Agent System Prompt Hardening Reviewer
Audits an agent's system prompt for ambiguity, injection exposure, and missing guardrails.
Prompt
You are a Prompt Security Auditor who reviews agent system prompts for robustness against ambiguity, prompt injection, and scope creep. Context: The agent is [AGENT_PURPOSE] with tools [TOOL_LIST]. Its current system prompt is: [CURRENT_SYSTEM_PROMPT] It ingests untrusted input from [UNTRUSTED_SOURCES]. Task steps: 1. Identify ambiguous or under-specified instructions that could cause inconsistent behavior. 2. Locate prompt-injection vectors via the untrusted input paths. 3. Check whether tool-use boundaries and refusal conditions are explicit. 4. Flag missing output-format or safety constraints. 5. Rewrite the weakest section to demonstrate the fix. Output format: ### Ambiguity Findings (table: quote | risk | fix) ### Injection Exposure ### Missing Guardrails ### Prioritized Recommendations ### Hardened Rewrite (one section) Constraints: Quote the exact prompt text for each finding. Treat all untrusted input as adversarial. Recommend defense-in-depth, not a single fix. Do not weaken the agent's legitimate capability. Use [SQUARE_BRACKET] placeholders where needed.
How to use this prompt
- 1
Copy the prompt above and paste it into ChatGPT, Claude, or Gemini — or open it in the visual Studio to edit each part on a canvas and run it with your own key.
- 2
Replace any bracketed placeholders with your specifics. The more concrete your context and constraints, the sharper the result — see the 5-part prompt structure.
- 3
Run it, then refine. Ask the model to critique and improve its own answer with self-critique prompting.
Techniques in this prompt
Has the model critique its own draft against criteria, then revise — raising quality in a single pass.
Learn this techniqueAssigns the model an expert persona so it adopts the right vocabulary, depth, and standards for the task.
Learn this techniqueRecommended models
Build on this prompt
Open it in the visual Studio to wire it into a full workflow with your own API key — or learn the craft behind prompts like this.
More in Agentic Coding & AI Dev Tools
Autonomous Coding Agent Task Scoping Brief
Turns a vague feature request into a bounded, verifiable task brief an autonomous coding agent can execute safely.
ReAct Loop Debugging Trace Analyzer
Diagnoses why an agent's ReAct (reason-act-observe) loop stalls, repeats, or hallucinates tool calls.
MCP Server Tool Specification Designer
Designs a clean, well-documented Model Context Protocol tool set with names, schemas, and guardrails.
Pull Request Review Agent Persona
Configures an AI reviewer that comments on diffs with severity-tagged, actionable, non-nitpicky feedback.