Documentation
README
Prompt Injection Defender Skill
Overview
Defense against indirect prompt injection attacks for Claude Code. This skill provides PostToolUse hooks that scan tool outputs (files, web pages, command results) for injection attempts and warn Claude about suspicious content.
Features
- Real-time scanning of tool outputs (Read, WebFetch, Bash, Grep, Task, MCP tools)
- 4 detection categories: Instruction Override, Role-Playing/DAN, Encoding/Obfuscation, Context Manipulation
- 50+ patterns covering known injection techniques
- Warn + Continue approach (doesn't block, just warns Claude)
- Dual implementation: Python/UV and TypeScript/Bun
Skill Structure
This is the opening of the README. Read the full README on GitHub.