CyberHuaTuo v0.2.2: Agent Action Guard
What is new
- Agent Action Guard for destructive shell actions through CLI, MCP, Codex/Claude plugin skill, and
PreToolUsehook. - Zero-execution onboarding check:
cyberhuatuo guard --self-test --workspace-root .. - Stable
ALLOW/ASK/BLOCKdecisions with rule IDs, resolved targets, reversibility, and safer next actions. - Four Windows network diagnosis and optimization prescriptions with explicit diagnosis, verification, and rollback boundaries.
- Version-consistent PyPI, Claude, Codex, README, and IssueOps entrypoints.
Safety boundary
The guard is a high-value guardrail, not an operating-system sandbox or complete reference monitor. It never executes or rewrites the reviewed command. Host paths that do not emit PreToolUse remain outside hook coverage.
Verify
python -m pip install --upgrade "cyberhuatuo==0.2.2"
cyberhuatuo guard --self-test --workspace-root .22-second zero-execution demo
Watch the Agent Action Guard demo or open the full-resolution cover.
The video runs the real cyberhuatuo guard --self-test --workspace-root . flow and shows ALLOW, ASK, and BLOCK. The displayed command strings are reviewed only; none of them is executed.