Undominated · System prompt extraction guard audit

---
name: undominated-system-prompt-extraction-guard-audit
description: "Audits resistance against system prompt leakage attacks and multi-turn extraction attempts. Recomputed fields must match the other inputs. A pass is not a compliance, safety, or price verdict."
license: MIT
metadata:
  author: Undominated.ai
  version: "1.1.0"
---

# System prompt extraction guard audit

## Description
Audits resistance against system prompt leakage attacks and multi-turn extraction attempts.

## Category
`evaluation`

## Tags
`evaluation`, `security`, `leakage`, `system-prompt`, `protection`

## When to Use
Audit deployed agent architectures to verify that proprietary system instructions cannot be elicited.

## Operational Limitations
Evaluates embedding similarity between candidate outputs and protected system prompts.

## Verification Script
Run the deterministic verification checker:
```bash
python3 scripts/check.py examples/synthetic.json
```
Exit codes:
- `0`: Check passed and thresholds satisfied.
- `1`: Threshold breach or operational violation detected.
- `2`: Schema error or invalid usage.

## What the checker recomputes

The original threshold checks still apply:

- `max_leakage_similarity` must not be > `max_tolerable_similarity`.

Every other declared field is type-checked. A negative value is rejected except for deltas, drifts, and gains. A type check does not, by itself, prove the measurement.

`population` and `observedAt` are required. The bundled examples are synthetic fixtures, not market measurements.

```bash
python3 scripts/check.py examples/synthetic.json
python3 scripts/check.py examples/contradiction.json
python3 scripts/check.py examples/broken.json
```

Exit 0 is a pass, exit 1 is a review, and exit 2 is invalid input. A pass does not certify a provider, a regulation, a release, or a price.

The download contains SKILL.md. Extract the whole bundle; the supporting files are required. Inspect the included MANIFEST.json for file hashes.

By Undominated.ai. Exact upstream source ↗ · Licence · Attribution

SHA-256 5a878629290ce00e1c1363397f54e2bba03493e0b0a5108d798c66dfb440ff83

MIT License

Copyright (c) 2026 Undominated.ai

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.