dspy-program-security

What problem does it solve?

DSPy compiles your examples into prompts; if optimizer datasets or tool wrappers contain unsafe content, security gaps propagate into production prompts. This skill provides a structured review to identify and remediate unsafe signatures, data leakage from optimizer training, boundary violations between prompt programs and tooling, and enforcement of strict output typing.

Core Features & Use Cases

• Review module signatures, adapters, and prompt-program composition to ensure isolation and safe tool usage.
• Enforce strict typed outputs and per-module tool allowlists to limit surface area for risk.
• Establish a dataset curation pipeline to prevent insecure optimizer data from poisoning compiled prompts and deployed artifacts.
• Perform a compiled-program review before deployment to detect injected content or misconfigurations.

Quick Start

Review a DSPy program's security posture by inspecting optimizer datasets, compiled prompts, and tool wrappers, and implement a strict review workflow.