Omnigraph
그래프 엔진으로 컨텍스트를 조립하고, 객체 저장소 기반에서 에이전트가 코드처럼 그래프 데이터를 분기·타입·검토·병합·감사·거버넌스합니다
저장소 정보는 아직 수집하지 않았습니다.
아직 감지된 업데이트가 없습니다. GitHub 릴리스가 나오면 여기에 보입니다.
Endpoint binary to capture agentic activities from GenAI applications and sends to various sinks
저장소 README에서 가져옴
README 전체를 불러오는 중입니다.
README 전문 보기 ↗Endpoint Collector for Agent Behavior Analytics (ABA) — unified event capture from AI agents running on enterprise endpoints.
Claude Code ──────┐
Codex CLI ────────┤
Gemini CLI ───────├─→ agent-sensor ─→ Exabeam SecOps platform
Antigravity ──────┤
OpenClaw gateway ─┘ (WebSocket)
Captures session lifecycle, user prompts, tool invocations, token usage, and agent costs — all normalized to Exabeam CIM for SIEM threat detection and investigation.
Binaries are published as GitHub Releases — no build toolchain required to install.
--auto-config detects a local OpenClaw install and streams live agent activity from its gateway over WebSocket. The gateway token stays in OpenClaw's own config. See Installation → OpenClaw.~/.gemini.--capture-content forwards the text. Secrets and personal data are always removed, and detection always sees the full text.decrypt-events — read back event logs written with local encryption, which now covers the dead-letter queue too..exe is Authenticode-signed by Exabeam.See the Changelog for details and known issues.
| Area | What agent-sensor does |
|---|---|
| Sources | Claude Code, Codex CLI, and Gemini CLI through hooks on a local hook server (port 4982); Claude Code transcripts; Antigravity transcripts; the OpenClaw gateway over WebSocket. Sources are detected automatically — agent-sensor detect-sources lists them. |
| Detection | Prompt-injection scanning on every prompt (has_injection, injection_patterns, triggered_rules, max_severity), applied before redaction. |
| Privacy | Prompt and response text replaced with [REDACTED:*] by default. Built-in patterns strip AWS keys, bearer tokens, JWTs, API keys, passwords, emails, and IPs even when content capture is on. |
| Sinks | Local JSONL (default, rotating), SQLite, webhook (e.g. an Exabeam cloud collector), and Chroma. Every event goes to every configured sink. |
| Reliability | Webhook retries with backoff; undeliverable events go to a dead-letter queue (dlq.jsonl) for replay-dlq. |
| Encryption at rest | --enable-local-encryption encrypts the JSONL log and the dead-letter queue (SQLite is not encrypted). |
| Schema | Events follow the open Observra schema (observra:1.1). |
| Platform | Architecture |
|---|---|
| macOS 11+ | x86_64 (Intel) |
| macOS 11+ | aarch64 (Apple Silicon) |
| Windows 10 (1803+) / 11 | x86_64 |
brew tap ExabeamLabs/agent-sensor https://github.com/ExabeamLabs/agent-sensor-dist
brew trust exabeamlabs/agent-sensor # Homebrew 7+ won't load third-party formulae until trusted
brew install agent-sensor
Upgrading later: brew upgrade agent-sensor. The Homebrew formula currently installs 1.0.4; use the manual install below for 1.0.5.
VERSION=1.0.5
sudo curl -fsSL https://github.com/ExabeamLabs/agent-sensor-dist/releases/download/v${VERSION}/agent-sensor-v${VERSION}-aarch64-apple-darwin \
-o /usr/local/bin/agent-sensor
sudo chmod +x /usr/local/bin/agent-sensor
VERSION=1.0.5
sudo curl -fsSL https://github.com/ExabeamLabs/agent-sensor-dist/releases/download/v${VERSION}/agent-sensor-v${VERSION}-x86_64-apple-darwin \
-o /usr/local/bin/agent-sensor
sudo chmod +x /usr/local/bin/agent-sensor
Download agent-sensor-v{VERSION}-x86_64-pc-windows-gnu.exe from the Releases page, rename it to agent-sensor.exe, and add it to your PATH. Confirm the Exabeam signature:
Get-AuthenticodeSignature .\agent-sensor.exe | Format-List Status, SignerCertificate # Status: Valid
Note: 1.0.5 binaries report
1.0.4fromagent-sensor --version. This is a known issue; the binary is 1.0.5 if its SHA-256 matches the release asset.
cd ~ # --auto-config also writes project-level hooks in the current directory
agent-sensor --auto-config --dry-run # preview every change
agent-sensor --auto-config # install hooks, connect OpenClaw if found, write ~/.agent-sensor/config.toml
agent-sensor install-service # run in the background (launchd on macOS, scheduled task on Windows)
Add --capture-content to --auto-config to forward prompt and response text instead of redacting it. To send events to Exabeam, add a webhook sink — see Installation → Configure Sinks.