Agent Claude Code
Adversarial reviewer for the SQL policy gate. Tries to sneak reads or writes past src/policy/gate.ts using real PostgreSQL grammar, then adds any successful bypass to tests/policy.attacks.test.ts as a failing case.
Hook Claude Code
Runs after a tool call finishes for Write and Edit tool calls, executing no-stdout-log.sh via bash. From Azzaraell/pgguard-mcp.
Hook Claude Code
Runs before the agent uses a tool for Bash and PowerShell tool calls, executing no-null-bytes.sh via bash. From Azzaraell/pgguard-mcp.
Settings file Claude Code
Agent settings declaring 2 hook events (PostToolUse, PreToolUse).
Skill Claude CodeCodex
Run the SQL-gate attack suite, confirm every hostile query is denied with a named rule, and report coverage gaps. Use after editing src/policy/gate.ts or the demo policy.
MCP server Claude CodeCodexCursor
Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and columns an AI agent can see; every query runs inside a BEGIN READ ONLY transaction with a statement timeout, and every decision lands in an audit log. Runs locally from the pgguard-mcp npm package.