Get started¶
This path proves the complete browser-to-Core flow against a local synthetic target. It does not contact an external AI provider and does not require an API key.
Requirements¶
- Chrome 116 or newer
- Python 3.10 or newer for Local Core
- the Stealth Prompt extension
Pin the extension to the Chrome toolbar after installation.
Install the Local Core¶
Clone the repository and install the Python package:
git clone https://github.com/whoishacked/stealth_prompt.git
cd stealth_prompt
python -m pip install .
Run the guided demo¶
stealth-prompt demo
The command starts an intentionally vulnerable target and the loopback-only Core. It prints the target URL, Core port, one-time pairing code, and the exact browser steps.
- Open the printed target URL in Chrome.
- Click the Stealth Prompt toolbar icon.
- Enter the pairing code and choose Use current tab.
- Choose Detect elements, review the three suggested roles, and save the interaction.
- Keep the Fake provider and start the test.
The first payload is generated automatically. The demo ends with a confirmed result because the target returns a synthetic canary matched by a deterministic scorer.
Try an adaptive chain
Add ?mode=advanced to the demo URL. The canary requires two different turns.
Use ?mode=safe as the negative control.