zeroc00I

DontFeedTheAI

Name: DontFeedTheAI
Author: zeroc00I

AI community

SOURCE https://github.com/zeroc00I/LLM-anonymization

Description

Transparent anonymization proxy for AI-assisted pentesting. Strips IPs, credentials, hostnames and PII before they reach any LLM (Claude, OpenAI, OpenRouter). Local Ollama + regex detection. Per-engagement vault.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

DontFeedTheAI

A transparent proxy that strips IPs, credentials, hostnames, and PII from every request before it reaches the AI — and restores them on the way back.

flowchart TD
    shell["🖥️ Your Shell\nnmap -sV dc01.acmecorp.local"]
    proxy["🛡️ DontFeedTheAI\ndc01.acmecorp.local → srv-0042.pentest.local\n10.20.0.10 → 203.0.113.47\nAdmin@Acme2024! → [CRED_XK9A2B3C]"]
    api["☁️ LLM API\nsees only\nsrv-0042.pentest.local\n203.0.113.47"]

    shell -- "① real data" --> proxy
    proxy -- "② surrogates only" --> api
    api -- "③ response + surrogates" --> proxy
    proxy -- "④ real data restored" --> shell

Layer	Detects
🧠 Ollama (local LLM)	hostnames, org names, credentials in prose
🔍 Regex	IPs, hashes, tokens, API keys

Both run on your machine. Nothing sensitive crosses the boundary.

Who	How it helps
Pentesters	Run nmap, mimikatz, bloodhound output through Claude without exposing client infrastructure
Developers & SREs	Debug with production data or internal configs in regulated environments
Legal & consulting	Anonymize client contracts, case files, or proprietary IP in AI-assisted reviews
Finance & compliance	Analyze reports or audit scripts without exposing account details
Researchers	Query LLMs on confidential datasets