Comparison
agentdojo vs agents
Verdict
Pick agentdojo if agentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents; pick agents if the agents tool is a marketplace for plugins that enhances multiple AI agents, offering integration and management capabilities across several platforms, including Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot.
Markdown twin · agentdojo alternatives · agents alternatives
GraphCanon updated today
Trust & integrity
| Signal | agentdojo | agents |
|---|---|---|
| Maintenance | Steady (39d since push) As of today · github_public_v1 | Very active (2d since push) As of today · github_public_v1 |
| Provenance | Not a fork · Organization account As of today · github_public_v1 | Not a fork · Personal account As of today · github_public_v1 |
| Security (OSV) | No lockfile As of today · none | No MCP manifest As of today · mcp_manifest |
Tagline
- agentdojo
- A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
- agents
- Multi-harness agentic plugin marketplace for various AI agents
Stars
- agentdojo
- 659
- agents
- 38k
Forks
- agentdojo
- 168
- agents
- 4.0k
Open issues
- agentdojo
- 33
- agents
- 1
Language
- agentdojo
- Python
- agents
- Python
Adopt for
- agentdojo
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- agents
- The agents tool is a marketplace for plugins that enhances multiple AI agents, offering integration and management capabilities across several platforms, including Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot
Persona
- agentdojo
- -
- agents
- -
Runtime
- agentdojo
- -
- agents
- -
License
- agentdojo
- MIT
- agents
- MIT
Last pushed
- agentdojo
- Jun 2, 2026
- agents
- Jul 8, 2026
Categories
- agentdojo
- AI Agents, Evaluation & Observability
- agents
- AI Agents, Developer Tools
Trust and health
Maintenance
- agentdojo
- Steady (60%)
- agents
- Very active (96%)
Days since push
- agentdojo
- 39d
- agents
- 2d
Open issues (now)
- agentdojo
- 33
- agents
- 1
Owner type
- agentdojo
- Organization
- agents
- User
Security scan
- agentdojo
- No lockfile
- agents
- No MCP manifest
Full report
- agentdojo
- Trust report
- agents
- Trust report
Choose agentdojo if…
- Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs..
- Requirements: Min 8 GB RAM.
- Tags unique to agentdojo: benchmark, large-language-models, prompt-injection, security.
- Also covers Evaluation & Observability.
- AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
When NOT to use agentdojo
- AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism.
- Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
Choose agents if…
- Tags unique to agents: agent-skills, agentic-ai, automation, prompt-engineering.
- Also covers Developer Tools.
- You are working specifically within the ecosystems of Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, or Gemini CLI, as it provides tailored plugins for these environments
When NOT to use agents
- You are working solely within a niche environment that isn't one of the supported platforms (like Claude Code, Codex CLI, etc.) because it may not offer compatible plugins or extensive support
- Your project requirements do not include interoperability between multiple AI agents and you only need to leverage functionalities from a single AI agent with a robust in-built plugin ecosystem
Explore
Sources
Every stat on this page traces to a dated GitHub sync, license file, enrichment field, or trust scan.
- GitHub stars (ethz-spylab/agentdojo) · observed Jul 11, 2026
- GitHub forks (ethz-spylab/agentdojo) · observed Jul 11, 2026
- Last push (ethz-spylab/agentdojo) · observed Jun 2, 2026
- License file (MIT) · observed Jul 11, 2026
- Decision facts (enrichment) · observed Jul 12, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
- GitHub stars (wshobson/agents) · observed Jul 11, 2026
- GitHub forks (wshobson/agents) · observed Jul 11, 2026
- Last push (wshobson/agents) · observed Jul 8, 2026
- License file (MIT) · observed Jul 11, 2026
- Decision facts (enrichment) · observed Jul 11, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
GitHub stars on cards: agentdojo 659 · agents 38k (synced Jul 11, 2026).
Common questions
- What is the difference between agentdojo and agents?
- agentdojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents. agents: Multi-harness agentic plugin marketplace for various AI agents. See the comparison table for live GitHub stats and shared categories.
- When should I choose agentdojo over agents?
- Choose agentdojo over agents when Pricing: Open-source under the MIT License. Some advanced features might require additional libraries or APIs.; Requirements: Min 8 GB RAM; Tags unique to agentdojo: benchmark, large-language-models, prompt-injection, security; Also covers Evaluation & Observability; AgentDojo serves as a benchmarking environment to evaluate security attacks, like prompt injection, and defenses for Large Language Model (LLM) agents.
- When should I choose agents over agentdojo?
- Choose agents over agentdojo when Tags unique to agents: agent-skills, agentic-ai, automation, prompt-engineering; Also covers Developer Tools; You are working specifically within the ecosystems of Claude Code, Codex CLI, Cursor, OpenCode, GitHub Copilot, or Gemini CLI, as it provides tailored plugins for these environments.
- When should I avoid agentdojo?
- AI Agents: Don't use an agent loop when a deterministic workflow would do; agents add latency, cost, and non-determinism. Evaluation & Observability: Defer heavyweight eval infra only until you have real traffic - never skip it once users depend on answers.
- When should I avoid agents?
- You are working solely within a niche environment that isn't one of the supported platforms (like Claude Code, Codex CLI, etc.) because it may not offer compatible plugins or extensive support Your project requirements do not include interoperability between multiple AI agents and you only need to leverage functionalities from a single AI agent with a robust in-built plugin ecosystem
- Is agentdojo or agents more popular on GitHub?
- agents has more GitHub stars (37,779 vs 659). Stars measure visibility, not whether either tool fits your constraints.
- Are agentdojo and agents open source?
- Yes - both are open-source projects on GitHub (agentdojo: MIT, agents: MIT).
- Where can I find alternatives to agentdojo or agents?
- GraphCanon lists graph-backed alternatives at agentdojo alternatives and agents alternatives (agentdojo markdown twin, agents markdown twin), ranked by typed relationship edges rather than popularity votes.
- Is there a machine-readable version of this comparison?
- Yes. The markdown twin at this comparison mirrors this page for agents and LLM crawlers, with the same stats table and FAQ answers.
- Which is better maintained, agentdojo or agents?
- agentdojo: Steady. agents: Very active. Compare maintenance labels, days since push, and release cadence in the trust section below - stars alone do not measure maintenance.
- Where are the full trust reports for agentdojo and agents?
- GraphCanon publishes per-repo trust reports with dated maintenance, provenance, and scan summaries: agentdojo trust report; agents trust report.