{"id":23932,"plugin_id":"plugins_6ab36ff270908191a0338cf5a977ad64","kind":"skill","collection_source":null,"comparison_source":null,"observed_at":"2026-09-30T23:17:50.411Z","digest":"8ac4a251a6235f798d7a0cb3bb8a935178fd1a8c2a4f63f9c84b6242c0d8f445","against":null,"payload":{"description":"Turn prompt-injection findings into defense-in-depth fixes and safe repeatable regression tests.","included_files":[{"relative_path":"._SKILL.md","size_in_bytes":163}],"name":"mitigation-regression-tests","skill_md_contents":"---\nname: mitigation-regression-tests\ndescription: Turn prompt-injection findings into defense-in-depth fixes and safe repeatable regression tests.\n---\n\n# Mitigation and Regression Testing\n\nUse after identifying a plausible injection path or when asked to design preventive controls.\n\n## Mitigation method\n\n1. Start from the demonstrated path and impact; do not prescribe a generic blacklist as the sole control.\n2. Reduce the maximum impact: remove unnecessary tools/data, isolate untrusted-content processing, enforce identity/authorization outside the model, validate actions and outputs, and gate consequential operations.\n3. Preserve structured provenance and clearly delimit untrusted content; use input/output screening only as supplemental signals, with documented false-positive/false-negative limits.\n4. Add safe rendering, robust output schemas, secrets redaction, and monitoring where relevant.\n5. Create regression cases for direct, indirect, encoded/obfuscated, multimodal (if in scope), multi-turn, tool-output, and benign near-miss inputs. Use synthetic data and assert the control outcome, not just a refusal phrase.\n6. Define test environment, expected result, evidence, owner, and residual risk. Recommend retesting after changes to prompts, tools, retrieval, models, memory, or policies.\n\n## Report contract\n\nMap each finding to one or more controls and test IDs. Explain defense layers and residual risk. Never claim exhaustive coverage from a small test suite or certify a system as injection-proof.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}