VoltAgent Integration
AI safety guardrails for VoltAgent applications. Implements THSP protocol validation, OWASP security protection, and PII detection/redaction.
Installation
npm install @sentinelseed/voltagent
Features
- THSP Protocol: Truth, Harm, Scope, Purpose validation
- OWASP Protection: SQL injection, XSS, command injection detection
- PII Detection: Email, phone, SSN, credit card, API keys
- Streaming Support: Real-time PII redaction
- VoltAgent Native: Works with VoltAgent's guardrail system
Quick Start
import { Agent } from "@voltagent/core";
import { createSentinelGuardrails } from "@sentinelseed/voltagent";
const { inputGuardrails, outputGuardrails } = createSentinelGuardrails({
level: "strict",
enablePII: true,
});
const agent = new Agent({
name: "safe-agent",
inputGuardrails,
outputGuardrails,
});
Configuration Presets
| Level | Description |
|---|---|
permissive | Log only, no blocking |
standard | Block unsafe, THSP + OWASP enabled |
strict | All validations, block on any issue |
Usage Examples
Input Protection
import { createSentinelInputGuardrail } from "@sentinelseed/voltagent";
const inputGuard = createSentinelInputGuardrail({
enableTHSP: true,
enableOWASP: true,
blockUnsafe: true,
});
PII Redaction
import { createSentinelOutputGuardrail } from "@sentinelseed/voltagent";
const outputGuard = createSentinelOutputGuardrail({
enablePII: true,
redactPII: true,
});
// Input: "Contact john@example.com"
// Output: "Contact [EMAIL]"
Specialized Guardrails
import {
createChatGuardrails,
createAgentGuardrails,
createPrivacyGuardrails,
} from "@sentinelseed/voltagent";
const chatGuards = createChatGuardrails(); // Jailbreak prevention
const agentGuards = createAgentGuardrails(); // Tool call protection
const privacyGuards = createPrivacyGuardrails(); // Full PII protection
OWASP Protection
- SQL Injection
- Cross-Site Scripting (XSS)
- Command Injection
- Path Traversal
- Server-Side Request Forgery (SSRF)
- Prompt Injection
- Sensitive Data Exposure
PII Types Detected
- Email addresses
- Phone numbers
- Social Security Numbers
- Credit card numbers
- IP addresses
- API keys / AWS keys
- JWT tokens
- Passport numbers
Configuration Options
interface SentinelGuardrailConfig {
blockUnsafe?: boolean;
enableTHSP?: boolean;
enableOWASP?: boolean;
enablePII?: boolean;
piiTypes?: PIIType[];
redactPII?: boolean;
maxContentLength?: number;
timeout?: number;
}