{"ok":true,"repo":{"id":420,"full_name":"rudratoshs/buried-injections","url":"https://github.com/rudratoshs/buried-injections","description":"🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Reproducible benchmark.","language":"Python","topics":["agentdojo","ai-agents","benchmark","llm-security","mcp","prompt-guard","prompt-injection"],"stars":19,"stars_delta":1,"forks":2,"first_seen":"2026-09-26T17:45:10.002978Z","last_seen":"2026-09-26T20:21:48.625537Z","mentions":1,"platforms":["hn"],"score":42.34,"summary":"buried-injections is a reproducible Python benchmark that runs 10 open-source prompt-injection detectors against 629 realistic AgentDojo attacks embedded in tool output, the way agent firewalls actually see them. It shows none catches most attacks without blocking safe traffic, and that tuning thresholds dramatically reshuffles rankings — Prompt Guard 2 goes from worst to best at a 2% false-alarm budget.","why":"It was discussed on Hacker News because its results challenge widely used prompt-injection defenses like Meta's Prompt Guard 2, showing they catch as little as 1% of realistic attacks when the default thresholds are used.","audience":"Developers building AI agent firewalls, guardrails, or MCP/tool pipelines who need to choose and tune a prompt-injection detector.","tags":["llm-security","prompt-injection","benchmark","ai-agents","python"],"summarized_at":"2026-09-26T17:50:01.047176Z","summary_model":"glm-5.3-flash","fetched_at":"2026-09-27T04:08:07.035621Z","meta":{"license":"MIT","archived":false,"homepage":null,"pushed_at":"2026-09-26T11:13:16Z","created_at":"2026-09-23T17:22:45Z","first_stars":18},"pushed_at":"2026-09-26T11:13:16Z","created_at":"2026-09-23T17:22:45Z","watchers":0,"open_issues":6,"mentions_list":[{"platform":"hn","url":"https://news.ycombinator.com/item?id=49827019","title":"Can open-source prompt-injection detectors catch realistic AI agent attacks?","seen_at":"2026-09-26T20:21:48.625953Z"}],"snapshots":[{"captured_at":"2026-09-26T18:23:18.650485Z","stars":18,"forks":2},{"captured_at":"2026-09-26T18:23:19.058930Z","stars":18,"forks":2},{"captured_at":"2026-09-26T18:28:08.306035Z","stars":18,"forks":2},{"captured_at":"2026-09-26T18:29:44.653937Z","stars":18,"forks":2},{"captured_at":"2026-09-26T18:44:46.852721Z","stars":18,"forks":2},{"captured_at":"2026-09-26T18:58:03.462841Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:12:47.382647Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:16:22.729374Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:19:53.946488Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:21:55.904792Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:28:29.339960Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:32:06.223621Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:35:11.198389Z","stars":18,"forks":2},{"captured_at":"2026-09-26T19:50:10.447757Z","stars":18,"forks":2},{"captured_at":"2026-09-26T20:05:19.364270Z","stars":18,"forks":2},{"captured_at":"2026-09-26T20:20:16.071231Z","stars":18,"forks":2},{"captured_at":"2026-09-26T20:34:51.420086Z","stars":18,"forks":2},{"captured_at":"2026-09-26T20:50:09.482306Z","stars":18,"forks":2},{"captured_at":"2026-09-26T20:52:57.079099Z","stars":18,"forks":2},{"captured_at":"2026-09-26T21:07:56.610939Z","stars":18,"forks":2},{"captured_at":"2026-09-26T21:22:59.560593Z","stars":18,"forks":2},{"captured_at":"2026-09-26T21:38:02.612111Z","stars":18,"forks":2},{"captured_at":"2026-09-26T21:53:01.951196Z","stars":18,"forks":2},{"captured_at":"2026-09-26T22:08:02.775902Z","stars":18,"forks":2},{"captured_at":"2026-09-26T22:38:08.173942Z","stars":18,"forks":2},{"captured_at":"2026-09-26T22:53:03.477086Z","stars":18,"forks":2},{"captured_at":"2026-09-26T23:08:11.631950Z","stars":18,"forks":2},{"captured_at":"2026-09-26T23:23:04.629358Z","stars":18,"forks":2},{"captured_at":"2026-09-26T23:38:06.078064Z","stars":18,"forks":2},{"captured_at":"2026-09-26T23:53:04.258973Z","stars":18,"forks":2},{"captured_at":"2026-09-27T00:08:11.339911Z","stars":19,"forks":2},{"captured_at":"2026-09-27T00:23:12.384526Z","stars":19,"forks":2},{"captured_at":"2026-09-27T00:38:06.104688Z","stars":19,"forks":2},{"captured_at":"2026-09-27T00:53:06.252349Z","stars":19,"forks":2},{"captured_at":"2026-09-27T01:08:07.052605Z","stars":19,"forks":2},{"captured_at":"2026-09-27T01:23:13.268083Z","stars":19,"forks":2},{"captured_at":"2026-09-27T01:38:07.406620Z","stars":19,"forks":2},{"captured_at":"2026-09-27T01:53:08.742443Z","stars":19,"forks":2},{"captured_at":"2026-09-27T02:08:07.172810Z","stars":19,"forks":2},{"captured_at":"2026-09-27T02:23:08.255078Z","stars":19,"forks":2},{"captured_at":"2026-09-27T02:38:07.636573Z","stars":19,"forks":2},{"captured_at":"2026-09-27T02:53:07.247763Z","stars":19,"forks":2},{"captured_at":"2026-09-27T03:08:07.279417Z","stars":19,"forks":2},{"captured_at":"2026-09-27T03:23:07.502288Z","stars":19,"forks":2},{"captured_at":"2026-09-27T03:38:06.970118Z","stars":19,"forks":2},{"captured_at":"2026-09-27T03:53:07.453776Z","stars":19,"forks":2},{"captured_at":"2026-09-27T04:08:07.036531Z","stars":19,"forks":2}]}}