GitHub repository documents 16 prompt injection techniques and defense strategies for public AI chats
A developer built a custom AI chat on their website as an experiment and encountered multiple security challenges when real users attempted to break it. The experience prompted the creation of a comprehensive security guide available on GitHub.
Security challenges encountered
Users attempted various attacks including:
- Prompt injection
- Roleplay attacks
- Multilingual tricks
- Base64 encoded payloads
Defense strategies implemented
The developer documented a defense-in-depth approach covering:
- Input sanitization
- Rate limiting
- Zero-trust system prompt design
- Output controls
- Cost caps
GitHub repository contents
The repository includes:
- A breakdown of 16 prompt injection techniques
- A Claude code skill that automatically tests all 16 techniques against your chatbot
- Full defense implementation details
The developer notes that users tried things they "never would have thought to test" and that the guide is intended to be useful for anyone implementing similar public AI chat systems.
📖 Read the full source: r/ClaudeAI
👀 See Also
CodeWall AI Agent Discovers Critical Vulnerabilities in McKinsey's Lilli Platform
CodeWall's autonomous offensive AI agent gained full read/write access to McKinsey's internal Lilli AI platform database within 2 hours, exposing 46.5 million chat messages, 728,000 files, and sensitive system configurations through SQL injection and IDOR vulnerabilities.
Smart Bash Permission Hook for Claude Code Prevents Compound Command Bypass
A Python PreToolUse hook addresses a security gap in Claude Code's permission system where compound bash commands could bypass allow/deny patterns. The script decomposes commands into sub-commands and checks each individually against existing permission rules.
Caelguard: Open-source security scanner for OpenClaw skills
Caelguard is an MIT-licensed, locally-run scanner that detects security issues in OpenClaw skills, including prompt injection, credential harvesting, and obfuscated payloads. Research shows approximately 20% of published skills contain concerning patterns.
Coldkey: Post-Quantum Age Key Generation and Paper Backup Tool
Coldkey generates post-quantum age keys (ML-KEM-768 + X25519) and produces single-page printable HTML backups with QR codes for offline storage.