Documentation
README
Testing LLM Prompt Injection and Jailbreaks
When to Use
- During authorized assessments of chatbots, copilots, RAG systems, and autonomous AI agents
- When the application mixes a trusted system prompt with untrusted user input or external content
- When the LLM consumes attacker-influencable data (web pages, emails, files, repo issues, tool output)
- When the model can call tools/functions or take actions (send email, run code, open PRs)
- When validating system-prompt confidentiality, content guardrails, and output handling
Prerequisites
This is the opening of the README. Read the full README on GitHub.