skill-veil-core 0.2.0

Core library for skill-veil behavioral analysis
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

rule InjectDynamicContext
{
    meta:
        description = "Detects dynamic context injection inside agent skills."
        author = "Marco Pedrinazzi (@pedrinazziM)"
        version = "1.0.0"
        category = "abusing_functions/agentic_misuse"
        severity = "high"
        uuid = "1c5658b3-5722-4eb9-bc4f-8d033008380b"
        date = "2026-03-18"
        reference = "https://code.claude.com/docs/en/skills#inject-dynamic-context"

    keywords:
        $command_placeholder = /!\`.+?\`/

    condition:
        keywords.$command_placeholder
}

rule PromptInjectionJailbreak
{
    meta:
        description = "Detects prompt injection attempts using only keywords"
        author = "Thomas Roccia"
        version = "1.0.0"
        category = "prompt_manipulation/direct_injection"
        severity = "high"
        date = "2026-02-21"

    keywords:
        $new_instruction = "new instruction"
        $previous = "previous instructions"
        $ignore_above = "ignore all the instructions above"
        $forget = "forget your instructions"
        $disregard = "disregard previous"

    condition:
        any of keywords.*
}