Individual skill
ai-guardrails
Use when building autonomous LLM agents operating in live environments. Protects against prompt injection, tool abuse, data exfiltration, and runaway loops. Keywords: guardrails, prompt injection, IPI, safety, sandboxing, NeMo, LLM Guard.
skills/security/ai-guardrails/SKILL.md
Source commit 1c04afc2a760ed58cea1308851e7626f76c4ff44
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 27
- Repository last updated
- Oct 24, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- claude-code Repository topic
- agent-skills Repository topic
- agentic-workflow Repository topic
- skill-md Repository topic
- ai-agent Repository topic
- ai-workflows Repository topic
- codex Repository topic
- coding-agent Repository topic
- developer-tools Repository topic
- gemini-cli Repository topic
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 4,865 bytes
Read excerpt
# AI Guardrails & Defense-in-Depth
## Overview
The `ai-guardrails` skill provides a comprehensive framework for securing autonomous LLM agents. As agents interact with untrusted external data sources and perform actions on behalf of users, the attack surface expands significantly. This skill focuses on implementing multi-layered defenses to ensure agent safety, reliability, and integrity in live environments.
## Threat Model
Autonomous agents face unique security challenges that require a proactive defense strategy:
1. **Direct Prompt Injection (DPI)**: Malicious input explicitly attempting to hijack the agent's core instructions.
2. **Indirect Prompt Injection (IPI)**: Injected instructions hidden in retrieved web pages, emails, or files that the agent processes.
3. **Prompt Leaking**: Attempts to extract system instructions, internal reasoning paths, or proprietary data.
4. **Data Exfiltration**: Unauthorized access and transfer of PII or sensitive internal data to external endpoints.
5. **SSRF (Server-Side Request Forgery) via Tool Use**: Leveraging agent-enabled tools to probe internal networks or access forbidden resources.
6. **Agent Loop Exploitation**: Crafting inputs that force the agent into infinite loops or resource-exhaustion scenarios.
7. **Tool Abuse**: Circumventing intended tool usage patterns to execute malicious commands.