@dotsetlabs/tollgate 0.1.0

package/dist/analyzers/prompt-injection.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Prompt Injection Analyzer
+ *
+ * Detects prompt injection attacks in tool arguments by scanning for common
+ * injection patterns that attempt to manipulate AI behavior or bypass security.
+ *
+ * Detection patterns include:
+ * - "Ignore previous instructions" and variants
+ * - System prompt manipulation attempts
+ * - Role confusion attacks ("You are now...")
+ * - Base64-encoded prompts
+ * - Unicode obfuscation (homoglyphs, invisible characters)
+ * - Markdown/HTML injection (javascript: links, etc.)
+ * - Delimiter injection (trying to break out of context)
+ * - Jailbreak patterns
+ *
+ * @module analyzers/prompt-injection
+ */
+import type { AnalysisResult, ContentAnalyzer, AnalyzerContext } from './types.js';
+/**
+ * Prompt Injection Analyzer
+ *
+ * Classifies content by injection risk:
+ * - safe: No injection patterns detected
+ * - read: Minor suspicious patterns (low confidence)
+ * - write: Moderate injection indicators
+ * - destructive: High-confidence injection patterns
+ * - dangerous: Clear prompt injection attempt
+ */
+export declare class PromptInjectionAnalyzer implements ContentAnalyzer {
+    readonly name = "prompt-injection";
+    /**
+     * Analyze content for prompt injection patterns.
+     */
+    analyze(content: string, _context?: AnalyzerContext): AnalysisResult;
+    /**
+     * Normalize content for pattern matching.
+     * Removes extra whitespace, converts to lowercase, etc.
+     */
+    private normalizeContent;
+    /**
+     * Check for instruction override patterns.
+     * These are the most common prompt injection patterns.
+     */
+    private checkInstructionOverride;
+    /**
+     * Check for system prompt manipulation attempts.
+     */
+    private checkSystemPromptManipulation;
+    /**
+     * Check for role confusion attacks.
+     */
+    private checkRoleConfusion;
+    /**
+     * Check for Base64-encoded content that might hide injection.
+     */
+    private checkBase64Encoding;
+    /**
+     * Check for Unicode obfuscation techniques.
+     */
+    private checkUnicodeObfuscation;
+    /**
+     * Check for Markdown/HTML injection.
+     */
+    private checkMarkdownInjection;
+    /**
+     * Check for delimiter injection attempts.
+     */
+    private checkDelimiterInjection;
+    /**
+     * Check for jailbreak patterns.
+     */
+    private checkJailbreakPatterns;
+    /**
+     * Check for data exfiltration attempts via prompt injection.
+     */
+    private checkDataExfiltration;
+    /**
+     * Helper: Check if decoded content contains injection keywords.
+     */
+    private containsInjectionKeywords;
+    /**
+     * Helper: Get ratio of printable characters.
+     */
+    private getPrintableRatio;
+    /**
+     * Helper: Compare risk levels.
+     */
+    private isHigherRisk;
+    /**
+     * Helper: Get reason string based on risk level and triggers.
+     */
+    private getRiskReason;
+}
+//# sourceMappingURL=prompt-injection.d.ts.map

package/dist/analyzers/prompt-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../src/analyzers/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,QAAQ,CAAC,IAAI,sBAAsB;IAEnC;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,cAAc;IA6GpE;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAYxB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IA6DhC;;OAEG;IACH,OAAO,CAAC,6BAA6B;IA4DrC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA2D1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgD3B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAuF/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuF9B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA4D/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAmE9B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAmBjC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;OAEG;IACH,OAAO,CAAC,aAAa;CAetB"}