
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
@netlify/axis
Advanced tools
Open source tooling and scoring framework to measure how well services work for AI agents.
AXIS is an open source tooling and a scoring framework to measure how well services work for AI agents. Think Lighthouse, but for agent experience.
Give AXIS a scenario, an agent, and a prompt. It runs the agent, captures a full transcript, and produces a graded score across four independent dimensions: Goal Achievement, Environment, Service, and Agent.
The web has Lighthouse. APIs have contract testing. Performance has k6. But there's no standardized way to answer: "How well does my system work when an AI agent tries to use it?".
As agents become a primary interface for interacting with sites, APIs, and developer platforms, the systems they interact with need to be measured and optimized for that experience — just like we optimize for page load time or accessibility. AXIS is that measurement.
npm install @netlify/axis
axis.config.json:
{
"scenarios": "./scenarios",
"agents": ["claude-code"]
}
scenarios/hello-world.json:
{
"name": "Hello world",
"prompt": "Navigate to https://example.com and describe what you see on the page.",
"judge": [
{ "check": "Agent visited the target URL", "weight": 0.5 },
{ "check": "Agent provided a description of the page content", "weight": 0.5 }
]
}
axis run
AXIS executes the scenario, scores the result, and writes a report to .axis/reports/.
Full documentation lives at axis.run:
axis.config.json, scenarios, MCP servers, skillsaxis run, axis reports, axis baselineUse the programmatic API when you want to integrate AXIS into an existing test runner, build tool, or CI pipeline rather than calling the CLI directly.
Delivered: scenario runner, four-dimension scoring pipeline, baselines with regression detection, MCP/skills wiring, custom adapter API, built-in adapters for Claude Code, Codex, and Gemini.
Planned:
AXIS is built in the open. Contributions are welcome. New scenarios, agent adapters,
bug fixes, and documentation improvements all help.
AXIS is open source under the MIT license, created by Netlify and developed with founding contributors including Auth0 and Resend.
Full docs: axis.run
FAQs
Open source tooling and scoring framework to measure how well services work for AI agents.
The npm package @netlify/axis receives a total of 528 weekly downloads. As such, @netlify/axis popularity was classified as not popular.
We found that @netlify/axis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.