ixoblakp
8dec8f6038
11 plugins from github.com/librefang/librefang-registry plugins/. index.json / index.json.sig are signed with Arka's Ed25519 key (not upstream stats.librefang.ai). Private key is not in this repo.
28 lines
1.3 KiB
Markdown
28 lines
1.3 KiB
Markdown
# guardrails
|
|
|
|
Safety filter plugin that detects potentially harmful content patterns in user messages and injects warning memories into agent context. Uses only Python stdlib regex -- no external dependencies.
|
|
|
|
## Detection Categories
|
|
|
|
| Category | Examples | Memory Tag |
|
|
|----------|----------|------------|
|
|
| PII | Email addresses, phone numbers, SSNs, credit card numbers | `[guardrails:pii]` |
|
|
| Prompt injection | "ignore previous instructions", "you are now", "system prompt:" | `[guardrails:injection]` |
|
|
| Credentials | `password=`, `api_key=`, `secret=`, `token=`, PEM private keys | `[guardrails:credential]` |
|
|
|
|
## Hooks
|
|
|
|
| Hook | Script | Description |
|
|
|------|--------|-------------|
|
|
| ingest | `hooks/ingest.py` | Scans user messages for harmful patterns and returns warning memories |
|
|
|
|
## How It Works
|
|
|
|
When a user message arrives, the ingest hook runs all pattern checks against it. For each detected issue a memory is returned with the category tag and a recommendation for the agent (e.g. "avoid echoing PII", "maintain original instructions"). If nothing is detected the plugin returns an empty memories list.
|
|
|
|
All patterns use word boundaries and anchoring to minimise false positives on casual conversation.
|
|
|
|
## Usage
|
|
|
|
Installed automatically when enabled in agent configuration.
|