Why Your AI Agent Has Root Access to Everything (And How to Fix It in 3 Lines of Python)

I’ve been building AI agents at work and kept running into the same problem: every framework lets agents call any registered tool with zero safety checks. An agent with database access can run DROP TABLE users and nothing stops it.

So I built AgentShield-FW, a runtime firewall that intercepts every tool call and enforces configurable safety policies before execution.

• GitHub: https://github.com/Avinash-Amudala/AgentShield

• PyPI: pip install agentshield-fw

The simplest usage:

`import agentshield

shield = agentshield.Shield()

@shield.protect

def execute_sql(query: str) -> str:

return db.execute(query)

Agent tries: execute_sql("DROP TABLE users")

→ Blocked by AgentShield: Destructive SQL detected (ASI02)`

What makes it different:

• Zero required dependencies — core runs on Python stdlib only

• 40+ pre-built rules covering SQL injection, path traversal, credential leaks, prompt injection, shell commands, rate limiting

• Mapped to OWASP Agentic Security Top 10 (ASI01-ASI10)

• Works with LangChain, MCP, CrewAI, OpenAI SDK, or any Python function

• Sub-millisecond latency (<1ms p99)

• 94.56% test coverage

• Hash-chained audit logging for tamper detection

Other projects called "AgentShield" are static scanners (analyze config files). This is a runtime firewall (intercepts live tool calls). WAF vs SAST.

MIT license. Python 3.10-3.13.