Injection Detection

1# flowlink.yaml
2injection_detection:
3  enabled: true
4
5  layers:
6    l1: true       # Pattern Matching
7    l1_5: true     # AST Analysis
8    l2: true       # Interpreter Simulation
9    l3: true       # ML Classification
10
11  # Sensitivity: medium | high | paranoid
12  # medium  - balance of false positives and detection rate
13  # high    - lower threshold, more detections, more false positives
14  # paranoid - maximum protection for critical systems
15  sensitivity: "medium"
16
17  # Organization-specific patterns
18  custom_patterns: []
19
20  # Whitelisted commands (skip all detection layers)
21  allowed_commands:
22    - "git status"
23    - "git diff"
24    - "npm test"
25    - "cat package.json"
26
27  # Log-only mode: detect but do not block
28  log_only: false

1{
2  "request_id": "req_abc123",
3  "status": "blocked",
4  "shield": {
5    "injection_detected": true,
6    "injection_details": {
7      "layer": "L1",
8      "confidence": 0.97,
9      "threat_type": "direct_injection",
10      "matched_pattern": "ignore previous instructions",
11      "layers_triggered": ["L1"],
12      "timestamp": "2025-01-15T10:30:00Z"
13    },
14    "sandbox": { "allowed": false },
15    "total_score": 0.97
16  },
17  "action": "block",
18  "reason": "Prompt injection detected by L1: pattern match"
19}

1# flowlink.yaml — organization-specific patterns
2injection_detection:
3  custom_patterns:
4    # Block access to internal services
5    - name: "internal-api-access"
6      pattern: "ssh.*internal\.company\.com"
7      severity: "high"
8      description: "Access to internal SSH server"
9
10    # Block a known team-specific jailbreak
11    - name: "team-jailbreak"
12      pattern: "BYPASS_MODE.*ENABLED"
13      severity: "critical"
14      description: "Known team-specific jailbreak attempt"
15
16    # Protect against specific secret leaks
17    - name: "prod-secret-leak"
18      pattern: "(AWS_SECRET|DB_PASSWORD|PRIVATE_KEY).*(cat|echo|print)"
19      severity: "critical"
20      description: "Production secret extraction attempt"