This content originally appeared on DEV Community and was authored by Avinash Amudala
I’ve been building AI agents at work and kept running into the same problem: every framework lets agents call any registered tool with zero safety checks. An agent with database access can run DROP TABLE users and nothing stops it.
So I built AgentShield-FW, a runtime firewall that intercepts every tool call and enforces configurable safety policies before execution.
• GitHub: https://github.com/Avinash-Amudala/AgentShield
• PyPI: pip install agentshield-fw
The simplest usage:
`import agentshield
shield = agentshield.Shield()
@shield.protect
def execute_sql(query: str) -> str:
return db.execute(query)
Agent tries: execute_sql("DROP TABLE users")
→ Blocked by AgentShield: Destructive SQL detected (ASI02)`
What makes it different:
• Zero required dependencies — core runs on Python stdlib only
• 40+ pre-built rules covering SQL injection, path traversal, credential leaks, prompt injection, shell commands, rate limiting
• Mapped to OWASP Agentic Security Top 10 (ASI01-ASI10)
• Works with LangChain, MCP, CrewAI, OpenAI SDK, or any Python function
• Sub-millisecond latency (<1ms p99)
• 94.56% test coverage
• Hash-chained audit logging for tamper detection
Other projects called "AgentShield" are static scanners (analyze config files). This is a runtime firewall (intercepts live tool calls). WAF vs SAST.
MIT license. Python 3.10-3.13.
This content originally appeared on DEV Community and was authored by Avinash Amudala
Avinash Amudala | Sciencx (2026-04-16T23:52:35+00:00) Why Your AI Agent Has Root Access to Everything (And How to Fix It in 3 Lines of Python). Retrieved from https://www.scien.cx/2026/04/16/why-your-ai-agent-has-root-access-to-everything-and-how-to-fix-it-in-3-lines-of-python/
Please log in to upload a file.
There are no updates yet.
Click the Upload button above to add an update.