agentsclimarketplace

Prompt injection defense

Skill ismael-joffroy-chandoutis/claude-skills-public/prompt-injection-defense

Claude Code skills for game design, procedural generation, LLM security, and AI-art consistency

Install
npx -y skills add ismael-joffroy-chandoutis/claude-skills-public --skill prompt-injection-defense

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.9 KB, as published. Nobody here has run it

prompt-injection-defense

Validation Checklist

  • [CRITICAL] Missing Input Sanitization
    • User input passed directly to LLM without sanitization.
    • Fix: Add input validation: await detector.detect(userInput)
  • [CRITICAL] RAG Content Without Sanitization
    • Retrieved content passed to LLM without sanitization.
    • Fix: Sanitize retrieved documents before including in context
  • [MEDIUM] Verbose Injection Detection Error
    • Error messages reveal injection detection details to attacker.
    • Fix: Return generic error: 'Request could not be processed'
  • [MEDIUM] Single Layer Injection Defense
    • Single pattern-based injection check. Easily bypassed.
    • Fix: Implement multi-layer defense with semantic analysis and output monitoring
  • [MEDIUM] Missing Output Behavior Monitoring
    • LLM output used without behavior monitoring.
    • Fix: Monitor output for signs of successful injection
  • [CRITICAL] Tool Calls Without Validation
    • Tool calls executed without validation.
    • Fix: Validate tool calls against allowed list and check arguments
  • [HIGH] System Prompt Exposure Risk
    • System prompt may be extractable via prompt injection.
    • Fix: Mark system prompt as sensitive, monitor for leakage
  • [MEDIUM] No Multi-Turn Context Analysis
    • Messages added without multi-turn injection analysis.
    • Fix: Analyze full conversation context, not just latest message
  • [HIGH] External Content Without Isolation
    • External content added to context without isolation markers.
    • Fix: Wrap external content with clear boundaries and untrusted labels
  • [MEDIUM] No Encoded Injection Detection
    • Injection detection doesn't check for encoded payloads.
    • Fix: Add checks for Base64, URL encoding, Unicode homoglyphs
  • [CRITICAL] Unlimited Tool Access
    • LLM has access to all tools without restriction.
    • Fix: Limit tools to minimum required for task

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.