Zero-dependency skill sanitizer — scans agent skill markdown for prompt injection, jailbreaks, data exfiltration, and other red flags before installation.

A fast, native Bun-powered HTML sanitizer with DOMPurify-like features. Protection against XSS and malicious content.

A simple utility to sanitize a string according to ArcGIS supported HTML specification.

Express middleware for the sanitizer module.

Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) attack.

A JavaScript/TypeScript utility to sanitize filenames for S3 and general use

PromptShield sanitizer that applies safe, deterministic fixes to text based on detected prompt-injection threats such as invisible characters, markdown smuggling, and BOM artifacts.

Defend an agent against hidden-content injection: strip payload-capable invisible Unicode and ANSI, splice out human-invisible HTML, and flag data-exfil URLs in untrusted text before any model sees it.

Caja's HTML Sanitizer as a Node.js module

Plugin for Logrocket to mask request/response bodies by designated field names

Decorator based class property sanitation in Typescript.

sanitizer for markdown-it.

Sanitize out invalid xml characters from your strings

An intuitive & tiny string sanitizer to remove any special characters or convert strings to create filename or url 🎉🎉

A CSS sanitizer to prevent XSS attacks

a complete package to control user input data to prevent Cross Site Scripting (XSS) ,Sql injection and no Sql injection attack

The open agent skills ecosystem

An express middleware inspired from express-sanitizer but additionally sanitizes URL params. It also gives an option to provide a preprocessor function to decide whether a (key, value) pair should be sanitized or not.

Tlon/Urbit skill for OpenClaw agents

Bundled dsh badge skill provider for DeepSeek Harness