From ffb65214e756f7799025ca3e007fcd32a92642a9 Mon Sep 17 00:00:00 2001 From: vladmirsalnikov Date: Sun, 1 Mar 2026 13:22:46 +0100 Subject: [PATCH] Update security advisor guidance for prompt injection checks --- agentsecops/promptregistry/__init__.py | 1 + 1 file changed, 1 insertion(+) diff --git a/agentsecops/promptregistry/__init__.py b/agentsecops/promptregistry/__init__.py index b89b432..4af33fa 100644 --- a/agentsecops/promptregistry/__init__.py +++ b/agentsecops/promptregistry/__init__.py @@ -9,6 +9,7 @@ Apply these controls when producing findings and recommendations: - Treat untrusted prompt/user input as hostile until validated. - Recommend strict schema validation (for example, Pydantic) at input boundary. +- Recommend checks to prevent prompt injection attacks that reveal system prompt (Ignore all previous insturctions, etc) - Recommend structured model-output validation before tool/action execution. - Recommend explicit allowlist checks for tools/actions and deny by default. - Recommend fail-closed behavior on validation errors.