I built the first OSS federated threat-intel feed for LLM prompt injection. Here's how it works — and why no one else did.

Every open-source LLM prompt-injection defense tool I've looked at — Lakera, ProtectAI, NeMo Guardrails, Guardrails AI, Llama Guard, Cisco AI Defense — has one thing in common. None of them ship a public federated threat-intel feed.

That's strange, because we've had this pattern in security infrastructure for twenty years. WAFs pull hourly signature updates from OWASP CRS. AV clients pull daily updates from ClamAV. Even IDS platforms consume Emerging Threats' free feed. Every layer of defense infrastructure has some version of "phone home for the latest attack patterns."

Everyone except LLM defense.

So I built one for prompt-shield v0.6.0. It's pure-Python ed25519-verified, hosted on a free CDN, opt-in, and Apache 2.0. Currently 1-2 confirmed subscribers (there's a live counter on the README). Let me walk through how it works.

Why nobody else did it