Prompt Injection skills

154 tagged Prompt Injection, measured the same way as everything else here.

Browse within: ai-security 59openclaw 45devsecops 42code-scanning 30llm-security 28prompt-engineering 22agent-design 15cangjie-skill 15context-management 15ai-red-teaming 10公众号 10owasp 8jailbreak 7kubernetes 7

claudini

01

romovpa/claudini

Skill Claude CodeCodex

Run one iteration of the autoresearch loop — study existing attack methods, design a better optimizer, implement it, benchmark it, and commit. Meant to be called repeatedly via /loop.

241 3mo ago A 42 tokens original Apache-2.0

agent-delegation

02

kangarooking/system-prompt-skills

Skill Claude CodeCodex

A guide for designing systems where several specialised AI agents share work. It covers dividing responsibilities, passing short task summaries, managing task stages, and checking results.

176 4mo ago A 141 tokens original MIT

memory-system

03

kangarooking/system-prompt-skills

Skill Claude CodeCodex

Design guidance for giving an AI a persistent memory system. It covers storing, finding, using, changing, and deleting information such as user preferences and project knowledge.

176 4mo ago A 166 tokens original MIT

tool-specification

04

kangarooking/system-prompt-skills

Skill Claude CodeCodex

Tool specification defines how an AI discovers, describes, authorizes, and uses external tools. Tools are connected functions or services, such as APIs, browsers, or file operations.

176 4mo ago A 151 tokens original MIT

prompt-guard

05

seojoonkim/prompt-guard

Skill Claude CodeCodex

600+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography, and cascade amplification. Optional API for early-access and premium patterns. Tiered loading, hash cache, 11 SHIELD categories, 10 languages.

174 +1 4mo ago B 61 tokens original MIT

CyberStrategyInstitute/ai-safe2-framework

Skill Claude CodeCodex

Apply AI SAFE2 v3.1 to design, build, audit, test, and govern AI agents, multi-agent systems, RAG, MCP/tool integrations, and AI infrastructure. Use the 161-control core taxonomy plus applicable profile overlays such as CP.5.MCP MCP-1 through MCP-19. Classify autonomy with ACT tiers, enforce HEAR and replication…

139 4d ago A 105 tokens

security-guide

07

jnMetaCode/shellward

Skill Claude CodeCodex

A security deployment guide for OpenClaw, with instructions in English and Chinese. It covers network exposure, container isolation, credentials, permissions, and audit logging.

131 +1 2mo ago B 23 tokens original Apache-2.0

samarailly51-pixel/claimpilot-harness

Skill Claude CodeCodex

Review and structure auto insurance bodily injury claims, including intake triage, evidence completeness, injury causation, treatment chronology, medical necessity, wage-loss support, negotiation risks, and human escalation. Use when analyzing bodily injury claim files, designing claims-agent workflows, drafting…

117 9d ago A 76 tokens original MIT

brin-check

09

superagent-ai/brin

Skill Claude CodeCodex

Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources.

50 5mo ago A 44 tokens

safety-scanning

10

MaxwellCalkin/sentinel-ai

Skill Claude CodeCodex

Part of sentinel-ai

Automatically scan user inputs and LLM outputs for safety issues including prompt injection, PII leaks, harmful content, toxicity, and hallucinations. Use when processing untrusted text, reviewing code for security issues, or validating LLM responses.

21 5mo ago A 52 tokens original Apache-2.0

secureai-scan

11

akanthed/SecureAI-Scan

Skill Claude CodeCodex

Use when the user asks to scan a repo for AI/LLM security issues, wants to know "is this skill safe?" before installing an Agent Skill, needs to "scan my MCP config" or check an MCP server before trusting it, asks about prompt injection / tool poisoning / RAG poisoning risk in their code, or is about to install any…

19 4d ago A 109 tokens original MIT

log-note

13

akanthed/SecureAI-Scan

Skill Claude CodeCodex

Appends a note the user provides to the project's activity log.

19 4d ago A 16 tokens original MIT

skill-sentinel

14

EvolutionUnleashed/skill-sentinel

Skill Claude CodeCodex

Security scanner and threat analyzer for AI agent skills. Activate this skill whenever a new skill is added to the workspace, when the user imports or installs a skill from an external source, when asked to audit or review an existing skill for safety, or when the user mentions scanning, vetting, checking, or…

17 6mo ago D 125 tokens

screem500/prompt-injection-auditor

Skill Claude CodeCodex

Security audit of LLM system prompts, agent instruction files (SKILL.md, AGENTS.md, CLAUDE.md), and agent configurations against prompt injection attacks. Use when the user wants to (1) audit or harden a system prompt or agent instructions against prompt injection, (2) review an agent skill or system prompt for…

15 19d ago A 159 tokens original Apache-2.0

adamsjack711-ux/pkgxray

Skill Claude CodeCodex

Audit supplied evidence for AI coding-agent extensions, Codex plugins, Claude Code extensions, and MCP servers using concrete supply-chain security indicators.

11 14d ago A 36 tokens original MIT

evidence-to-skill

17

Sanexxxx777/evidence-to-skill

Skill Claude CodeCodex

Convert repositories, books, incident reports, transcripts, documentation, and other source material into the smallest justified AI skill or reference artifact. Use when extracting reusable practices from external or internal sources, deciding whether material deserves promotion into agent instructions, building an…

11 1mo ago A 78 tokens original MIT

audit

18

luisgf/infrabroker

Skill Claude CodeCodex

Recurring security & correctness audit of the infrabroker repo. Iteratively find, fix, and CLOSE issues across security / logic / documentation — each finding tracked as a GitHub issue, each fix landing as an auto-merged PR that closes it. Use when the user asks to audit the repo, run a security/correctness pass, hunt…

11 8d ago A 84 tokens GPL-3.0

issue

19

luisgf/infrabroker

Skill Claude CodeCodex

Work a GitHub issue of infrabroker end-to-end — branch first, implement with tests, changelog entry under [Unreleased], make verify, then a PR that closes the issue on merge (auto-merge). Use when the user asks to work on, implement, fix or ship a specific issue, pick up the next issue from the backlog, or continue…

11 8d ago A 79 tokens GPL-3.0

release

20

luisgf/infrabroker

Skill Claude CodeCodex

Cut and publish a new infrabroker release end-to-end — semver bump, CHANGELOG (folding the [Unreleased] section), server.json + HANDOFF, make verify, release PR, annotated tag, and the CI-driven GitHub release + multi-arch ghcr image + MCP Registry publish. Use when the user asks to release, publish, cut/ship/tag a…

11 8d ago A 94 tokens GPL-3.0

polygraph

21

polygraphso/litmus

Skill Claude CodeCodex

Part of polygraph

Behavioral trust grades (A–F) for MCP servers. Use when an agent needs to check whether an MCP server is safe before using it, verify an onchain attestation before trusting or paying a server, look up a server's published grade, get a project graded, or understand why a server received a grade. Polygraph connects to…

8 1mo ago A 225 tokens original Apache-2.0

langgraph-proof

22

zrk222/code-factory

Skill Claude CodeCodex

Part of code-factory-langgraph

Use when building, reviewing, or debugging a LangGraph flow that must prove a resumed run preserved its recorded semantic transitions and side-effect discipline.

6 3d ago A 32 tokens

karpathy-guidelines

23

meghal86/promptsonar

Skill Claude CodeCodex

Behavioral guidelines to reduce common LLM coding mistakes. Use when writing, reviewing, debugging, testing, or refactoring code to avoid overcomplication, make surgical changes, surface assumptions, and define verifiable success criteria.

5 3d ago A 50 tokens original MIT

meghal86/promptsonar

Skill Claude CodeCodex

Use when: the user asks to run system maintenance. Capability: executes shell commands via shellexec. Route maintenance commands through the system shell and run them.

5 3d ago A 0 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: