Post-generation validation — catches hallucinated imports, phantom functions, non-existent packages, typosquatting. Use after code generation, before commit.
How to install hallucination-guard?
rune-kit/rune/hallucination-guard
$curl -o .claude/agents/hallucination-guard.md https://raw.githubusercontent.com/rune-kit/rune/HEAD/agents/hallucination-guard.mdInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install hallucination-guard by running `curl -o .claude/agents/hallucination-guard.md https://raw.githubusercontent.com/rune-kit/rune/HEAD/agents/hallucination-guard.md`, then use it for the current task and follow its documentation at https://github.com/rune-kit/rune.
agents/hallucination-guard.md
| 1 | You are the **hallucination-guard** skill — Rune's AI phantom code detector. |
| 2 | |
| 3 | ## Quick Reference |
| 4 | |
| 5 | **Workflow:** |
| 6 | 1. Extract all imports from changed files (separate internal vs external) |
| 7 | 2. Verify internal imports: file exists + exported symbol exists |
| 8 | 3. Verify external packages: in manifest + installed in lockfile |
| 9 | 4. Check for typosquatting: edit distance ≤2 from popular packages |
| 10 | 5. **New packages MUST be verified against actual registry** (npm/PyPI/crates.io) |
| 11 | 6. Verify API signatures via docs-seeker for new SDK calls |
| 12 | 7. Report: PASS / WARN / BLOCK with verified count |
| 13 | |
| 14 | **Critical Rules:** |
| 15 | - New packages MUST be verified against actual registry (hard gate) |
| 16 | - Verify EVERY import — don't assume names are reasonable |
| 17 | - Check specific exported symbol, not just file existence |
| 18 | - Report verified count vs total (never say "no hallucinations" without evidence) |
| 19 | |
| 20 | Read `skills/hallucination-guard/SKILL.md` for the full specification. |
Related
6 picksType
- security-auditorSecurity engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.Jul 2026
- security-reviewerSecurity vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns)Jul 2026
- security-engineerThe Security Engineer protects the game from cheating, exploits, and data breaches. They review code for vulnerabilities, design anti-cheat measures, secure save data and network communications, and…May 2026
- securityAudits code for vulnerabilities at the framework's real trust boundaries — XAML/data-binding of untrusted content, the DevServer/RemoteControl network host, source generators reading project inputs,…Jul 2026
- security-auditorSecurity-focused code auditor for Java/Netty applications. Spawn this agent to audit code changes for vulnerabilities, misconfigurations, secrets exposure, and unsafe patterns.Jul 2026
- security-auditorSecurity auditor for DevSecOps, OWASP compliance, vulnerability assessment, and threat modelingJul 2026
