GitHub topic

prompt-injection GitHub repositories

Explore 7 tracked GitHub repositories tagged prompt-injection. Compare their recorded star activity and implementation languages, then follow related topics to find other projects.

Snapshot: 2026-10-28. The collection gained 72 stars since the previous daily snapshot.

Tracked repositories: 7
Total stars: 11,384
Stars gained · 7 days: +315
Stars gained · 30 days: +981

Compare star activity

Up to five projects on this page, ordered by total stars. Open a project for its description and recorded star history.

Swipe to compare all star periods →

Star activity for prompt-injection repositories on this page
Repository	Total stars	Today	7 days	30 days
Tencent/AI-Infra-Guard	7.1K	+33	+225	+543
hashgraph-online/hol-guard	1.0K	+2	+46	+332
toby-bridges/api-relay-audit	897	+2	+10	+37
samvallad33/vestige	657	+1	+4	+9
secureagentics/Adrian	587	+0	+4	+10

Explore repositories

Showing 1–7 of 7 tracked repositories.

Tencent/AI-Infra-Guard

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

hashgraph-online/hol-guard

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks. Website: https://apirelayaudit.com

samvallad33/vestige

Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Strata, an append-only log, so you can see exactly what your agent did and why.

secureagentics/Adrian

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

qybaihe/mu

mu (μ): most of what a coding agent decides isn't code. mu hands 40 kinds of yes/no calls to a small model: fewer wasted tokens, fewer approvals on autopilot, fewer runs that stop halfway. Built on pi.

★ 554+2 todayTypeScript