Autonomy & guardrails
Agent Security
Permissions, prompt injection, sandboxing and guardrails for coding agents and agent-native applications.
73published articles
73 published articles
Articles in this category
No guides match your search. Try a broader topic or clear the search to browse.
Why Scanner Findings Are Not Proof
Retest-confirmed outcomes support a finding within their recorded scope and are recorded separately.
Sep 24, 2026Aider app security checklist
A security checklist for reviewing apps built with Aider covering repository settings, secrets, dependencies and verifiable evidence with LyraShield AI.
Aug 7, 2026Using LyraShield alongside Aider for AI coding
How to run LyraShield security checks alongside Aider today using the CLI and GitHub Action diff gate. Native MCP is a roadmap item Aider has not yet shipped.
Aug 7, 2026Secure an Antigravity Built App Before Launch
A release review checklist for Antigravity apps covering data exposure, config, secrets, dependencies and independent launch evidence before you ship.
Aug 7, 2026Connect Antigravity to LyraShield via MCP
A step by step workflow to configure LyraShield MCP in Google Antigravity using the CLI, verify the connection, run a scan and gate pull requests.
Aug 7, 2026Secure a Codebuff Built App Before Launch
A release review checklist for Codebuff apps covering data exposure, agent tools, secrets, dependencies and independent launch evidence before you ship.
Aug 7, 2026Connect Codebuff to LyraShield via MCP
A step by step workflow to configure LyraShield MCP in the Codebuff terminal agent using the CLI, verify the connection, run a scan and gate pull requests.
Aug 7, 2026Copilot CLI App Security Checklist for Agents
A security checklist for reviewing apps built with GitHub Copilot CLI covering MCP config, secrets, dependencies and verifiable evidence with LyraShield AI.
Aug 7, 2026Copilot CLI MCP Security Workflow Setup Guide
Setup guide for the LyraShield MCP security workflow in GitHub Copilot CLI using the CLI, config files, verification and a GitHub Action diff gate.
Aug 7, 2026Secure a Devin CLI Built App Before Launch
A release review checklist for Devin CLI apps covering data exposure, MCP config, secrets, dependencies and independent launch evidence before you ship.
Aug 7, 2026Connect Devin CLI to LyraShield via MCP
A step by step workflow to configure LyraShield MCP in the Cognition Devin CLI agent using the CLI, verify the connection, run a scan and gate pull requests.
Aug 7, 2026GitHub Copilot App Security Checklist for Teams
A security checklist for reviewing GitHub Copilot generated apps covering permissions, secrets, dependencies and verifiable evidence with LyraShield AI.
Aug 7, 2026GitHub Copilot MCP Security Workflow Setup Guide
Connect GitHub Copilot CLI to pinned LyraShield MCP with separate OAuth, client discovery, read-only verification and a CI diff gate.
Aug 7, 2026Secure a Goose Built App Before Launch
A release review checklist for Goose apps covering data exposure, extensions config, secrets, dependencies and independent launch evidence before you ship.
Aug 7, 2026Connect Goose to LyraShield via MCP
A step by step workflow to configure LyraShield MCP in the Block Goose agent using the CLI, verify the connection, run a scan and gate pull requests.
Aug 7, 2026Kiro App Security Checklist for AI Built Code
A security checklist for reviewing Kiro generated applications covering configuration, secrets, dependencies and checksum-bound evidence with LyraShield AI.
Aug 7, 2026Kiro MCP Security Workflow With LyraShield AI
Configure Kiro with pinned direct MCP and separate CLI OAuth, then verify discovery and read-only access before authorized scans and CI checks.
Aug 7, 2026MiMo Code app security checklist
Secure a Xiaomi MiMo Code built app before launch with this evidence based checklist covering MCP config, permissions, secrets, dependencies and verification.
Aug 7, 2026MiMo Code MCP security workflow
Set up LyraShield MCP in MiMo Code step by step: CLI setup, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Oh My Pi app security checklist
Secure an Oh My Pi built app before launch with this evidence based checklist covering MCP config, permissions, secrets, dependencies and verification.
Aug 7, 2026Oh My Pi MCP security workflow
Set up LyraShield MCP in Oh My Pi step by step: CLI setup, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Roo Code app security checklist
Secure a Roo Code built app before launch with this evidence based checklist covering MCP config, permissions, secrets, dependencies and verification.
Aug 7, 2026Roo Code MCP security workflow
Set up LyraShield MCP in Roo Code step by step: CLI install, manual config, verification, inline scan, GitHub Action diff gate and agent rules.
Aug 7, 2026Amp App Security Checklist
Practical checklist for Amp: scope orbs, MCP servers, skills and CI gates before shipping AI-built code to production.
Jul 30, 2026Amp MCP security workflow for agent scans
Set up LyraShield AI with Amp via MCP to scan changed code, verify findings and enforce a diff aware GitHub Action gate with SARIF.
Jul 30, 2026Claude Code MCP Agent Rules Security Setup
Configure LyraShield MCP with Claude Code agent rules to catch OWASP risks secrets and dependency issues across local and remote MCP
Jul 30, 2026Claude Code security workflow for AI built apps
Secure Claude Code workflows with MCP scope checks, permission hardening, dependency gating and SARIF evidence for trustworthy releases.
Jul 30, 2026Cline app security checklist
Secure Cline workflows with current MCP configuration, autoApprove controls and verified gates before merge.
Jul 30, 2026Cline MCP security workflow for AI built apps
Connect Cline to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026OpenAI Codex MCP security workflow for PR reviews
Connect OpenAI Codex to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026Codex app security workflow for trusted releases
Lock down Codex config and MCP servers, gate dependencies and secrets and capture SARIF evidence for every AI assisted release.
Jul 30, 2026Cursor app security checklist for AI built code
Harden Cursor built apps before release with MCP config checks, rules hardening, secret scanning, dependency review and verified evidence.
Jul 30, 2026Cursor MCP Security Workflow for AI Built Apps
Set up LyraShield MCP in Cursor to scan AI built code for injection secrets and supply chain risks with findings with recorded evidence states and GitHub gate
Jul 30, 2026Gemini CLI App Security Checklist for Vibe Coding
Secure Gemini CLI with settings.json MCP trust controls, includeTools allow lists and verified secrets and SCA gates.
Jul 30, 2026Gemini CLI MCP security workflow for AI apps
Connect Gemini CLI to LyraShield MCP for bounded scans, evidence-state findings, reviewed fix proposals, retests and a diff-aware SARIF gate.
Jul 30, 2026Hermes Agent App Security Checklist
Harden Hermes agent: config, skill supply chain, MCP tool filtering, mTLS and CI gates for AI-built apps.
Jul 30, 2026Hermes MCP workflow for security scans
Integrate LyraShield AI with Hermes AI via YAML config to run bounded scans per target, preserve evidence states and enforce diff aware PR gating.
Jul 30, 2026JetBrains AI app security checklist
Secure JetBrains AI Assistant workflows with MCP hardening plus secrets scanning and verified review before every merge.
Jul 30, 2026JetBrains MCP Security Workflow for AI IDEs
Integrate LyraShield MCP into JetBrains AI Assistant to scan AI built code for OWASP flaws secrets and supply chain risk
Jul 30, 2026Kilo Code App Security Checklist
Practical checklist for Kilo Code: lock agent rules, MCP authority, dependencies and CI evidence before you ship AI-built code.
Jul 30, 2026Kilo Code MCP security workflow before you ship
Configure LyraShield AI with Kilo Code via MCP to run bounded scans per target, preserve evidence states and enforce diff aware gating on pull requests.
Jul 30, 2026OpenClaw App Security Checklist
Secure OpenClaw gateway: MCP registry, toolFilter, channel inputs, TLS and CI evidence for AI-built app releases.
Jul 30, 2026OpenClaw MCP security workflow
Integrate LyraShield AI with OpenClaw via MCP and GitHub Action to verify builds, upload SARIF and enforce diff aware checks.
Jul 30, 2026OpenCode App Security Checklist for AI Built Apps
Secure OpenCode workflows with current opencode.json MCP controls and verified SCA plus secrets scanning.
Jul 30, 2026OpenCode MCP security workflow
Connect OpenCode to LyraShield MCP for evidence-state findings and a diff-aware GitHub gate using opencode.json and a pinned local package.
Jul 30, 2026Pi Coding Agent App Security Checklist
Harden Pi Coding Agent extensions, skills, tool permissions, secrets and diff-aware CI for AI-built apps.
Jul 30, 2026LyraShield alongside the Pi coding agent
Connect Pi Coding Agent to LyraShield through built-in MCP and hosted OAuth, with skills and CLI/CI alternatives.
Jul 30, 2026VS Code AI app security checklist for MCP builds
Secure VS Code with GitHub Copilot and MCP, covering mcp dot json hardening, agent permissions, secret gating and SARIF evidence.
Jul 30, 2026VS Code MCP Security Workflow with Copilot
Add LyraShield MCP to VS Code for Copilot aware security checks findings with evidence states and diff aware GitHub Action gates
Jul 30, 2026Windsurf MCP Security Workflow for AI Editors
Review a legacy Windsurf MCP workflow, use the current Devin setup guide and keep tool access, scan evidence and retests scoped to your app.
Jul 30, 2026Windsurf security workflow for AI generated apps
Harden Windsurf MCP config, rules, dependencies and secrets with SARIF evidence for secure AI assisted releases of your app.
Jul 30, 2026Zed AI App Security Checklist for Vibe Teams
Secure Zed editor workflows with MCP hardening in settings.json plus verified secrets and dependency checks before merge.
Jul 30, 2026Zed MCP security workflow for AI built apps
Connect Zed to LyraShield AI over MCP for findings with explicit evidence states and a diff aware GitHub Action gate inside your existing editor flow.
Jul 30, 2026Keep AI Agents Away From Production Deletes
Block standing production delete authority with separate identities, permission ceilings, exact approvals, short-lived access and audit records.
Jul 17, 2026Protect AGENTS.md and Rules Files From Poisoning
Prevent prompt injection in AGENTS.md and coding-tool rules with provenance, code ownership, protected review, scoped rules and conflict tests.
Jul 17, 2026What not to share with AI coding assistants
Do not share live credentials, customer data, regulated records, unreleased business information or code outside your authorized policy.
Jul 17, 2026A security review prompt you still have to test
Use a bounded AI security review prompt to produce traceable candidate findings, safe test ideas and explicit uncertainty without mistaking output for proof.
Jul 17, 2026Test backup restore before agents ship
Prove backup recoverability in an isolated restore drill before a coding agent receives destructive production access.
Jul 17, 2026Prevent CI/CD agents becoming confused deputies
Keep untrusted pull requests outside privileged CI jobs with narrow tokens, protected deployments, bound OIDC claims and verified artifacts.
Jul 17, 2026Sandbox Coding Agents and Control Egress
Isolate coding agents with disposable workspaces, minimal mounts, non-root execution, resource limits and explicit outbound network policy.
Jul 17, 2026Command Injection in Agentic App Workflows
Remove unsafe shell boundaries from agent tools, constrain process arguments and isolate the external commands that remain necessary.
Jul 17, 2026Secure GitHub Actions Used by Coding Agents
Harden coding-agent workflows with untrusted-input separation, minimal token permissions, pinned actions, constrained OIDC and approval gates.
Jul 17, 2026Vibe coding threat model: template and checklist
Build a threat model for your AI-built app with a worked example, reusable risk table, named owners and release checks tied to evidence.
Jul 17, 2026Indirect Prompt Injection in Coding Agents
Contain indirect prompt injection by separating untrusted content from instructions, limiting tools and testing with harmless canary actions.
Jul 17, 2026Design Least-Privilege MCP Tools
Narrow MCP tools by verb, resource, schema, token audience and approval so model-controlled calls cannot inherit broad authority.
Jul 17, 2026Stop prompt injection spreading across agents
Contain multi-agent prompt injection with preserved provenance, structured handoffs, separated capabilities, intent checks and safe canary tests.
Jul 17, 2026How to review an AI-generated pull request
Restate intent, split the diff by trust boundary, inspect hidden artifacts, run independent tests and require accountable human approval.
Jul 17, 2026What Never to Paste Into an AI Coding Tool
Keep live credentials out of AI tools and use customer or regulated data only through an approved, minimized workflow with verified controls.
Jul 17, 2026Secure internal tools built by non-developers
Protect AI-built internal tools with managed identity, per-action authorization, narrow service accounts, audit logs, recovery and a shutdown owner.
Jul 17, 2026Build a Secure MCP Server
Secure an MCP server with deliberate transport choices, audience-bound tokens, per-tool authorization, session isolation and execution-time approval.
Jul 17, 2026Secure public AI API endpoints
Protect public AI APIs with object authorization, bounded work, cost controls, constrained tools, safe output handling and tested failure paths.
Jul 17, 2026Threat Modeling for Non-Security Founders
Build a lightweight startup threat model from assets, trust boundaries, misuse cases, mitigations, owners, tests and review triggers.
Jul 17, 2026Vibe Coding Security: The Complete Guide
A six-layer guide to testing AI-built apps, preserving evidence, retesting fixes and making an honest release decision.
Jul 17, 2026