|
6 | 6 | [](https://github.com/Carlos-Projects/palisade-scanner/actions) |
7 | 7 | [](https://huggingface.co/spaces/Syntho/palisade-scanner) |
8 | 8 |
|
9 | | -**[Try it live on HuggingFace Spaces](https://huggingface.co/spaces/Syntho/palisade-scanner)** — scan any URL without installing anything. |
| 9 | +**[Try it live on HuggingFace Spaces](https://huggingface.co/spaces/Syntho/palisade-scanner)** — paste a URL. Detect whether it contains hidden instructions targeting AI agents. |
10 | 10 |
|
11 | 11 | **Scan web content for prompt injection, hidden instructions, and adversarial content targeting AI agents.** |
12 | 12 |
|
13 | 13 | AI agents browse the web, read documents, and consume external content. Adversaries hide instructions in invisible text, HTML metadata, encoded payloads, and zero-width characters — Palisade finds them all. |
14 | 14 |
|
15 | 15 | --- |
16 | 16 |
|
| 17 | +### Risk examples |
| 18 | + |
| 19 | +| Scenario | Risk level | What Palisade finds | |
| 20 | +|----------|-----------|---------------------| |
| 21 | +| Clean marketing page | ✅ **Low** | No hidden text, no injection patterns, no exfiltration | |
| 22 | +| Hidden CSS prompt injection | 🔴 **High** | `display:none` text with role override instructions | |
| 23 | +| Metadata exfiltration prompt | 🚨 **Critical** | HTML comment + JSON-LD + base64-encoded data theft payload | |
| 24 | + |
| 25 | +--- |
| 26 | + |
17 | 27 | ## What makes Palisade unique |
18 | 28 |
|
19 | 29 | | Capability | Palisade Scanner | Manual review | Generic scrapers | |
@@ -203,11 +213,22 @@ mcpguard load-rules rules.yaml |
203 | 213 | - **v0.6** — Red Team Lab: adversarial page generator + benchmark suite |
204 | 214 | - **v0.7** — Certification Pipeline: verified AgentSafe badges |
205 | 215 |
|
206 | | -## Related Projects |
| 216 | +## Ecosystem |
| 217 | +
|
| 218 | +Palisade Scanner is part of the **Carlos-Projects** security infrastructure for AI agents: |
| 219 | +
|
| 220 | +``` |
| 221 | +Palisade Scanner → Scan content before agents consume it. ← you are here |
| 222 | +MCPwn → Attack MCP servers before attackers do. |
| 223 | +AgentGate → Control how agents access your website. |
| 224 | +MCPscop → Centralize scanner results and security posture. |
| 225 | +MCPGuard → Runtime security proxy for MCP/A2A protocols. |
| 226 | +``` |
207 | 227 |
|
208 | | -- [MCPGuard](https://github.com/Carlos-Projects/mcpguard) — Runtime security proxy for MCP |
209 | | -- [MCPwn](https://github.com/Carlos-Projects/mcpwn) — Offensive security testing for MCP |
210 | | -- [MCPscop](https://github.com/Carlos-Projects/mcpscope) — Unified security dashboard |
| 228 | +- [MCPwn](https://github.com/Carlos-Projects/mcpwn) — Offensive security testing for MCP servers |
| 229 | +- [AgentGate](https://github.com/Carlos-Projects/agentgate) — Policy-based firewall and honeypot middleware for AI agents |
| 230 | +- [MCPscop](https://github.com/Carlos-Projects/mcpscope) — Unified security dashboard for MCP/A2A scanner results |
| 231 | +- [MCPGuard](https://github.com/Carlos-Projects/mcpguard) — Runtime security proxy for MCP/A2A protocols |
211 | 232 |
|
212 | 233 | ## License |
213 | 234 |
|
|
0 commit comments