crocodile-labs

crocodile-labs/openmoat

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

1 stars 0 forks 1 watchers Rust Apache License 2.0

agent-security ai-agents audit-log claude-code claude-code-security codex coding-agents cursor devsecops egress-proxy llm-security mcp openmoat policy prompt-injection rust sandbox security

View on GitHub Website

13 Open Issues Need Help Last updated: Oct 7, 2026

Open Issues Need Help

View All on GitHub

host(copilot): preToolUse hook adapter for Copilot CLI, cloud agent and VS Code agent mode 12 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

lint: warn that plain_http injection to a loopback host can never work 18 days ago

good first issue type: fix area: policy size: S priority: P3

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

test: proxy broker test races its upstream's read timeout 18 days ago

good first issue type: test size: S priority: P1 area: proxy

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(cursor): verify Grep/Glob tool names and the path key against a real Cursor payload 18 days ago

help wanted type: host area: hosts priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(continue): released cn loads the hooks but never fires them (cn 1.5.47); keep the cn adapter ready for when it does 18 days ago

help wanted type: sec type: host priority: P3

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(opencode): plugin on tool.execute.before and permission.ask 25 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(junie): Junie CLI PreToolUse hook adapter 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(goose): PreToolUse hook adapter with on_failure block 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(amp): plugin on the tool.call event 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(kiro): PreToolUse command hook adapter 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(cline): PreToolUse script hook adapter 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(windsurf): Cascade pre-hooks adapter for run_command, read_code, write_code and mcp_tool_use 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security

host(gemini-cli): hook adapter for BeforeTool events 28 days ago

help wanted type: host priority: P2

crocodile-labs/openmoat

1

Security for AI coding agents. Checks every action Claude Code, Codex and Cursor take and blocks the dangerous ones before they run. One local policy, OS sandboxes, a tamper-evident audit log.

Rust

#agent-security#ai-agents#audit-log#claude-code#claude-code-security#codex#coding-agents#cursor#devsecops#egress-proxy#llm-security#mcp#openmoat#policy#prompt-injection#rust#sandbox#security