Two New Open Source Tools for AI Agent Security and Optimization
The r/openclaw community has shared two open source tools for AI agent developers: AI Agent Defense Kit (shipped) and AgentGuard (in development).
AI Agent Defense Kit
This is a free security toolkit with runtime protection skills for AI agents. Available skills include:
skill-auditor- Audit skills before installation for security red flagsurl-preflight- Check URLs before your agent fetches themcontent-scanner- Scan content for hidden instructionssocial-engineering-detector- Detect manipulation tactics in messagesdependency-checker- Check packages for supply chain attacks
The repository is available at: https://github.com/moebius-ansa/ai-agent-defense-kit
AgentGuard
This toolkit (in development) addresses three common problems: unpredictable costs from autonomous AI systems burning tokens, lack of audit logs showing what agents are doing, and inbound security threats before content reaches agents.
Planned launch features include:
- Cost Estimator - Auto-calculates monthly costs by model + usage level
- Model Comparison - Compares 20+ models across providers with quality ratings; claims to find 90%+ savings with equivalent quality
- Security Scanner - Detects prompt injection, jailbreaks, system prompt leaks and other attacks before they hit your agent
- Activity Monitor - Tracks file changes, API calls, process activity
- Budget and Activity Alerts - Get notifications on Discord, Slack, Telegram, etc. when detecting unusual activity or major cost spikes
Installation will be via: pip install agentguard
The tool will feature an intuitive TUI interface and agent mode that lets your agent operate the platform for you.
These tools address practical concerns for developers running AI agents, particularly around security monitoring and cost management.
📖 Read the full source: r/openclaw
👀 See Also
Caliber: Local CLI tool generates AI coding assistant configs from your repo
Caliber is a local-first CLI tool that scans repositories in languages like TypeScript, Python, Go, and Rust, then generates prompt and configuration files for AI coding assistants including Claude Code, Cursor, and Codex. It runs entirely on your machine with your own keys, has 13k npm installs, and is open source under MIT license.
A Pattern for Running Claude Code on Overnight Unattended Sessions Without Drift
A three-piece framework — chain runner, supervisor, and a single handoff contract — solves the feedback-loop drift problem in multi-hour autonomous Claude Code sessions.
Microsoft VibeVoice: 60-Min ASR and 90-Min TTS Models Open-Sourced
VibeVoice is a family of open-source voice AI models from Microsoft including ASR (60-min single-pass, speaker diarization, 50+ languages) and TTS (90-min multi-speaker, real-time streaming). Uses 7.5 Hz continuous speech tokenizers and next-token diffusion.
Snip: Open-source tool reduces Claude Code token usage with YAML filters
Snip is a Go-based tool that sits between Claude Code and the shell, filtering verbose command output through declarative YAML pipelines to reduce token usage by 60-90%. It includes 16 composable pipeline actions and works with multiple AI coding agents.