#prompt-injection

Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw, LangChain, and all major LLM APIs.

Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.

Zero-trust governance layer for Claude Code. Policy-enforced MCP gateway with autonomy controls, middleware chain, audit log, HALT kill-switch, and prompt-injection defense.

A Laravel security boundary for AI-triggered application actions. It bounds what an agent may do — authority, duplication, rate, approval — not what it was trying to do.

Open source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,583 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists before tools run.

MCP-Bastion: The Zero-Infrastructure Runtime Middleware ,Enterprise-Grade Security Middleware for the Model Context Protocol (MCP)

EgisAI SDK

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.

El repositorio no publica descripción.

Static security scanner for AI agents, MCP tools, and LLM applications. Detects OWASP LLM Top 10 risks, unsafe tool use, prompt injection paths, secrets, and AI infrastructure misconfigurations. Zero runtime dependencies.

Audit your AI agent configs before you run them — prompt injection, rogue MCP servers, credential-exfil. Plus dependency vetting.

Constraint-driven runtime for TypeScript. Declare requirements, let the runtime resolve them.

Local-first trust layer for AI coding agents: structural prompt-injection and action guards, secret scanning, semantic memory, code review, and 17 MCP tools. No model API required.

TypeScript SDK for Silmaril Firewall

Open-source agent security framework. Detects and defends against AI Agent Traps — content injection, embedded jailbreaks, RAG poisoning, data exfiltration, and more. Based on the DeepMind Agent Traps taxonomy.

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.