Agent Security Python Packages

datafog

Offline PII firewall for AI agents and LLM apps: fast local detection and redaction, Claude Code hook, LiteLLM guardrail. Zero network calls, one dependency.

41K 66 14

vaara

Open-source evidence layer for AI governance. Gates every AI agent tool call against your policy and writes a hash-chained execution record an auditor verifies offline, without trusting the operator. Root-agnostic, and binds to a TPM 2.0 or SEV-SNP hardware root when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

28K 10 1

chain-signer

Security suite for AI agents — catch the dangerous thing before signing: preflight EVM transactions for drains, inspect EIP-712 signatures for permit-phishing, and gate agent actions by policy. Pairs with any wallet/MCP stack; non-custodial wallet included.

21K 0 0

assay-it

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

17K 9 1

agentx-security-sdk

Runtime action firewall for AI agents: the keyless Shield. Blocks catastrophic tool calls (DROP TABLE, SSRF, secret exfil) in-process, no key. MIT.

16K 0 0

mcpsafetywarden

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

15K 7 1

sunglasses

Sunglasses for AI agents. Protection layer + neighborhood watch.

9K 3 2

medusa-security

AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.

8K 893 150

tenuo-claude-code

Governance for Claude Code: audit and constrain which tools and arguments Claude Code can use, with cryptographic Tenuo warrants enforced on every call.

7K 0 0

dfx-agentguard

Autonomous security scanner for AI agents - detects prompt injection, tool abuse, data exfiltration, and all 10 OWASP ASI Top 10 vulnerabilities. MCP server mode included.

6K 1 0

immunity-agent

Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.

6K 222 17

ziran

自然 ZIRAN is an open-source security testing framework for AI agents. It discovers dangerous tool chain compositions via knowledge graph analysis, detects execution-level side effects (not just text output), and runs multi-phase trust exploitation campaigns that model real attacker behaviour.

4K 9 2

frontier-scout

Policy compiler + PR scope verifier for AI coding agents

4K 0 0

agentveil

Independent control for AI agent actions. Use any agent. Route risky actions through one policy boundary before they send, deploy, push, publish, or spend.

4K 13 3

admina-core

The open framework for governed AI development: EU AI Act compliance, PII redaction, MCP proxy, prompt-injection firewall. Python + Rust, Apache 2.0

4K 5 2

agentseal

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.

4K 292 43

agentveil-mcp-proxy

Independent control for AI agent actions. Use any agent. Route risky actions through one policy boundary before they send, deploy, push, publish, or spend.

4K 13 3

aegis-langchain

Runtime security & governance control plane for AI agents. Enforces per-tool authorization, OPA policy, behavioral risk scoring, blast-radius analysis, autonomy contracts, and tenant kill-switch. Every decision is ed25519-signed and Merkle-anchored for tamper-evident audit. 12 microservices, sub-30ms p95, OWASP LLM Top-10 coverage.

4K 3 1