prompt-hacking

Simulate direct, indirect, multi-turn, and context-window prompt hacking attacks.

3|Updated Nov 18, 2025
One-click install
npx skills add https://github.com/pluginagentmarketplace/custom-plugin-ai-red-teaming --skill prompt-hacking
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-hacking
Source: https://github.com/pluginagentmarketplace/custom-plugin-ai-red-teaming/tree/main/skills/prompt-hacking
Command: npx skills add https://github.com/pluginagentmarketplace/custom-plugin-ai-red-teaming --skill prompt-hacking

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill provides a structured approach to security-testing AI prompts by simulating direct, indirect, multi-turn, and context-window prompt hacks to identify weaknesses and strengthen defenses.

Core Features & Use Cases

  • Attack taxonomy: Direct overrides, indirect injections, multi-turn manipulation, and context-window exploits across web, documents, and emails.
  • Framework mappings: OWASP LLM-2025 and MITRE ATLAS mappings to prioritize risk and defenses.
  • Use Case: A security team tests AI assistants by injecting prompts and measuring detection versus bypass to harden prompts and guardrails.

Quick Start

Run the prompt-hacking test suite to evaluate your model's resilience and generate a safety report.

Frequently Asked Questions about prompt-hacking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is prompt injection and how does it compromise AI safety?

Prompt injection is an attack vector where malicious inputs manipulate AI behavior. This skill simulates direct, indirect, multi-turn, and context window prompt hacking to evaluate AI defenses and identify safety risks across web content, documents, and emails.

How do I test my AI assistant for jailbreak and prompt injection vulnerabilities?

You can test for jailbreak vulnerabilities by running the prompt-hacking test suite, which simulates attack techniques like direct overrides and multi-turn manipulation to measure detection versus bypass, generating a safety report to harden prompts and guardrails.

Can I run prompt security testing in a standard Python development environment?

Yes, you can run prompt security testing using standard Python tooling in common development environments. The skill operates without requiring external software, enabling security teams to evaluate model resilience directly within their existing workflows.

What attack surfaces does indirect prompt injection target in AI systems?

Indirect prompt injection targets attack surfaces across web content, documents, and emails. The skill simulates these injections alongside direct overrides and context window exploits to comprehensively evaluate defense mechanisms and risk exposure.

How does this skill map to OWASP LLM-2025 and MITRE ATLAS frameworks?

The skill maps simulated prompt hacking techniques to OWASP LLM-2025 and MITRE ATLAS frameworks, providing structured mappings that help security teams prioritize identified risks and implement appropriate defenses for their AI assistants.

What is the best way to harden AI prompts against multi-turn manipulation?

The best way to harden prompts against multi-turn manipulation is to simulate context window exploits and measure detection versus bypass. This skill provides structured attack taxonomy testing to identify weaknesses and strengthen guardrails accordingly.