Data / Repositories / Prompt injection
Prompt injection repositories on GitHub: 15 ranked by stars
15 public repositories tagged Prompt injection are on GitHub, with 38,217 stars between them; 11 had a push in the last 30 days. Most are written in Python (10), TypeScript (2), Astro (1). The most starred: NVIDIA/SkillSpector (20,177), Tencent/AI-Infra-Guard (6,868), superagent-ai/superagent (6,763).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| NVIDIA/SkillSpector | Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code… | Python | 20,177 | 1,776 | Apache-2.0 | Oct 14 | Oct 14 |
| Tencent/AI-Infra-Guard | A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation. | Python | 6,868 | 661 | Apache-2.0 | Oct 14 | Oct 14 |
| superagent-ai/superagent | Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers. | TypeScript | 6,763 | 962 | MIT | Aug 25 | Oct 14 |
| uber/ADR | ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber. | Python | 2,040 | 219 | Apache-2.0 | Oct 13 | Oct 14 |
| hashgraph-online/hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | Python | 892 | 158 | Apache-2.0 | Oct 14 | Oct 14 |
| qybaihe/mu | mu (μ): a coding agent that thinks before it acts. A small, fast judge makes the routine calls, the big model does the work. Built on pi and AionUi. | TypeScript | 511 | 53 | MIT | Oct 10 | Oct 15 |
| RiccardoBiosas/awesome-MLSecOps | A curated list of MLSecOps tools and resources for securing machine learning and AI systems - adversarial ML defense, LLM security, AI red teaming, model scanning, supply-chain… | Astro | 477 | 121 | MIT | Oct 12 | Oct 14 |
| graygnatconsole/mcp-audit-tool | Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure… | Python | 306 | 5 | MIT | Sep 26 | Oct 15 |
| makalin/SecureMCP | SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)]( It proactively identifies… | Go | 140 | 19 | MIT | Jun 7, 2025 | Oct 14 |
| poojakira/mcp-agent-security-gateway | Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audit telemetry. | Python | 17 | 5 | Oct 14 | Oct 14 | |
| olanokhin/openresearch-mcp | Zero-auth, security-hardened cross-domain research MCP server: web, academic, GitHub, news, weather, macro/finance, SEC, biomedical, Bluesky, YouTube. SSRF and prompt-injection… | Python | 11 | 1 | Apache-2.0 | Jul 8 | Oct 14 |
| zrk222/code-factory | Evidence-first audits for AI-generated code: prove tests can fail, catch security and release gaps, and ship reviewable receipts across VS Code, JetBrains, CI, MCP, and App Store… | Python | 6 | 0 | Oct 14 | Oct 14 | |
| eltociear/skill-audit-mcp | Static security scanner for MCP servers, agent skills & plugins: 17 attack patterns / 60 regex signatures, calibrated to a 1% false-positive rate over 196 public MCP servers. In… | Python | 5 | 1 | MIT | Sep 30 | Oct 14 |
| architsharm/agentfox | AgentFox: open-source control plane for AI agents. Guardrails on model traffic, tool calls bounded by capability grants, and a tamper-evident audit trail mapped to compliance… | Python | 3 | 2 | Apache-2.0 | Oct 14 | Oct 14 |
| muhammadwaqar12/mcp-server-audit | Security audit checklist for third-party MCP servers before you install them | 1 | 0 | MIT | Sep 6 | Oct 14 |
By language
- Python 10
Related topics
- MCP 10
- AI security 9
- AI agents 7
- Agent security 6
- LLM security 6
- Security 6
- Supply chain security 5
- Model Context Protocol 5
- Agentic AI 4
- Claude Code 4
- Security scanner 4
- LLM 4
Read from GitHub by SpecStream between October 14, 2026 and October 15, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.