agent-shield 0.8.7

Security scanner for AI agent extensions — offline-first, multi-framework, SARIF output
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

use serde_json::{json, Value};

pub fn runtime_event_schema_json() -> Value {
    json!({
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "title": "AgentShield Runtime Event",
        "type": "object",
        "required": ["schema_version", "source", "action", "arguments", "redacted"],
        "properties": {
            "schema_version": {
                "type": "string",
                "enum": ["v1"]
            },
            "source": {
                "type": "string",
                "enum": ["mcp", "open_claw", "crew_ai", "lang_chain", "stdin", "unknown"]
            },
            "action": {
                "type": "string",
                "enum": [
                    "tool_call",
                    "command",
                    "file_read",
                    "file_write",
                    "network_request",
                    "secret_observed",
                    "unknown"
                ]
            },
            "tool_name": {
                "type": ["string", "null"]
            },
            "command": {
                "type": ["string", "null"]
            },
            "url": {
                "type": ["string", "null"]
            },
            "path": {
                "type": ["string", "null"]
            },
            "arguments": true,
            "redacted": {
                "type": "boolean"
            }
        },
        "additionalProperties": false
    })
}

pub fn runtime_guard_result_schema_json() -> Value {
    json!({
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "title": "AgentShield Runtime Guard Result",
        "type": "object",
        "required": ["schema_version", "verdict", "findings", "redacted"],
        "properties": {
            "schema_version": {
                "type": "string",
                "enum": ["v1"]
            },
            "verdict": {
                "type": "string",
                "enum": ["allow", "warn", "block"]
            },
            "findings": {
                "type": "array",
                "items": {
                    "type": "object",
                    "required": ["rule_id", "severity", "message", "evidence"],
                    "properties": {
                        "rule_id": {
                            "type": "string"
                        },
                        "severity": {
                            "type": "string",
                            "enum": ["info", "low", "medium", "high", "critical"]
                        },
                        "message": {
                            "type": "string"
                        },
                        "evidence": {
                            "type": ["string", "null"]
                        }
                    },
                    "additionalProperties": false
                }
            },
            "redacted": {
                "type": "boolean"
            }
        },
        "additionalProperties": false
    })
}