Cisco open-sources Project Quarry, a tool that looks for dangerous chains of actions by SI agents
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
Agents are starting to be monitored the way network traffic is: with shared rules and a shared open tool.
According to Security Boulevard, Project Quarry analyzes an agent's entire history of actions rather than individual commands: rules, machine-learning classifiers and a language model look for suspicious sequences — for example, retrieving credentials followed by sending them to an outside server, or encoded commands. The tool is published on GitHub with sample rules and plugins; it supports MCP, works with Claude Code, Codex and other compatible agents, and handles multimodal inputs. It can be connected to security platforms for alerts, command blocking and quarantining actions.
Sources 1