Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three tools have already passed. Key takeaways Every Inspector-vetted listing clears three gates: an automated check, a frontier model assessment, and human verification. Tenable uses Tenable One AI Exposure to screen for prompt injection and exposed secrets, and OpenAI GPT Cyber models to assess the code and threat model. Tenable security researchers then verify runtime behavior in a clean environment. The review tests 15 types of security issues across three layers of the stack. These issues range f
- Vendor
- Tenable, OpenAI, Anthropic
- Product
- Nessus / Tenable.io / Security Center, ChatGPT / OpenAI, Claude
- Exposure class
- Network management, AI infrastructure
Why it ranks 7 (Routine)
- Product class: network management, AI infrastructure
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Tenable Research (tenable.com)