SAFE test package: exfiltration-intent patterns with dummy data; localhost only; optional CLI.

Security PoC - DNS exfiltration (hostname only) - Authorized testing

Detect and strip malicious prompt injection, jailbreaking, and data exfiltration attempts from LLM inputs. Zero dependencies. Works in Node.js and browsers.

Runtime security for AI agent sandboxes. Drop-in protection against prompt injection, secret exfiltration, and sandbox escape — works with [Vercel](https://vercel.com/sandbox), [E2B](https://e2b.dev/), [Daytona](https://www.daytona.io/), [Cloudflare Conta

Open-source agent security framework. Detects and defends against AI Agent Traps - content injection, embedded jailbreaks, RAG poisoning, data exfiltration, and more.

Hackathon demo package — simulates credential exfiltration for Dependency Auditor

Zero-dependency skill sanitizer — scans agent skill markdown for prompt injection, jailbreaks, data exfiltration, and other red flags before installation.

Open detection standard -- like Sigma, but for AI agents. 751 rules for prompt injection, tool poisoning, context exfiltration, and MCP attacks. Shipped in Cisco AI Defense. 97.2% recall on NVIDIA garak.

A local firewall for AI agents: pauses dangerous MCP tool calls (shell, file deletes, secret exfiltration) for your approval before they run — live in the connection, 100% on your machine.

Scan installed npm dependencies for crypto-stealer style behavior (clipboard hijacking, seed-phrase hunting, exfiltration, obfuscated payloads) before you trust them.

Blocks data exfiltration, remote code execution via piped downloads, secrets embedded in commands, and unauthorized network operations before they run.

OpenClaw Skills security scanner plugin - detect malicious code, data exfiltration, and prompt injection

Toolkit for covert data exfiltration using DNS

Dependency-free heuristic scanner that detects prompt-injection, jailbreak, and data-exfiltration patterns in untrusted text before it reaches an LLM.

MCP server that scans other MCP servers for prompt injection, data exfiltration, and privilege escalation. Add to your .mcp.json and let your AI agent audit its own tools.

MCP management platform CLI — discover, install, and monitor MCP servers plus a local proxy that caches idempotent tool calls (real token savings) AND scans every tool response for prompt-injection / exfiltration / leaked secrets, blocking tool-poisoning

LLM security guardrails for Claude Code — jailbreak detection, prompt-injection and web-content scanning, data-exfiltration blocking, and destructive-command authorization. Bundles the AgentGuards MCP server plus enforcing hooks.

Open-source AI prompt injection and data exfiltration detector. Drop-in security for LLM agents.

AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.

Security linter for Claude Code / agent skills. Detects prompt injection, obfuscation, credential exfiltration, and other toxic patterns before you install a skill.