Individual skill
pleading-injection-guard
Detects prompt injection hidden in documents from the other side (pleadings, skeletons, bundles, served evidence, opponents' emails and attachments) before an AI reads them, so the model is not turned against your client. Checks word by word that the text an extractor hands the model was visibly drawn on the page: white, near-white, covered, clipped, off-page, tiny, transparent and invisible-mode text in PDF (ink test plus OCR); Word formatting resolved as Word does (styles, shading, theme colours, scaling, off-page frames, fallbacks, unused headers); HTML/CSS, RTF, email with attachments and zips, xlsx/pptx and legacy formats. Flags Unicode smuggling, text addressed to an AI and authorities found only in hidden text. Fails closed. Optional Read-tool hook. Use BEFORE any AI summary or analysis of an opposing or third-party document. Triggers: 'scan for injection', 'is this document safe', 'check the other side's skeleton', 'injection guard'.
skills/pleading-injection-guard-matei-clej/SKILL.md
Source commit f9f28cdccbeb98bbdde010042ea9f525ca427c72
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 949
- Repository last updated
- Oct 19, 2026
- License
- NOASSERTION
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- automation Repository topic
- law Repository topic
- workflows Repository topic
- legal-work Repository topic
- testing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.gitignoreasset · 61 bytesLICENSEasset · 1,067 bytesREADME.mddoc · 2,319 bytesSKILL.mdcore · 18,502 bytesSKILL.mdcore · 18,502 bytesSKILL.mdcore · 18,502 bytesSKILL.mdcore · 18,502 bytesSKILL.mdcore · 18,502 bytesSKILL.mdcore · 18,502 bytesSUBMISSION.mddoc · 3,617 bytesTESTING.mddoc · 1,913 byteshook.pyruns · 9,007 bytespig/__init__.pyruns · 0 bytespig/containers.pyruns · 23,107 bytespig/core.pyruns · 31,930 bytespig/docx.pyruns · 29,334 bytespig/engine.pyruns · 11,305 bytespig/html.pyruns · 15,314 bytespig/pdf.pyruns · 25,374 bytespig/rtf.pyruns · 6,295 bytesscan.pyruns · 7,183 bytestests/fixtures/clean.docxasset · 36,869 bytestests/fixtures/clean.pdfasset · 1,650 bytestests/fixtures/hostile.docxasset · 37,305 bytestests/fixtures/hostile.htmlasset · 297 bytestests/fixtures/hostile.pdfasset · 3,724 bytestests/make_fixtures.pyruns · 4,090 bytestests/run_attacks.pyruns · 6,101 bytestests/run_tests.shruns · 998 bytestests/test_hook.pyruns · 1,978 bytes
No licensed excerpt is available. You can inspect the pinned source.