EVIDENCE AND EVALUATION / Undominated.ai
Undominated · Prompt Extraction & Leakage Resilience Audit
Evaluates system prompt confidentiality retention under adversarial prompt extraction and reconstruction attacks.
“Evaluates system prompt confidentiality retention under adversarial prompt extraction and reconstruction attacks.”
01 / THE REASONING
Why this made the selection.
- Pairs a bounded workflow with an offline Python checker and explicitly synthetic example inputs.
- Created for recurring evidence and comparison failures: missing facts remain unknown and every conclusion keeps its scope.
- It names a concrete failure mode: System prompts containing sensitive credentials violate security policies; never store secrets in prompts.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- skills/undominated-prompt-leakage-resilience-audit/SKILL.md
- skills/undominated-prompt-leakage-resilience-audit/scripts/check.py
- skills/undominated-prompt-leakage-resilience-audit/examples/synthetic.json
Our findings
- First-party resource authored by Undominated.ai; this is our own verification record, not an independent endorsement.
- The download preserves the complete source and supporting files. Its manifest hashes identify the exact bytes.
- The checker names its required fields as: required = ["total_attacks_tested", "successful_leaks", "min_retention_score_percent"].
- The pass expression is passes = score >= min_score. The process then runs sys.exit(0 if passes else 1).
Not established by this review
- Model compliance with these instructions on arbitrary tasks
- Native integration in every agent host
- Public GitHub source identity
- Remote installation through the standard Skills CLI
- The new npm resource CLI installation
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
- Download the complete bundle from https://undominated.ai/resources/skills/undominated-prompt-leakage-resilience-audit/bundle.zip and extract it into a new directory.
- Place the extracted directory at .agents/skills/undominated-prompt-leakage-resilience-audit/ or your host's documented skills directory. Preserve SKILL.md, scripts, examples and licence files together.
- Run the documented synthetic example from the skill directory with Python 3.10 or later before using your own evidence.
Before you start
- An Agent Skills compatible host
- Python 3.10 or later for the optional checker
THE COMPLETE REVIEWED DEFINITION
Read it before you reuse it.
Original source bytes, with attribution.
Review the host-specific setup notes above.
---
name: undominated-prompt-leakage-resilience-audit
description: Evaluates system prompt confidentiality retention under adversarial prompt extraction and reconstruction attacks.
license: MIT
metadata:
author: Undominated.ai
version: "1.0.0"
tags: ["prompt-leakage", "jailbreak", "security", "confidentiality"]
---
# Prompt Extraction & Leakage Resilience Audit
Evaluates system prompt confidentiality retention under adversarial prompt extraction and reconstruction attacks.
## When to Use
Deploy before exposing proprietary system instructions in public-facing conversational agents.
## Limitations
System prompts containing sensitive credentials violate security policies; never store secrets in prompts.
## Verification Script
Run the deterministic stdlib checker:
```bash
python3 scripts/check.py examples/synthetic.json
```
Exits `0` on verified pass, `1` on failed assertion, `2` on malformed input.
The download contains SKILL.md. Extract the whole bundle; the supporting files are required. Inspect the included MANIFEST.json for file hashes.
By Undominated.ai. Exact upstream source ↗ · Licence · Attribution
SHA-256 ce58c8447dfbd1736719c4d26f47c9f5fa395c5f7ca35639358333b081cbf20a
Read the applicable licence
MIT License Copyright (c) 2026 Undominated.ai Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
https://undominated.ai/resources/skills/undominated-prompt-leakage-resilience-audit/definition.md
Supports: Workflow and input requirements, Stated limitations
- MIT licence ↗Checked
https://undominated.ai/resources/skills/undominated-prompt-leakage-resilience-audit/LICENSE.txt
Supports: Redistribution terms and attribution
- Complete source bundle ↗Checked
https://undominated.ai/resources/skills/undominated-prompt-leakage-resilience-audit/bundle.zip
Supports: Full local source, supporting files and integrity manifest