prompt-injection

Analyze language model systems for prompt injection vulnerabilities.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/do360now/security-agents --skill prompt-injection-do360now
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-injection
Source: https://github.com/do360now/security-agents/tree/main/.claude/skills/prompt-injection
Command: npx skills add https://github.com/do360now/security-agents --skill prompt-injection-do360now

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

It detects prompt injection vulnerabilities in language model applications, preventing malicious manipulation of AI behavior.

Core Features & Use Cases

  • Security Testing: Assess LLM-based systems for direct and indirect prompt injection threats.
  • Vulnerability Analysis: Map attack surfaces by analyzing user inputs and external content sources.
  • Use Case: Security teams can verify their chatbots and RAG pipelines are robust against injection attacks and implement better defenses.

Quick Start

Query the skill with your LLM application setup instructions to identify potential prompt injection risks and recommend mitigations.

Frequently Asked Questions about prompt-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my LLM application for prompt injection vulnerabilities?

To test for prompt injection vulnerabilities, analyze your language model application setup instructions to map attack surfaces across user inputs and external content sources, identifying risks of malicious prompt manipulation and system prompt leakage.

What is the best way to secure a RAG pipeline against indirect prompt injection?

Securing a RAG pipeline against indirect prompt injection involves assessing external data sources for malicious content, mapping potential attack vectors, and integrating architectural defenses to prevent data exfiltration and privilege escalation.

How does prompt injection risk analysis prevent system prompt leakage in chatbots?

Prompt injection risk analysis prevents system prompt leakage by comprehensively mapping input channels and external sources, testing the chatbot's architectural defenses, and recommending mitigations against malicious prompt manipulation.

Can I assess external data sources for LLM security risks using this approach?

Yes, you can assess external data sources for LLM security risks by analyzing how external content interacts with your language model, ensuring applications prevent malicious manipulation, exfiltration, and privilege escalation through comprehensive mapping and testing.

What architectural defenses prevent privilege escalation in language model workflows?

Architectural defenses preventing privilege escalation in language model workflows include integrating security best practices into LLM workflows, mapping input channels, and applying recommendations to block malicious prompt manipulation and unauthorized access.