VS Code Extension

# Strict Security Policy - Agent OS
# Block dangerous operations, enforce rate limits

policy:
  name: "Strict Security Policy"
  version: "1.0"
  rules:
    - name: "Block file writes outside /tmp"
      condition: "agent.action == 'file.write'"
      constraint: "not path.startsWith('/tmp/')"
      action: "deny"
      message: "File writes restricted to /tmp/"
    
    - name: "Block external API calls"
      condition: "agent.action == 'http.request'"
      constraint: "not url.host.endsWith('.internal.com')"
      action: "deny"
      message: "External API calls not allowed"
    
    - name: "Rate limit LLM calls"
      condition: "agent.action == 'llm.call'"
      constraint: "rate > 100 per minute"
      action: "throttle"
      message: "LLM calls rate limited to 100/min"

# Generated from Workflow Designer
# Data Processing Pipeline with Safety Guarantees

from agent_os import KernelSpace, Policy
from agent_os.tools import create_safe_toolkit

kernel = KernelSpace(policy="strict")
toolkit = create_safe_toolkit("standard")

async def read_input(context):
    """Read input data from source"""
    # Policy: rate_limit
    return await toolkit.file.read(context["input_path"])

async def process_with_llm(context):
    """Process data with LLM"""
    # Policy: strict
    return await toolkit.llm.call(
        model="gpt-4",
        prompt=context["data"]
    )

async def write_output(context):
    """Write processed data"""
    # Policy: strict
    return await toolkit.file.write(
        "/tmp/output.json",
        context["result"]
    )

@kernel.register
async def run_workflow(task: str):
    context = {"task": task, "input_path": "/data/input.csv"}
    context["data"] = await read_input(context)
    context["result"] = await process_with_llm(context)
    await write_output(context)
    return {"status": "success"}

# Security Diagnostics detects issues as you type

import os
import subprocess

user_input = input("Enter command: ")

# ⚠️ Warning: os.system() can execute arbitrary commands
os.system(user_input)  # 🔴 Flagged

# ⚠️ Warning: eval() is dangerous with untrusted input
result = eval(user_input)  # 🔴 Flagged

# ⚠️ Warning: subprocess with shell=True is vulnerable
subprocess.call(cmd, shell=True)  # 🔴 Flagged

# ✅ Safe alternative suggested:
subprocess.run(["ls", "-la"], check=True)  # ✅ OK

# ⚠️ Warning: Hardcoded credential detected
api_key = "sk-abc123..."  # 🔴 Flagged

# ✅ Safe alternative:
api_key = os.environ.get("API_KEY")  # ✅ OK

# Type 'aos-' and press Tab to expand snippets

# aos-agent → Creates a complete agent template
from agent_os import KernelSpace, Policy
from agent_os.tools import create_safe_toolkit

kernel = KernelSpace(policy="strict")
toolkit = create_safe_toolkit("standard")

@kernel.agent
async def my_agent(task: str):
    """Agent with full safety guarantees"""
    result = await kernel.execute(task, toolkit=toolkit)
    return result

# aos-policy → Creates policy YAML template
# aos-kernel → Creates kernel initialization
# aos-workflow → Creates workflow function
# aos-cmvk → Creates CMVK integration
# aos-langchain → Creates LangChain integration
# aos-github-action → Creates CI/CD workflow

# 14 snippets available for Python, TypeScript, YAML