prompt-guard

Detect prompt injections and jailbreak attempts in LLM inputs.

Updated Feb 15, 2026
One-click install
npx skills add https://github.com/ricable/mcai --skill prompt-guard-ricable
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-guard
Source: https://github.com/ricable/mcai/tree/main/.agents/skills/prompt-guard
Command: npx skills add https://github.com/ricable/mcai --skill prompt-guard-ricable

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps protect LLM applications from prompt injection, jailbreak attempts, and poisoned third-party content that could override instructions or corrupt outputs.

Core Features & Use Cases

  • User Prompt Filtering: Score incoming prompts before they reach the model and block suspicious jailbreak attempts.
  • Third-Party Data Screening: Inspect API responses, scraped text, and RAG documents for embedded instructions or context poisoning.
  • Batch Safety Checks: Process many documents efficiently when preparing retrieval corpora or other downstream LLM inputs.
  • Use Case: A support chatbot can reject malicious user prompts while also screening retrieved knowledge base articles for hidden instructions.

Quick Start

Use the prompt-guard skill to evaluate a prompt for injection risk and block it when the score exceeds your chosen threshold.

Frequently Asked Questions about prompt-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect prompt injection and jailbreak attempts in LLM inputs?

Prompt injection detection applies transformer-based classification to score user prompts and block suspicious jailbreak attempts before they reach the model. This filters malicious inputs by evaluating injection risk against configurable thresholds.

Can I screen retrieved RAG documents for hidden instructions and context poisoning?

RAG protection involves inspecting retrieved documents and API responses for embedded instructions or context poisoning. Third-party data screening evaluates scraped text and knowledge base articles to prevent poisoned content from corrupting outputs.

How does batch scoring work for filtering multiple prompts and documents?

Batch safety checks process many documents efficiently when preparing retrieval corpora or downstream LLM inputs. This allows multilingual chatbots to apply low-latency filtering and score multiple prompts simultaneously for injection risk.

What is the best way to configure content screening thresholds for multilingual chatbots?

Configurable thresholds allow multilingual chatbots to define acceptable injection risk scores. You set a specific score limit, and the content screening mechanism blocks any user prompt or retrieved document exceeding that chosen threshold.

Does prompt injection filtering work without adding high latency to chatbot responses?

Low-latency filtering ensures safe deployment without significant delays. Transformer-based classification evaluates input prompts efficiently, allowing real-time user prompt filtering and third-party data screening to maintain responsive chatbot interactions.

Why do I need to inspect API responses for jailbreak attempts in my LLM workflow?

Inspecting API responses prevents third-party content from overriding instructions or corrupting outputs. Jailbreak detection screens external data sources for embedded malicious instructions, ensuring that retrieved or scraped text cannot manipulate your LLM application.