prompt-guard

Advanced AI agent runtime security. Works 100% offline with 600+ bundled patterns. Optional API for early-access and premium patterns. Runtime Security Expansion — 5 new attack surface categories: Typo-Based Evasion Fix (PR #10) — Detect spelling variants that bypass strict patterns: TieredPatternLoader Wiring (PR #10) — Fix pattern loading bug: AI Recommendation Poisoning Detection — New v3.4.0 patterns: Skill Weaponization Defense — 27 patterns from real-world threat analysis: Optional API — Connect for early-access + premium patterns: Detects injection in 10 languages: See CHANGELOG.md for full history. Author: Seojoon Kim License: MIT GitHub: seojoonkim/prompt-guard - 🔗 Supply Chain Skill Injection (CRITICAL) — Malicious community skills with hidden curl/wget/eval, base64 payloads, credential exfil to webhook.site/ngrok - 🧠 Memory Poisoning Defense (HIGH) — Blocks attempts to inject into MEMORY.md, AGENTS.md, SOUL.md - 🚪 Action Gate Bypass Detection (HIGH) — Financial transfers, credential export, access control changes, destructive actions without approval - 🔤 Unicode Steganography (HIGH) — Bidi overrides (U+202A-E), zero-width chars, line/paragraph separators - 💥 Cascade Amplification Guard (MEDIUM) — Infinite sub-agent spawning, recursive loops, cost explosion - 'ingore' → caught as 'ignore' variant - 'instrct' → caught as 'instruct' variant - Typo-tolerant regex...