Prompt Injection Vulnerability Assessment

This skill guides a structured security review of LLM-integrated applications for prompt injection vulnerabilities. It is aligned with OWASP LLM01:2025 (Prompt Injection) and MITRE ATLAS AML.T0051 (LLM Prompt Injection).

Limitations

• Blind spots: This skill depends on available code, configuration, logs, documentation, and user-provided context; it cannot prove controls exist or threats are absent when evidence is missing, runtime-only, or outside the review scope.
• False-positive risks: Treat findings as hypotheses until validated against asset criticality, compensating controls, environment intent, and recent authorized changes.
• Required evidence: Support each finding with concrete artifacts such as file paths and line numbers, policy snippets, scanner output, logs, screenshots, control records, or reproducible steps.
• Normalized JSON: When machine-readable output is requested, findings MUST be available as JSON that validates against schemas/finding.schema.json.
• Escalation rules: Escalate immediately for suspected active compromise, exposed secrets, regulated-data exposure, critical exploitable vulnerabilities, privileged-access abuse, or when evidence is insufficient to safely disposition a high-impact risk.

Prompt Injection Safety Notice

If a target is provided via arguments, focus the review on: $ARGUMENTS