shellward

Instructions

Implementation Reference

• src/mcp-server.ts:224-240 (handler)

  The handler logic for the 'security_status' tool, which returns the current ShellWard configuration and capabilities.

  case 'security_status': {
    return {
      mode: guard.config.mode,
      locale: guard.locale,
      injection_threshold: guard.config.injectionThreshold,
      layers: guard.config.layers,
      capabilities: [
        'command_safety_check (17 dangerous patterns)',
        'prompt_injection_detection (32+ rules, zh+en)',
        'pii_detection (CN ID/phone/bank + global)',
        'path_protection (12 protected patterns)',
        'tool_policy (block payment/transfer)',
        'response_audit (canary + PII)',
        'data_flow_tracking (DLP)',
      ],
    }
  }

• src/mcp-server.ts:136-142 (schema)

  Tool definition and input schema for 'security_status'.

    name: 'security_status',
    description: 'Get current ShellWard security status: mode, active layers, detection capabilities.',
    inputSchema: {
      type: 'object' as const,
      properties: {},
    },
  },