sigil

Ju571nK/sigil
★ 9 stars Rust 🤖 AI/LLM Updated today
Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permissions, hooks, sandboxes, mcp.json) and ship hash-anchored events to a central server + your SIEM. Fleet-wide posture; measures, doesn't block. Rust.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sigil": {
      "command": "cargo",
      "args": [
        "run",
        "--",
        "sigil"
      ]
    }
  }
}

README Excerpt

> Sigil gives security teams a **fleet-wide view of what their AI coding agents > are allowed to do.** A lightweight **client agent** on every developer machine > scores the guard surfaces of Claude Code, Cursor, Codex, and Gemini CLI — > permissions, hooks, sandbox boundaries, and `mcp.json` servers — and ships

Topics

ai-agentai-coding-agentai-securityai-spmclaude-codecodexcursordeveloper-securityendpoint-securityfile-integrity-monitoringgemini-climcpmcp-securitymodelcontextprotocolposture-management