nova-tracer
Prompt injection detection and session monitoring for coding sessions
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install nova-tracer?โผ
Run `npx skills add Nova-Hunting/nova-tracer --all -g -y` in your terminal to install it globally. Then restart Claude Code so the monitoring hooks activate.
How to detect prompt injection in Claude Code?โผ
Nova-tracer scans tool output with three tiers: fast keyword matching, ML-based semantic similarity, and optional LLM evaluation. When a threat is found, it warns Claude to treat the content with suspicion.
Can nova-tracer block dangerous commands?โผ
Yes. Its pre-tool hook actively blocks destructive operations like rm -rf, fork bombs, and credential exfiltration before they execute.
Does nova-tracer work without an API key?โผ
Yes. Keyword and semantic detection run locally with no API key. The LLM tier and AI summaries require an Anthropic or OpenAI key, but can be disabled in the config.
Can I add custom detection rules?โผ
Yes. Create .nov rule files in the rules directory using the YARA-inspired syntax with keywords, semantic descriptions, and LLM questions.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core