OSSPipelock Single Binary Go Firewall for AI AgentsGitHub·high signalXBlueskyLinkedInCopy link9-layer scanner pipeline: DLP, prompt injection, SSRF, MCP tool poisoning. Zero code changes, drop-in proxy for Claude Code, Cursor, OpenAI Agents SDK.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layerCodex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requestsGitHubStack layer / Threat patternTwo high-severity CVEs land in rmcp, the official Rust MCP SDK: OAuth token theft and a permanent session-table leakGitHub Advisory DatabasePolicy dependency / Stack layerOrdewell uses a read-only coding agent as planner, then spawns per-task agent sessions gated by a marker-based verdict engineGitHubStack layer / Threat patternThree new advisories land on the most-used community GitLab MCP server, including a five-way bypass of its read-only mode and project allow-listGitHub Advisory DatabaseStack layer / Threat patternClaude Code v2.1.274 closes two Bash permission escapes and stops MCP errors printing resolved secretsGitHubStack layer / Threat patternClaude Code was printing MCP secrets resolved from ${VAR} placeholders into error messagesClaude Code ChangelogStack layer / Threat patternPattern: the MCP security story has moved from individual servers to the SDKs everyone builds onGitHub Security AdvisoriesPolicy dependency / Stack layerTip: Claude Code's Bash tool was re-sourcing your shell profile after every plugin reloadClaude Code Changelog