{"repo":"bridge-mind/BridgeWard","free":true,"listed":false,"github":"https://github.com/bridge-mind/BridgeWard","clone":"git clone https://github.com/bridge-mind/BridgeWard.git","description":"Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injection auditor. MIT.","language":"Shell","stars":38,"topics":["agent-safety","ai-agents","ai-security","claude-code","claude-code-skill","llm-security","mcp","mcp-security","plugin","prompt-injection"],"license":"MIT","category":"ai-agents","readme_excerpt":"BridgeWard Trust nothing. Ship safely. A Claude Code plugin from BridgeMind that wards your AI agents against prompt injection. Skeptical-reading discipline for any agent that reads public-facing or untrusted content. --- Why BridgeWard? AI agents that read web pages, emails, GitHub issues, MCP tool outputs, search results, scraped HTML, third-party repos, or any other untrusted input are one prompt-injection bug away from data exfiltration, RCE, or silent backdoor insertion . Real exploits in production, 2024–2026: - EchoLeak (M365 Copilot, CVE-2025-32711) — zero-click email injection, full tenant exfiltration - Slack AI — cross-channel exfiltration from public messages to private channel content - MCP rug pull (Invariant Labs) — tool descriptions silently swap after install - Cursor MCPoison (CVE-2025-54135) — prompt injection escalating to RCE - GitHub Copilot RCE (CVE-2025-53773, CVSS 9.6) — millions of developers exposed - Cross-vendor GitHub issue injection — single payload broke Claude Code + Gemini CLI + Copilot Agent simultaneously - Pillar \"Rules File Backdoor\" — invisible Unicode in .cursorrules plants silent backdoors OpenAI's own December 2025 statement: prompt injection \"is unlikely to ever be fully solved\" for browser agents. You can't eliminate the risk. You can install the discipline. That's BridgeWard. --- What's Inside Component Type What It Does ----------- ------ ------------- bridgeward Skill Core skeptical-reading discipline — auto-loaded when your agen","default_branch":null,"files":null,"tree":[],"storefront":"/r/bridge-mind","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/bridge-mind/BridgeWard/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}