prompt-injection-defense
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONOBFUSCATION
Full Analysis
- [PROMPT_INJECTION]: The file contains several prompt injection strings (such as 'ignore all previous instructions' and 'DAN') within regular expression lists and test cases. These are educational examples and detection patterns used to identify attacks in external inputs, not instructions for the agent itself.- [INDIRECT_PROMPT_INJECTION]: The skill describes common surfaces for indirect injection attacks, such as tool outputs and retrieved documents. It provides defensive templates and sanitization functions to mitigate these risks. This serves as a security best-practice guide rather than a vulnerability.- [OBFUSCATION]: The skill provides code to detect and normalize common obfuscation techniques, including zero-width characters and homoglyphs. This is a defensive implementation designed to enhance the security of processed inputs.
Audit Metadata