Security Policies

1. Prompt Injection Prevention

ShieldAgent uses an ML classifier to detect prompt injection in tool call arguments. Block calls above a confidence threshold:

{
  "tenantId": "<tenant-id>",
  "agentId": null,
  "toolName": "*",
  "action": "deny",
  "conditions": [
    {
      "type": "ml_injection_score_above",
      "threshold": "<your-threshold>"
    }
  ]
}

Set a threshold that matches your security and usability requirements. Lower values increase detection sensitivity; higher values reduce false positives.

2. Data Loss Prevention

Prevent agents from exfiltrating secrets, PII, or financial data through tool calls:

{
  "tenantId": "<tenant-id>",
  "toolName": "send_email",
  "action": "deny",
  "conditions": [
    {
      "type": "param_matches_pattern",
      "param": "arguments.body",
      "pattern": "-----BEGIN (RSA|EC|OPENSSH) PRIVATE KEY-----"
    }
  ]
}

{
  "tenantId": "<tenant-id>",
  "toolName": "write_file",
  "action": "shadow",
  "conditions": [
    {
      "type": "param_contains_pii",
      "sensitivity": "high"
    }
  ]
}

3. Excessive Agency Detection

Catch agents that call destructive tools at abnormal frequency within a session:

{
  "tenantId": "<tenant-id>",
  "toolName": "bash",
  "action": "deny",
  "conditions": [
    {
      "type": "session_call_count_above",
      "threshold": 50,
      "window": "1h"
    }
  ]
}

Agency detection also fires automatically when an agent's excessive agency score exceeds the configured risk threshold — no per-tool policy required.

4. Tool Allowlist Pattern

The safest policy pattern: explicitly allow only the tools an agent needs, deny everything else. Use the tenant-wide deny-all + per-agent allow approach:

SDK examples have been retired. For a supported integration, use the OpenAPI reference.

5. Tool Drift Monitoring

Tool drift occurs when an agent starts calling tools outside its established baseline. Configure drift detection sensitivity and response:

SDK examples have been retired. For a supported integration, use the OpenAPI reference.

{
  "eventType": "tool_drift_detected",
  "agentId": "agt_01HXYZ...",
  "toolName": "delete_database",
  "baselineCallCount": 0,
  "sessionCallCount": 3,
  "driftScore": 0.94,
  "action": "blocked",
  "timestamp": "2026-04-16T14:23:00Z"
}