Risk Detection
Omnodex includes a declarative rule engine that analyzes traced events and flags behavior that may indicate security risks, policy violations, or unexpected agent actions.
How It Works
Section titled “How It Works”Detection rules are declarative definitions - they describe a pattern to match and what it means when matched. The rule engine evaluates each event against all active rules and produces findings.
Rules operate on single events (point-in-time analysis). Each rule specifies:
- What to match - Which event types and field patterns trigger the rule
- Risk level - How severe the finding is (critical, high, medium, low)
- Description - Human-readable explanation of why this matters
Rule Categories
Section titled “Rule Categories”The community rule set covers these categories:
Sensitive File Access
Section titled “Sensitive File Access”Detects when an agent reads files that typically contain secrets or sensitive system information. Examples: SSH keys, environment files, password databases, credential stores.
Credential Exposure
Section titled “Credential Exposure”Detects API keys, tokens, or passwords appearing in tool parameters where they should not be.
Credential Exfiltration
Section titled “Credential Exfiltration”Detects credentials being sent to unexpected external destinations. This catches scenarios where an agent might inadvertently (or intentionally, if compromised) send secrets to a third party.
Supply Chain
Section titled “Supply Chain”Detects risky package installations, tool shadowing, dependency confusion, hook config manipulation, MCP URL mutations, workspace config access, and IOC domain matching. This is the largest rule category with 9 rules covering the full range of software supply chain attack patterns.
Unexpected Network Activity
Section titled “Unexpected Network Activity”Detects outbound network connections to domains that are not clearly related to the task at hand. Catches supply chain attacks or compromised tools reaching out to command-and-control infrastructure.
Wallet Generation
Section titled “Wallet Generation”Detects cryptocurrency wallet creation activity: CLI tools, wallet APIs, BIP-39 mnemonic generation, private key hex patterns.
Input Validation
Section titled “Input Validation”Detects untrusted input being passed to sensitive operations without proper validation or sanitization.
Cross-Agent Coordination
Section titled “Cross-Agent Coordination”Detects patterns where an agent coordinates with or spawns other agent processes in unexpected ways.
Working Directory Boundary
Section titled “Working Directory Boundary”Detects when an agent accesses files outside its expected working directory.
Persistence
Section titled “Persistence”Detects agents modifying startup files, cron jobs, scheduled tasks, or other persistence mechanisms.
Sandbox Disabling
Section titled “Sandbox Disabling”Detects agents attempting to disable security controls or sandbox restrictions.
Self-Protection
Section titled “Self-Protection”Detects agents modifying their own configuration, hook files, or monitoring setup.
Threat Commands
Section titled “Threat Commands”Detects execution of known malicious command patterns.
Unbounded Consumption
Section titled “Unbounded Consumption”Detects excessive resource usage patterns (runaway loops, disk fills, network floods).
Risk Levels
Section titled “Risk Levels”| Level | When Assigned |
|---|---|
critical | Active security threat - credential exfiltration, data breach indicators |
high | Significant risk requiring immediate review - exposed credentials, sensitive data access |
medium | Unusual behavior worth investigating - unexpected network calls, atypical patterns |
low | Informational - logged for audit trail completeness |
Community vs. Advanced Rules
Section titled “Community vs. Advanced Rules”Community rules (included in the free tier) cover the categories above with general-purpose patterns. They are open source and can be inspected.
Advanced rules (Pro and Enterprise tiers) add machine-learning-based detection, behavioral baselines, and rules that leverage cross-session intelligence. These rules are encrypted and executed server-side.
Next Steps
Section titled “Next Steps”- Running Detection - How to run the analyzer
- Tiers and Plans - What is included at each tier