Prompt Scan
Static prompt-injection & jailbreak detection.
The problem
Prompt injection is the SQL injection of the AI era. It hides in user messages, retrieved documents, and tool output — and most apps pass all of it straight to the model.
What it does
A fast static scanner that matches text against a curated corpus of documented injection and jailbreak techniques — instruction overrides, system-prompt exfiltration, control-token injection, obfuscation, and tool abuse — each mapped to the OWASP LLM Top 10. Nothing is sent to a model; the scan is pure and local.
Capabilities
- Curated pattern corpus across 8 technique categories
- Severity-weighted risk score (0-100) with verdict
- Every detection mapped to OWASP LLM Top 10 (2025)
- Runs in the browser or as an npm package / CI gate
- Never sends your prompt anywhere — static, local scan
How you run it
Paste any prompt, user message, or retrieved document in the browser and get a scored breakdown. Subscribers can also install @playciso/promptscan and gate CI on the exit code.
Roadmap
- Static pattern matcher + OWASP mapping
- In-browser scan form
- npm package + CI gate
- Behavioral probing against your endpoint
- Custom pattern packs per application
Prompt Scan runs inside PlayCISO for subscribers. The source stays private — no public repos, nothing to fork, nothing for attackers to study. Weekly, monthly, and yearly plans all include every tool.