Yes. OpenShell and Trustabl address different layers. OpenShell helps isolate the runtime; Trustabl’s analyzer checks agent code and configuration for reliability and safety issues before deployment. Automated OpenShell policy generation is planned for Trustabl Console, not part of the open-source scanner today.
Yes. Trustabl is essentially a specialized linter for AI agents. While traditional linters (like ESLint or Ruff) focus on code style, syntax, and general bugs, Trustabl analyzes your AI agents, tools, prompts, and SDK configurations for reliability, safety, and production readiness — flagging patterns that expose you to prompt injection, missing timeouts, tool misconfigurations, and guardrail gaps that standard linters miss. Think of it as "ESLint for AI agents" — it runs in CI/CD, gives clear explanations and fix suggestions, and helps you ship safer, more robust agentic systems.
Trustabl’s open-source Agent Reliability Analyzer scans AI agent repositories for reliability, safety, configuration, and tool-calling issues before production. Scanning runs locally with no account, code upload, network connection, or LLM. To generate code fixes, run trustabl enrich --input scan.json --repo . --diff --apply with your own Anthropic, OpenAI, or Google key; Trustabl shows the patch before applying the approved changes.
They focus on securing the agent runtime and detecting threats. Trustabl focuses on hardening the tools agents use so they are production-safe, policy-compliant, and resilient by design. We prevent problems at the source rather than only detecting them at runtime.
