Prompt Injection Tester

高级security最低上下文:32K

Red-teams LLM applications for prompt injection, jailbreaks, and data exfiltration risks. Generates adversarial test cases for direct and indirect injection, system prompt leakage, tool-call abuse, and unsafe output handling, then reports findings with severity ratings and concrete mitigations such as input isolation, output filtering, and least-privilege tools.

使用场景

  • Generating adversarial prompt injection test suites
  • Probing for system prompt and secret leakage
  • Testing tool-calling agents for unsafe action abuse
  • Evaluating indirect injection via retrieved or user content
  • Producing a remediation report with prioritized fixes

示例提示词

Red-team the following LLM agent for prompt injection vulnerabilities.

Agent description:
- Customer-facing chatbot with access to a "send_email" and "lookup_order" tool
- Retrieves context from user-uploaded documents
- System prompt instructs it to never reveal internal pricing rules

Provide:
1. Direct injection test cases
2. Indirect injection cases via uploaded documents
3. Tool-abuse and data-exfiltration scenarios
4. Severity rating for each finding
5. Concrete mitigations (isolation, filtering, least privilege)

推荐模型

兼容工具

claude-codecursorkiroany

模态

输入: text, code
输出: text

相关 Skills

作者

OpenModels Community

@openmodelsrun