Security Shield

•

Protects Claude Code sessions from prompt injection, malicious files, supply chain attacks, and data exfiltration with 7 integrated security tools.

Claude Code's extensive capabilities, including web browsing, file access, package installation, and code generation, also expose a significant attack surface. Security Shield addresses this by providing a lightweight yet robust security layer, acting as a crucial safeguard within Claude Code sessions. It integrates seven specialized MCP tools designed to preemptively detect and mitigate various threats, from sophisticated prompt injection attempts and server-side request forgery (SSRF) to malicious file uploads, supply chain vulnerabilities in packages, secret leaks, and data exfiltration attempts. By allowing Claude to verify inputs and actions before execution, this tool empowers secure and confident use of the AI's powerful features.

主要功能

010 GitHub stars
02Detects and sanitizes prompt injection patterns in web pages, user input, and API responses.
03Validates URLs to prevent SSRF, private IP access, and suspicious domain resolutions.
04Scans files for MIME/extension mismatches, double extensions, and suspicious code patterns.
05Audits pip/npm packages for typosquatting and known malicious packages.
06Scans files and directories for leaked secrets like API keys, private certificates, and hardcoded passwords.

使用案例

01Securely processing any external content (web pages, user input, API responses) within Claude Code sessions.
02Validating URLs before fetching to prevent access to private networks or malicious domains.
03Auditing installed pip/npm packages for typosquatting and known supply chain vulnerabilities.