VT-Agent-Firewall

Local security gateway between an AI agent and its tools (fs, shell, network, MCP): default-deny policy engine, human approval, append-only audit log. Tested against indirect prompt injection trying to exfiltrate a fake .env to 127.0.0.1. Python stdlib only, 118 tests. Not production-ready - a security lab.

GitHub

Official source

Start locally with the CLI guide