A rule-based review separates instruction components and calls no remote model.
Prompt Injection Risk Pre-Scan
Scans user, web, or RAG text with time-bounded explainable rules and reports role changes, ignore-previous-instruction phrases, secret or system-prompt requests, and encoded-command signals by line. It is not semantic classification, sandboxing, or a jailbreak guarantee.
What does this tool do?
Find instruction override, secret requests, and tool-abuse signals with local rules.
Prompt Injection Risk Pre-Scan: method and usage
Scans user, web, or RAG text with time-bounded explainable rules and reports role changes, ignore-previous-instruction phrases, secret or system-prompt requests, and encoded-command signals by line. It is not semantic classification, sandboxing, or a jailbreak guarantee.
an instruction with an explicit goal, audience, context, constraints, and expected output format Confirm the shape first with a small example containing no personal data.
an editable prompt draft, coverage metrics, and explicit improvement actions
Practical steps
- Paste only text you are authorized to inspect.
- Run the local pre-scan and review each finding's line and rule.
- Verify with source trust, separate instruction/data channels, allowlists, and real model tests.
model testing with representative normal, missing-context, conflicting, sensitive-data, and prompt-injection cases
The tool calls no remote model and neither generates nor verifies model output.
Suitable use cases
- First-pass RAG-content triage
- Checking tool-using agent input
- Preparing red-team scenarios
Guides for this tool
Browser-Only Agentic AI: Designing Safe Tool Orchestration
Combine semantic search, multi-step plans, visible rationale, error translation, and on-device voice without uploading data.
Read guide →Local Security Guide to Web Crypto, RAG, and Prompt Injection
Apply passphrases, HMAC, SRI, CIDR, RAG budgets, and injection pre-scans with correct security boundaries.
Read guide →Frequently asked questions
What input does Prompt Injection Risk Pre-Scan accept?+
an instruction with an explicit goal, audience, context, constraints, and expected output format Paste only text you are authorized to inspect.
What does Prompt Injection Risk Pre-Scan return?+
an editable prompt draft, coverage metrics, and explicit improvement actions A rule-based review separates instruction components and calls no remote model.
How should I validate Prompt Injection Risk Pre-Scan output?+
model testing with representative normal, missing-context, conflicting, sensitive-data, and prompt-injection cases
Does Prompt Injection Risk Pre-Scan send or store input on a server?+
Tool input is processed in the active tab. Saving to the Workstation or transferring to another tool is a separate choice. Consider browser extensions and shared devices separately; the privacy page explains advertising and network connections.