io.github.4hmetuyar/prompt-injection-scanner
guardbee-prompt-injection-scanner
Scans RAG content/scraped pages for indirect prompt injection
alive probed 2026-10-16
4tools
839tokens in Claude Opus 5.5
0.4 %of Claude's 200k window
0.4×the median server
256 msto initialize
9 msto list tools
- Run it
- npx -y @guardbee/mcp-prompt-injection-scanner@0.2.2 (stdio, probed in a container with the network off)
- Host
- npmjs.com
- Reports itself as
- guardbee-prompt-injection-scanner 0.1.0
- Capabilities
- tools
- Instructions
- none
- Of a 1M window
- <0.1 % of a 1M context window
- Count
- 839 tokens in Claude Opus 5.5, exact, measured 2026-10-16. With the Claude Code prefix mcp__…__ on each tool name: 899. The o200k_base estimate is 472. Counted again when the tool definitions change. Method.
- Repository
- https://github.com/GuardBee/guardbee-mcp
- Registry
- active, updated 2026-10-02 · registry entry
- Reachable
- 1 of the last 1 probe
Most expensive tools
The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.78×.
| Tool | ≈ Claude tokens | o200k estimate | Share of this server |
|---|---|---|---|
| scan_directory | 357 | 201 | 43 % |
| scan_text | 252 | 142 | 30 % |
| scan_file | 140 | 79 | 17 % |
| list_patterns | 89 | 50 | 11 % |
Same tool set as 1 other server
These registry entries have the same tool names and the same schema sizes.
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The server answers initialize and tools/list. Nothing to fix.