Repository History
42 repositories tagged with security
Maskit: Local Privacy Gateway for LLMs and AI Tools
Maskit is a local privacy desensitization gateway engineered for large language models and AI tools. It automatically masks sensitive data in requests sent to AI services and then seamlessly restores it in streaming responses, ensuring private information remains local. This innovative solution supports various AI assistants like Cursor and Claude Code, along with any tool offering a configurable Base URL.
APort Agent Guardrails: Deterministic Pre-Action Authorization for AI Agents
APort Agent Guardrails provides deterministic pre-action authorization for AI agents, running security checks before any tool execution. This crucial mechanism prevents prompt injection from bypassing policy, ensuring robust and auditable protection for AI-driven operations.
Awesome AI Coding Sandboxes: A Security-First Guide to Agent Code Execution
Awesome AI Coding Sandboxes is a curated list of solutions for securely running code generated by autonomous AI agents. It uniquely ranks these sandboxes based on their security posture, focusing on isolation, egress control, and secrets handling. This resource helps developers choose robust environments to mitigate risks associated with untrusted agent code.
aport-spec: The Open Agent Passport (OAP) Specification for AI Agent Trust
The aport-spec repository introduces the Open Agent Passport (OAP) specification, a critical framework for establishing trust in AI agents. It defines a lightweight, cryptographically verifiable credential, enabling real-time, pre-action authorization for AI agents across various platforms. OAP provides the essential runtime trust layer for secure and scalable agentic commerce.
ECC: The Agent Harness Performance Optimization System for LLMs
ECC is an advanced agent harness performance optimization system, providing a coordinated engineering system and toolbox for LLM development. It enables agents to plan, test, implement, review, and learn effectively, enhancing productivity and security for AI-driven coding workflows across platforms like Claude Code, Codex, and Cursor.
Agent Governance Toolkit: Policy Enforcement for Autonomous AI Agents
The Microsoft Agent Governance Toolkit (AGT) provides robust policy enforcement, zero-trust identity, and execution sandboxing for autonomous AI agents. It addresses critical security and compliance challenges, ensuring agents operate within defined boundaries and providing tamper-evident audit trails. AGT covers all 10 items of the OWASP Agentic Top 10, making it essential for shipping AI agents to production securely.
gh-aw-firewall: Secure Your Agentic Workflows with a Network Firewall
gh-aw-firewall is a robust network firewall designed specifically for agentic workflows, restricting outbound HTTP/HTTPS traffic to an allowlist of domains. It operates by running commands within a Docker sandbox, leveraging a Squid proxy for traffic filtering and an optional API proxy sidecar to securely manage LLM API keys. This project is a crucial component of GitHub's ongoing exploration into Agentic Workflows, enhancing their security and control.
OpenSandbox: A Secure and Extensible Sandbox Runtime for AI Agents
OpenSandbox is a powerful, general-purpose sandbox platform designed for AI applications. It provides secure, fast, and extensible runtime environments, supporting multi-language SDKs and Docker/Kubernetes deployments. This project is ideal for developing and evaluating AI agents in isolated, controlled settings.
CubeSandbox: Instant, Concurrent, and Secure Sandbox for AI Agents
CubeSandbox, developed by TencentCloud, is a high-performance, secure sandbox service built on RustVMM and KVM, designed specifically for AI agents. It offers ultra-fast startup times, hardware-level isolation, and high-density deployment, making it ideal for scalable and secure agent execution environments. The service is also fully compatible with the E2B SDK for seamless integration.
Destructive Command Guard (dcg): Protecting AI Agents from Dangerous Commands
The Destructive Command Guard (dcg) is a high-performance hook designed to prevent AI coding agents from executing dangerous git and shell commands. Built in Rust, dcg intercepts and blocks catastrophic operations like `git reset --hard` or `rm -rf`, offering clear explanations and safer alternatives. It provides a crucial safety layer for developers working with tools like Claude Code, Codex CLI, and GitHub Copilot.
PYAS: Python & C++ Antivirus with ML and Behavioral Monitoring
PYAS is an advanced antivirus software developed using a hybrid approach of Python and C++. It leverages machine learning and behavioral monitoring to effectively detect and block various threats. This project offers comprehensive security for Windows systems, combining user-mode scanning with kernel-mode protection.
mullvadvpn-app: Secure and Private Mullvad VPN Client for Desktop and Mobile
The `mullvadvpn-app` is the official open-source client application for the Mullvad VPN service, designed for both desktop and mobile platforms. Developed by Mullvad VPN AB, this project is primarily written in Rust, with frontends built using Electron for desktop and native implementations for Android and iOS. It provides a secure, privacy-preserving VPN experience, supporting protocols like WireGuard and OpenVPN, and is known for its strong emphasis on user anonymity and leak prevention.