

agentdojo is an open-source ai agents project by ethz-spylab (ethz-spylab/agentdojo on GitHub). It has 897 GitHub stars and 241 forks, is released under the MIT license, and was last updated on GitHub on 2 June 2026.

GitHub stars
897
Forks
241
License
MIT
Last updated on GitHub
2 June 2026
Category
AI Agents
Listing
Full install guide
Official site
Official site
// how it works

How it works

  1. Pick a first task

    Choose one real workload to test the project against.

  2. Download the project

    Clone it locally and read through the getting-started guide.

  3. Wire up dependencies

    Install the stack it needs and set any environment variables.

  4. Run and verify

    Execute the starter example and check results before going further.

// features

Why people love it

Attack evaluation

Benchmark prompt-injection attacks.

Defense testing

Measure how well defenses hold.

Dynamic environments

Realistic, interactive agent scenarios.

ETH Zurich research

From the SPy Lab.

Python framework

Extensible evaluation code.

MIT licensed

Permissive licensing.

Advertisement
// run it

Run it yourself

  1. Step 1 — Clone the repo

    Download the source and move into the project folder.

    git clone https://github.com/ethz-spylab/agentdojo.git
    cd agentdojo
  2. Step 2 — Install

    Set up a virtual environment and install dependencies.

    python -m venv .venv && source .venv/bin/activate
    pip install -r requirements.txt
  3. Step 3 — Run a baseline

    Evaluate an agent against the attack suites per the docs.

    # see docs for the evaluation commands
// use cases

What you can build

Advertisement
// faq

Questions, answered

Who maintains AgentDojo?

It is maintained by ETH Zurich's SPy Lab at ethz-spylab/agentdojo, with 241 forks.

Is AgentDojo free to use?

Yes. It is released under the MIT license, which permits commercial use, modification, and redistribution. Read the LICENSE file for the exact terms.

Do I need a paid API to use it?

You need model access for the agents under test; the harness itself is free.

How does it compare to other security evals?

Compare on scenario realism — its dynamic environments are the focus.

How do I get started?

Follow the docs to run a baseline evaluation against your agent.

// keep exploring

Similar tools

AI Agents

promptfoo

Test prompts, agents and RAGs — LLM evals, red teaming and model comparisons from the CLI

★ 25.8k starsMIT
View guide →
AI Agents

rivet

Rivet is Ironclad's visual IDE and TypeScript library for building complex AI agents and prompt chains

★ 4.7k starsMIT
View guide →
AI Agents

Loop Engineering

Loop Engineering — practical patterns, starters and a CLI for designing the loops that prompt and orchestrate AI coding agents, with a Loop Ready score

★ 11.6k starsMIT
View guide →
AI Agents

MobileBuildMCP

An MCP server and CLI that lets AI agents build, test and run iOS and macOS projects.

★ 6.5k starsMIT
View guide →
AI Agents

paritok-4b-v1

Compression gateway that cuts AI coding agents' token bills up to 85%.

★ 1.5k starsApache-2.0
View guide →
AI Agents

ActPlane

eBPF-powered information-flow enforcement for safer AI agents.

★ 104 starsMIT
View guide →
// alternatives

Alternatives in AI Agents

The most-starred other AI Agents projects in the LibreAI catalogue — the realistic shortlist if agentdojo is not the right fit.

Get agentdojo

Free and open — grab the source, star the repo, and start creating.