SAGE

Summary from the TLDR InfoSec newsletter

Sage is a security tool from Gen Digital that intercepts tool calls made by AI coding assistants and blocks dangerous ones before they execute. It features URL reputation checks against a cloud service, 300+ local YAML heuristics for risky commands and credential exposure, and two-tier prompt injection detection combining heuristics with a fine-tuned ML model. Sage is supported in many harnesses like Claude Code, Cursor, VS Code, OpenClaw, and OpenCode, with npm or marketplace installs per platform.