Harden your AI coding agent in 60 seconds.
npx llm-safe-haven
What It Does
Detects your installed agents, installs security hooks, and scores your setup:
LLM Safe Haven -- Security Scorecard
Detected agents:
+ Claude Code -- Level 3 (hooks + audit + sandbox)
+ Cursor -- Level 1 (ignore files + advice)
. Windsurf -- not installed
Security Level: 2 of 4
+--------------------------------------+
| ##########.......... Level 2: Guarded |
+--------------------------------------+
Supported Agents
| Agent | Tier | What It Configures |
|---|---|---|
| Claude Code | Full | Hooks, settings.json, sandbox, audit logging |
| Cursor | Solid | .cursorignore, workspace trust guidance |
| Windsurf | Solid | .codeiumignore, limitation warnings |
| Cline | Solid | .clineignore |
| Continue.dev | Solid | .continueignore |
| Aider | Solid | .aiderignore, .env warnings |
| Codex CLI | Solid | .codexignore, sandbox guidance |
Commands
npx llm-safe-haven # Install hooks and harden (default) npx llm-safe-haven audit # Check security posture npx llm-safe-haven audit --json # Machine-readable for CI npx llm-safe-haven scan # Find exposed .env files npx llm-safe-haven update # Update hooks to latest npx llm-safe-haven --dry-run # Preview without changing anything
Security Levels
| Level | Name | What It Means |
|---|---|---|
| 0 | Exposed | No hardening |
| 1 | Basic | Hooks installed |
| 2 | Guarded | + Audit logging + no .env files |
| 3 | Hardened | + Credential proxy + deny rules |
| 4 | Fortified | + Container isolation + network restrictions |
Go Deeper
- Threat Model -- OWASP Agentic Top 10 for solo devs (26+ real incidents)
- Claude Code Hardening -- Full guide with hooks, sandbox, permissions
- Cursor Hardening -- 7 CVEs documented, hardening steps
- Windsurf Hardening -- Honest assessment of limitations
- Devin Hardening -- Cloud agent security model
- GitHub Copilot Hardening -- 4 modes, 5 CVEs
- Aider Hardening -- No sandbox, but minimal attack surface
- Credential Management -- Why env vars fail, proxy architecture
- Testing & Detection -- Canary tokens, honeypots, incident response
- References -- 64+ curated security resources
Why This Exists
In April 2026, three AI coding agents leaked secrets through a single prompt injection. We hit the same problems, filed issues, built solutions, and documented everything.
Key issues from our investigation:
- anthropics/claude-code#52471 -- Sandbox blocks credential managers
Contributing
Add a new agent module: create lib/agents/your-agent.js implementing the standard
interface (detect, harden, audit). See lib/agents/cursor.js
for a template.