A3S-Lab

Prompt Injection Triage — Development skill for Claude Code

Development community

Assess whether flagged I/O text is a real prompt-injection / jailbreak that warrants action.

How to install Prompt Injection Triage

Installs to ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage/SKILL.md

Terminal
mkdir -p ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage && curl -fsSL https://raw.githubusercontent.com/A3S-Lab/Sentry/HEAD/skills/prompt-injection-triage.md -o ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Prompt Injection Triage does


name: prompt-injection-triage description: Assess whether flagged I/O text is a real prompt-injection / jailbreak that warrants action.

Prompt-injection triage

Use this when L1/L2 flagged `SslContent` (the agent's LLM prompt or completion) as containing injection or jailbreak markers.

What to establish

  1. Direction. Is the marker in the agent's input (a tool result, a fetched web page, a file it read — i.e. untrusted content trying to hijack the agent) or its output? I

Alternatives in Development

  • Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
  • Claude Supermemory — Persistent memory across sessions and projects using Supermemory 2.3k ★
  • Maestro Next — Unified entry for all development intents — classify intent, assess complexity, route to the correct execution 530 ★

Full documentation available on GitHub

View Source Repository