mornslight

GitHub profile1 plugin in the catalog

Plugins by mornslight

1 plugins by mornslight in the catalog, most-starred first.

mornslightsnarePrompt injection tripwire with attack-chain forensics. Plants decoy credentials (PROD_AWS_ACCESS_KEY_ID, PROD_AWS_SECRET_ACCESS_KEY, PROD_DATABASE_URL) in the environment of every command the agent runs, never in the prompt. A tool call that tries to send one out (plain, URL-encoded, base64, hex, reversed, partial or nested) is blocked, and so is a command that reads a decoy variable or dumps the environment while using the network, including inside a local script the command runs. The alert names the page or file the injected instruction came from, quotes it, shows how the decoy was exposed and what the agent tried, then locks the session behind Hermes approvals until /snare reset. Disclosure — adds three fake variables (PROD_AWS_ACCESS_KEY_ID, PROD_AWS_SECRET_ACCESS_KEY, PROD_DATABASE_URL) to commands on the local terminal backend (names already set are skipped); reads, never writes, up to four local script files a terminal command runs (64 KB each) to check them; prepends its alert to the agent's reply in the session that tripped it and redacts the decoy values from replies; after a trip, every further tool call in that session goes to Hermes' approval prompt until /snare reset; on /snare selftest, and on /snare status with the local backend until one check is conclusive, runs one command through Hermes' terminal tool that prints which decoy names are set, never their values; stores owner-only files in its plugin-data folder: the decoys, and per incident a JSON line plus an HTML report with the tool name, shortened arguments of the blocked call, destination URLs, the source URL or path, up to 280 characters of the injected text and the session id; no network calls, telemetry or Python dependencies.Communitytools