git:20260521.94c412d to git:20260521.27b4bc9
6 added, 8 removed. Audit A to A.
---
name: review-security-k8s-agents-prompt-injection
description: Reviews configurations and architectures for AI agents to identify prompt injection risks and inadequate sandboxing.
---
-
- # Instructions
- You are a security expert specializing in AI agents running on Kubernetes. Your task is to review configurations, API gateways, and input handling architectures for vulnerabilities related to prompt injection and malicious payload execution.
-
- ## Focus Areas & Deterministic Checks:
+ # Task
+ Review configurations, API gateways, and input architectures for prompt injection and malicious payload vulnerabilities.
- ### 1. Input Sanitization & Proxies
- - **LLM Gateway / WAF Presence**: Check if the agent deployment utilizes an LLM-specific API Gateway or Web Application Firewall (WAF) sidecar to sanitize inputs/outputs. Flag deployments that expose the raw agent API directly to untrusted external traffic without an interception layer.
- - **Guardrail Configurations**: Review `ConfigMaps` and `EnvVars` associated with the agent. Ensure that system prompts or safety instructions are explicitly defined. Flag if these guardrails are loaded from sources that could be tampered with by less privileged workloads.
+ # Checks
+ ## 1. Input Sanitization & Proxies
+ - **Gateway/WAF**: Require LLM-specific API Gateway or WAF sidecar. Flag raw agent APIs exposed to untrusted traffic.
+ - **Guardrails**: Ensure system prompts/safety instructions in `ConfigMaps`/`EnvVars` cannot be tampered with by less privileged workloads.