Prompt Injection Defense
Prompt injection is not a bug you can patch — it is the input/output behavior of LLMs. You can only contain it: limit what an attacker can cause to happen when they succeed, not whether they can attempt it.
This skill covers practical containment patterns for the two failure modes that actually hurt in production:
- The LLM does the wrong thing — calls the wrong tool, returns the wrong data
- The LLM exfiltrates — encodes secrets into an outbound URL,
[Description truncada. Veja o README completo no GitHub.]