1. Conduid
  2. Agents
  3. Gsh Framework
MCP server · Agents

Gsh Framework

by · github.com/sunilgentyala/gsh-framework

Open-source hunt playbooks and a policy-driven Sentinel reference framework for detecting runaway AI agents, unauthorized tool calls, behavioral drift, DNS exfiltration, and poisoned MCP tools. MITRE ATLAS mapped.

Unclaimed agentic-aiai-securitybehavioral-analysiscybersecuritydetection-engineeringllm-securitymcp-securitymitre-atlasmulti-agent-systemsnist-csfpost-quantumthreat-huntingzero-trust
InstallView source
34Low

Scored 28 days ago · breakdown

About Gsh Framework

Gsh Framework is an MCP server published by sunilgentyala in the Agents category: open-source hunt playbooks and a policy-driven Sentinel reference framework for detecting runaway AI agents, unauthorized tool calls, behavioral drift, DNS exfiltration, and poisoned MCP tools. MITRE ATLAS mapped.

The repository has 9 stars and 0 forks, with the last commit 12 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/sunilgentyala/gsh-framework

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Gsh Framework

Powered by Claude · Grounded in docs

I know everything about Gsh Framework. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v1.9.0GSH v1.9.0 - CLI Error Handling, License, Security Tooling · 5 Oct 2026What's in this release Sentinel CLI error handling (#12, #16): clearer error messages, `--log-level DEBUG` tracebacks and a remediation hint, with new tests. Canonical Apache-2.0 LICENSE so GitHub detects it; research-use notice moved…
v1.8.0GSH v1.8.0 - One-Command Hunt-005 Demo · 21 Sep 2026What's in this release One-command Docker demo for Hunt-005 (`demo/`). `cd demo && docker compose up --build --abort-on-container-exit` (or `python demo/run_demo.py` without Docker) drives the real `gsh-baseline.py` and…
v1.7.0GSH v1.7.0 - Implementation Identity Gate · 21 Sep 2026What's in this release Implementation Identity Gate for Hunt-005 (`adapters/mcp_proxy.py`). An approved baseline is now bound to the resolved executable and script hashes plus the adjacent dependency-lock file behind the server launch…
v1.6.0GSH v1.6.0 - Security Audit Pass · 21 Sep 2026What's in this release A security audit pass over the framework. Four real defects were found and fixed: MCP added-tool auto-trust (Hunt-005). A tool added to a server after a baseline was approved was implicitly authorized for…
v1.5.0GSH v1.5.0 — Real Windows Event Log Output · 15 Jul 2026What's in this release A real Windows Application Event Log adapter (`adapters/windows_eventlog.py`). Set `siem_output: windows_eventlog` in your policy YAML and both `gsh-sentinel-deploy.py` and `gsh-mcp-proxy.py` will write findings to…
Questions

About Gsh Framework

How do I install Gsh Framework?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Gsh Framework safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Gsh Framework still maintained?

Yes — the latest release is v1.9.0 (5 Oct 2026), and the last commit was 12 days ago. The repository has 9 stars.