Skip to content

v1.0.0 — Agent Command Guard

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Aug 09:36
· 8 commits to main since this release
v1.0.0
6f5d19c

Agent Command Guard v1.0.0

First stable release of Agent Command Guard — an opinionated command-policy guard for coding agents (Codex, Cursor, Pi). It inspects shell commands before execution via harness hooks and blocks risky patterns: inline interpreters (node -e, python3 -c, bash -c), command substitution, heredocs, pipe-to-interpreter, deletion outside the workspace, remote transfer, destructive git commands, and more.

Heuristic guard, not a sandbox. Text inspection only — not a security boundary.

Install

Bootstrap without checkout:

curl -fsSL https://raw.githubusercontent.com/greenhost87/agent-command-guard/main/install.sh | bash

Or from source:

./install.sh                 # all harnesses (Codex, Cursor, Pi)

Assets

  • agent-command-guard-1.0.0-darwin-arm64 — prebuilt macOS arm64 binary; the bootstrap installer downloads it automatically.
  • agent-command-guard-1.0.0.tgz — package tarball with sources (bootstrap-compatible layout).

Notes

  • Requires Go 1.26+ to build; Bun 1.4+ only for the Pi adapter.
  • Install-confirmation prompts (osascript) are macOS-only; other platforms fail closed.
  • Full policy details in README.md and main.go / cursor.go.

Full Changelog: https://github.com/greenhost87/agent-command-guard/commits/v1.0.0

Assets 4
Loading