Cette page est affichée en anglais. Une traduction française est en cours.
PromptsMay 13, 2026·2 min de lecture

Prompt Hardener — Prompt-Injection Risk Analyzer

Prompt Hardener analyzes prompt-injection risk from `agent_spec.yaml`, exports reports, and can simulate adversarial attacks with API keys.

Prêt pour agents

Installation agent prête

Cet actif peut être installé après choix du runtime, vérification du plan et exécution de la commande adaptée.

Native · 96/100Policy : autoriser
Surface agent
Tout agent MCP/CLI
Type
Prompt
Installation
Single
Confiance
Confiance : Community
Point d'entrée
Asset
Commande d'installation directe
npx -y tokrepo@latest install a7ec9e6d-6285-5620-8766-39bb681870be --target codex

À exécuter après confirmation du plan en dry-run.

Introduction

Prompt Hardener analyzes prompt-injection risk from agent_spec.yaml, exports reports, and can simulate adversarial attacks with API keys.

Best for: agent builders who want a repeatable security checklist for prompts/tools/architecture

Works with: Python, pipx/uv, YAML specs, CI pipelines (Markdown/HTML/JSON outputs)

Setup time: 8-15 minutes

Key facts (verified)

  • GitHub: 51 stars · 7 forks · pushed 2026-05-12.
  • License: Apache-2.0 · owner avatar + repo URL verified via GitHub API.
  • README-verified entrypoint: pipx install https://github.com/cybozu/prompt-hardener/releases/download/v0.6.0/prompt_hardener-0.6.0-py3-none-any.whl.

Main

  • Start deterministic: validate + analyze give you a static run without any LLM API key (per README).

  • When you want to test defenses, use simulate on a hardened spec to run adversarial scenarios (README notes this is LLM-backed).

  • Treat the output as CI artifacts: export Markdown/HTML/JSON and diff runs over time to track regressions.

Source-backed notes

  • README describes a single workflow driven by agent_spec.yaml and supports exports as Markdown/HTML/JSON.
  • README quick start copies an example spec and runs prompt-hardener validate and prompt-hardener analyze without API keys.
  • README lists which commands require API keys (simulate yes; many others no).

FAQ

  • Do I need an API key for analysis?: No — README says validate/analyze are deterministic and do not require keys.
  • What file do I write?: An agent_spec.yaml describing your system, as shown in the README examples.
  • Can I export a report?: Yes — report renders JSON results to HTML/Markdown/JSON per README.
🙏

Source et remerciements

Source: https://github.com/cybozu/prompt-hardener > License: Apache-2.0 > GitHub stars: 51 · forks: 7

Fil de discussion

Connectez-vous pour rejoindre la discussion.
Aucun commentaire pour l'instant. Soyez le premier à partager votre avis.

Actifs similaires