nemo-guardrails

Enforce runtime safety for LLM applications with NeMo Guardrails and Colang 2.0.

Updated May 2, 2026
One-click install
npx skills add https://github.com/qcmuu/AI-Research-Skills --skill nemo-guardrails-qcmuu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nemo-guardrails
Source: https://github.com/qcmuu/AI-Research-Skills/tree/main/07-safety-alignment/nemo-guardrails
Command: npx skills add https://github.com/qcmuu/AI-Research-Skills --skill nemo-guardrails-qcmuu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nemoguardrails, and includes references (resource) components.

What problem does it solve?

NeMo Guardrails solves the problem of unsafe or policy-violating behavior in LLM applications by enforcing runtime controls that validate inputs and outputs before harmful content reaches users.

Core Features & Use Cases

  • Jailbreak and prompt-injection detection: Blocks attempts to bypass instructions (e.g., “ignore previous instructions / DAN” patterns) using programmable rails.
  • Input/output validation and self-checks: Adds guard flows that evaluate toxicity, hallucination risk, and other quality signals before returning responses.
  • Fact-checking and PII/tone safety controls: Supports retrieval-backed verification and sensitive-data filtering (e.g., with Presidio), improving trustworthiness in production.
  • Use Case: Deploy a customer-support chatbot that refuses illegal requests, masks PII, detects jailbreak attempts, and verifies factual claims with retrieval-based checks.

Quick Start

Configure NeMo Guardrails with a refusal flow for illegal requests, then run the rails to generate a safe response instead of passing the unsafe prompt directly to your LLM.

Frequently Asked Questions about nemo-guardrails

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add runtime guardrails to an LLM application for jailbreak detection?

Runtime guardrails enforce safety by validating LLM inputs and outputs before harmful content reaches users. You can detect jailbreaks and prompt injections by configuring programmable rails using Colang 2.0 definitions within the NeMo Guardrails framework.

How does PII filtering work for production LLM chatbots?

PII filtering for production chatbots masks sensitive data in user prompts and model responses. By integrating tools like Presidio within NeMo Guardrails, you can apply consistent sensitive-data filtering flows to prevent unauthorized information exposure.

Can I use NeMo Guardrails with LlamaGuard for input and output validation?

Yes, NeMo Guardrails supports integrations with LlamaGuard to perform input and output validation. This allows you to evaluate toxicity, detect jailbreak attempts, and assess hallucination risk before returning responses to the user.

What is the best way to prevent hallucinations in LLM agent systems?

To prevent hallucinations in LLM agents, use retrieval-backed fact-checking and self-check guard flows. NeMo Guardrails evaluates factual claims and hallucination risk during runtime, ensuring responses are verified before delivery.

Do I need Colang 2.0 to implement programmable guard flows?

Yes, Colang 2.0 is required to define programmable guard flows for runtime safety. It provides the specific syntax needed to configure refusal flows, input validation, and output safety policies within your LLM application architecture.