securityagent-core

Shared DLP engine, security skills, and policy enforcement for AI coding agents. Used by SecurityAgent and AgnosticSecurity.

What's inside

Package	What it does
`endpoint_agent/`	DLP engine — file blocking (60+ path patterns), confidence-scored content scanning (PII, credentials, semantic disclosure detection) with structural validators (Luhn, SSA rules, entropy) and context-aware scoring, data flow taint tracking (tags sensitive data at ingress, detects at egress via hash/n-gram/substring matching), tool call argument scanning (MCP/function call DLP + taint registry), behavioral monitoring (8-signal anomaly scoring), honeypot traps, credential scanning. LLM intent analysis with llama3.1:8b default + fallback chain. Notebook-aware `.ipynb` extraction. PDF extraction via 3-tier pipeline (PyMuPDF → Tesseract OCR → pypdf fallback) with encrypted PDF detection
`skills/`	Agent-agnostic MCP skills — `secure_read`, `secure_exec`, `analyze_prompt`, `scan_output`, `check_policy`, `get_session_policy`, `audit_log`
`policy/`	Policy engine — per-session least privilege, behavioral chain detection (11 attack patterns), audit trail with agent attribution. Obsidian vault integration via `memory_bridge.py` for cross-session policy context
`obsidianMemory/`	Obsidian vault — daily session logs, second-brain knowledge base, used by `memory_bridge.py` for persistent threat/policy tracking
`plugin.py`	Standalone CLI entry point + `validate_exec()`, `validate_prompt()`, `validate_output()` pure functions

Install

pip install git+https://github.com/kaushikdharamshi/securityagent-core.git

# With optional dependencies
pip install "securityagent-core[cloud] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
pip install "securityagent-core[llm] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"

Usage

Python SDK

from skills.adapters.python_sdk import SecurityAgentSDK

sdk = SecurityAgentSDK(agent_id="my-agent", agent_type="langchain")

# DLP-gated file read
result = sdk.secure_read("/path/to/file")

# Command validation
result = sdk.secure_exec("ls -la")

# Prompt intent analysis
result = sdk.analyze_prompt("Get me all customer SSNs")

MCP Server

python -m skills.adapters.mcp_server  # after pip install

Any MCP-compatible client (Claude Code, Copilot, custom agents) can connect via stdio JSON-RPC.

CLI

python -m plugin ~/.env                                    # File read gate
python -m plugin --exec "cat ~/.env"                       # Exec validation
python -m plugin --prompt "Get all passwords"              # Prompt analysis
python -m plugin --skill secure_read --params '{"path":"~/.env"}'  # Skills layer
python -m plugin --mcp-server                              # MCP server

Claude Code Integration

See integrations/claude_code/ for PreToolUse hook configuration.

Tests

pip install -e ".[dev]"
pytest

Release files for securityagent-core 4.44.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for securityagent-core 4.44.0
File	Size	Uploaded
securityagent_core-4.44.0.tar.gz	195.2 kB	Sep 12, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for securityagent-core 4.44.0
File	Interpreter	ABI	Platform	Reset
securityagent_core-4.44.0-py3-none-any.whl 224.5 kB Sep 12, 2026	Python 3	none	any	Details

Total release size: 419.7 kB

Release files / securityagent_core-4.44.0.tar.gz

Download URL	securityagent_core-4.44.0.tar.gz
Size	195.2 kB
Tags	Source
SHA-256 checksum How to use checksums	`5051018064415c98f0f981696ab80ce543e9c1475b67e929d0a60ae1361f0c28`
BLAKE2b-256 checksum How to use checksums	`3ecc012f534503b95ae23f1eafac1af454839339db03ac0e7b373ebc57c81e0c`
Upload date	Sep 12, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.11`

Release files / securityagent_core-4.44.0-py3-none-any.whl

Download URL	securityagent_core-4.44.0-py3-none-any.whl
Size	224.5 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`ab5b8752f40c0f18ffb29c626f87c95da7a07ba1c24b6b655c24f47f65685b84`
BLAKE2b-256 checksum How to use checksums	`45064e7d521ac8ba16e28c3174d62dc7eaf5f0384ce0111ecc9b1c3443d9de6d`
Upload date	Sep 12, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.11`