eshaansaini2004/Prompt Injection Scanner

Scan PR descriptions, issue bodies, or any text for prompt injection attacks using PIF.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit May 14, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: eshaansaini2004/prompt-injection-firewall@5576e57bbca8f1c45974180de1868e245832959e # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
textText to scan for prompt injection attacks.yes
thresholdConfidence threshold to flag as injection (0.0–1.0). Default is 0.75.no0.75
fail_on_injectionFail the workflow step if an injection is detected. Default true.notrue
github_tokenGitHub token for posting comments. Pass secrets.GITHUB_TOKEN.no""
namedescription
is_injectiontrue if injection detected, false otherwise
confidenceDetection confidence score (0.0–1.0)
attack_typeDetected attack category