Prompt Injection Shield
Every channel your agent reads is an attack surface. Close them.
What It Is
Your AI agent reads emails, replies to tweets, processes web forms, and talks to other agents. Every one of those channels is an attack surface.
Prompt injection is no longer theoretical. Attackers embed hidden instructions in normal-looking text, and your agent follows them. Social engineering through legitimate channels can talk an agent into handing over credentials with no embedded code at all.
This is the same protection system running in production at Claw Prime AI. It covers email intake, Twitter and social mentions, web forms, content queues, MCP integrations, and inter-agent messages.
Three response protocols. CRITICAL patterns get blocked and logged. SUSPICIOUS patterns get sanitized — zero-width characters stripped, unicode normalized — and flagged. Clean input passes through inside a trust wrapper.
Defense in depth. Email gets three independent layers: webhook intake sanitization, cron agent pattern matching, and framework-level unicode scanning. Each catches what the others miss.
Regex-based and framework-agnostic. Built for Hermes, drops into any pipeline.
Features
What's Included
- ✓SKILL.md — the full detection and response protocol
- ✓30+ regex detection patterns across 8 attack categories
- ✓Sanitization routines (zero-width strip, unicode normalization)
- ✓Integration checklist with exact wiring points
- ✓INSTALL.md
Ready to deploy?
Get Prompt Injection Shield and start building today.