Skip to content

Releases: RitualDev-Lab/AgentShield

🛡️ AgentShield v0.1.0 — Zero-Leak Agentic Defense Engine

Choose a tag to compare

@Ritual-Dev-Git Ritual-Dev-Git released this 12 Oct 07:04

🛡️ AgentShield v0.1.0 — Zero-Leak Agentic Defense Engine

Enterprise-Grade Zero-Leak Secret Defense, Command Sandbox, and CI/CD Security Gate for Autonomous AI Coding Agents (Claude Code, Cursor, Windsurf, Codex, Antigravity).

🚀 Highlights

  • 🔍 Core Detection Engine: Real-time Shannon Entropy & Pattern Engine for AI keys, Cloud providers, and VCS tokens.
  • 🛡️ Autonomous Agent Shell Sandbox: Intercepts and blocks commands attempting to read .env, dump environment variables, or exfiltrate tokens.
  • 🚦 Git Pre-commit Gate: Automatically catches staged leaks before commit (npx agentshield hook git-install).
  • 🐙 CI/CD Security Gate & GitHub Action: Audits PR git diffs and reports structured summaries.
  • 📋 Compliance Engine: Pre-built verification for SOC 2 Type II, PCI-DSS v4.0, HIPAA, and ISO 27001.
  • 📡 SIEM Exporter: Exports real-time event telemetry in CEF, Syslog (RFC 5424), and JSON.
  • 🔐 Zero-Trust Vault Injector: Ephemeral surrogate tokenization for AI agent execution.

🛡️ AgentShield v0.1.0 — Zero-Leak Agentic Defense Engine

Choose a tag to compare

@Ritual-Dev-Git Ritual-Dev-Git released this 12 Oct 06:53

🛡️ AgentShield v0.1.0 — Initial Official Release

Enterprise-Grade Zero-Leak Secret Defense, Command Sandbox, and CI/CD Security Gate for Autonomous AI Coding Agents (Claude Code, Cursor, Windsurf, Codex, Antigravity).


🚀 Highlights

  • 🔍 Core Secret Detection Engine: Deterministic regex and Shannon Entropy scanner supporting AI tokens (OpenAI, Anthropic Claude, Gemini, Hugging Face), Cloud (AWS), SaaS (Stripe, Slack), GitHub PATs, and PEM keys.
  • 🛡️ Autonomous Agent Command Sandbox: Intercepts and blocks unauthorized .env reads (cat .env, type .env), raw environment dumps (printenv, export), and curl exfiltration attempts.
  • 🚦 Pre-Commit Gate: Install with npx agentshield hook git-install to catch leaked secrets before commits are written.
  • 🤖 Plug-and-Play AI Agent Skill: Standards-compliant SKILL.md ready for Claude Code, Cursor, Windsurf, and Antigravity.
  • 🐙 CI/CD Pull Request Gate & GitHub Action: Composite action (RitualDev-Lab/AgentShield@v1) and npx agentshield ci to audit git diff on incoming PRs.
  • 📋 Enterprise Compliance Auditor: Built-in verification for SOC 2 Type II (CC6.1), PCI-DSS v4.0 (Req-3.4), HIPAA (§164.312), and ISO 27001 (A.8.28).
  • 📡 SIEM Telemetry Exporter: Exports real-time agent threat events in Common Event Format (CEF), Syslog (RFC 5424), and structured JSON.
  • 🔐 Zero-Trust Ephemeral Vault Injection: Surrogate tokenization ensuring AI agents never see raw credentials in memory.

📦 Quick Start

# Scan any file for credentials
npx agentshield scan .env

# Audit pull request git diff in CI
npx agentshield ci --base origin/main

# Run enterprise compliance audit
npx agentshield compliance .env