Prompt Injection Defense Auditor

What this skill does

This skill audits an LLM application for prompt injection vulnerabilities — the #1 risk in the OWASP Top 10 for LLM Applications. It covers both direct injection (user input overrides system instructions) and indirect injection (malicious instructions embedded in retrieved documents, emails, or web content). For every vulnerability found, it provides a concrete defensive fix.

How to use

Claude Code / Cline

Copy this file to .agents/skills/prompt-injection-auditor/SKILL.md in your project root.

Then ask:

• "Use the Prompt Injection Defense Auditor to review my chatbot's system prompt."
• "Audit my RAG pipeline for indirect prompt injection risks."