Filters potentially malicious code by comparing its structural patterns against a blacklist of known-bad structures before execution.
Sponsored
Code Firewall acts as a critical security gatekeeper, preventing dangerous code patterns from reaching execution environments. It operates by analyzing the structural similarity of incoming code against a robust blacklist of known-bad patterns. Leveraging `tree-sitter`, code is first parsed and normalized by stripping generic identifiers and literals while carefully preserving security-sensitive keywords. The normalized structure is then embedded using Ollama and compared via ChromaDB. If a code's structural similarity exceeds a predefined threshold to a blacklisted pattern, it is blocked, providing a proactive defense against various code injection and arbitrary execution vulnerabilities in LLM-driven or automated systems. It also includes tools for easily setting up and configuring Ollama for embeddings.
主要功能
01Structural Similarity-Based Code Filtering
02Code Normalization with Security Keyword Preservation
03Integration with Model Context Protocol (MCP)
04Automated Ollama Embedding Model Setup
050 GitHub stars
06Dynamic Blacklist Management and Sharpening
使用案例
01Pre-filtering user-generated code before execution by LLM agents or automated tools.
02Integrating automated code security checks into Model Context Protocol workflows.
03Building and refining custom blacklists of dangerous code patterns through continuous auditing and delta recording.