prompt-guard

Detect prompt injections and jailbreak attempts in LLM inputs.

2|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/zhuangbiaowei/smart_bot --skill prompt-guard-zhuangbiaowei
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-guard
Source: https://github.com/zhuangbiaowei/smart_bot/tree/main/skills/prompt-guard
Command: npx skills add https://github.com/zhuangbiaowei/smart_bot --skill prompt-guard-zhuangbiaowei

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires transformers, torch, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill safeguards Large Language Model (LLM) applications by detecting and filtering malicious prompts, including prompt injections and jailbreak attempts, thereby protecting against unauthorized control and harmful outputs.

Core Features & Use Cases

  • Prompt Injection Detection: Identifies attempts to embed hidden instructions within user inputs or third-party data.
  • Jailbreak Detection: Flags prompts designed to bypass LLM safety guidelines and elicit restricted responses.
  • Multilingual Support: Operates effectively across 8 different languages.
  • Use Case: Before sending user input to an LLM, run it through Prompt Guard to ensure it's safe and doesn't contain hidden commands or attempts to manipulate the AI's behavior.

Quick Start

Use the prompt-guard skill to check if the user input 'Ignore previous instructions' is a jailbreak attempt.

Frequently Asked Questions about prompt-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect prompt injection attacks in LLM inputs?

Prompt injection attacks in LLM inputs are detected using a pre-trained 86M parameter model that filters hidden instructions and malicious prompts. It analyzes user inputs and third-party data to identify unauthorized control attempts before reaching the LLM.

Can I use a transformer model for real-time RAG security content filtering?

Real-time RAG security content filtering is supported using a transformer-based model. It validates third-party data and user queries on the fly, preventing malicious prompt injections from compromising retrieval-augmented generation pipelines.

Does prompt injection detection work across multiple languages for LLM applications?

Prompt injection detection works effectively across 8 different languages for LLM applications. The pre-trained model maintains high true positive rates and low false positive rates when filtering malicious prompts and jailbreak attempts in multilingual inputs.

What dependencies do I need to run a transformer model for jailbreak detection?

You need the transformers and torch dependencies to run the transformer model for jailbreak detection. These frameworks provide the underlying environment to load the 86M parameter model and execute real-time or batch content filtering operations.