mandusec/mandu is a TypeScript wrapper that makes coding agents such as Claude Code or Codex see masked placeholders instead of actual secret values. The latest recorded release is v0.2.0-beta.7. The provided facts contain no specifics about what changed in this version, so the changes in this release cannot be confirmed. The tool's purpose is to help with tasks that use secret values while keeping the agent from directly accessing the actual values.
Mandu separates, by rules, the model's read permission from the programs and hosts to which actual values are passed. The README explains that the default setup requires user approval before sending actual values. It works locally without a separate account or server, and uses proxy and file protection features. It applies a sandbox to the agent's execution environment using Linux's Landlock and seccomp. The repository's language is TypeScript and the license is Apache-2.0.
However, the protection scope stated in the README has boundaries. Prompt injection defense and protection of the agent's own login credentials are not included in the scope. Therefore, Mandu's feature of restricting secret value access should not be treated as the same as protection against these two problems. With only the provided information, it is not possible to judge the specific changes in v0.2.0-beta.7 or any other security guarantees.