breaker-ai
Version:
CLI to scan prompts for injection risks
14 lines (13 loc) • 582 B
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.checkUserInputSafety = checkUserInputSafety;
// Warn when {{user_input}} is not quoted or delimited
function checkUserInputSafety(template) {
const placeholder = "{{user_input}}";
if (!template.includes(placeholder)) {
return null;
}
// allow " {{user_input}} ", ' {{user_input}} ', ` {{user_input}} `
const safe = new RegExp(`['"\`][^\\n]*${placeholder}[^\\n]*['"\`]`);
return safe.test(template) ? null : "User input not wrapped in quotes → injection risk.";
}