Prompt Injection Scanner
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Servidor MCP · de openkrill.app
Resumo
Prompt Injection Scanner é um servidor MCP publicado por openkrill.app. Marketplaces que lemos e que o listam: 1 (Official MCP Registry). Vimos pela primeira vez em 2026-10-16 e não registramos mudanças desde então. Conforme nossa passagem pelos marketplaces em 2026-10-20.
O que pede
- Roda remotamente
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Um link de um clique abre o cliente, que pede confirmação antes de adicionar o servidor.
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como servidor MCP remoto
Gerado a partir do que Official MCP Registry declara.
claude mcp add --transport http injection-scan https://injectionscan.openkrill.app/mcp[mcp_servers.injection-scan]
url = "https://injectionscan.openkrill.app/mcp"{
"mcpServers": {
"injection-scan": {
"url": "https://injectionscan.openkrill.app/mcp"
}
}
}Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir o registro) | Listado | 1.0.0 | Forks (GitHub): 0 Estrelas (GitHub): 0 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que mudou
- Passou a ser um produto que acompanhamos
- Official MCP Registry: apareceu
Possivelmente o mesmo plugin
Listagens que compartilham um sinal com esta, mas não o bastante para tratá-las como o mesmo produto.
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
AgentDiet A2A Indirect Prompt-Injection & Jailbreak Firewall
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.
-
Prompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM.
-
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
-
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
-
AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
-
agentglass net.agentglass/agentglass
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
-
AI safety scanning, PII detection, prompt injection defense, and adaptive threat learning
-
cloakcheck app.vercel.cloakcheck-wheat/cloakcheck
Scan a page for hidden prompt-injection payloads targeting AI agents.
-
Tripwire Guard — evidence-first injection scanner
Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.
-
Prompt-injection detector for untrusted text before it reaches an LLM (RU/EN). BYO lovec.tech key.
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
LLM security for AI coding agents. Protect applications from prompt injection, PII leakage, and data exfiltration. Provides MCP tools for scanning text, redacting PII, and…
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prompt injection, data exfiltration, supply…
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
-
VerifiedX helps Claude install and verify action protection in existing AI systems with minimal code changes. It inspects a repo, detects the smallest real integration seam such…
-
Use Claude Code without fear of data leakage. Unbound enforces command policies, DLP and jailbreak guardrails, and streams session analytics to your security dashboard — all with…
Listado em Claude Code: claude-plugins-official (5)
-
Easily create custom hooks to prevent unwanted behaviors by analyzing conversation patterns or from explicit instructions. Define rules via simple markdown files.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
Listado em Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
The complete web toolkit for your agent. Search the web and get answers in milliseconds. Fetch any URL and get clean markdown content back. Send a browser agent to navigate sites…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Build with OpenAI APIs, Agents SDK, and ChatGPT Apps, and create and save OpenAI API keys from Codex.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
Listado em Community GitHub marketplaces (5)
-
AI safety scanning, PII detection, prompt injection defense, and adaptive threat learning
-
AI-powered tool use validation using LLM backends (Vertex AI, etc.) to evaluate command safety and correctness
-
AI threat modeling, prompt injection testing, and LLM security hardening.
-
AI Guard and AI-EDR security controls for coding agents, powered by Trajectory
-
Agent Detection & Response (ADR) for Claude Code — guards commands, files, and web requests
Listado em Copilot CLI: github/awesome-copilot (5)
-
Three-layer verification pipeline for AI output. Extracts claims, finds sources, and flags hallucination risks so humans can verify before acting.
-
Safe BLE diagnostics, evidence workflows, and guarded automation for AI agents.
-
Visualizes live session AI-credit usage as a Pac-Man board with pellets, ghosts, fruit milestones, and game-over limits.
-
Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with…
-
A runtime-portable 5-agent quality gate that adjudicates text artifacts before they ship. Five role-conditioned LLM deliberators run a 2-round async protocol with cross-read…
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
workiq
Query Microsoft 365 data with natural language — emails, meetings, documents, Teams messages, and more.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
workiq-productivity
WorkIQ productivity skills powered by the local WorkIQ CLI — read-only insights across email, meetings, calendar, Teams, SharePoint, projects, and people.
Listado em Cursor: cursor/plugins (5)
-
Iterative self-referential AI loops using the Ralph Wiggum technique.
-
Browse and automate the web with TinyFish: run multi-step web automations, search the web, extract clean page content, and drive remote stealth browser sessions.
-
playwright-mcp io.github.microsoft/playwright-mcp
Playwright Tools for MCP
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team…
Listado em Docker MCP Catalog (5)
-
Production-ready RAG service to search and retrieve data from your documents.
-
Real-time web search, reasoning, and research through Perplexity's API
-
Read and score Opik traces, experiments, datasets and prompts from your AI assistant.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
The Official Model Context Protocol (MCP) server for Kagi Search & other tools.
Listado em Official MCP Registry (5)
-
AgentDiet A2A Indirect Prompt-Injection & Jailbreak Firewall
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.
-
Prompt injection detection API for AI agents. Scan untrusted text before passing it to an LLM.
-
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
-
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
-
AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
Listado em npm registry (MCP servers) (5)
-
mcp com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
-
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
-
Local persistent memory and Markdown wiki for AI coding agents: 24 MCP tools, no gateway required.
-
One workspace for every AI coding assistant. Shared tasks, memory, and governance.
-
Human-in-the-loop for AI agents over MCP elicitation: confirm/form dialogs plus a capability doctor
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Official MCP Registry. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.