Prompt Injection Scanner

prompt-injection-scanner

Audits agent skill instructions and system prompts for vulnerabilities to prompt hijacking and indirect injection. Use when designing new agent skills or before deploying agents to public environments where users provide untrusted input.

jorgealves/agent_skills·188installs2starsAI & Agent Building

SKILL.md

Full skill instructions

Prompt Injection Scanner

Purpose and Intent

The prompt-injection-scanner is a security tool specifically for the AI agent era. It identifies weak points in agent instructions where a malicious user could potentially "hijack" the agent's behavior by inserting conflicting instructions into input fields.

When to Use

Skill Development: Run this every time you update the capabilities or instructions for an agent skill.
Pre-deployment Security Review: Essential before making an agent accessible to untrusted users.
Continuous Security Auditing: Periodically scan all skills as new injection patterns are discovered.

When NOT to Use

Standard Code Auditing: Use the secret-leak-detector for credentials; this is specifically for "instruction-level" security.

Input and Output Examples

Input

skill_path: "./agent-skills/data-processor/SKILL.md"

Output

A structured report highlighting parts of the instructions that are susceptible to prompt hijacking, along with concrete mitigation strategies.

Error Conditions and Edge Cases

Missing Instructions: If a skill defines tools but provides no behavioral instructions, the scanner will flag this as a risk.
Complex Logic: Highly conditional instructions can be difficult to model and may result in false positives or negatives.

Security and Data-Handling Considerations

Metadata Focus: Only scans instructions; does not touch private user data.
Local Analysis: Recommended to run locally within the development environment.

Install skill

Copy and run in your terminal

npx -y skills add https://github.com/jorgealves/agent_skills --skill prompt-injection-scanner

View on GitHub

prompt-injection-scanner

More AI & Agent Building skills

View all

AI & Agent Building

subagent-driven-development

Dispatch fresh subagents per task with two-stage review (spec compliance, then code quality) in the current session.

295.4K 221.7K

View

AI & Agent Building

ai-image-generation

ai image generation

760 187.6K

View

AI & Agent Building

ai-video-generation

ai video generation

760 187K

View

AI & Agent Building

agent-tools

agent tools

760 186.6K

View

AI & Agent Building

ai-avatar-video

ai avatar video

760 186.6K

View

AI & Agent Building

ai-seo

Optimize content for discovery, citation, and visibility across AI search platforms and LLM assistants.

53.3K 136.7K

View

AI & Agent Building

firebase-ai-logic-basics

Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.

462 125.1K

View

AI & Agent Building

mcp-builder

Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).

179.7K 122.7K

View