Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.

Shellsafe - Trust Layer for AI Agent Skills

Windows safety layer for AI coding agents, protecting Git worktrees and important folders from destructive shell commands.

Security skills for Minis on iOS: agent operational safety and prompt-injection defense.

AI-powered shell command interceptor built with Rust. Analyzes command intent via Gemini API and provides risk-based control (Pass/Warning/Block) in real-time.

Defense-in-depth against curl|bash attacks. Four-layer shell interception (accept-line, ZLE paste, hardened wrappers, preexec audit) with YARA-based detection. Catches malicious piped installs before execution — where macOS Gatekeeper can't.