Show HN: A minimal TS library that generates prompt injection attacks
prompt-injector.blueprintlab.ioI made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use.
Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
Was the whole lib and website vibe coded? I can't find any instructions on how to use it, the repo is for the website itself and the readme is AI blurb that doesn't make me any wiser.
???Even the "prompt-injector" NPM package is something completely different. Does this project even exist?
The project appears to be located inside the repo of the website: https://github.com/BlueprintLabIO/prompt-injector/tree/main/...
[dead]
The meat seems to be in https://github.com/BlueprintLabIO/prompt-injector/tree/main/..., the generation could be done without any UI but then it probably would not look so flashy.
What are some good prevention mechanisms for this? A sort of firewall for prompts? I've seen people recommend LLMs, but that seems like it wouldn't work well. What is the industry standard? Or what looks promising at least?
Nothing yet. Probably a new kind of model needs to be trained that can find injected prompts, sort if like an immune system for LLMs. Then the sanitized data can be passed to the LLM after.
No real solution for it yet. I would be interested to try to train a model for this but no budget atm.
[dead]
Why did you use something as heavy as SvelteKit for a website with a single page? This doesn't inspire confidence.