kavach-shield 0.1.0__tar.gz

kavach_shield-0.1.0/PKG-INFO

@@ -0,0 +1,18 @@
+Metadata-Version: 2.4
+Name: kavach-shield
+Version: 0.1.0
+Summary: Security middleware for Model Context Protocol (MCP) - detection engine and rules
+Home-page: https://github.com/shivamnamdeo0101/kavach-agent-ecosystem
+Author: Shivam Namdeo
+Author-email: shivamnamdeo0101@gmail.com
+License: MIT
+Requires-Python: >=3.7
+Requires-Dist: kavach-logger>=0.1.0
+Requires-Dist: kavach-mcp-events>=0.1.0
+Dynamic: author
+Dynamic: author-email
+Dynamic: home-page
+Dynamic: license
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary

kavach_shield-0.1.0/kavach_shield/__init__.py

@@ -0,0 +1,8 @@
+from .engine import DetectionEngine
+from .middleware import KavachMiddleware
+from .types import Rule
+from .exceptions import SecurityException
+from .rules import KAVACH_RULES
+
+__version__ = "0.1.0"
+__all__ = ["DetectionEngine", "KavachMiddleware", "Rule", "SecurityException", "KAVACH_RULES"]

kavach_shield-0.1.0/kavach_shield/engine.py

@@ -0,0 +1,23 @@
+from kavach_logger import get_logger, mask_sensitive_data
+
+logger = get_logger("kavach.shield.engine")
+
+class DetectionEngine:
+    def __init__(self, rules):
+        self.rules = rules
+        logger.info(f"DetectionEngine initialized | rules={len(rules)}")
+
+    def scan(self, text: str):
+        violations = []
+        masked_text = mask_sensitive_data(text)
+        for rule in self.rules:
+            for pattern in rule.patterns:
+                if pattern.search(text):
+                    violations.append({
+                        "rule": rule.id,
+                        "name": rule.name,
+                        "severity": rule.severity
+                    })
+                    logger.debug(f"Rule matched | {rule.id} | severity={rule.severity} | data={masked_text}")
+                    break
+        return violations

kavach_shield-0.1.0/kavach_shield/exceptions.py

@@ -0,0 +1,2 @@
+class SecurityException(Exception):
+    pass

kavach_shield-0.1.0/kavach_shield/middleware.py

@@ -0,0 +1,83 @@
+import asyncio
+from fnmatch import fnmatch
+from typing import Callable, Any, Dict, List, Optional, Set, Union
+
+from kavach_logger import get_logger
+from kavach_events import event_manager
+from .engine import DetectionEngine
+from .rules import KAVACH_RULES
+from .exceptions import SecurityException
+
+logger = get_logger("kavach.shield.middleware")
+
+class KavachMiddleware:
+    def __init__(
+        self, 
+        rules: Optional[List[Any]] = None, 
+        strict: bool = True, 
+        sensitive_tools: Optional[Union[List[str], Set[str]]] = None, 
+        extend_rules: bool = True
+    ) -> None:
+        if rules and extend_rules:
+            self.rules = KAVACH_RULES + rules
+        else:
+            self.rules = rules or KAVACH_RULES
+        self.engine: DetectionEngine = DetectionEngine(self.rules)
+        self.strict: bool = strict
+        self.sensitive_tools: Set[str] = set(sensitive_tools or [])
+        logger.info(f"KavachMiddleware initialized | mode={'STRICT' if strict else 'MONITOR'} | rules={len(self.rules)}")
+
+    async def __call__(self, context: Any, call_next: Callable[..., Any]) -> Any:
+        return await self.on_call_tool(context, call_next)
+
+    def register_tool(self, tool_name: str) -> None:
+        self.sensitive_tools.add(tool_name)
+        logger.debug(f"Registered sensitive tool | tool_name={tool_name}")
+
+    def _matches_pattern(self, tool_name: str) -> bool:
+        return any(fnmatch(tool_name, pattern) for pattern in self.sensitive_tools)
+
+    async def on_call_tool(self, context: Any, call_next: Callable[..., Any]) -> Any:
+        tool_name: str = getattr(context.message, "name", "unknown")
+        args_dict: Dict[str, Any] = getattr(context.message, "arguments", {})
+        is_sensitive: bool = self._matches_pattern(tool_name)
+
+        event_payload = {"tool_name": tool_name, "arguments": args_dict, "context": context, "is_sensitive": is_sensitive}
+
+        if event_manager.has_listeners("pre", tool_name):
+            asyncio.create_task(event_manager.emit("pre", tool_name, event_payload))
+
+        if is_sensitive:
+            logger.info(f"Scanning inbound request | tool={tool_name}")
+            violations: List[Any] = self.engine.scan(str(args_dict))
+            
+            if violations:
+                sec_payload = {**event_payload, "violations": violations, "stage": "inbound"}
+                if event_manager.has_listeners("sec", tool_name):
+                    asyncio.create_task(event_manager.emit("sec", tool_name, sec_payload))
+                
+                if self.strict:
+                    raise SecurityException(f"Security violations detected: {violations}")
+
+        try:
+            result = await call_next(context)
+        except Exception as e:
+            logger.error(f"Tool execution failed | tool={tool_name} | error={str(e)}")
+            raise
+
+        if is_sensitive:
+            logger.info(f"Scanning outbound response | tool={tool_name}")
+            violations: List[Any] = self.engine.scan(str(result))
+            
+            if violations:
+                sec_payload = {**event_payload, "violations": violations, "result": result, "stage": "outbound"}
+                if event_manager.has_listeners("sec", tool_name):
+                    asyncio.create_task(event_manager.emit("sec", tool_name, sec_payload))
+                
+                if self.strict:
+                    raise SecurityException(f"Security violations in response: {violations}")
+
+        if event_manager.has_listeners("post", tool_name):
+            asyncio.create_task(event_manager.emit("post", tool_name, {**event_payload, "result": result}))
+
+        return result

kavach_shield-0.1.0/kavach_shield/rules.py

@@ -0,0 +1,75 @@
+import re
+from .types import Rule
+
+KAVACH_RULES = [
+    Rule(
+        id="prompt-injection",
+        name="Prompt Injection",
+        severity="critical",
+        description="System override and jailbreak attempts",
+        patterns=[
+            re.compile(r"ignore\s+(all|previous)\s+instructions", re.I),
+            re.compile(r"override\s+(system\s+)?(instructions|rules|policy)", re.I),
+            re.compile(r"bypass\s+(rules|policy|security)", re.I),
+            re.compile(r"you\s+are\s+now\s+(system|developer|admin|root)", re.I),
+            re.compile(r"act\s+as\s+(system|developer|admin|root|unrestricted)", re.I),
+            re.compile(r"(jailbreak|dan|developer\s*mode|god\s*mode)", re.I),
+        ],
+    ),
+    Rule(
+        id="data-exfiltration",
+        name="Data Exfiltration",
+        severity="critical",
+        description="Attempts to leak system data or prompts",
+        patterns=[
+            re.compile(r"(send|upload|export|exfiltrate|dump).*(password|secret|token|env|file|system)", re.I),
+            re.compile(r"(print|show|reveal).*(system\s*prompt|hidden\s*instructions|internal\s*rules)", re.I),
+            re.compile(r"return\s+(system\s*prompt|config|secrets)", re.I),
+        ],
+    ),
+    Rule(
+        id="pii",
+        name="PII Detection",
+        severity="high",
+        description="Sensitive personal data",
+        patterns=[
+            re.compile(r"\b\d{10}\b"),
+            re.compile(r"\b\d{12}\b"),
+            re.compile(r"\b\d{16}\b"),
+            re.compile(r"\b\d{3}-\d{2}-\d{4}\b"),
+        ],
+    ),
+    Rule(
+        id="secret-leak",
+        name="Secret Leakage",
+        severity="critical",
+        description="API keys and credentials",
+        patterns=[
+            re.compile(r"AKIA[0-9A-Z]{16}"),
+            re.compile(r"sk-[A-Za-z0-9_-]{20,}"),
+            re.compile(r"AIza[0-9A-Za-z0-9_-]{35}"),
+            re.compile(r"-----BEGIN (RSA|PRIVATE) KEY-----"),
+            re.compile(r"(api[_-]?key|secret[_-]?key|access[_-]?token|password)\s*[:=]", re.I),
+        ],
+    ),
+    Rule(
+        id="dangerous-eval",
+        name="Dangerous Execution",
+        severity="critical",
+        description="Code execution attempts",
+        patterns=[
+            re.compile(r"\b(eval|exec|compile)\s*\(", re.I),
+            re.compile(r"os\.system|subprocess", re.I),
+        ],
+    ),
+    Rule(
+        id="sql-injection",
+        name="SQL Injection Patterns",
+        severity="high",
+        description="SQL injection attempts",
+        patterns=[
+            re.compile(r"(DROP\s+TABLE|DELETE\s+FROM|UNION\s+SELECT|INSERT\s+INTO|UPDATE\s+.*SET)", re.I),
+            re.compile(r"(' OR '1'='1|--|#|/\*)", re.I),
+        ],
+    ),
+]

kavach_shield-0.1.0/kavach_shield/types.py

@@ -0,0 +1,10 @@
+from dataclasses import dataclass
+from typing import List, Pattern
+
+@dataclass
+class Rule:
+    id: str
+    name: str
+    severity: str
+    description: str
+    patterns: List[Pattern]

kavach_shield-0.1.0/kavach_shield.egg-info/PKG-INFO

@@ -0,0 +1,18 @@
+Metadata-Version: 2.4
+Name: kavach-shield
+Version: 0.1.0
+Summary: Security middleware for Model Context Protocol (MCP) - detection engine and rules
+Home-page: https://github.com/shivamnamdeo0101/kavach-agent-ecosystem
+Author: Shivam Namdeo
+Author-email: shivamnamdeo0101@gmail.com
+License: MIT
+Requires-Python: >=3.7
+Requires-Dist: kavach-logger>=0.1.0
+Requires-Dist: kavach-mcp-events>=0.1.0
+Dynamic: author
+Dynamic: author-email
+Dynamic: home-page
+Dynamic: license
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary

kavach_shield-0.1.0/kavach_shield.egg-info/SOURCES.txt

@@ -0,0 +1,12 @@
+setup.py
+kavach_shield/__init__.py
+kavach_shield/engine.py
+kavach_shield/exceptions.py
+kavach_shield/middleware.py
+kavach_shield/rules.py
+kavach_shield/types.py
+kavach_shield.egg-info/PKG-INFO
+kavach_shield.egg-info/SOURCES.txt
+kavach_shield.egg-info/dependency_links.txt
+kavach_shield.egg-info/requires.txt
+kavach_shield.egg-info/top_level.txt

kavach_shield-0.1.0/kavach_shield.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

kavach_shield-0.1.0/kavach_shield.egg-info/requires.txt

@@ -0,0 +1,2 @@
+kavach-logger>=0.1.0
+kavach-mcp-events>=0.1.0

kavach_shield-0.1.0/kavach_shield.egg-info/top_level.txt

@@ -0,0 +1 @@
+kavach_shield

kavach_shield-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

kavach_shield-0.1.0/setup.py

@@ -0,0 +1,17 @@
+from setuptools import setup, find_packages
+
+setup(
+    name="kavach-shield",
+    version="0.1.0",
+    description="Security middleware for Model Context Protocol (MCP) - detection engine and rules",
+    author="Shivam Namdeo",
+    author_email="shivamnamdeo0101@gmail.com",
+    url="https://github.com/shivamnamdeo0101/kavach-agent-ecosystem",
+    license="MIT",
+    packages=find_packages(),
+    python_requires=">=3.7",
+    install_requires=[
+        "kavach-logger>=0.1.0",
+        "kavach-mcp-events>=0.1.0",
+    ],
+)