Open-source agent security framework. Detects and defends against AI Agent Traps - content injection, embedded jailbreaks, RAG poisoning, data exfiltration, and more.

OpenClaw Skills security scanner plugin - detect malicious code, data exfiltration, and prompt injection

AWS S3 MCP Server – bucket inventory, public exposure detection, policy/ACL analysis, and object listing for data exfiltration investigations

Authorized security research — UOL BugHunt program (skysz). Reserved internal package placeholder. No data exfiltration, DNS-only callback for impact verification. Will be unpublished after triage.

MCP server that scans other MCP servers for prompt injection, data exfiltration, and privilege escalation. Add to your .mcp.json and let your AI agent audit its own tools.

AI agent security & MCP security middleware — prompt injection detection, AI firewall, runtime guardrails & data-loss prevention for LLM tool calls. 8-layer defense against data exfiltration & dangerous commands. Zero dependencies. SDK + OpenClaw plugin.

Zero-dependency skill sanitizer — scans agent skill markdown for prompt injection, jailbreaks, data exfiltration, and other red flags before installation.

LLM security guardrails for Claude Code — jailbreak detection, prompt-injection and web-content scanning, data-exfiltration blocking, and destructive-command authorization. Bundles the AgentGuards MCP server plus enforcing hooks.

Runtime security guardrails for OpenClaw — secrets detection, prompt injection defense, data exfiltration prevention, security bootstrap injection, and audit logging

Toolkit for covert data exfiltration using DNS

Lightweight runtime security for LLM apps — block prompt injection, jailbreaks, and data exfiltration (PII/PHI/PCI) before they reach your model

Blocks data exfiltration, remote code execution via piped downloads, secrets embedded in commands, and unauthorized network operations before they run.

Open-source AI prompt injection and data exfiltration detector. Drop-in security for LLM agents.

Open-source AI prompt injection and data exfiltration detector. Drop-in security for LLM agents.

Standard operating procedures for common security incidents: phishing, malware, unauthorized access, data exfiltration, brute force, insider threat. Step-by-step response procedures.

Authorized pentest canary. Prints identity to the build log on install. Benign: no network, no data exfiltration.

Transparent MCP proxy that watermarks agent tool responses and blocks data exfiltration caused by prompt injection.

Runtime risk scoring for AI agent tool calls. Detect privilege escalation, baseline deviations, and data exfiltration inline — under 1ms, zero dependencies, no LLM.

Security audit plugin for Claude Code — scans skills, hooks, and MCP configs for prompt injection, data exfiltration, supply chain attacks, and 37 threat patterns. v3.1.1 bundles Agent Threat Rules (ATR) v2.1.2 as a reference resource.

MCP Server security scanner and audit tool — scan tool definitions for prompt injection, permission escalation, and data exfiltration risks