Agent Plugins

A pre-execution security layer that checks suspicious URLs, pipe-to-shell commands, terminal injection, data exfiltration, and malicious agent configuration through shell hooks, host hooks, or an MCP gateway.

A pre-command hook that checks shell operations and blocks or warns about commands that could cause data loss.