Prompt Shield
prompt_shieldRead-onlyIdempotent
Detection and analysis of prompt injection, jailbreak, and policy-bypass attempts. Returns an injection risk score, a safe/review/block recommendation, attack indicators, and a safe rewritten version when available.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | 'fast' = pattern scan only (default), 'deep' = pattern + Groq semantic analysis | |
| No | Zambo Pass email for unlimited calls (optional) | ||
| prompt | Yes | The user input or prompt to validate for injection/jailbreak (max 16K chars) | |
| system | No | Your system prompt - also scanned for prompt leak attempts (optional) | |
| context | No | Describe your app for better contextual analysis (optional) | |
| _zambo_key | No | Optional opaque Zambo access capability. Never place it in a URL or public log. | |
| _session_id | No | Optional stable bot-job ID. Reuse it across calls to bind a Day Pass and keep the job ledger together. | |
| certificate | No | If true, freeze this scan as a permanent public certificate and return certificate_url (optional) | |
| _caller_label | No | Optional caller label recorded as a caller-reported claim in the receipt. | |
| _continuity_ai_label | No | Optional self-reported AI client label for the private continuity timeline. Zambo does not independently verify the client. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes | The tool's observed JSON value or plain-text result. |