Indirect Prompt Injection Python Packages

aicordon

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

aicordon-haystack

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

aicordon-langchain

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

llm-security-gates

Python security gates for LLM systems: prompt-injection filtering, model artifact scanning, and garak-based red-team scoring.

renfield-mcp

Penetration testing for AI agents — find, prove, and measure cross-server confused-deputy / prompt-injection exfiltration chains in an MCP tool mesh. Local-first, bring-your-own-model.

janus-guard

System-level security for LLM agents: fine-grained policy enforcement on tool calls to defend against indirect prompt injection

tessera-rs

Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.

yara-gen

Generate YARA rules automatically from positive and negative examples. For PII detection, secret scanning, and prompt injection.

agentprobe-injection

Defense evaluation harness for LLM agents — measure resistance to indirect prompt injection and compare defense effectiveness (delimiter, sandwich, screening, etc.)

yaramint

Generate YARA rules automatically from positive and negative examples. For PII detection, secret scanning, and prompt injection.