✅ Detects data exfiltration attempts via GET-style honeypots
✅ Detects indirect prompt injection via SET-style honeypots
✅ Captures complete attack context and telemetry
✅ Returns synthetic data to maintain deception
Installs into .claude/skills of the current project.
Are you the author of 2056 Security Considerations C5b34423?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/tools-only-2056-security-considerations-c5b34423)
## Security Considerations
### Detection Capabilities
✅ Detects data exfiltration attempts via GET-style honeypots
✅ Detects indirect prompt injection via SET-style honeypots
✅ Captures complete attack context and telemetry
✅ Returns synthetic data to maintain deception
### Limitations
❌ Detection-only system (does not prevent attacks)
❌ Does not sanitize or filter user input
❌ Not a replacement for input validation and security controls
❌ Cannot guarantee conversation history capture (MCP protocol limitation)
**Deploy HoneyMCP as part of defense-in-depth strategy, not as a standalone security control.**
### Best Practices
1. **Defense in Depth** - Use HoneyMCP alongside input filters, not as a replacement
2. **Monitor the Dashboard** - Regularly review attack patterns for both exfiltration and injection
3. **Investigate Alerts** - Each ghost tool call is a high-confidence attack signal
4. **Secure Storage** - Protect `~/.honeymcp/events/` (contains attack data)
