DSHCorrectover/agent-runtime-guard

github
github JavaScript analyzed 97304ea

Agent runtime guard — full-stack runtime interception for AI agents. Blocks destructive commands, credential theft, SSRF and injection in real time, with Ed25519 evidence receipts. Agent 运行时全栈拦截.

maintainer
DSHCorrectover
licence
NOASSERTION
first seen
2026-10-05
last seen
2026-10-05
releases · 30d
0
github stars
1 reported
short id

DSHCorrectover/agent-runtime-guard is an MCP server distributed on github, maintained by DSHCorrectover, tracked here since October 2026. It has shipped 0 releases and exposes 5 tools. Tools include audit_mcp_config, issue_evidence, verify_intent_binding, verify_receipt, verify_tool_call. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 5 tools appear to reach untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-10-05: 5 tools added and 5 tools removed.

full security breakdown →

tools

5
  • audit_mcp_config 审计 MCP 配置的安全风险
  • issue_evidence 出具防篡改证据(content_hash + evidence_hash,可链),放行和拦截都产生
  • verify_intent_binding 校验实际参数与声明意图是否一致——零容忍、零 LLM,抓跨模型参数漂移(规划写 amount:100,执行写成 amount:10000 → 拦截)
  • verify_receipt 离线校验 Ed25519 收据签名、检测篡改,可固定可信签名者
  • verify_tool_call 7 维运行时验证 + 语义攻击链分析 + 数值溢出检测,默认拦截

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.