What is Shellward?
Shellward is an AI agent security middleware that protects AI agents from prompt injection, data exfiltration, and dangerous command execution. It acts as an LLM security middleware and AI agent firewall with 8-layer defense-in-depth, DLP-style data flow control, and zero dependencies.
How to use Shellward?
Install via npm (npm install shellward) for SDK integration, or add it as an MCP server in claude_desktop_config.json or .cursor/mcp.json. As an MCP server, it exposes 7 security tools (check_command, check_injection, scan_data, check_path, check_tool, check_response, security_status) and can be configured via environment variables (SHELLWARD_MODE, SHELLWARD_LOCALE, SHELLWARD_THRESHOLD).
Key features of Shellward
- 8 defense layers including prompt guard, input auditor, tool blocker, and outbound guard
- DLP model: data returns in full, outbound sends blocked when PII accessed
- PII detection for SSN, credit cards, API keys, JWT, and Chinese ID/phone/bank cards
- 32 injection rules (18 Chinese + 14 English) with risk scoring
- Data exfiltration chain detection for bash bypass patterns
- Zero dependencies and zero configuration
Use cases of Shellward
- MCP security enforcement for Claude Desktop, Cursor, and other MCP clients
- Tool call interception and filtering in autonomous AI agents
- Adding agent guardrails to any LLM-powered workflow
- Protecting customer-facing chatbots with tool access from prompt injection attacks
- Runtime security for internal automation powered by LLMs
コメント