ai-prompt-injection

Test AI/LLM-powered APIs for prompt injection and jailbreaking vulnerabilities.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/devtint/API_PENTEST --skill ai-prompt-injection
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-prompt-injection
Source: https://github.com/devtint/API_PENTEST/tree/main/testing/SKILLS/ai-prompt-injection
Command: npx skills add https://github.com/devtint/API_PENTEST --skill ai-prompt-injection

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and tests for vulnerabilities in AI and LLM-powered APIs that could allow attackers to manipulate model behavior, bypass safety controls, or extract sensitive information.

Core Features & Use Cases

  • Direct Prompt Injection: Tests for basic instruction overrides and role-playing attacks.
  • System Prompt Extraction: Attempts to reveal the AI's underlying instructions and configuration.
  • Indirect Injection: Simulates attacks where malicious content in documents or web pages influences AI behavior.
  • Data Exfiltration & Jailbreaking: Explores methods to extract data or bypass AI safety mechanisms.
  • Use Case: When testing a new chatbot interface, use this Skill to ensure users cannot trick the AI into revealing confidential system prompts or performing unauthorized actions.

Quick Start

Run the provided Python script against the target AI endpoint to test for basic prompt injection vulnerabilities.

Frequently Asked Questions about ai-prompt-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my LLM API for prompt injection vulnerabilities?

To test your LLM API for prompt injection vulnerabilities, run the provided Python script against your target endpoint. It automates attacks like direct instruction overrides and system prompt extraction to identify security weaknesses.

What is indirect prompt injection and how does it affect AI chatbots?

Indirect prompt injection occurs when malicious content embedded in documents or web pages manipulates AI behavior. This Skill simulates such attacks to help assess if your chatbot can be tricked into performing unauthorized actions.

Can I use this to extract system prompts from my AI endpoint?

Yes, you can use this to attempt system prompt extraction from your AI endpoint. It tests whether users can trick the AI into revealing confidential underlying instructions or configuration data.

Does testing for LLM jailbreaks require a specific environment?

Testing for LLM jailbreaks requires an AI or LLM-powered endpoint with text input capability. You must have access to the target API to run the provided scripts and assess safety bypass vulnerabilities.

What is the best way to secure AI APIs against data exfiltration?

The best way to secure AI APIs against data exfiltration is to proactively test for vulnerabilities. This Skill explores methods to extract data and bypass safety mechanisms, highlighting weaknesses before deployment.

Why does my chatbot bypass safety controls during security assessments?

Your chatbot bypasses safety controls during security assessments because the testing script simulates jailbreaking techniques. It identifies vulnerabilities that allow attackers to manipulate model behavior or override instructions.