DSHCorrectover/agent-runtime-guard
github JavaScript analyzed 97304ea
Agent runtime guard — full-stack runtime interception for AI agents. Blocks destructive commands, credential theft, SSRF and injection in real time, with Ed25519 evidence receipts. Agent 运行时全栈拦截.
DSHCorrectover/agent-runtime-guard is an MCP server distributed on github, maintained by DSHCorrectover, tracked here since October 2026. It has shipped 0 releases and exposes 5 tools. Tools include audit_mcp_config, issue_evidence, verify_intent_binding, verify_receipt, verify_tool_call. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.
what we found
Since the previous scan on 2026-10-05: 5 tools added and 5 tools removed.
full security breakdown →tools
-
audit_mcp_config审计 MCP 配置的安全风险 -
issue_evidence出具防篡改证据(content_hash + evidence_hash,可链),放行和拦截都产生 -
verify_intent_binding校验实际参数与声明意图是否一致——零容忍、零 LLM,抓跨模型参数漂移(规划写 amount:100,执行写成 amount:10000 → 拦截) -
verify_receipt离线校验 Ed25519 收据签名、检测篡改,可固定可信签名者 -
verify_tool_call7 维运行时验证 + 语义攻击链分析 + 数值溢出检测,默认拦截
release cadence · 90d
No releases yet.
recent releases
No releases yet.