A security tool you've never seen.
Block bad command execution and keep you away from danger.
A security tool you've never seen. launched on May 27, 2026 with 2 votes, #6,288 of 20,538 launches that month.
What it does
Strict but lenient: Now you don't have to choose between "strict" and "agent-reviewed". Most of the time, we will block any perilous command execution request from the agent. But you can run a verified, checked command set through a command macro for when you need it. (Sounds like a custom config, but it's completely different!) My philosophy is to provide a safer but easier way to run complex commands. MCP is too rigid; CLI is lenient, but too dangerous. This is the best compromise.
safe command execution with great management. Contribute to rosettastone0501-cpu/Hlin development by creating an account on GitHub.
If this is your first time using Hlin, we wrote a guide for you. control-layer prevention : Block every unacknowledged execution to prevent before a tragedy occurs. Encrypted Data : All data ( such as config, command macro ) are encrypted to prevent jailbreaking. such as Freedom in Confinement : Agent can use command macro with safeRun: true to bypass execution-guard. Toolbox : Macro is just like MCP but more simpler. with high customizability. call your complex command set with very few inputs. Template : we featured slot system. which means you can make different action by same template. # example: test: { cmd: "rm -r -force <T: string>" # this is your template ... } # you can do test…from github.com
Does a similar job
all alternatives →
A context-aware permission guard for Claude CodeMar 2026 · github.com · ▲127We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…
MCPGod: Fine-grained control over MCP clients, servers, and tools2025 · github.com · ▲37Hey everyone, I've wanted an easy way to control which mcp server tools are available to clients. So for example, I might want a gmail server to only expose the read tool (but not send, delete etc). I figured if I create a cli for spawning mcp servers, I could intercept the stdin, stdout, stderr etc and modify what the clients see when they are making calls to list tools, resources, and prompts. Well it worked! In the initial version you can easily add a server to claude with a safe list of tools: npx -y mcpgod add @modelcontextprotocol/server-everything --client claude --tools=echo,add…
MCP Security Suite2025 · github.com · ▲36Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
- FLFree local security checks for AI coding in VSCode, Cursor and Windsurf2025 · ▲43
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
I built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 30d ago · world.pixverse.video
Source: Product Hunt launch ↗
Launched alongside, May 2026
the whole month →
Parallel agents, diff reviewer, and multi-model comparisons
Dev tools · May 2026 · kilo.ai
Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
Life & fun · May 2026 · github.com
🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md
Dev tools · May 2026 · github.com