safety-scan

Scan untrusted input for prompt injection, jailbreaks, and adversarial attacks using AIDefence.

70.1k|8.4k|Updated Jun 2, 2025
One-click install
npx skills add https://github.com/ruvnet/claude-flow --skill safety-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: safety-scan
Source: https://github.com/ruvnet/claude-flow/tree/main/plugins/ruflo-aidefence/skills/safety-scan
Command: npx skills add https://github.com/ruvnet/claude-flow --skill safety-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Untrusted input such as user submissions, API payloads, webhook data, and tool outputs can contain prompt injection, jailbreak attempts, or adversarial content that manipulates AI behavior. This Skill screens that input before it reaches a model or gets executed.

Core Features & Use Cases

  • Quick Safety Check: Get a boolean safe/unsafe verdict on any input text via the AIDefence is_safe tool.
  • Deep Threat Analysis: Obtain detailed threat classification and confidence scores for suspicious content.
  • Adaptive Defense Training: Feed confirmed threats back into the detection system to improve future detection rates.
  • Use Case: Before passing a user-submitted form payload to your LLM agent, scan it to detect instruction override attacks or data exfiltration patterns and block unsafe content.

Quick Start

Scan this user-submitted text for prompt injection and tell me whether it is safe to pass to the model.

Frequently Asked Questions about safety-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan text for prompt injection before sending it to an LLM?

Pass the untrusted text to the AIDefence is_safe tool for a quick boolean verdict, or use the analyze tool for detailed threat classification. Run this check on user submissions, API payloads, and webhook data before model processing.

What types of attacks does prompt injection scanning detect?

The scan detects direct and indirect prompt injection, jailbreak attempts, data exfiltration patterns, instruction override attacks, and social engineering prompts. Each threat is classified with confidence scores during deep analysis.

Can the detection system learn from new threats?

Yes, confirmed threats can be submitted to the AIDefence learn tool to improve future detection. You can also review detection rates and false positive metrics through the stats tool.

When should I use a quick safety check versus a full scan?

Use the quick is_safe check for high-throughput screening where a boolean verdict suffices. Use the full multi-layer scan or deep analysis when handling high-risk inputs or when you need detailed threat classification and confidence scores.

What are the limitations of automated prompt injection detection?

Automated scanning can produce false positives on legitimate but unusual inputs and may miss novel attack patterns not yet learned. Combine scanning with least-privilege tool permissions and human review for high-stakes actions.