SecureShell
Plug-and-Play terminal gatekeeper for LLM agents
What it does
SecureShell is a zero-trust execution layer for LLM agents with shell access. It prevents prompt-injection-driven command execution, enforces safety policies, and provides structured feedback for self-correcting agents. Plug-and-play with LangChain, MCP, all major providers and local agent on Ollama and llama.cpp.
Does a similar job
all alternatives →
TrustClaw by ComposioMay 2026 · github.com · ▲152Self-hosted AI agent that connects 1000+ apps on Vercel
- ATAgent that refuses to run commands without human approvalApr 2026 · github.com · ▲12
In light of recent news about an agent deleting a production database, I thought now would be a good time to share this. As the use of AI tools in production is becoming more common, sadly so will the high profile incidents like the one mentioned. Fewshell is a terminal agent specifically designed to avoid this. There is no setting to enable command auto-approval. This is by-design, so that the user never has to second-guess or worry about accidentally having it enabled. Originally my intention was to build an AI mobile terminal to make typing shell commands easy. But with so many…
- OSOpen-Source Gateway to Stop Tool-Abusing Prompt InjectionsOct 2025 · archestra.ai · ▲9
Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against…
More ai this month
the category →
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com
Astute▲585Automate your B2B brand going viral, with new media creators
AI · 19d ago · company-app.joinastute.com
Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…
AI · 27d ago · cactuscompute.com
Launched alongside, January 2026
the whole month →- IN
Hey HN! I wanted to share something I built over the last few weeks: isometric.nyc is a massive isometric pixel art map of NYC, built with nano banana and coding agents. I didn't write a single line of code. Of course no-code doesn't mean no-engineering. This project took a lot more manual labor than I'd hoped! I wrote a deep dive on the workflow and some thoughts about the future of AI coding and creativity: http://cannoneyed.com/projects/isometric-nyc
AI · Jan 2026 · cannoneyed.com
Automatic AI-powered code reviews the moment you open a PR
Dev tools · Jan 2026 · kilo.ai
