ghostprompt

Detect prompt-injection content in PDFs using an eight-layer analysis pipeline.

7|Updated Apr 11, 2026
One-click install
npx skills add https://github.com/Tuguberk/GhostPrompt --skill ghostprompt
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ghostprompt
Source: https://github.com/Tuguberk/GhostPrompt/tree/main
Command: npx skills add https://github.com/Tuguberk/GhostPrompt --skill ghostprompt

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pdfminer.six, pikepdf.

What problem does it solve?

GhostPrompt detects prompt-injection attempts and other malicious content in PDFs, enabling safe AI workflows by preventing data leakage and instruction manipulation.

Core Features & Use Cases

  • Layered 8-layer analysis covering metadata, invisible text, encoding/obfuscation, streams, zero-width characters, annotations/ObjStm, XMP metadata, and semantic camouflage.
  • Outputs a verdict (SAFE, SUSPICIOUS, or DANGEROUS) to guide action in document processing pipelines.
  • Useful in content moderation, enterprise document intake, and AI-assisted document analysis to quarantine risky files before processing.

Quick Start

Upload a PDF to GhostPrompt and request a safety assessment prior to ingestion.

Frequently Asked Questions about ghostprompt

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect prompt injection in PDF documents before AI ingestion?

To detect prompt injection in PDF documents, an eight-layer analysis pipeline scans metadata, invisible text, encoding, streams, zero-width characters, annotations, XMP updates, and semantic camouflage to output a SAFE, SUSPICIOUS, or DANGEROUS verdict.

What types of malicious content can be hidden in PDFs for AI workflows?

Malicious content hidden in PDFs for AI workflows includes invisible text, obfuscated encodings, zero-width characters, annotation streams, and semantic camouflage designed to manipulate language model instructions or leak data.

How do I scan PDFs for invisible text and zero-width characters?

Scanning PDFs for invisible text and zero-width characters is handled by specific layers in an eight-step analysis pipeline that flags obfuscated content and hidden prompt injections before outputting a final safety verdict.

Can I use automated PDF safety assessment for enterprise document intake?

Automated PDF safety assessment is suitable for enterprise document intake, content moderation, and QA pipelines, providing SAFE, SUSPICIOUS, or DANGEROUS verdicts to quarantine risky files before language model processing.

Does pdfminer.six extract text for prompt injection detection?

Pdfminer.six extracts text for prompt injection detection by feeding document content into an eight-layer pipeline that analyzes streams, metadata, and semantic camouflage to identify malicious instructions.

What is the best way to quarantine risky PDFs in content moderation pipelines?

The best way to quarantine risky PDFs in content moderation pipelines is applying an eight-layer analysis that outputs a DANGEROUS or SUSPICIOUS verdict, allowing systems to isolate files before AI ingestion.