AgentShield v1.3.0 — Deep Scan: 5 Analysis Layers, 120+ Rules, 1280 Tests

What's New in v1.3.0

AgentShield now goes beyond static analysis. The new --deep flag runs 5 analysis layers in a single command.

GitHub Action (NEW)

AgentShield is now available as a GitHub Action! Add security scanning to any CI/CD pipeline:

- uses: affaan-m/agentshield@v1
  with:
    min-severity: medium
    fail-on-findings: true

Features: inline PR annotations, job summary markdown report, configurable severity filter, 4 outputs (score, grade, total-findings, critical-count).

Analysis Engines

• 102+ static security rules across 5 categories
• Injection testing with attack corpus
• Sandbox execution for hooks
• Taint analysis for data flow tracking
• Three-agent Opus adversarial pipeline (Attacker/Defender/Auditor)
• Self-contained dist/action.js (242KB, no external dependencies)

Quick Start

# CLI
npx ecc-agentshield scan

# GitHub Action
uses: affaan-m/agentshield@v1

# Deep scan with Opus pipeline
npx ecc-agentshield scan --deep --opus

Stats

• 102+ rules, 1282 tests
• Grading: A-F with 0-100 numeric score
• Supports: Claude Code, Cursor, OpenCode, Codex CLI, Windsurf