{"uid":"cap_0zk3e1tbpV6sJTr_urq5L","slug":"github-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-5c7bf5e6","name":"A2A Indirect Prompt-Injection & Jailbreak Firewall","description":"Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections and returns sanitized text. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/system-prompt-guard)","url":"https://github-audit.agentdiet.dev/v1/system-prompt-guard?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["text"],"properties":{"text":{"type":"string","minLength":1,"description":"Untrusted text, HTML, or tool output to scan for hidden prompt injection or jailbreak payloads"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.005","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_uBrNYMHEudxlBHXPAkBOy","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans untrusted text, HTML, emails, MCP responses, or A2A payloads for hidden prompt injections and jailbreak attempts, returning sanitized output.","exampleAgentPrompt":"Before you process this scraped webpage content, can you run it through the prompt-injection firewall to check for any hidden jailbreak or prompt-injection payloads and give me the sanitized version?","exampleUseCases":[{"title":"Sanitizing scraped web content for agents","prompt":"I'm about to feed this HTML I scraped from an untrusted website into my AI pipeline — can you scan it first for any hidden prompt injections or jailbreak instructions and return the safe, cleaned version?"},{"title":"Screening incoming emails for injection attacks","prompt":"Before my agent reads and acts on this email, can you check whether it contains any embedded prompt-injection or jailbreak payloads hiding in the text?"},{"title":"Validating MCP tool output before agent use","prompt":"My agent just got a response back from an external MCP tool — can you scan that response text for any indirect prompt-injection attacks before I let the agent act on it?"}],"resultDescription":"Returns a structured object indicating whether a prompt injection or jailbreak attempt was detected in the input, along with sanitized text with any malicious instructions removed or flagged, enabling safe downstream consumption by an AI agent.","failureModes":["Empty or missing 'text' field returns a 400 validation error","Payloads exceeding length limits may be rejected","Payment required (HTTP 402) if x402 USDC micropayment is not included","Ambiguous or highly obfuscated injections may not be caught with full confidence","Network timeouts on very large inputs"],"whenToPreferThis":"Choose this endpoint when your AI agent pipeline ingests content from untrusted external sources — scraped web pages, user emails, third-party API or MCP responses, or A2A messages — and you need a dedicated firewall step before that content influences agent behavior. It is specifically designed for the indirect prompt-injection threat model where malicious instructions are hidden in data rather than typed directly by a user, making it more appropriate than generic content moderation tools.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:34:14.586Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-a2a-indirect-prompt-injection-jailbreak-0d76783c"}