First reported knostic.ai
Tools · latest
First reported github.com
GitHub - AlwaysReadyAllies/warden: Drop-in security proxy for MCP — policy, tamper-evident audit, human approval, prompt-injection & secret-exfil defense. One line of config, zero code.
Warden is an open-source drop-in security proxy for the Model Context Protocol (MCP) that adds policy enforcement, tamper-evident audit logging, human approval gates, and defenses against prompt injection and secret exfiltration. The GitHub repository includes policies, examples, a SECURITY.md threat model, and a CI test matrix, and is configured via one line of config with no code changes. Details →First reported github.com
GitHub - ClickHouse/code-interpreter: Sandboxed code execution API for AI agents: powers LibreChat's Code Interpreter
ClickHouse's code-interpreter is an open-source sandboxed code execution API for AI agents, which powers LibreChat's Code Interpreter feature. The repository includes AppArmor profiles and CI hardening to isolate untrusted, agent-generated code execution. Details →First reported github.com
GitHub - pydantic/monty: A minimal, secure Python interpreter written in Rust for use by AI
Monty, from Pydantic, is a minimal, secure Python interpreter written in Rust intended for use by AI agents to execute generated code safely. It targets the emerging 'code mode' pattern where LLM agents write and run code to call MCP tools rather than invoking them directly, aiming to sandbox that execution. Details →First reported github.com
GitHub - clayseal/clayseal-identity: Runtime identity for AI agents. Short-lived attested credentials with capability tokens that agents narrow as tasks change and verify offline.
clayseal-identity is an open-source project providing runtime identity for AI agents, issuing short-lived attested credentials with capability tokens that agents can narrow as tasks change and verify offline. The repository includes backend, conformance tests, deployment configs, integrations, and examples for adding scoped, verifiable identity to agentic systems. Details →First reported github.com
GitHub - JustiNoel/LLM-Prompt-Injection: A .py code that acts as a middleware between the user and the LLM before producing the output
The GitHub repository JustiNoel/LLM-Prompt-Injection publishes 'prompt-shield', a Python middleware that sits between the user and an LLM to inspect input before output is produced, packaged with Docker Compose for deployment. The provided page shows only the repository file structure and no detailed technical mechanism or evaluation. Details →First reported github.com
GitHub - rakshasa-1729/agentic-paved-roads: Generic security MCP server — brokers policies, risk, paved roads, and tools to coding agents. Talk demo for fwd:cloudsec 2026.
The agentic-paved-roads project is a generic security MCP (Model Context Protocol) server that brokers policies, risk assessments, paved roads, and tools to coding agents, published as a demo for a fwd:cloudsec 2026 talk. The repository ships runnable TypeScript code with tests, CI hardening, and release automation intended to enforce security controls on agent tool access. Details →First reported github.com
GitHub - manojmallick/gavio: The open standard AI gateway — PII protection, audit, reliability & cost control as composable interceptors. Same API in Python, Java & JavaScript.
Gavio is an open-source AI gateway that adds PII protection, audit logging, reliability and cost control as composable interceptors, with a consistent API across Python, Java and JavaScript. It sits in front of LLM providers to inspect and mediate requests/responses. Details →First reported ryandens.github.io
promptblock — block prompt injection in GitHub issues
promptblock is a GitHub tool that scans issue and comment bodies for prompt-injection payloads, specializing in instructions hidden inside HTML comments that GitHub's renderer drops but AI agents reading the raw API text still ingest. It splits bodies into visible and hidden segments, runs a bundled ML classifier, and flags risky content with a label and warning comment. Details →First reported github.com
GitHub - rewired89/HSIP-1PHASE: A self-hosted identity server that gives AI agents a cryptographic identity, generates tamper-proof audit trails, and covers financial compliance requirements (MiFID II, FINRA 4511, SOX §404, DORA, SWIFT CSCF) all in a single Rust binary with no cloud dependency.
HSIP-1PHASE is a self-hosted Rust binary identity server that assigns AI agents a cryptographic identity, produces tamper-proof audit trails of agent actions, and maps to financial compliance regimes (MiFID II, FINRA 4511, SOX §404, DORA, SWIFT CSCF). It ships with a browser extension that surfaces an AI agent activity panel and recent audit entries. Details →First reported sauleau.com
Sven Sauleau: Systems Engineer - airgap - Security for the modern AI age
airgap is a Linux-only Rust tool (installable via `cargo install airgap`) that runs AI agents like claude/opencode and package managers like npm inside mount/user namespaces with a FUSE filesystem, redacting secrets in files (.env, SSH/PGP keys, .npmrc) and gating unexpected file access. It is positioned to prevent secret exfiltration by AI agents and malicious npm packages such as the Shai-Hulud worm. Details →First reported github.com
GitHub - denoland/clawpatrol: Security firewall for agents
Clawpatrol is an open-source security firewall for AI agents from denoland, designed to sandbox external plugins (treated as an untrusted supply-chain attack surface) using OS-level namespaces, Landlock, and macOS sandbox profiles, with permission lockfiles and brokered network dialing. Details →First reported github.com
GitHub - pixiebrix/agent-browser-shield: Browser extension with 35+ rules for keeping your AI agent safe while browsing
A GitHub repository for 'agent-browser-shield,' a browser extension by pixiebrix offering 35+ rules aimed at keeping AI agents safe while browsing. It is a defensive tool addressing risks to browser-based AI agents rather than a report of a specific threat. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector