P01
Notes Agent
A tool-calling agent that manages a folder of Markdown notes, served as a CLI, an MCP server and an eval suite from one tool registry. Its prompt-injection defences live in code — a path allowlist and a human-approval gate — so they hold even when the model is fooled.
- Python
- MCP
- Pydantic
- FastAPI
- pytest
- Docker
- GitHub Actions
injection attacks contained
injection attacks contained: 2/2
n = 2 attacks — an injected web page, a poisoned shared note