securityagent-core

Shared DLP engine, security skills, and policy enforcement for AI coding agents. Used by SecurityAgent and AgnosticSecurity.

What's inside

Package	What it does
`endpoint_agent/`	DLP engine — file blocking (60+ path patterns), confidence-scored content scanning (PII, credentials, semantic disclosure detection) with structural validators (Luhn, SSA rules, entropy) and context-aware scoring, data flow taint tracking (tags sensitive data at ingress, detects at egress via hash/n-gram/substring matching), tool call argument scanning (MCP/function call DLP + taint registry), behavioral monitoring (8-signal anomaly scoring), honeypot traps, credential scanning. LLM intent analysis with llama3.1:8b default + fallback chain. Notebook-aware `.ipynb` extraction. PDF extraction via 3-tier pipeline (PyMuPDF → Tesseract OCR → pypdf fallback) with encrypted PDF detection
`skills/`	Agent-agnostic MCP skills — `secure_read`, `secure_exec`, `analyze_prompt`, `scan_output`, `check_policy`, `get_session_policy`, `audit_log`
`policy/`	Policy engine — per-session least privilege, behavioral chain detection (11 attack patterns), audit trail with agent attribution. Obsidian vault integration via `memory_bridge.py` for cross-session policy context
`obsidianMemory/`	Obsidian vault — daily session logs, second-brain knowledge base, used by `memory_bridge.py` for persistent threat/policy tracking
`plugin.py`	Standalone CLI entry point + `validate_exec()`, `validate_prompt()`, `validate_output()` pure functions

Install

pip install git+https://github.com/kaushikdharamshi/securityagent-core.git

# With optional dependencies
pip install "securityagent-core[cloud] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
pip install "securityagent-core[llm] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"

Usage

Python SDK

from skills.adapters.python_sdk import SecurityAgentSDK

sdk = SecurityAgentSDK(agent_id="my-agent", agent_type="langchain")

# DLP-gated file read
result = sdk.secure_read("/path/to/file")

# Command validation
result = sdk.secure_exec("ls -la")

# Prompt intent analysis
result = sdk.analyze_prompt("Get me all customer SSNs")

MCP Server

python -m skills.adapters.mcp_server  # after pip install

Any MCP-compatible client (Claude Code, Copilot, custom agents) can connect via stdio JSON-RPC.

CLI

python -m plugin ~/.env                                    # File read gate
python -m plugin --exec "cat ~/.env"                       # Exec validation
python -m plugin --prompt "Get all passwords"              # Prompt analysis
python -m plugin --skill secure_read --params '{"path":"~/.env"}'  # Skills layer
python -m plugin --mcp-server                              # MCP server

Claude Code Integration

See integrations/claude_code/ for PreToolUse hook configuration.

Tests

pip install -e ".[dev]"
pytest

Release files for securityagent-core 4.48.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for securityagent-core 4.48.0
File	Size	Uploaded
securityagent_core-4.48.0.tar.gz	249.8 kB	Sep 19, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for securityagent-core 4.48.0
File	Interpreter	ABI	Platform	Reset
securityagent_core-4.48.0-py3-none-any.whl 280.4 kB Sep 19, 2026	Python 3	none	any	Details

Total release size: 530.1 kB

Release files / securityagent_core-4.48.0.tar.gz

Download URL	securityagent_core-4.48.0.tar.gz
Size	249.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`448802c985bfb9041f38238456dcd71d46add23c9e40ed1f5068b99dc87a0937`
BLAKE2b-256 checksum How to use checksums	`f0760e4694ae4ab1d72be3b83e58062fa3d494bf46c0e16b81bd72765699c4ab`
Upload date	Sep 19, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.11`

Release files / securityagent_core-4.48.0-py3-none-any.whl

Download URL	securityagent_core-4.48.0-py3-none-any.whl
Size	280.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`cf5fc5a7b2d4b9680a3b49fca44e55e3e1af743f6b4f46589ff364f38d1a86f2`
BLAKE2b-256 checksum How to use checksums	`6d57e30036da685019ad5fda7a34a82dac2289b6b72aa9ed3fec61af719b841b`
Upload date	Sep 19, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.12.11`