Skip to content

jnMetaCode/shellward

v0.6.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-security ai-agent ai-firewall ai-safety ai-security claude-code
+14 more
cursor data-exfiltration dlp guardrails hermes-agent langchain llm-security mcp mcp-security openclaw pii-detection prompt-injection security shellward

Summary

AI summary

Adds compliance engine with red‑yellow‑green scoring and project risk scanning for AI governance.

Full changelog

ShellWard 转向中国 AI 合规网关方向的首个版本。

新增

  • 合规体检引擎：把 网安法 / PIPL / 等保2.0 / 数据出境 / AI标识 的 14 条可核查控制项 → 红黄绿评分卡
  • 项目真实风险扫描：零依赖遍历项目，检出境外大模型端点/SDK 依赖（数据出境）、硬编码密钥、文件中的中文 PII、.env 权限，全部带 文件:行 定位
  • 零安装 CLI：npx shellward scan 30 秒出"关于你项目"的合规评分卡；--json / --ci / --out
  • MCP 工具 compliance_check 与 命令 /compliance
  • GitHub Action：PR 合规门禁
  • 发现驱动评分（分数反映真实风险，而非自检开关）

用法

```bash
npx shellward scan
```

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track jnMetaCode/shellward

Get notified when new releases ship.

Sign up free

About jnMetaCode/shellward

AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.

All releases →

Related context

Beta — feedback welcome: [email protected]