- name
- prompt_inject_removal
- description
- A secure sanitization system to strip instructions from external content.
- metadata
🛡️ Prompt Inject Removal
This skill provides a secure way to summarize untrusted external content (web pages, articles, blogs) by routing it through a "Zero-Trust" sanitization prompt.
🚀 Setup & Configuration
This skill is powered by a local, hardened system prompt. No external API keys or complex configuration are required.
📐 Workflow (Sanitization)
- Fetch: Raw content is retrieved via \
web_fetch\or \browser\. - Delimit: The content is wrapped in \
<untrusted_input_data>\tags. - Sanitize: The Main Agent processes the content using the rules in [PROMPT.md].
- Ingest: Only the resulting sanitized summary is used in the conversation.
📖 Security Reference
- Detailed Security Docs: [references/security.md]
- Hardened System Prompt: [PROMPT.md]
_Disclaimer: This is a defense-in-depth tool. While it significantly mitigates prompt injection risks, no prompt-based sanitization is 100% foolproof. Review sanitized data before performing state-changing actions._