prompt-shield

Security audit for Claude Code skills, MCP servers, and npm packages. Detects prompt injection, data exfiltration, supply chain attacks, persistence mechanisms, and hidden malicious content. Use when installing a new skill or plugin, adding an MCP server, evaluating npm packages, or when user asks to audit, check security, scan for threats, or check for prompt injection.