loading
Decide allow, alert, or block on coding-agent file, shell, and network actions with AgentsLeak rules and a GolemHalt Cedar/YARA corpus.
Agent-action events. Replace the demo seed, or mount your event folder.
A decision on each action, plus report.json.
Each action is evaluated against policy rules: file, shell, and network. The result is allow, alert, or block.
Coding agents read files, run shells, and open network connections on the operator's machine. A reverse shell, an .env read, or an exfil curl is a policy decision that has to land before the action runs, not after a ticket. Pattern and sequence rules plus a Cedar/YARA reference-monitor corpus are the floor for that gate.
This is a standing check for continuous security testing. You seed demo agent-action events, evaluate them with AgentsLeak, inventory the GolemHalt Cedar/YARA corpus, and correlate allow, alert, and block decisions you can schedule as a retest delta when policies or hooks change.
It sits next to Web AI Agent Audit (embedded web agents) and MCP Trust Boundary Suite (MCP server config). This Collection unit is the coding-agent action path: event JSON in, policy decisions out. Default Seed needs no live Claude or Cursor session. Replace it with your hook captures.
events/ (.env and SSH key reads, exfil curl, reverse shell, clean ls).mode=evaluate.category plus metadata.file_path, metadata.command, or metadata.url as relevant.evaluate (uses Seed). fixture ignores Seed and runs the built-in demo pack. policies inventories rules only.evidence_bar, decisions).Sample shape from the correlate pack on demo seed events (illustrative, not a live KPI).
| kind | decision | title | severity | note |
|---|---|---|---|---|
| finding | BLOCK | Reverse-shell or exfil sequence on a coding-agent action | critical | null |
| finding | ALERT | Sensitive file read (.env or SSH key) | high | null |
| inventory | null | null | null | Cedar or YARA policy path observed from GolemHalt |
| retest_delta | null | null | null | Schedule re-runs when the policy pack or agent hooks change |
No. Default Seed evaluates demo events. Replace Seed with your hook captures and keep AgentsLeak on mode=evaluate.
evaluate scores the events you feed it. fixture ignores Seed and runs the built-in demo pack. policies inventories rules without deciding on events.
Correlate emits retest_delta.jsonl so scheduled re-runs can surface policy or hook drift after you change the pack or the agent.
Get a personalized demo
A 30-minute walkthrough. We map the platform to your stack and answer pricing and deployment questions for your environment.