What are some good prevention mechanisms for this? A sort of firewall for prompts? I've seen people recommend LLMs, but that seems like it wouldn't work well. What is the industry standard? Or what looks promising at least?
Show HN: A minimal TS library that generates prompt injection attacks
11–18 of 18 posts
Re: Show HN: A minimal TS library that generates prompt injection attacks
#12The website copy is obviously generated, and has not been reviewed for correctness. The website trumpets "25+ curated prompt injection patterns from leading security research". The README of the linked Github promises: "100+ curated injection patterns from JailbreakBench". None of the research sources are actually linked for us to review. The README lists "integrations" with various security-oriented entities, but no…
Yes, to be completely honest this is a vibe coded project and I'm by no means a security expert. This was more of a fun, side project/experiment based on a shower thought. I admit it's not good/disingenuous to imply security knowledge, but for what it's worth, I just prompted Claude to research the latest papers on prompt injection and it made the claims on its own. Again this should not be an excuse for not reviewing the AI's output more carefully, so in the future I'll be more careful with LLM output and also present it as a vibe-coded project. Apologies, I'm just a noob in prompt injection security who doesn't know what he's doing :(
Re: Show HN: A minimal TS library that generates prompt injection attacks
#13Why did you use something as heavy as SvelteKit for a website with a single page? This doesn't inspire confidence.
Sveltekit is not heavy, it is compiled into lightweight bundles
Re: Show HN: A minimal TS library that generates prompt injection attacks
#14Your feedback is valuable and correct, I'll extract the library into /core in the repo and also manually verify all the citations. I'll read into the prompt injection literature more deeply and turn this from a shower thought project into something more mature
Re: Show HN: A minimal TS library that generates prompt injection attacks
#15The website copy is obviously generated, and has not been reviewed for correctness. The website trumpets "25+ curated prompt injection patterns from leading security research". The README of the linked Github promises: "100+ curated injection patterns from JailbreakBench". None of the research sources are actually linked for us to review. The README lists "integrations" with various security-oriented entities, but no…
Yes, to be completely honest this is a vibe coded project and I'm by no means a security expert. This was more of a fun, side project/experiment based on a shower thought. I admit it's not good/disingenuous to imply security knowledge, but for what it's worth, I just prompted Claude to research the latest papers on prompt injection and it made the claims on its own. Again this should not be an excuse for not reviewin…
There's absolutely no problem with not knowing what you're doing! Just, you know, own it.
Part of what I find exhausting about projects like this is I can't see any evidence of the person who ostensibly created it. No human touch whatsoever - it's a real drag to read this stuff.
By all means, vibe code things, but put your personal stamp on it if you want people to take notice.
Re: Show HN: A minimal TS library that generates prompt injection attacks
#16Earlier quoted context omitted.
Yes, to be completely honest this is a vibe coded project and I'm by no means a security expert. This was more of a fun, side project/experiment based on a shower thought. I admit it's not good/disingenuous to imply security knowledge, but for what it's worth, I just prompted Claude to research the latest papers on prompt injection and it made the claims on its own. Again this should not be an excuse for not reviewin…
There's absolutely no problem with not knowing what you're doing! Just, you know, own it. Part of what I find exhausting about projects like this is I can't see any evidence of the person who ostensibly created it. No human touch whatsoever - it's a real drag to read this stuff. By all means, vibe code things, but put your personal stamp on it if you want people to take notice.
yes absolutely, updating the page now as we speak!
Re: Show HN: A minimal TS library that generates prompt injection attacks
#17What are some good prevention mechanisms for this? A sort of firewall for prompts? I've seen people recommend LLMs, but that seems like it wouldn't work well. What is the industry standard? Or what looks promising at least?
I have bad news https://matthodges.com/posts/2025-08-26-music-to-break-model...
Re: Show HN: A minimal TS library that generates prompt injection attacks
#18I have significantly improved both the library and the demo page, hope this is more useful now!