securityagent-core

Shared DLP engine, security skills, and policy enforcement for AI coding agents. Used by SecurityAgent and AgnosticSecurity.

What's inside

Package	What it does
`endpoint_agent/`	DLP engine — file blocking (60+ path patterns), confidence-scored content scanning (PII, credentials, semantic disclosure detection) with structural validators (Luhn, SSA rules, entropy) and context-aware scoring, data flow taint tracking (tags sensitive data at ingress, detects at egress via hash/n-gram/substring matching), tool call argument scanning (MCP/function call DLP + taint registry), behavioral monitoring (8-signal anomaly scoring), honeypot traps, credential scanning. LLM intent analysis with llama3.1:8b default + fallback chain. Notebook-aware `.ipynb` extraction. PDF extraction via 3-tier pipeline (PyMuPDF → Tesseract OCR → pypdf fallback) with encrypted PDF detection
`skills/`	Agent-agnostic MCP skills — `secure_read`, `secure_exec`, `analyze_prompt`, `scan_output`, `check_policy`, `get_session_policy`, `audit_log`
`policy/`	Policy engine — per-session least privilege, behavioral chain detection (11 attack patterns), audit trail with agent attribution. Obsidian vault integration via `memory_bridge.py` for cross-session policy context
`obsidianMemory/`	Obsidian vault — daily session logs, second-brain knowledge base, used by `memory_bridge.py` for persistent threat/policy tracking
`plugin.py`	Standalone CLI entry point + `validate_exec()`, `validate_prompt()`, `validate_output()` pure functions

Install

pip install git+https://github.com/kaushikdharamshi/securityagent-core.git

# With optional dependencies
pip install "securityagent-core[cloud] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
pip install "securityagent-core[llm] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"

Usage

Python SDK

from skills.adapters.python_sdk import SecurityAgentSDK

sdk = SecurityAgentSDK(agent_id="my-agent", agent_type="langchain")

# DLP-gated file read
result = sdk.secure_read("/path/to/file")

# Command validation
result = sdk.secure_exec("ls -la")

# Prompt intent analysis
result = sdk.analyze_prompt("Get me all customer SSNs")

MCP Server

python -m skills.adapters.mcp_server  # after pip install

Any MCP-compatible client (Claude Code, Copilot, custom agents) can connect via stdio JSON-RPC.

CLI

python -m plugin ~/.env                                    # File read gate
python -m plugin --exec "cat ~/.env"                       # Exec validation
python -m plugin --prompt "Get all passwords"              # Prompt analysis
python -m plugin --skill secure_read --params '{"path":"~/.env"}'  # Skills layer
python -m plugin --mcp-server                              # MCP server

Claude Code Integration

See integrations/claude_code/ for PreToolUse hook configuration.

Tests

pip install -e ".[dev]"
pytest

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

securityagent_core-4.39.0.tar.gz (195.2 kB view details)

Uploaded Aug 21, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

securityagent_core-4.39.0-py3-none-any.whl (224.5 kB view details)

Uploaded Aug 21, 2026 Python 3

File details

Details for the file securityagent_core-4.39.0.tar.gz.

File metadata

Download URL: securityagent_core-4.39.0.tar.gz
Upload date: Aug 21, 2026
Size: 195.2 kB
Tags: Source
Uploaded using Trusted Publishing? No
Uploaded via: twine/6.2.0 CPython/3.14.2

File hashes

Hashes for securityagent_core-4.39.0.tar.gz
Algorithm	Hash digest
SHA256	`72a2e44053e091c13d013db2db21fe6ffe7e84ff40fcb3373c53cc3185ee18ac`
MD5	`f8d1f0c6e69c1a7dab5d81ba0eca1b7f`
BLAKE2b-256	`92bd61a1921d98f6656a33bdced029891cb2a251d37fdf3a6bdd67a4bb1e8abb`

See more details on using hashes here.

File details

Details for the file securityagent_core-4.39.0-py3-none-any.whl.

File metadata

Download URL: securityagent_core-4.39.0-py3-none-any.whl
Upload date: Aug 21, 2026
Size: 224.5 kB
Tags: Python 3
Uploaded using Trusted Publishing? No
Uploaded via: twine/6.2.0 CPython/3.14.2

File hashes

Hashes for securityagent_core-4.39.0-py3-none-any.whl
Algorithm	Hash digest
SHA256	`d53405a9075e37144090608887ca98a3d18bf5b267fa135e5b2f9014c4826cbc`
MD5	`11fa3c203b078e91b5de3820214fe763`
BLAKE2b-256	`bd7f13593de621c9996c947a48f9b1820782c368460151bc02133c6df6e22283`