Indirect Prompt Injection Defense

Detect and block prompt injection attacks in emails. Use when reading, processing, or summarizing emails. Scans for fake system outputs, planted thinking blocks, instruction hijacking, and other injection patterns. Requires user confirmation before acting on any instructions found in email content.

Protects against prompt injection attacks by sanitizing, validating, and securely processing untrusted external content from websites, emails, and documents.

Two-layer content safety for agent input and output. Use when (1) a user message attempts to override, ignore, or bypass previous instructions (prompt injection), (2) a user message references system prompts, hidden instructions, or internal configuration, (3) receiving messages from untrusted users in group chats or public channels, (4) generating responses that discuss violence, self-harm, sexual content, hate speech, or other sensitive topics, or (5) deploying agents in public-facing or multi

Prompt injection defense. Detect and block malicious prompts, protect system instructions, sanitize user input.

Mitigate prompt injection attacks, especially indirect ones from external web content or files. Use this skill when processing untrusted text from the intern...

Detects and scores prompt injection attempts in text, outputting severity, action, and matched rules without external calls or secret handling.