AI Agent Security for Coding Agents

from rune import Shield

# Initialize Rune for coding agent protection
shield = Shield(
    api_key="rune_live_xxx",
    agent_id="coding-assistant",
    policy_path="coding-policy.yaml"
)

# Scan context files before they enter the agent's context
context_files = ["README.md", "CONTRIBUTING.md", "issue_body.txt"]
for filepath in context_files:
    with open(filepath) as f:
        content = f.read()
    result = shield.scan_input(
        content=content,
        context={"source": "context_file", "filepath": filepath}
    )
    if result.blocked:
        print(f"Blocked: {filepath} contains injection attempt")
        # Remove this file from context or sanitize it

# Scan tool calls before execution
def secure_execute(tool_name: str, params: dict):
    result = shield.scan_tool_call(
        tool_name=tool_name,
        parameters=params,
        context={"agent_id": "coding-assistant"}
    )
    if result.blocked:
        return {"error": f"Blocked by policy: {result.reason}"}
    # Execute the tool call
    output = execute_tool(tool_name, params)
    # Scan tool response for injections
    response_result = shield.scan_input(
        content=str(output),
        context={"source": "tool_response", "tool": tool_name}
    )
    if response_result.blocked:
        return {"error": "Tool response contained injection attempt"}
    return output

# Scan generated code before presenting to user
code_output = agent.generate_code(prompt)
output_result = shield.scan_output(
    content=code_output,
    context={"output_type": "generated_code"}
)
if output_result.blocked:
    print(f"Generated code blocked: {output_result.reason}")