Show HN: Promptinel – A Security Scanner for Prompts

Hello HN :)

Promptinel is a security scanner for prompts. I think the world needs something like this, because prompts are basically executable artifacts and we need to treat them as such. I want to identify as many bad things as I can before a prompt gets anywhere near runtime. Especially when supplying a common prompt repository for friends or colleagues, or when downloading skills from the internet. You can read more about my motivation in the project's readme: https://github.com/CunningFatalist/promptinel?tab=readme-ov-...

Promptinel finds various attack patterns in prompts, for example:

- prompt override and role spoofing patterns

- download-and-execute chains

- template execution and network fetch behavior

- secret exfiltration intent

- invisible Unicode and obfuscation tricks

- local sensitive file references

Check out the rule documentation for more: https://github.com/CunningFatalist/promptinel/blob/main/docs...

I'm really looking forward to feedback from people, who have built linters or security scanners before. Or just feedback from Go people, really. I'm mainly a PHP and TypeScript dev and use Go in my free time, because I find it fun and love the philosophy behind it.