Stroq

About

Open-source local action firewall that installs as native hooks in Claude Code, Cursor, Codex, Copilot CLI, and Windsurf (and as a stdio proxy for other MCP clients) to scan everything an agent reads for prompt-injection signals, taint sessions that look suspect, and block the resulting risky action, such as a network call or secret access, before it executes. Everything runs on-device with no cloud calls in the decision path, and the engine fails closed if it errors.