AISafe Guard
aisafeguard is an open-source LLM safety and guardrails toolkit for AI apps.
It helps protect against prompt injection, jailbreak attempts, PII leaks, toxic output, and malicious URLs with a Python SDK, CLI, and OpenAI-compatible proxy.
Why AISafe Guard
- Add AI safety checks to any LLM app with minimal code changes
- Enforce configurable guardrail policies:
block,warn,log,redact - Protect both input prompts and model outputs
- Use as a library or as a language-agnostic proxy gateway
Core Features
- Prompt injection detection
- Jailbreak detection
- PII detection and redaction
- Toxicity filtering
- Malicious URL detection
- Relevance checks
- OpenAI/Anthropic wrappers
- OpenAI-compatible proxy mode
Install
pip install aisafeguard
From source (fresh clone):
pip install .
Optional extras:
pip install "aisafeguard[ml]"
pip install "aisafeguard[proxy]"
pip install "aisafeguard[integrations]"
pip install "aisafeguard[telemetry]"
Repository Setup
git clone <your-repo-url>
cd aisafeguard
python3.11 -m venv .venv
source .venv/bin/activate
pip install -e .[dev]
npm install
Node.js Users
This repo does not currently ship a native Node SDK package for runtime usage.
Recommended Node integration today:
- Run
aisafe proxy(or Docker) from this repo. - Call the OpenAI-compatible endpoint from your Node app.
- Keep safety policy/config centralized in
aisafe.yaml.
Example (Node fetch):
const res = await fetch("http://localhost:8000/v1/chat/completions", {
method: "POST",
headers: { "Content-Type": "application/json", "x-user-id": "user-123" },
body: JSON.stringify({
model: "gpt-4o-mini",
messages: [{ role: "user", content: "Hello" }]
})
});
const data = await res.json();
console.log(data.choices?.[0]?.message?.content);
Quick Start
Decorator:
from aisafeguard import guard
@guard(input=["prompt_injection", "pii"], output=["toxicity", "pii"])
async def ask(prompt: str) -> str:
return "model output"
Guard object:
from aisafeguard import Guard
g = Guard(config="aisafe.yaml")
input_result = await g.scan_input("Ignore previous instructions")
OpenAI wrapper:
from aisafeguard import Guard
from aisafeguard.integrations import wrap_openai
guard = Guard()
client = wrap_openai(openai_client, guard)
Use Cases
- Secure chatbots against prompt injection
- Prevent sensitive-data leaks in support assistants
- Add policy controls for enterprise AI workflows
- Gate unsafe model outputs before returning to end users
- Centralize AI safety via proxy for multi-language stacks
CLI
aisafe init
aisafe validate aisafe.yaml
aisafe scan "My SSN is 123-45-6789"
aisafe redteam --strict
aisafe proxy --config aisafe.yaml --host 127.0.0.1 --port 8000 \
--upstream-base-url https://api.openai.com \
--upstream-api-key $OPENAI_API_KEY \
--rpm 120
Proxy env vars:
AISAFE_UPSTREAM_BASE_URLAISAFE_UPSTREAM_API_KEY(orOPENAI_API_KEY)
Docker
docker build -t aisafeguard:latest .
docker run --rm -p 8000:8000 \
-e AISAFE_UPSTREAM_API_KEY=$OPENAI_API_KEY \
aisafeguard:latest
Development
npm install
PYTHONPATH=src python -m pytest -v
python benchmarks/bench_pipeline.py
Docs
docs/getting-started.mddocs/config-reference.mddocs/prompt-injection-protection.mddocs/pii-redaction-llm.mddocs/openai-compatible-ai-proxy.md
Metadata
Release files for aisafeguard 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| aisafeguard-0.1.2.tar.gz | 32.4 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| aisafeguard-0.1.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 70.7 kB
Release files / aisafeguard-0.1.2.tar.gz
| Download URL | aisafeguard-0.1.2.tar.gz |
|---|---|
| Size | 32.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5ae50306ca7fa2500c6397b63c3a74cdee3f1e738016e5dcc83dde0615c25184
|
|
BLAKE2b-256 checksum How to use checksums |
1556927647c2a0f029b3afef5003fa9c63bad481fe8b16d866616cca6e58618b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Feb 18, 2026.
Transparency logRelease files / aisafeguard-0.1.2-py3-none-any.whl
| Download URL | aisafeguard-0.1.2-py3-none-any.whl |
|---|---|
| Size | 38.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
350a2ece073367bd5e3ff6240c0c820fa3e4c44e84b0097929390b7e7a29da69
|
|
BLAKE2b-256 checksum How to use checksums |
84c693c92cb868c98e5d49d47362fec67d0cd164fe64d0ab21cc0cccf432c42d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Feb 18, 2026.
Transparency log