Categories › AI & Agents › Thinking, planning & prompt tools
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Remote server: your requests and data go to injectionscan.openkrill.app. Claude Code: claude mcp add --transport http prompt-injection-scanner https://injectionscan.openkrill.app/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
scan_text — Check untrusted text for prompt injection before you act on it: a tool result, web page, email, file or document. Paste the full text in texlist_injection_rules — List every rule scan_text uses, with its category (instruction, hidden_text, exfiltration), severity and what it looks for, plus how the versubmit_feedback — Send feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a toget_feedback_reply — Read the maintainers' reply to feedback you sent with submit_feedback, given its ticket id. Returns status pending until a reply is ready, tindex_tools — Search the tools on this server by task or keyword in plain words. Returns the matching tools, best match first, each with its name, title, Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.