InnerWarden

InnerWarden/innerwarden

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

162 stars 31 forks 162 watchers Rust Apache License 2.0

agent-guard ai-agent-security anomaly-detection autonomous-defense behavioral-analysis correlation-engine ebpf honeypot host-security incident-response intrusion-detection kernel kill-chain linux mitre-attack rust security sigma-rules threat-detection yara

View on GitHub Website

100 Open Issues Need Help Last updated: Jul 5, 2026

Open Issues Need Help

View All on GitHub

test(agent): cover SSH posture parsing in posture/sshd.rs about 4 hours ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add 'Run InnerWarden under Podman' install guide (docs) 7 days ago

documentation help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover knowledge-graph recon detectors (recon.rs) 7 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover knowledge-graph persistence detectors (persistence.rs) 7 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): cover suspicious-crontab detection in harden/crontabs.rs 7 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover sudo posture parsing in posture/sudo.rs 7 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover JsonlWriter file output and guard branches 10 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Implement dashboard 2FA approval endpoints 13 days ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

How to uninstall 18 days ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Make dashboard configuration to enable all ips by default 18 days ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

spec: AI budget as $-per-day cap with tiered fallback (replace max_ai_calls_per_tick) 21 days ago

enhancement help wanted

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/abuseipdb.rs above 70% 25 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add n8n integration recipe for Agent Guard API 26 days ago

documentation good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover honeypot_post_session pure-parser helpers 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add executable entropy analyzer for packed/obfuscated malware detection 26 days ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover Ollama provider HTTP response branches 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent-guard): cover session tracker boundary alerts 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover block-container metadata cleanup paths 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(smm): cover SPI hash_image and readiness contracts 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): make XDP availability diagnosis deterministic 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(dna): wire ingest.rs into coverage and anchor JSONL offset reads 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): extract testable systemd inventory scan planning 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover syslog_firewall file polling without an infinite loop 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover journald collector command and cursor branches 26 days ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add Splunk HTTP Event Collector (HEC) sink 27 days ago

enhancement help wanted stale

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add Sigma rule: AWS instance metadata access (169.254.169.254) from non-root user about 1 month ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): anchor ss-dump parsers in posture/services.rs about 1 month ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): anchor pure helpers in abuseipdb.rs (detector_to_categories, resolve_api_key) about 1 month ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/webhook.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/commands/reconcile.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/baseline.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/incident_notifications.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/yara_scan.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/kill_process.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/systemd_inventory.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/posture/firewall.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/microcode.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/sinks/syslog_cef.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/tcp_stream.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/proc_maps.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/usb_monitor.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/push.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/geoip.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/block_container.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/commands/chain_break.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/rate_limit_nginx.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/welcome.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/capabilities/shell_audit.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/macos_log.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/bot_commands.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/firmware_tick.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/hypervisor_tick.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/data_encoding.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/kintegrity.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/collectors/docker.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/detectors/stego_detect.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/compliance.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/bot_actions.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dna_inline.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/ai/anthropic.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/crowdsec.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/suspend_user_sudo.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/auth.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/sensors.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/correlation_response.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/ctl/src/main.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/skills/builtin/kill_chain_response.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/dashboard/intelligence.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/honeypot_post_session.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/hypervisor/src/main.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/agent/src/main.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/smm/src/main.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/main.rs above 70% about 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/supervisor/src/main.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor/src/bin/test-ebpf.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(coverage): raise crates/sensor-ebpf-types/src/lib.rs above 70% about 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add --output {text,json} flag to 'innerwarden status' for scriptability about 2 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Honor INNERWARDEN_NO_COLOR env var in CTL output (parity with NO_COLOR) about 2 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

Add 8+ scanner User-Agent signatures to user_agent_scanner.rs about 2 months ago

enhancement help wanted good first issue

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): extend sandbox_evasion detector coverage 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover knowledge_graph/types.rs accessors + conversions 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover usb_monitor.rs event classification 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover collectors/systemd_inventory.rs parsing 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): cover proto_smb collector classification 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover dashboard/sse.rs file-watcher + stream handler 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover narrative_autofp.rs threshold + cooldown logic 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover incident_auto_rules.rs rule matching 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover trust_rules.rs persistence + matching 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover telegram/commands.rs /add /rm /fp bot commands 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(sensor): integration harness for CAP_NET_RAW + CAP_BPF collectors (dns, http, tls, ebpf) 2 months ago

enhancement help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(agent): cover telegram templates, commands, and burst dedup 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/setup.rs coverage to 80% (likely 2+ PRs) 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/ops.rs coverage to 80% (must split; needs refactor) 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/notify.rs coverage to 80% (likely 2-3 PRs) 2 months ago

help wanted test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/integrations.rs coverage to 80% 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): extend commands/capability.rs coverage (follow-up to #141) 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/update.rs coverage to 80% 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/responder.rs coverage to 80% 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/mesh.rs coverage to 80% 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara

test(ctl): raise commands/firmware.rs coverage to 80% 2 months ago

help wanted good first issue test

InnerWarden/innerwarden

162

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

Rust

#agent-guard#ai-agent-security#anomaly-detection#autonomous-defense#behavioral-analysis#correlation-engine#ebpf#honeypot#host-security#incident-response#intrusion-detection#kernel#kill-chain#linux#mitre-attack#rust#security#sigma-rules#threat-detection#yara