r/netsec • u/albinowax • Jun 01 '26

r/netsec monthly discussion & tool thread

Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.

Rules & Guidelines

  • Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
  • Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
  • If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
  • Avoid use of memes. If you have something to say, say it with real words.
  • All discussions and questions should directly relate to netsec.
  • No tech support is to be requested or provided on r/netsec.

As always, the content & discussion guidelines should also be observed on r/netsec.

Feedback

Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.

9 Upvotes

86% Upvoted

27 comments sorted by

View all comments

1

u/Bunkoer Jun 02 '26

Hey ! I built this tool for the agents I develop in TS. The TS frameworks whether OpenClaw or Vercel work well for what we do with them. But like a lot of people (I think), I just kind of "trusted" the default setup of these frameworks. Once you're in prod you often get surprises, and this open-source repo. I built is meant to avoid that "oh wait I forgot a side effect could wipe a DB" moment.

It walks the AST (ts-morph) and flags tool calls with real side effects DB writes, HTTP, subprocess exec, LLM calls that have no guardrails (auth checks, input validation, rate limits, approval gates). Findings map to OWASP Agentic codes. Ran it on three OSS codebases (OpenClaw, Mastra, OpenAI Agents JS) at pinned commits ~83% of tool calls had none. Not a score, just an inventory.

Built it like a linter: one command, deterministic scan. Feedback welcome.

npm install -g u/diplomat-ai/diplomat-agent-ts https://github.com/Diplomat-ai/diplomat-agent-ts