Nova-tracer

Deploy three-tier NOVA detection to warn or block indirect prompt injection in Claude Code sessions.

94|13|Updated Jan 17, 2026
One-click install
npx skills add https://github.com/Nova-Hunting/nova-tracer --skill nova-tracer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Nova-tracer
Source: https://github.com/Nova-Hunting/nova-tracer/tree/main
Command: npx skills add https://github.com/Nova-Hunting/nova-tracer --skill nova-tracer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Nova-tracer Skill defends Claude Code sessions from indirect prompt injection using the NOVA Framework's three-tier detection, reducing risk and enabling safer interactions.

Core Features & Use Cases

  • Three-tier detection (Keywords, Semantics, LLM) to catch a wide range of prompt injection risks.
  • YARA-inspired .nov rules for easy extension and customization across projects.
  • Configurable LLM providers to fit different workloads and privacy requirements.

Quick Start

Install Nova-tracer Guard into your Claude Code environment and run the sample tests to verify prompt injection detection.

Frequently Asked Questions about Nova-tracer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure Claude Code against indirect prompt injection?

You secure Claude Code by deploying a three-tier detection system that scans inputs for indirect prompt injection using keyword matching, semantic analysis, and LLM-based detection to warn or block threats.

What is indirect prompt injection and how does it affect AI coding sessions?

Indirect prompt injection is a security risk where malicious instructions are hidden in data processed by AI. In Claude Code sessions, it manipulates the assistant's behavior, making threat detection mechanisms essential for safe development.

Can I customize prompt injection detection rules across different projects?

You can customize prompt injection detection rules across projects using YARA-inspired .nov rule files. This allows you to easily extend and manage specific detection logic tailored to your workflow.

Does Claude Code support cross-provider LLM configurations for security hooks?

Claude Code supports configurable LLM providers for security hooks. This allows you to fit different workloads and privacy requirements when detecting prompt injection threats across development and production environments.

What is fail-open event logging in prompt injection detection?

Fail-open event logging is a security mechanism that records threat detection events while preserving system usability. It ensures that Claude Code sessions continue operating safely even when encountering detection anomalies.