agent-shield 1.0.1

Security scanner for AI agent extensions — offline-first, multi-framework, SARIF output
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

use std::collections::BTreeSet;

use crate::ir::{Capability, CapabilityEvidence, ToolSurface};
use crate::rules::Severity;

pub(crate) fn capability_severity(capability: Capability) -> Severity {
    match capability {
        Capability::CredentialAccess
        | Capability::ProcessExec
        | Capability::DynamicEval
        | Capability::PackageInstall => Severity::High,
        Capability::NetworkEgress | Capability::FsWrite | Capability::DatabaseWrite => {
            Severity::Medium
        }
        Capability::FsRead | Capability::EnvRead | Capability::DatabaseRead => Severity::Low,
    }
}

pub(crate) fn capability_codes(capabilities: &BTreeSet<Capability>) -> String {
    capabilities
        .iter()
        .map(|capability| capability.code())
        .collect::<Vec<_>>()
        .join(",")
}

pub(crate) fn first_matching_evidence<'a>(
    tool: &'a ToolSurface,
    capabilities: &BTreeSet<Capability>,
) -> Option<&'a CapabilityEvidence> {
    tool.capability_evidence
        .iter()
        .find(|evidence| capabilities.contains(&evidence.capability))
}