securityagent-core
Shared DLP engine, security skills, and policy enforcement for AI coding agents. Used by SecurityAgent and AgnosticSecurity.
What's inside
| Package | What it does |
|---|---|
endpoint_agent/ |
DLP engine — file blocking (60+ path patterns), confidence-scored content scanning (PII, credentials, semantic disclosure detection) with structural validators (Luhn, SSA rules, entropy) and context-aware scoring, data flow taint tracking (tags sensitive data at ingress, detects at egress via hash/n-gram/substring matching), tool call argument scanning (MCP/function call DLP + taint registry), behavioral monitoring (8-signal anomaly scoring), honeypot traps, credential scanning. LLM intent analysis with llama3.1:8b default + fallback chain. Notebook-aware .ipynb extraction. PDF extraction via 3-tier pipeline (PyMuPDF → Tesseract OCR → pypdf fallback) with encrypted PDF detection |
skills/ |
Agent-agnostic MCP skills — secure_read, secure_exec, analyze_prompt, scan_output, check_policy, get_session_policy, audit_log |
policy/ |
Policy engine — per-session least privilege, behavioral chain detection (11 attack patterns), audit trail with agent attribution. Obsidian vault integration via memory_bridge.py for cross-session policy context |
obsidianMemory/ |
Obsidian vault — daily session logs, second-brain knowledge base, used by memory_bridge.py for persistent threat/policy tracking |
plugin.py |
Standalone CLI entry point + validate_exec(), validate_prompt(), validate_output() pure functions |
Install
pip install git+https://github.com/kaushikdharamshi/securityagent-core.git
# With optional dependencies
pip install "securityagent-core[cloud] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
pip install "securityagent-core[llm] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
Usage
Python SDK
from skills.adapters.python_sdk import SecurityAgentSDK
sdk = SecurityAgentSDK(agent_id="my-agent", agent_type="langchain")
# DLP-gated file read
result = sdk.secure_read("/path/to/file")
# Command validation
result = sdk.secure_exec("ls -la")
# Prompt intent analysis
result = sdk.analyze_prompt("Get me all customer SSNs")
MCP Server
python -m skills.adapters.mcp_server # after pip install
Any MCP-compatible client (Claude Code, Copilot, custom agents) can connect via stdio JSON-RPC.
CLI
python -m plugin ~/.env # File read gate
python -m plugin --exec "cat ~/.env" # Exec validation
python -m plugin --prompt "Get all passwords" # Prompt analysis
python -m plugin --skill secure_read --params '{"path":"~/.env"}' # Skills layer
python -m plugin --mcp-server # MCP server
Claude Code Integration
See integrations/claude_code/ for PreToolUse hook configuration.
Tests
pip install -e ".[dev]"
pytest
1 maintainer
Metadata
1 maintainer
Release files for securityagent-core 4.50.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| securityagent_core-4.50.0.tar.gz | 249.7 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| securityagent_core-4.50.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 530.1 kB
Release files / securityagent_core-4.50.0.tar.gz
| Download URL | securityagent_core-4.50.0.tar.gz |
|---|---|
| Size | 249.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
72f5d3e87a539b0e9cf8dfef22f3c00d524b0c821f847dda0d1cebbd4d6b37b1
|
|
BLAKE2b-256 checksum How to use checksums |
bfdce0b4d3f2b7afe22c744fe2b8eee3d719f1eb1764ba8689dc788774618a69
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.11
|
Release files / securityagent_core-4.50.0-py3-none-any.whl
| Download URL | securityagent_core-4.50.0-py3-none-any.whl |
|---|---|
| Size | 280.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
503b0b66facee2f3c4290283bc8db771bcd027286d303fd88401ed9e40e07ad8
|
|
BLAKE2b-256 checksum How to use checksums |
f64f7d94bb62e4e56aa54ad995272ad71c78a2a9236928deb4863f18841d4bfc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.11
|
