5 ms·
Sorry, but this will never work very well. The tool contains a bunch of "denylist regexes", i.e. `user (should not|must not|cannot) see` But these can ea
by NicolaiS 1y ago
Sorry, but this will never work very well.
The tool contains a bunch of "denylist regexes", i.e.
`user (should not|must not|cannot) see`
But these can easily be bypassed. Any real security tool should use allowlists, but that is ofc much harder with natural languages.
MCP-Shield can also analyse using Claude, but that code contains an easy to exploit prompt injection: https://github.com/riseandignite/mcp-shield/blob/19de96efe5ef8cd8a5676bf35efcb88b073879bf/src/analyzers/claude-analyzer.ts#L28 https://github.com/riseandignite/mcp-shield/blob/19de96efe5e...