Prompt Injection Auditor
Security audit skill for LLM agents - prompt injection scanner, attack catalog & defense checklist
Supply asset profile
Research and knowledge work
Deep research, source comparison, literature review, RAG, knowledge search, and reports.
Scenario
Document processing
I need my agent to read PDFs, extract tables, and turn documents into structured data.
Agent fit
Claude Code + Cursor + LangChain
Codex, Claude Code, Cursor, CLI, or custom agents.
Install
Ready
npx skills add screem500/prompt-injection-auditor
Maintenance
fresh
1d since push
Risk
Needs review
Low GitHub adoption signal
GitHub quality
10
70/100 Quality · 75/100 Trust
Coverage tags
Review notes
Low GitHub adoption signal · Quality score needs review
Agent adoption scorecard
Trust, audit, and install readiness at a glance
These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.
Quality
StrongSolid option that is likely worth shortlisting for production workflows.
Trust
Sandbox onlyUseful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.
Audit
Needs reviewA machine-readable review of install readiness, security metadata, maintenance, and adoption risk.
OpenAgentSkill Trust Score v5
Human review before install
Run only in a sandbox and compare close alternatives before using it for real work.
Stars
10 GitHub stars
Repo activity
10 stars, 3 forks
Maintenance
1d since push
License
Apache-2.0
Install
npx skills add screem500/prompt-injection-auditor
Install safety
standard package or runtime install path
Permission surface
secrets or environment access
Agent outcomes
No agent outcome data yet
Docs
Strong README/SKILL.md context
Risk summary
Review before production
- Low GitHub adoption signal
- Quality score needs review
- GitHub adoption: 10 GitHub stars
- Stars/forks activity: 10 stars, 3 forks; issue activity unavailable in current metadata
Install readiness
Install path available
- Install path is available
- Repository evidence is available
- License is declared
- No Agent Proven outcome evidence yet
Agent-readable metadata
Machine-readable decision data for this skill.
Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.
Suited tasks
- Security and compliance workflows
- Claude Code teams
- builders willing to evaluate younger projects
- Inspect risky files
Suited agents
Install decision
- Command
- npx skills add screem500/prompt-injection-auditor
- Policy
- review
- Human review
- yes
Trust and risk
- Trust
- 67/100
- Audit
- 81/100
- Risk level
- Needs review
Outcome loop
- Endpoint
- /api/agent/outcome
- Event ID
- resolve
- Outcomes
- 5
Install command
npx skills add screem500/prompt-injection-auditorDo not use when
- teams that need a vendor-supported SLA
- production agents without a repository review
- Low GitHub adoption signal
- High-risk permission hints: Secrets or environment access
- Quality score needs review
Agent safety v2
53/100 · Avoid automatic install
Sparse or mixed signals. Useful for discovery, but not for autonomous installation.
Test manually in an isolated workspace and compare against safer alternatives.
medium
Network access
Skill likely fetches remote pages, APIs, repositories, or external services.
medium
Filesystem access
Skill may read or write project files, documents, generated artifacts, or local workspace state.
high
Secrets or environment access
Skill metadata references credentials, tokens, environment variables, or secret-bearing workflows.
- High-risk permission hints: Secrets or environment access
- Low GitHub adoption signal
Install targets
Install this skill in your agent workflow
Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.
OpenAgentSkill CLI
Use the registry command when your workflow supports the OpenAgentSkill installer.
$ npx skills add screem500/prompt-injection-auditorAgent resolve plan
Let an agent verify fit before installing.
The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.
Open JSON
/api/agent/resolve?task=Use%20Prompt%20Injection%20Auditor%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Resolve text
/api/agent/resolve?task=Use%20Prompt%20Injection%20Auditor%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text
Install handoff
/api/skills/screem500-prompt-injection-auditor/install
Agent should check
- Task fit and alternatives from Resolve API.
- Audit score, trust score, and safety policy warnings.
- Install target compatibility for Codex, Claude Code, Cursor, or CLI.
Copy prompt
Task: Use Prompt Injection Auditor in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Prompt%20Injection%20Auditor%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/screem500-prompt-injection-auditor/install
Install command: npx skills add screem500/prompt-injection-auditor
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.Agent handoff
Give an agent the install path, not another directory page.
Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.
Install handoff
/api/skills/screem500-prompt-injection-auditor/install
LLM text format
/api/skills/screem500-prompt-injection-auditor/install?format=text
Find alternatives
/api/skills/search?q=Prompt%20Injection%20Auditor&limit=3
Agent prompt
Use Prompt Injection Auditor for this task. Review https://www.openagentskill.com/api/skills/screem500-prompt-injection-auditor/install, then install with: npx skills add screem500/prompt-injection-auditorRegistry metadata
Agent-readable profile for automatic skill selection.
This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.
Manifest
/api/registry/manifest/screem500-prompt-injection-auditor
LLM text
/api/registry/manifest/screem500-prompt-injection-auditor?format=text
Install alias
/api/registry/install/screem500-prompt-injection-auditor
Recommend
/api/registry/recommend?task=Use%20Prompt%20Injection%20Auditor%20in%20an%20agent%20workflow&limit=3
Agent fit
Security and compliance
Platforms
Python, Claude Code, Cursor, LangChain
Audit report
Needs review · 81/100
A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.
Agent decision cockpit
Fallback candidate for Security and compliance
Prototype with this skill first; keep a fallback candidate ready.
Role in stack
Fallback candidate
Primary fit
Security and compliance
Trust label
Prototype first
Install path
Command ready
Use when
- Security and compliance workflows
- Claude Code teams
- builders willing to evaluate younger projects
Evidence
- recent repository activity
- install command or GitHub repo available
- 70/100 quality profile
- 1 OpenAgentSkill engagement events
review first
- Low GitHub adoption signal
Implementation path
- 1Install it in a sandbox agent and run one Security and compliance task end to end.
- 2Compare output quality, latency, and failure behavior against at least one alternative.
- 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.
Trust profile
Sandbox only
Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.
GitHub adoption
FIX10 GitHub stars
Stars/forks activity
FIX10 stars, 3 forks; issue activity unavailable in current metadata
Recent maintenance
PASS1d since push
License clarity
PASSApache-2.0
Good signals
- AI review approved
- Install path is available
- Repository evidence is available
- Recently maintained repository
- Install command has no obvious high-risk pattern
- Outcome loop is ready but needs first real agent run
Review before install
- Low GitHub adoption signal
- Quality score needs review
- GitHub adoption: 10 GitHub stars
- Stars/forks activity: 10 stars, 3 forks; issue activity unavailable in current metadata
- No real agent outcome reports yet
- Human review required before unattended installation
Recommended action
Run only in a sandbox and compare close alternatives before using it for real work.
Quality profile
Strong candidate for agent workflows
Solid option that is likely worth shortlisting for production workflows.
Workflow fit
Use this skill in these scenarios
Reduce risk
Security and compliance
I need my agent to scan a project for security risks and summarize what needs attention.
Parse messy files
Document processing
I need my agent to read PDFs, extract tables, and turn documents into structured data.
Investigate faster
Research agents
I need my agent to research a topic, compare sources, and produce a concise report.
Workflow fit
Add it to a complete workflow
Scrape, clean, and reuse web data
Web data pipeline
A practical workflow for agents that crawl public pages, extract clean content, normalize data, and hand it to downstream research or RAG workflows.
Find, compare, and synthesize
Research report agent
A workflow for agents that gather sources, compare claims, summarize long material, and draft useful research briefs.
Inspect, patch, and verify code
Coding review agent
A workflow for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.
Alternative shortlist
Compare before you install
Similar skills that may fit this task.
Claude Scientific Skills
A comprehensive collection of ready-to-use scientific and research skills for AI agents.
Awesome Claude Skills
A curated list of resources and tools for enhancing Claude AI workflows.
Khazix Skills
A collection of practical, installable AI agent skills for disk cleanup, AI news retrieval, and project management, following the Agent Skills standard.
Overview
# prompt-injection-auditor
[](https://opensource.org/licenses/Apache-2.0) [](https://agentskills.io) [](https://skills.sh)
**An open Agent Skill that turns any AI agent into a prompt-injection security auditor.** Static scanner + attack catalog + defense checklist + authorized red-team payloads — built against real-world incidents like EchoLeak (CVE-2025-32711).
Works with Claude Code, Cursor, Kimi, and 20+ agents that support the open [Agent Skills](https://agentskills.io) standard.
**Measured:** separation between hardened and vulnerable prompts improved from 8.3 to 40.6 points, with zero false positives on the hardened corpus. See [VALIDATION.md](VALIDATION.md).
## Why?
Prompt injection remains unsolved: there is no general defense, and every published mitigation is probabilistic. Real incidents keep proving it:
- **EchoLeak (CVE-2025-32711, CVSS 9.3)** — the first zero-click prompt injection in a production AI system: hidden instructions in an email made Microsoft 365 Copilot exfiltrate OneDrive/SharePoint data via a markdown image, no clicks needed. - **LangGrinch (CVE-2025-68664, CVSS 9.3)** — LangChain Core serialization injection: unescaped `lc` keys let LLM-influenced data be rehydrated as objects, enabling secret extraction. The flaw sits in the *serialization* path, not deserialization. LangChain.js carries the parallel CVE-2025-68665 (CVSS 8.6). - **Langflow (CVE-2025-3248 / CVE-2026-33017)** — unauthenticated RCE in an agent-building framework; the 2026 flaw was exploited in the wild within 20 hours of the advisory, before any public PoC existed. Note that 1.8.2 was widely reported as fixed but remained exploitable — only 1.9.0+ is verified.
In 2026 the threat moved from fra
Platform compatibility
Technical details
- Version
- 1.0.0
- License
- Apache-2.0
- Last updated
- Jul 28, 2026
- Published
- Jul 28, 2026
Frameworks & tools
Decision snapshot
Fallback candidate
recent repository activity
Audit
Install review
Install and adoption review
- Security
- 84/100
- Maintenance
- 100/100
- Install
- 92/100
Agent-proven evidence
Agent-proven evidence
Outcome reports after resolve, review, install, and one narrow run.
- Success rate
- —
- Recent failure
- —
- Outcomes
- 0
- Output quality
- —
- Failed
- 0
- Not relevant
- 0
- Installs
- 0
- Risk blocked
- 0
- Setup needed
- 0
- Production
- 0
No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.
Install
Add to agent workflow
Free and open source. Review the report before installing into production agents.
Growth loop
Share kit
Scenario-led draft for Prompt Injection Auditor, ready for a manual X post.
A practical pick for a real agent workflow: Prompt Injection Auditor: Security audit skill for LLM agents - prompt injection scanner, attack catalog & defense checklist 10 stars https://www.openagentskill.com/skills/screem500-prompt-injection-auditor?ref=x
Optional reply with install command
Listing + install path for Prompt Injection Auditor: https://www.openagentskill.com/skills/screem500-prompt-injection-auditor?ref=x Install: npx skills add screem500/prompt-injection-auditor
Listing source
Community indexed
This listing was indexed from public sources and is not marked official until a maintainer claim is approved.
- Creator
- screem500
- Indexed by
- OpenAgentSkill community index
Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.
Claim this skillOwner claim
Claim this skill listing
This Community indexed listing is attributed to screem500 but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.
Creator backlink kit
Add the evidence badges to your README
Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.
[](https://www.openagentskill.com/skills/screem500-prompt-injection-auditor)
[](https://www.openagentskill.com/skills/screem500-prompt-injection-auditor)
[](https://www.openagentskill.com/skills/screem500-prompt-injection-auditor/audit)
[](https://www.openagentskill.com/skills/screem500-prompt-injection-auditor)Author
screem500
@screem500
Platform fit
Health signals
- GitHub stars
- 10
- Quality score
- 44/100
- Last GitHub push
- Jul 28, 2026
- Framework hints
- 1
- OpenAgentSkill views
- 1
- Install copies
- 0
- Outbound clicks
- 0
Community signal
Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.
Trust & safety
Sandbox only
- GitHub adoption10 GitHub starsFIX
- Stars/forks activity10 stars, 3 forks; issue activity unavailable in current metadataFIX
- Recent maintenance1d since pushPASS
- License clarityApache-2.0PASS
- README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
- Dependency/runtime riskcredential or environment accessINFO
Related skills
Claude Scientific Skills
A comprehensive collection of ready-to-use scientific and research skills for AI agents.
31.2K Stars · 0 InstallsAwesome Claude Skills
A curated list of resources and tools for enhancing Claude AI workflows.
65.9K Stars · 0 InstallsKhazix Skills
A collection of practical, installable AI agent skills for disk cleanup, AI news retrieval, and project management, following the Agent Skills standard.
17.8K Stars · 0 Installs