llm-prompt-injection

Warn

Audited by Socket on Sep 26, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. It is internally consistent and does not itself install software or execute code, so it is not confirmed malware; however, it equips an AI agent with explicit techniques for prompt injection, system prompt extraction, tool abuse, and data exfiltration, making it dangerous by design.

Confidence: 95%Severity: 89%
AnomalyLOW
JAILBREAK_PATTERNS.md

No evidence of traditional malware or supply-chain compromise exists in this module because it contains no executable behavior, I/O, networking, or credential/process access. However, the file is a highly actionable jailbreak/prompt-injection techniques catalog (including system-prompt extraction and escalation/encoding bypass patterns). Its primary risk is enabling abusive instruction crafting and increasing the likelihood of safety bypasses in downstream LLM deployments, especially if included in applications that generate or validate prompts.

Confidence: 78%Severity: 58%
Audit Metadata
Analyzed At
Sep 26, 2026, 02:03 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fhack-skills%2Fllm-prompt-injection%2F@7ca39b416c5b079883e607dceb57e2d9aa36c841603240b3ded4fd934c2febb4