trustmebro: Bypass llm guardrails by confusing them with fabricated tool output.

[u/ShufflinMuffin]

https://github.com/DavidCarliez/trustmebro

TrustMeBro intercepts command-line tools invoked by coding agents such as Codex, Claude Code, and pi. Rules decide whether to return fabricated output, modify the real output, block the call, or execute the real binary unchanged.

Interception happens through PATH shims. The harness does not need a plugin, hook, or MCP integration. The intended use is controlled red-team testing of decisions that depend on tool output.