@@ -10,7 +10,9 @@ Security is our top priority. We take all security vulnerabilities seriously.
1010
1111Instead, please report them via email to:
1212
13- ** agentguard@proton.me **
13+ ** Please use GitHub Security Advisories to report vulnerabilities:**
14+
15+ https://github.com/agentguard-ai/tealtiger-python/security/advisories/new
1416
1517### What to Include
1618
@@ -84,17 +86,15 @@ We provide security updates for the following versions:
8486``` python
8587# ✅ Good - Use environment variables
8688import os
87- from agentguard import AgentGuard
89+ from tealtiger import TealOpenAI
8890
89- guard = AgentGuard(
90- api_key = os.getenv(" AGENTGUARD_API_KEY" ),
91- ssa_url = os.getenv(" AGENTGUARD_SSA_URL" )
91+ client = TealOpenAI(
92+ api_key = os.getenv(" OPENAI_API_KEY" )
9293)
9394
9495# ❌ Bad - Hardcoded API key
95- guard = AgentGuard(
96- api_key = " ag_1234567890abcdef" ,
97- ssa_url = " http://localhost:3000"
96+ client = TealOpenAI(
97+ api_key = " sk-1234567890abcdef"
9898)
9999```
100100
@@ -108,17 +108,15 @@ guard = AgentGuard(
108108- Use certificate pinning for high-security environments
109109
110110``` python
111- # ✅ Good - HTTPS URL
112- guard = AgentGuard(
113- api_key = api_key,
114- ssa_url = " https://ssa.agentguard.io"
115- )
111+ # ✅ Good - HTTPS (OpenAI/Anthropic APIs use HTTPS by default)
112+ from tealtiger import TealOpenAI
116113
117- # ❌ Bad - HTTP URL
118- guard = AgentGuard(
119- api_key = api_key,
120- ssa_url = " http://ssa.agentguard.io"
114+ client = TealOpenAI(
115+ api_key = api_key
121116)
117+
118+ # Note: TealTiger uses OpenAI/Anthropic APIs directly
119+ # All connections are HTTPS by default
122120```
123121
124122### Input Validation
@@ -132,16 +130,16 @@ guard = AgentGuard(
132130
133131``` python
134132# ✅ Good - Validated input
135- from agentguard import AgentGuard
133+ from tealtiger import TealOpenAI
136134
137- def sanitize_query ( query : str ) -> str :
138- # Remove dangerous characters
139- return query.replace( " ; " , " " ).replace( " -- " , " " )
135+ def sanitize_input ( text : str ) -> str :
136+ # Remove potentially dangerous content
137+ return text.strip()[: 1000 ] # Limit length
140138
141- result = guard.execute_tool_sync (
142- " database-query " ,
143- { " query " : sanitize_query (user_input)},
144- { " session_id " : session_id}
139+ response = await client.chat.completions.create (
140+ model = " gpt-4 " ,
141+ messages = [{ " role " : " user " , " content " : sanitize_input (user_input)}] ,
142+ max_tokens = min (user_max_tokens, 4000 )
145143)
146144```
147145
@@ -202,9 +200,8 @@ result = guard.execute_tool_sync(
202200
203201## 📞 Contact
204202
205- - ** Security Issues** : agentguard@proton.me
206- - ** General Questions** : agentguard@proton.me
207- - ** GitHub** : [ agentguard-ai/agentguard-python] ( https://github.com/agentguard-ai/agentguard-python )
203+ - ** Security Issues** : Use [ GitHub Security Advisories] ( https://github.com/agentguard-ai/tealtiger-python/security/advisories/new )
204+ - ** GitHub** : [ agentguard-ai/tealtiger-python] ( https://github.com/agentguard-ai/tealtiger-python )
208205
209206## 📄 Disclosure Policy
210207
@@ -235,4 +232,4 @@ We credit security researchers in:
235232
236233---
237234
238- ** Thank you for helping keep AgentGuard Python SDK secure!** 🔒
235+ ** Thank you for helping keep TealTiger Python SDK secure!** 🔒
0 commit comments