Skip to content

v0.8.0: Installable AI-Agent Security Skill Kit

Choose a tag to compare

View all tags
@githubmofo githubmofo released this 02 Sep 16:41
· 14 commits to main since this release
v0.8.0
064e4e6

TorusGuard v0.8.0: Installable AI-Agent Security Skill Kit

Release Version: v0.8.0
Date: September 2, 2026
Status: Official Release

🚀 Overview

TorusGuard v0.8.0 transforms TorusGuard from a static guidance repository into a fully installable, governed AI-agent security skill kit. Developers and AI coding assistants can install TorusGuard into their workspace using the open skills CLI:

npx skills add https://github.com/githubmofo/TorusGuard --skill "torusguard"

And initialize their project-specific security guardrails with a single command:

/torusguard init

This scaffolds a self-contained .torusguard/ workspace in the project, automatically detecting the technology stack, activating tailored security rules in .torusguard/rules/active/, and configuring 5 specialist AI agents and 11 slash command workflows.

🌟 Key Highlights

  1. Master Always-On Rules (.torusguard/TORUSGUARD.md):

    • Universal cognitive gate and non-destructive standards.
    • 7-stage lifecycle state machine (Detect $\rightarrow$ Classify $\rightarrow$ Verify $\rightarrow$ Remediate $\rightarrow$ Apply $\rightarrow$ Recheck $\rightarrow$ Archive).
    • Complete 11-command routing table.
    • Strict Ponytail patch governance bounds ($\le 35$ line additions, $\le 25$ line deletions).
    • 5-factor 0–100 confidence scoring rubric.
    • Card-style finding reporting hierarchy.

  2. 5 Specialist Agent Roles (.torusguard/agents/):

    • profiler.md: Stack profiling, route discovery, framework AST inspection.
    • auditor.md: Static AST scanning, line-shift invariant fingerprinting, root-cause clustering.
    • validator.md: Runtime HTTP/browser probing, token redaction, bounded exploitability checks.
    • remediator.md: Governed remediation bundles, minimal patch plans, Before/After diffs.
    • reviewer.md: Scoped recheck verification, regression detection, SARIF v2.1.0 sign-off.

  3. 11 Lifecycle Workflows (.torusguard/workflows/):

    • Step-by-step guides for /torusguard init, authorize, audit, verify, web-validate, exploit-check, harden, apply, recheck, report, and status.

  4. 5 Pure Python CLI Automation Utilities (.torusguard/scripts/):

    • stack_detect.py: Auto-detects Django, DRF, FastAPI, Flask, SQLAlchemy, Next.js, Express, React, Vite, Supabase, Firebase.
    • finding_scorer.py: Objective 0–100 confidence scorer.
    • sarif_exporter.py: Standard OASIS SARIF v2.1.0 generator with GitHub Code Scanning deduplication.
    • run_manager.py: Run folder lifecycle management and execution history.
    • safety_gate.py: Pre-probe runtime safety policy evaluator.

  5. 10 Embedded Framework References (.torusguard/references/):

    • Self-contained security guides for all major Python and TypeScript frameworks.

  6. Active Rules Activation System (.torusguard/rules/active/):

    • Dynamically activates relevant rules matching the detected framework stack.

  7. Zero-Regression Verification:

    • All 8 validation test suites (230+ assertions) executed with a 100% pass rate.
Assets 2
Loading