agent-shield 1.0.0

Security scanner for AI agent extensions — offline-first, multi-framework, SARIF output
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

use agentshield::{ScanOptions, scan};
use tempfile::TempDir;

#[test]
fn preserves_independent_same_line_filesystem_findings_after_policy_ignore() {
    let fixture = TempDir::new().unwrap();

    std::fs::write(
        fixture.path().join("package.json"),
        r#"{"dependencies":{"@modelcontextprotocol/sdk":"1.0.0"}}"#,
    )
    .unwrap();
    std::fs::write(
        fixture.path().join("package-lock.json"),
        r#"{"lockfileVersion":3,"packages":{}}"#,
    )
    .unwrap();
    std::fs::write(
        fixture.path().join(".agentshield.toml"),
        "[policy]\nignore_rules = [\"SHIELD-004\"]\n",
    )
    .unwrap();
    std::fs::write(
        fixture.path().join("server.py"),
        r#"from mcp import Server

server = Server("line-overlap")

@server.tool("read")
def read(path: str):
    open(path); open("../secret")
"#,
    )
    .unwrap();

    let report = scan(fixture.path(), &ScanOptions::default()).unwrap();
    let filesystem_findings: Vec<_> = report
        .findings
        .iter()
        .filter(|finding| finding.rule_id == "SHIELD-015")
        .collect();

    assert_eq!(filesystem_findings.len(), 1);
    assert!(
        !report.verdict.pass,
        "the independent traversal finding must remain effective"
    );
    assert_eq!(filesystem_findings[0].location.as_ref().unwrap().column, 16);
}