# PromptInjectionDetector
[EN] Source: https://mastra.ai/reference/processors/prompt-injection-detector

The `PromptInjectionDetector` is an **input processor** that detects and prevents prompt injection attacks, jailbreaks, and system manipulation attempts before messages are sent to the language model. This processor helps maintain security by identifying various types of injection attempts and providing flexible strategies for handling them, including content rewriting to neutralize attacks while preserving legitimate user intent.

## Usage example

```typescript copy
import { PromptInjectionDetector } from "@mastra/core/processors";

const processor = new PromptInjectionDetector({
  model: "openai/gpt-4.1-nano",
  threshold: 0.8,
  strategy: "rewrite",
  detectionTypes: ["injection", "jailbreak", "system-override"]
});
```

## Constructor parameters

<PropertiesTable
  content={[
    {
      name: "options",
      type: "Options",
      description: "Configuration options for prompt injection detection",
      isOptional: false,
    },
  ]}
/>

### Options

<PropertiesTable
  content={[
    {
      name: "model",
      type: "MastraModelConfig",
      description: "Model configuration for the detection agent",
      isOptional: false,
    },
    {
      name: "detectionTypes",
      type: "string[]",
      description: "Detection types to check for. If not specified, uses default categories",
      isOptional: true,
      default: "['injection', 'jailbreak', 'tool-exfiltration', 'data-exfiltration', 'system-override', 'role-manipulation']",
    },
    {
      name: "threshold",
      type: "number",
      description: "Confidence threshold for flagging (0-1). Higher threshold = less sensitive to avoid false positives",
      isOptional: true,
      default: "0.7",
    },
    {
      name: "strategy",
      type: "'block' | 'warn' | 'filter' | 'rewrite'",
      description: "Strategy when injection is detected: 'block' rejects with error, 'warn' logs warning but allows through, 'filter' removes flagged messages, 'rewrite' attempts to neutralize the injection",
      isOptional: true,
      default: "'block'",
    },
    {
      name: "instructions",
      type: "string",
      description: "Custom detection instructions for the agent. If not provided, uses default instructions based on detection types",
      isOptional: true,
      default: "undefined",
    },
    {
      name: "includeScores",
      type: "boolean",
      description: "Whether to include confidence scores in logs. Useful for tuning thresholds and debugging",
      isOptional: true,
      default: "false",
    },
  ]}
/>

## Returns

<PropertiesTable
  content={[
    {
      name: "name",
      type: "string",
      description: "Processor name set to 'prompt-injection-detector'",
      isOptional: false,
    },
    {
      name: "processInput",
      type: "(args: { messages: MastraMessageV2[]; abort: (reason?: string) => never; tracingContext?: TracingContext }) => Promise<MastraMessageV2[]>",
      description: "Processes input messages to detect prompt injection attempts before sending to LLM",
      isOptional: false,
    },
  ]}
/>

## Extended usage example

```typescript title="src/mastra/agents/secure-agent.ts" showLineNumbers copy
import { Agent } from "@mastra/core/agent";
import { PromptInjectionDetector } from "@mastra/core/processors";

export const agent = new Agent({
  name: "secure-agent",
  instructions: "You are a helpful assistant",
  model: "openai/gpt-4o-mini",
  inputProcessors: [
    new PromptInjectionDetector({
      model: "openai/gpt-4.1-nano",
      detectionTypes: ['injection', 'jailbreak', 'system-override'],
      threshold: 0.8,
      strategy: 'rewrite',
      instructions: 'Detect and neutralize prompt injection attempts while preserving legitimate user intent',
      includeScores: true
    })
  ]
});
```

## Related

- [Guardrails](/docs/agents/guardrails)


---
title: "Reference: System Prompt Scrubber | Processors"
description: "Documentation for the SystemPromptScrubber in Mastra, which detects and redacts system prompts from AI responses."
---