7h30th3r0n3

MindJack — Security skill for Claude Code

Security community

MindJack. Get into the mind of AI agents.

How to install MindJack

This entry records only its repository, not the path inside it, so there is no exact command to give. Open 7h30th3r0n3/MindJack and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What MindJack does

MindJack. Get into the mind of AI agents. Read their memories. Rewrite their instructions. Security toolkit that extracts conversation history and demonstrates prompt injection across 10 AI coding assistants, 56 attack scenarios, zero dependencies.

Alternatives in Security

Promptmap — Security scanner for custom LLM apps 1.2k ★
Agentseal — Security toolkit for AI agents 344 ★
Open Skill Sunset — Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions 84 ★

README

MindJack

Get into the mind of AI agents. Read their memories. Rewrite their instructions.

Security research toolkit for auditing the local attack surface of AI coding assistants.

**Zero dependencies, Python 3.10+ standard library only.**

extractor.py - Extract conversation history from 10 AI tools
injector.py - Scan injection surfaces, demonstrate 56 attack scenarios
mindjack report - Generate interactive HTML attack graph with OWASP compliance mapping

**Disclaimer:** For authorized security testing, red teaming, CTF challenges, and AI safety research only. Always obtain proper authorization before testing on systems you don't own.

Supported Tools

Tool	Extractor	Injector	Key Attack Surface
Claude Code	history, sessions, memories	rules, settings, hooks, MCP, memory	`CLAUDE.md`, `settings.json`, hooks (RCE)
OpenAI Codex CLI	history, rollout sessions	AGENTS.md, config.toml	`sandbox_mode: danger-full-access`
GitHub Copilot	chat sessions	copilot-instructions.md	`.github/copilot-instructions.md`
Cursor IDE	state.vscdb chat data	.cursorrules, MCP config	CVE-2025-54135 (MCP RCE)
Aider	chat history markdown	config.yml, CONVENTIONS.md	`auto-commits`, model override
Continue.dev	session JSON	config.yaml, rules, .continuerc.json	`config.ts` (arbitrary code exec)
Cline / Roo Code	task conversations	.clinerules, .roo/rules/, memory-bank	Persistent memory bank poisoning
Amazon Q	chat history JSON	.amazonq/rules/, MCP config	MCP server injection
Windsurf/Codeium	cascade, memories	.windsurfrules, global_rules.md	Auto-generated memory poisoning

Quick Start

git clone https://github.com/7h30th3r0n3/MindJack.git
cd MindJack

# Extract all conversations
python3 extractor.py

# Scan for injection surfaces
python3 injector.py scan

# List a