prompt-injection-test

Test prompt-injection vulnerabilities in LLM-integrated applications using the Arcanum PI Taxonomy.

141|14|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/OWASP/secure-agent-playbook --skill prompt-injection-test-owasp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-injection-test
Source: https://github.com/OWASP/secure-agent-playbook/tree/main/skills/prompt-injection-test
Command: npx skills add https://github.com/OWASP/secure-agent-playbook --skill prompt-injection-test-owasp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically test an LLM application's prompt injection defenses by following the Arcanum PI Taxonomy to validate guardrails and detect weaknesses during red-team testing and security audits.

Core Features & Use Cases

  • Systematically test 13 attack intents across attacker-controlled prompts, inputs, and surfaces to identify prompt injection vulnerabilities.
  • Apply 18 payload techniques and 20 evasions to stress guardrails, data handling, and model behavior under adverse conditions.
  • Produce actionable findings with severity, surface path, payload examples, and remediation guidance, mapped to OpenCRE-like compliance references.
  • Use cases include red-teaming AI apps, validating prompt-guardrails, and deepening LLM01 (Prompt Injection) assessments for enterprise security.

Quick Start

Run the prompt-injection testing procedure against the target model and generate a findings report.

Frequently Asked Questions about prompt-injection-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test LLM applications for prompt injection vulnerabilities?

Test prompt injection vulnerabilities by applying a structured taxonomy that enumerates attack intents, payload techniques, and evasion layers to systematically identify weaknesses in LLM-integrated applications. This procedure validates guardrails and detects security flaws during red-team assessments.

What is the Arcanum PI Taxonomy for red-teaming AI applications?

The Arcanum PI Taxonomy is a structured framework for prompt injection testing that categorizes 13 attack intents, 18 payload techniques, and 20 evasions across attacker-controlled prompts, inputs, and surfaces to stress guardrails and model behavior under adverse conditions.

How do I validate LLM guardrails against prompt injection attacks?

Validate LLM guardrails by applying payload techniques and evasion layers against the target model to stress data handling and model behavior, then documenting the results with severity levels, surface paths, and remediation guidance mapped to compliance references.

Can I use prompt injection testing for MCP workflows and chat interfaces?

Yes, prompt injection testing applies to security auditing of chat interfaces, tooling, and MCP workflows by enumerating attack surfaces and intents to identify vulnerabilities across these LLM-integrated application environments.

What does a prompt injection findings report include for enterprise security?

A prompt injection findings report includes actionable severity ratings, surface paths, payload examples, and remediation guidance mapped to OpenCRE-like compliance references, supporting enterprise security and LLM01 deep-dive assessments.

How many attack intents and payload techniques are covered in prompt injection testing?

Prompt injection testing covers 13 attack intents across attacker-controlled prompts and surfaces, applying 18 payload techniques and 20 evasions to comprehensively stress guardrails and detect model behavior weaknesses.