Connect

isMalicious

hexablobbyhexablob
•
1
•
Developer Tools
Analytics & Monitoring
Security & Testing

Evaluate IP and domain reputation, detect prompt injection in untrusted inputs, look up CVE vulnerability intelligence, and assess security threats in real time.

isMalicious equips AI agents with comprehensive threat intelligence and security scanning capabilities. Operating both locally and via streamable HTTP, it allows agents to inspect indicators of compromise—such as IPs, domains, URLs, file hashes, and emails—while actively scanning untrusted inputs for prompt injection before taking action. In addition to indicator reputation checks, it provides rich CVE lookups with EPSS and CISA KEV data, email phishing detection, privacy-preserving password exposure checks, and ongoing vulnerability monitoring for websites and dependency lockfiles.

Key Features

01Scan untrusted text blocks for prompt-injection attacks and malicious links before an AI agent processes them.
02Analyze raw or parsed email messages for phishing patterns, structural attachment anomalies, and malicious links.
030 GitHub stars
04Inspect reputation and risk scores for IPs, domains, URLs, file hashes, emails, and phone numbers in single or batch queries.
05Access detailed CVE intelligence including CVSS, EPSS, CISA KEV exploitation status, and affected package fixes.
06Track security posture by continuously monitoring live web endpoints and software dependency lockfiles against known vulnerabilities.

Use Cases

01Safeguarding autonomous agents by screening external user prompts and untrusted URLs for injection attacks before execution.
02Automating security operations and incident triage by querying real-time threat verdicts for suspicious indicators of compromise.
03Auditing repository dependencies and deployed web domains continuously to alert on newly disclosed CVEs and active exploits.