来源信息
- 仓库
- ShoumikSaha/agent-skill-security
- 最近来源活动
- 2026年5月12日 23:24
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 17
- 分支
- 2
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
文件资源管理器
5 个文件正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- prompt_inject_removal
- description
- A secure sanitization system to strip instructions from external content.
- metadata
- {"homepage":"https://clawhub.ai/Quarantiine/prompt-inject-removal","openclaw":{"emoji":"🛡️"},"tags":["security","sanitization","prompt-injection","defense-in-depth"]}
# 🛡️ Prompt Inject Removal
This skill provides a secure way to summarize untrusted external content (web pages, articles, blogs) by routing it through a "Zero-Trust" sanitization prompt.
## 🚀 Setup & Configuration
This skill is powered by a local, hardened system prompt. No external API keys or complex configuration are required.
## 📐 Workflow (Sanitization)
1. **Fetch:** Raw content is retrieved via \`web_fetch\` or \`browser\`.
2. **Delimit:** The content is wrapped in \`<untrusted_input_data>\` tags.
3. **Sanitize:** The Main Agent processes the content using the rules in [PROMPT.md].
4. **Ingest:** Only the resulting sanitized summary is used in the conversation.
## 📖 Security Reference
- **Detailed Security Docs:** [references/security.md]
- **Hardened System Prompt:** [PROMPT.md]
---
_Disclaimer: This is a defense-in-depth tool. While it significantly mitigates prompt injection risks, no prompt-based sanitization is 100% foolproof. Review sanitized data before performing state-changing actions._
在 GitHub 查看