llm-security

Secure LLM integrations with prompt injection defenses, RAG security, and MCP hardening.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/nbiish/native-psionic-programs --skill llm-security-nbiish
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: llm-security
Source: https://github.com/nbiish/native-psionic-programs/tree/main/.agents/skills/llm-security
Command: npx skills add https://github.com/nbiish/native-psionic-programs --skill llm-security-nbiish

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Domain knowledge and guardrails for securing probabilistic AI components—models, prompts, RAG pipelines, agents, and MCP servers. This skill helps design defenses against prompt injection, context poisoning, and data leaks by providing structured control, observability, and integrity checks.

Core Features & Use Cases

  • Prompt engineering & control: structure-driven prompts, canary tokens, and explicit role separation to prevent prompt hijacking.
  • RAG security & provenance: provenance tagging, PII redaction, embedding poisoning detection, and tamper-evident context signing.
  • MCP and tool security: strict input validation, tool-call schemas, and risk gates for high-impact actions.
  • Inter-agent security & auditing: signed inter-agent messages, mTLS channels, and append-only audit trails.

Quick Start

Describe your current LLM integration and implement a basic prompt-injection guardrail to secure prompts and outputs.

Frequently Asked Questions about llm-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent prompt injection attacks in LLM applications?

Prevent prompt injection by applying structure-driven prompts, canary tokens, and explicit role separation. These controls establish strict boundaries to stop prompt hijacking and secure LLM outputs across your integration.

What is RAG security and how does it prevent context poisoning?

RAG security prevents context poisoning by applying provenance tagging, PII redaction, and tamper-evident context signing. It detects embedding poisoning to maintain integrity of retrieved context passed to generation models.

How do I secure MCP servers and tool calls in agent workflows?

Secure MCP servers by enforcing strict input validation, tool-call schemas, and risk gates for high-impact actions. These controls validate tool invocations and prevent unauthorized actions within agent-based workflows.

Can I use these guardrails for safety-critical AI systems in production?

Yes, you can use these guardrails for safety-critical AI systems in production. The skill provides governance controls, mTLS channels, and append-only audit trails to secure probabilistic AI components end-to-end.

What's the best way to audit inter-agent messages for data leaks?

Audit inter-agent messages for data leaks by implementing signed messages, mTLS channels, and append-only audit trails. This approach ensures tamper-evident logging and secure communication across multi-agent workflows.

Do I need specific schemas to validate tool calls in LLM integrations?

Yes, you need specific tool-call schemas to validate inputs in LLM integrations. Strict schema validation acts as a risk gate to ensure only authorized, structured actions execute within agent-based workflows.