jnMetaCode/shellward

v0.5.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 2mo MCP Security & Auth

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-security ai-agent ai-firewall ai-safety ai-security claude-code

+14 more

cursor data-exfiltration dlp guardrails hermes-agent langchain llm-security mcp mcp-security openclaw pii-detection prompt-injection security shellward

Affected surfaces

auth rce_ssrf

Summary

AI summary

Core engine refactor makes ShellWard platform‑agnostic and introduces a new DLP model with audit‑only L2 and block‑only L7 modes.

Full changelog

ShellWard v0.5.0

Major Changes

Core Engine Refactor: Platform-agnostic engine (src/core/engine.ts), layers become thin adapters
DLP Model: L2 audit-only (no redaction) — data returns in full for user analysis; L7 blocks external sends
Bash Exfil Detection: Detects curl -X POST, wget --post, nc bypass attempts
SDK Mode: npm install shellward — 3 lines to integrate into any AI agent
Auto Security Check: Scans OpenClaw vulns, plugin risks, MCP config on startup

Supported Platforms

Demo

demo-zh.gif / demo-zh.mp4 — 中文版 7 场景演示
demo-en.gif / demo-en.mp4 — English 7-scenario demo

Tests

112 passing (38 integration + 42 edge cases + 32 SDK)

Breaking Changes

Core engine refactor: platform‑agnostic design with thin adapter layers replaces the previous monolithic implementation
DLP model change: L2 now audit‑only (no redaction) and L7 blocks external sends

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track jnMetaCode/shellward

Get notified when new releases ship.

About jnMetaCode/shellward

AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.

All releases →