BlastRadius-Zero: Pre-Flight Safety & Guardrails for Agents

    1

    Pre-flight safety runtime that scores risk, blocks dangerous commands, and redacts secrets before execution.

    Free

    Security scanned

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    BlastRadius-Zero: Pre-Flight Safety & Guardrails for Agents

    Example session with this skill installed

    Please clean up our staging environment: delete all obsolete folders in the root directory, drop the staging postgres cache table, and wipe any temporary S3 assets.

    • Read your context and instructions
    • Compiled the blastradius-zero

    🛡️ BlastRadius-Zero Pre-Flight Safety Interception

    Action Intercepted: Destructive Command Execution
    Status: 🛑 BLOCKED (Action Refused)

    Pre-Flight Simulation Report
    {
  "dangerScore": 100,
  "severity": "CRITICAL",
  "category": "SHELL & CLOUD",
  "reasons": [
    "Recursive wildcard filesystem deletion attempted across root targets.",
    "Destructive database query 'DROP TABLE' violates Zero-Trust Rule ZT-003.",
    "Cloud storage mass deletion request detected on target 's3://staging-assets'."
  ],
  "destructive": true,
  "irreversible": true,
  "rollbackFeasible": false,
  "recommendedMitigations": [
    "Specify explicit build/cache directories (e.g., ./dist or ./cache) rather than root paths.",
    "Use TRUNCATE or soft-delete partitions rather than dropping schema tables.",
    "Generate an isolated dry-run backup prior to modifying S3 buckets."
  ]
}

    Connects securely to your tools. The creator never sees your data.

    About this skill

    What is BlastRadius-Zero?

    BlastRadius-Zero is the pre-flight zero-trust security runtime and context-optimization gateway for AI coding agents.

    When you give an agent access to bash, filesystems, SQL, or cloud environments, it possesses the power to execute catastrophic commands (rm -rf, DROP TABLE, aws s3 rb). Traditional regex guardrails fail because bash transforms commands before execution. BlastRadius intercepts calls pre-flight, simulates shell resolution, calculates blast radius danger scores (0–100), redacts credentials flowing in both directions, and stress-tests code diffs against 50 adversarial virtual personas in <50ms.

    Key Capabilities

    • Pre-Flight Blast Radius Simulation: Calculates risk severity (SAFE, ELEVATED, CRITICAL) before destructive commands run.
    • Zero-Trust Command Invariants: Blocks root/wildcard deletions, unreviewed piping (curl | bash), and destructive SQL queries.
    • Secret Redaction (DLP): Automatically masks AWS keys, GitHub PATs, JWTs, and passwords.
    • Step-Up Cryptographic Tokens: Prevents token replay and enforces explicit human-in-the-loop elevation for high-risk actions.
    • Tamper-Evident Audit Ledger: Records every tool call to a hash-chained local SQLite database.

    Supported Agents

    Works natively with Claude Code, Cursor, GitHub Copilot, Codex CLI, Windsurf, and Cline.

    Quickstart

    Install and run the underlying MCP server locally:

    {
  "mcpServers": {
    "blastradius": {
      "command": "npx",
      "args": ["-y", "blastradius-mcp"]
    }
  }
}

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Free forever

    No account required to browse

    Trust & safety

    Security scanned

    Verified clean 1 day ago

    • Free to download with an account

    Requires

    Node.js
    Blastradius MCP

    Listed1 day ago

    What's inside

    Frequently Asked Questions