bridgewardSkeptical-reading and prompt-injection defense for AI agents. Activate whenever the agent reads externally-sourced or potentially-untrusted content — web pages, fetched URLs, search results, GitHub issues / PRs / comments / diffs, emails, Slack/Discord messages, RSS feeds, scraped HTML, MCP tool des
injection-auditAudit a file, directory, web page, or piece of content for prompt-injection attempts. Use when reviewing untrusted content (scraped pages, downloaded files, third-party repos, MCP server tool descriptions, email archives, search-result corpora, RAG documents, code-review diffs) for hidden or visible