running-prompt-injection-eval

Run prompt-injection evaluations against deployed LLM endpoints with structured logging.

2|Updated May 23, 2026
One-click install
npx skills add https://github.com/rocklambros/rcs --skill running-prompt-injection-eval
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: running-prompt-injection-eval
Source: https://github.com/rocklambros/rcs/tree/main/skills/security/running-prompt-injection-eval
Command: npx skills add https://github.com/rocklambros/rcs --skill running-prompt-injection-eval

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill standardizes authorized prompt-injection evaluations for deployed LLM applications so teams can test defenses without inventing the workflow from scratch.

Core Features & Use Cases

It validates the pre-flight safety checks, ingests a user-supplied JSONL corpus, runs a structured dispatch and logging workflow, and classifies each response into blocked, passed, partial, or inconclusive. It is designed for pre-deployment safety reviews, guardrail audits, regression tests, and red-team engagements where corpus quality, scope control, and reproducible evidence matter. It also produces per-class summaries, false-negative and false-positive analysis, and a deduplicated finding pack ready for reporting.

Quick Start

Use the running-prompt-injection-eval skill to verify the signed RoE, validate the corpus and target endpoint, run the dry-run and full eval, and return the manifest, summary tables, and findings.

Frequently Asked Questions about running-prompt-injection-eval

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a prompt-injection evaluation on a deployed LLM application?

To run a prompt-injection evaluation, supply a JSONL corpus and target endpoint to execute a structured eval harness. It validates pre-flight checks, logs attempts, classifies outcomes, and aggregates results for reporting.

What is four-outcome classification in LLM red-team testing?

Four-outcome classification in LLM red-team testing categorizes each response as blocked, passed, partial, or inconclusive. This classifies guardrail effectiveness and tracks false negatives during prompt-injection evaluations.

Do I need signed Rules of Engagement to test prompt-injection guardrails?

Yes, signed Rules of Engagement validation is required to test prompt-injection guardrails. The evaluation harness enforces scope control, corpus schema checks, and safety reviews before executing tests against the target endpoint.

How do I prepare a JSONL corpus for LLM guardrail audits and regression testing?

Prepare a JSONL corpus for LLM guardrail audits by formatting test prompts according to required schema checks. The harness ingests the corpus, runs dry-run validations, and deduplicates findings for regression testing.

What does false-negative tracking reveal during pre-deployment safety reviews?

False-negative tracking during pre-deployment safety reviews reveals guardrail failures where malicious prompt injections bypassed defenses. It produces per-class summaries and finding packs to identify vulnerabilities before deployment.

Can I use existing prompt-injection test corpora for structured logging and eval classification?

Yes, you can supply existing user-supplied corpora for structured logging and eval classification. The harness validates the corpus schema, runs dispatch workflows, and generates per-class aggregation tables with deduplicated findings.