securityagent-core 3.1.0__py3-none-any.whl

endpoint_agent/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/alerting/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/cloud_bridge/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/config/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/monitors/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/scanners/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

endpoint_agent/tests/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

policy/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

securityagent_core/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

securityagent_core-3.1.0.dist-info/METADATA

@@ -0,0 +1,119 @@
+Metadata-Version: 2.4
+Name: securityagent-core
+Version: 3.1.0
+Summary: Local-first DLP engine and security layer for AI coding agents
+License: MIT
+Keywords: security,dlp,ai-agents,llm,copilot,claude-code
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+Requires-Dist: watchdog
+Requires-Dist: psutil
+Requires-Dist: pydantic>=2.0
+Requires-Dist: pypdf
+Requires-Dist: openpyxl
+Requires-Dist: python-docx
+Requires-Dist: pyyaml
+Provides-Extra: ml
+Requires-Dist: sentence-transformers; extra == "ml"
+Requires-Dist: scikit-learn; extra == "ml"
+Requires-Dist: joblib; extra == "ml"
+Requires-Dist: numpy; extra == "ml"
+Provides-Extra: cloud
+Requires-Dist: boto3; extra == "cloud"
+Requires-Dist: PyJWT; extra == "cloud"
+Requires-Dist: cryptography; extra == "cloud"
+Provides-Extra: llm
+Requires-Dist: ollama; extra == "llm"
+Provides-Extra: ocr
+Requires-Dist: PyMuPDF; extra == "ocr"
+Requires-Dist: pytesseract; extra == "ocr"
+Requires-Dist: Pillow; extra == "ocr"
+Provides-Extra: dev
+Requires-Dist: pytest; extra == "dev"
+Requires-Dist: moto; extra == "dev"
+Provides-Extra: all
+Requires-Dist: securityagent-core[cloud,llm,ml,ocr]; extra == "all"
+
+# securityagent-core
+
+Shared DLP engine, security skills, and policy enforcement for AI coding agents. Used by [SecurityAgent](https://github.com/kaushikdharamshi/SecurityAgent) and [AgnosticSecurity](https://github.com/kaushikdharamshi/AgnosticSecurity).
+
+## What's inside
+
+| Package | What it does |
+|---|---|
+| `endpoint_agent/` | DLP engine — file blocking (60+ path patterns), confidence-scored content scanning (PII, credentials, semantic disclosure detection) with structural validators (Luhn, SSA rules, entropy) and context-aware scoring, **data flow taint tracking** (tags sensitive data at ingress, detects at egress via hash/n-gram/substring matching), **tool call argument scanning** (MCP/function call DLP + taint registry), behavioral monitoring (8-signal anomaly scoring), honeypot traps, credential scanning. LLM intent analysis with llama3.1:8b default + fallback chain. Notebook-aware `.ipynb` extraction. PDF extraction via 3-tier pipeline (PyMuPDF → Tesseract OCR → pypdf fallback) with encrypted PDF detection |
+| `skills/` | Agent-agnostic MCP skills — `secure_read`, `secure_exec`, `analyze_prompt`, `scan_output`, `check_policy`, `get_session_policy`, `audit_log` |
+| `policy/` | Policy engine — per-session least privilege, behavioral chain detection (11 attack patterns), audit trail with agent attribution. Obsidian vault integration via `memory_bridge.py` for cross-session policy context |
+| `obsidianMemory/` | Obsidian vault — daily session logs, second-brain knowledge base, used by `memory_bridge.py` for persistent threat/policy tracking |
+| `plugin.py` | Standalone CLI entry point + `validate_exec()`, `validate_prompt()`, `validate_output()` pure functions |
+
+## Install
+
+```bash
+pip install git+https://github.com/kaushikdharamshi/securityagent-core.git
+
+# With optional dependencies
+pip install "securityagent-core[cloud] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
+pip install "securityagent-core[llm] @ git+https://github.com/kaushikdharamshi/securityagent-core.git"
+```
+
+## Usage
+
+### Python SDK
+
+```python
+from skills.adapters.python_sdk import SecurityAgentSDK
+
+sdk = SecurityAgentSDK(agent_id="my-agent", agent_type="langchain")
+
+# DLP-gated file read
+result = sdk.secure_read("/path/to/file")
+
+# Command validation
+result = sdk.secure_exec("ls -la")
+
+# Prompt intent analysis
+result = sdk.analyze_prompt("Get me all customer SSNs")
+```
+
+### MCP Server
+
+```bash
+python -m skills.adapters.mcp_server  # after pip install
+```
+
+Any MCP-compatible client (Claude Code, Copilot, custom agents) can connect via stdio JSON-RPC.
+
+### CLI
+
+```bash
+python -m plugin ~/.env                                    # File read gate
+python -m plugin --exec "cat ~/.env"                       # Exec validation
+python -m plugin --prompt "Get all passwords"              # Prompt analysis
+python -m plugin --skill secure_read --params '{"path":"~/.env"}'  # Skills layer
+python -m plugin --mcp-server                              # MCP server
+```
+
+### Claude Code Integration
+
+See [`integrations/claude_code/`](integrations/claude_code/) for PreToolUse hook configuration.
+
+## Tests
+
+```bash
+pip install -e ".[dev]"
+pytest
+```
+
+## License
+
+MIT

securityagent_core-3.1.0.dist-info/RECORD

@@ -0,0 +1,109 @@
+endpoint_agent/__init__.py,,
+endpoint_agent/__init__.pyc,,
+endpoint_agent/__main__.pyc,,
+endpoint_agent/alerting/__init__.py,,
+endpoint_agent/alerting/__init__.pyc,,
+endpoint_agent/alerting/alert_manager.pyc,,
+endpoint_agent/alerting/console_handler.pyc,,
+endpoint_agent/alerting/log_handler.pyc,,
+endpoint_agent/alerting/webhook_handler.pyc,,
+endpoint_agent/cli.pyc,,
+endpoint_agent/cloud_bridge/__init__.py,,
+endpoint_agent/cloud_bridge/__init__.pyc,,
+endpoint_agent/cloud_bridge/lockdown.pyc,,
+endpoint_agent/config/__init__.py,,
+endpoint_agent/config/__init__.pyc,,
+endpoint_agent/config/privacy_mode.pyc,,
+endpoint_agent/config/settings.pyc,,
+endpoint_agent/engine.pyc,,
+endpoint_agent/monitors/__init__.py,,
+endpoint_agent/monitors/__init__.pyc,,
+endpoint_agent/monitors/behavioral_monitor.pyc,,
+endpoint_agent/monitors/file_monitor.pyc,,
+endpoint_agent/monitors/honeypot_monitor.pyc,,
+endpoint_agent/monitors/privilege_monitor.pyc,,
+endpoint_agent/monitors/process_monitor.pyc,,
+endpoint_agent/scanners/__init__.py,,
+endpoint_agent/scanners/__init__.pyc,,
+endpoint_agent/scanners/code_fingerprint.pyc,,
+endpoint_agent/scanners/content_analyzer.pyc,,
+endpoint_agent/scanners/credential_scanner.pyc,,
+endpoint_agent/scanners/data_flow_tracker.pyc,,
+endpoint_agent/scanners/dlp_scanner.pyc,,
+endpoint_agent/scanners/finding_validators.pyc,,
+endpoint_agent/scanners/installation_scanner.pyc,,
+endpoint_agent/scanners/knowledge_graph.pyc,,
+endpoint_agent/scanners/lethal_trifecta.pyc,,
+endpoint_agent/scanners/llm_analyzer.pyc,,
+endpoint_agent/scanners/llm_provider.pyc,,
+endpoint_agent/scanners/memory_guard.pyc,,
+endpoint_agent/scanners/ml_classifier.pyc,,
+endpoint_agent/scanners/model_locality.pyc,,
+endpoint_agent/scanners/nist_tagger.pyc,,
+endpoint_agent/scanners/prompt_analyzer.pyc,,
+endpoint_agent/scanners/prompt_guard.pyc,,
+endpoint_agent/scanners/rule_classifier.pyc,,
+endpoint_agent/scanners/shadow_ai_detector.pyc,,
+endpoint_agent/scanners/text_extractor.pyc,,
+endpoint_agent/scanners/tool_call_guard.pyc,,
+endpoint_agent/scanners/vuln_scanner.pyc,,
+endpoint_agent/secure_fs.pyc,,
+endpoint_agent/tests/__init__.py,,
+endpoint_agent/tests/__init__.pyc,,
+endpoint_agent/tests/test_alert_manager.pyc,,
+endpoint_agent/tests/test_behavioral_monitor.pyc,,
+endpoint_agent/tests/test_cloud_bridge.pyc,,
+endpoint_agent/tests/test_credential_scanner.pyc,,
+endpoint_agent/tests/test_data_flow_tracker.pyc,,
+endpoint_agent/tests/test_dlp_scanner.pyc,,
+endpoint_agent/tests/test_engine.pyc,,
+endpoint_agent/tests/test_file_monitor.pyc,,
+endpoint_agent/tests/test_honeypot_monitor.pyc,,
+endpoint_agent/tests/test_installation_scanner.pyc,,
+endpoint_agent/tests/test_llm_analyzer.pyc,,
+endpoint_agent/tests/test_privilege_monitor.pyc,,
+endpoint_agent/tests/test_process_monitor.pyc,,
+endpoint_agent/tests/test_prompt_analyzer.pyc,,
+endpoint_agent/tests/test_prompt_guard.pyc,,
+endpoint_agent/tests/test_rule_classifier.pyc,,
+endpoint_agent/tests/test_secure_fs.pyc,,
+endpoint_agent/tests/test_semantic_disclosure.pyc,,
+endpoint_agent/tests/test_text_extractor.pyc,,
+endpoint_agent/tests/test_tool_call_guard.pyc,,
+endpoint_agent/tests/test_trial_manager.pyc,,
+endpoint_agent/trial_manager.pyc,,
+policy/__init__.py,,
+policy/__init__.pyc,,
+policy/audit.pyc,,
+policy/chain_detector.pyc,,
+policy/engine.pyc,,
+policy/memory_bridge.pyc,,
+policy/rules.pyc,,
+policy/session.pyc,,
+scripts/secagent_check.pyc,,
+securityagent_core/__init__.py,,
+securityagent_core/__init__.pyc,,
+securityagent_core-3.1.0.dist-info/METADATA,,
+securityagent_core-3.1.0.dist-info/WHEEL,,
+securityagent_core-3.1.0.dist-info/entry_points.txt,,
+securityagent_core-3.1.0.dist-info/top_level.txt,,
+skills/__init__.py,,
+skills/__init__.pyc,,
+skills/adapters/__init__.py,,
+skills/adapters/__init__.pyc,,
+skills/adapters/cli_adapter.pyc,,
+skills/adapters/mcp_server.pyc,,
+skills/adapters/python_sdk.pyc,,
+skills/base.pyc,,
+skills/context.pyc,,
+skills/implementations/__init__.py,,
+skills/implementations/__init__.pyc,,
+skills/implementations/analyze_prompt.pyc,,
+skills/implementations/audit_log.pyc,,
+skills/implementations/check_policy.pyc,,
+skills/implementations/get_session_policy.pyc,,
+skills/implementations/scan_output.pyc,,
+skills/implementations/secure_exec.pyc,,
+skills/implementations/secure_read.pyc,,
+skills/registry.pyc,,
+securityagent_core-3.1.0.dist-info/RECORD,,

securityagent_core-3.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (80.9.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

securityagent_core-3.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+secagent = endpoint_agent.cli:main

securityagent_core-3.1.0.dist-info/top_level.txt

@@ -0,0 +1,6 @@
+endpoint_agent
+obsidianMemory
+policy
+scripts
+securityagent_core
+skills

skills/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

skills/adapters/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution

skills/implementations/__init__.py

@@ -0,0 +1 @@
+# bytecode-only distribution