bridgeward
By bridge-mind
Defend AI coding agents against prompt injections from untrusted sources like web pages, GitHub issues/PRs, emails, Slack, RAG retrievals, and repo files. Audit files, directories, URLs, or content to detect attacks, report severity levels, techniques used, and remediations, enabling safe review and processing of risky inputs before execution.
npx claudepluginhub bridge-mind/bridgewardComponent Overview
Component Details
Skills (2)
Skeptical-reading and prompt-injection defense for AI agents. Activate whenever the agent reads externally-sourced or potentially-untrusted content — web pages, fetched URLs, search results, GitHub issues / PRs / comments / diffs, emails, Slack/Discord messages, RSS feeds, scraped HTML, MCP tool descriptions, MCP tool outputs, RAG retrievals, third-party repo files (READMEs, .cursorrules, AGENTS.md, CLAUDE.md, package.json scripts), public API responses, browser-rendered DOM, OCR'd images, or any content where the author may be adversarial. Teaches the agent to treat external content as DATA, not COMMANDS; to detect injection patterns; to refuse to silently exfiltrate; and to surface suspicious instructions to the user before acting. Critical for browsing agents, email agents, code agents that auto-triage issues/PRs, MCP-using agents, RAG systems, and any Hermes-/OpenCall-style autonomous agent operating on public-facing data.
Audit a file, directory, web page, or piece of content for prompt-injection attempts. Use when reviewing untrusted content (scraped pages, downloaded files, third-party repos, MCP server tool descriptions, email archives, search-result corpora, RAG documents, code-review diffs) for hidden or visible attempts to manipulate AI agents. Outputs a structured report with severity, technique classification, and remediation suggestions.
README
Similar Plugins
ai-ide-vuln-skills
Security testing skills for AI-assisted IDEs and coding agents. 25 vulnerability patterns across code execution, prompt injection, data exfiltration, and trust persistence.
security-awareness
Teaches agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and social engineering defense. Use when building or operating agents that access email, credential vaults, web browsers, or sensitive data.
sage
Safety for Agents - Agent Detection & Response (ADR) for Claude Code
security-guidance
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns
agentguard
GoPlus AgentGuard — AI agent security guard. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.
More by bridge-mind
Help us improve
Share bugs, ideas, or general feedback.