prompt-guard

Files (10)

• CHANGELOG.md
• LICENSE
• README.md
• SKILL.md
• SKILL.sig
• package.json
• skill.test.ts
• skill.ts
• tsconfig.json
• types.ts

SKILL.md (first lines)

# prompt-guard

Detects prompt injection patterns in graph content and classifies findings by risk level.

## When to Use

Use this skill when:

- Inspecting user-submitted text stored in the knowledge graph for injection attempts
- Auditing graph content before it reaches downstream agents or tools
- Monitoring for adversarial inputs such as role overrides, encoding evasion, or jailbreak prompts

## Risk Classification

Each finding is classified into one of three levels:

- **dangerous** -- Active injection attempts (role overrides, system overrides, jailbreak, shell commands)
- **suspicious** -- Evasion techniques or anomalies (zero-width characters, homoglyphs, encoding tricks, template injection)
- **safe** -- No injection patterns detected

The overall classification for a scanned item is `dangerous` if any dangerous finding exists, `suspicious` if only suspicious findings exist, and `safe` otherwise.

## Instructions

1. Store text content in the graph using `skill_assert` or `skill_graph_query`
2. Query with predicate `guard:scan-result` to trigger the prompt-guard runtime
3. The skill enriches each result with a `classification` field and a `findings` array
4. Use `guard:injection-detected` (with proof) to record confirmed injection attempts
5. Query `guard:history` to review past scan results for the current agent

From ApiliumCode/mayros, MIT.

More from ApiliumCode/mayros