Prompt Injection Triage — Development skill for Claude Code
Assess whether flagged I/O text is a real prompt-injection / jailbreak that warrants action.
How to install Prompt Injection Triage
Installs to ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage/SKILL.md
mkdir -p ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage && curl -fsSL https://raw.githubusercontent.com/A3S-Lab/Sentry/HEAD/skills/prompt-injection-triage.md -o ~/.claude/skills/a3s-lab-sentry-prompt-injection-triage/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Prompt Injection Triage does
name: prompt-injection-triage description: Assess whether flagged I/O text is a real prompt-injection / jailbreak that warrants action.
Prompt-injection triage
Use this when L1/L2 flagged `SslContent` (the agent's LLM prompt or completion) as containing injection or jailbreak markers.
What to establish
- Direction. Is the marker in the agent's input (a tool result, a fetched web page, a file it read — i.e. untrusted content trying to hijack the agent) or its output? I
Alternatives in Development
- Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
- Claude Supermemory — Persistent memory across sessions and projects using Supermemory 2.3k ★
- Maestro Next — Unified entry for all development intents — classify intent, assess complexity, route to the correct execution 530 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Privilege Escalation Triage
Decide whether an observed privilege change (setuid/ptrace/capability) is a real escalation attempt or benign.
Prompt Injection Benchmark
A reproducible prompt-injection benchmark that measures which defenses actually work: each payload is replayed
Cua Hunt
Hunt Computer-Use-Agent (CUA) prompt-injection surface — instructions planted in CUA-readable DOM channels (hi
Prompt Injection Bench
Hand-authored indirect prompt-injection attack corpus + honest ASR/FPR benchmark of 4 defenses on a real tool-
Vibememo Eval
Periodic VibeMemo evaluation and capture. Runs on a loop (default 30m) to assess whether significant decisions
Session Budget
Assess whether to compact/clear this session and prepare a reinit-ready handoff
Related Agents
Kavach LLM
KAVACH LLM/AI security specialist. Audits prompt injection (direct + indirect/RAG), jailbreak/persona/system-p
AI Prompt Architect
Designs and versions LLM system prompts for ai-system / agent-product archetypes. Outputs docs/decisions/ADR-{
Bnb Explorer
Reconnaissance agent that scouts a user prompt and the target repository to assess scope before a break/bake w