About Prompt Injection Scanner
An MCP server that scans text for hidden instructions, invisible text, and links that could leak data before an agent reads it. It is public, read-only, and requires no key.
Key features
- 01Detect hidden instructions
- 02Find invisible text
- 03Identify links that may leak data
- 04Public, read-only access
- 05No API key required
Use cases
- 01Inspect text before an agent processes it
- 02Check content for potential data-leaking links
MCP support
Exposes Prompt Injection Scanner to MCP clients through its MCP endpoint. The server is public, read-only, and needs no key.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://injectionscan.openkrill.app/mcpclaude mcp add --transport http app-openkrill-injection-scan https://injectionscan.openkrill.app/mcp{"mcpServers":{"app-openkrill-injection-scan":{"type":"http","url":"https://injectionscan.openkrill.app/mcp"}}}Open in Cursor{"servers":{"app-openkrill-injection-scan":{"type":"http","url":"https://injectionscan.openkrill.app/mcp"}}}Open in VS Code{"mcpServers":{"app-openkrill-injection-scan":{"type":"http","url":"https://injectionscan.openkrill.app/mcp"}}}{"mcpServers":{"app-openkrill-injection-scan":{"serverUrl":"https://injectionscan.openkrill.app/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
4| Parameter | Type | Required | Description |
|---|---|---|---|
| text | string | Yes | The untrusted text to check: a tool result, web page, email, document or file, pasted in full. At most 200000 characters. Not fetched, not stored. |
| format | enum | No | How to read the text. auto (default) reads HTML when it sees tags; html also looks for elements styled not to show.auto | text | markdown | html |
| include_visible_text | boolean | No | Also return the text with invisible characters, comments and hidden HTML elements removed. Default false. |
Details
From the project READMEDeveloper and Security Checks
Package health, CVE triage, software end-of-life and licence facts, DESIGN.md lint and diff, and AI coding agent news.
claude plugin install dev-security@openkrill
| Skill and MCP server | Tool | Endpoint |
|---|---|---|
packages | Package Health Check | https://packages.openkrill.app/mcp |
cve | CVE Risk Check | https://cve.openkrill.app/mcp |
dev-facts | Dev Facts Check | https://devfacts.openkrill.app/mcp |
design-md | DESIGN.md Linter & Extractor | https://designmd.openkrill.app/mcp |
industry-pulse | Industry Pulse | https://pulse.openkrill.app/mcp |
agent-trace | Agent Trace Check | https://agenttrace.openkrill.app/mcp |
injection-scan | Prompt Injection Scanner | https://injectionscan.openkrill.app/mcp |
Every server is public, read-only and needs no key. Generated from the Agent Tools plugin listings; edits made here are overwritten.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.