Two New Open Source Tools for AI Agent Security and Optimization

The r/openclaw community has shared two open source tools for AI agent developers: AI Agent Defense Kit (shipped) and AgentGuard (in development).
AI Agent Defense Kit
This is a free security toolkit with runtime protection skills for AI agents. Available skills include:
skill-auditor- Audit skills before installation for security red flagsurl-preflight- Check URLs before your agent fetches themcontent-scanner- Scan content for hidden instructionssocial-engineering-detector- Detect manipulation tactics in messagesdependency-checker- Check packages for supply chain attacks
The repository is available at: https://github.com/moebius-ansa/ai-agent-defense-kit
AgentGuard
This toolkit (in development) addresses three common problems: unpredictable costs from autonomous AI systems burning tokens, lack of audit logs showing what agents are doing, and inbound security threats before content reaches agents.
Planned launch features include:
- Cost Estimator - Auto-calculates monthly costs by model + usage level
- Model Comparison - Compares 20+ models across providers with quality ratings; claims to find 90%+ savings with equivalent quality
- Security Scanner - Detects prompt injection, jailbreaks, system prompt leaks and other attacks before they hit your agent
- Activity Monitor - Tracks file changes, API calls, process activity
- Budget and Activity Alerts - Get notifications on Discord, Slack, Telegram, etc. when detecting unusual activity or major cost spikes
Installation will be via: pip install agentguard
The tool will feature an intuitive TUI interface and agent mode that lets your agent operate the platform for you.
These tools address practical concerns for developers running AI agents, particularly around security monitoring and cost management.
📖 Read the full source: r/openclaw
👀 See Also

Merlin: Local-first LLM context dedup – measure up to 71% chunk overlap, free & open-core
Merlin is a local-first context dedup tool that measured 22-71% chunk overlap across 22M passages from real agent/RAG sessions. Ships as HTTP proxy (Ollama/vLLM/SGLang/llama.cpp), MCP server (Claude/Cursor/OpenClaw), or standalone CLI. MIT open-core with daily usage caps.

SeeFlow: Architecture Diagrams That Are Wired to Your Live App
SeeFlow generates a flow canvas from your codebase and wires each node to your actual running app, with plugins for Claude Code, Codex, Cursor, Windsurf, and an MCP server.

AskFirst API adds human approval layer for AI agents
AskFirst is a REST API that lets AI agents pause for human approval before taking irreversible actions. It works with local models, hosted APIs, and any framework, providing email notifications, approve/deny options, and audit logs.

Why Your Claude Code UI Output Drifts and How a Structured Spec Fixes It
A developer explains that inconsistent UI output from Claude Code isn't a prompt problem — it's a format problem. Providing exact hex codes, font weights, spacing, screen states, and transitions eliminates drift. They also open-sourced an MCP server that converts screen recordings into structured specs.