rag-security
Detects RAG pipelines that ingest external documents into LLM context without sanitization or trust gating. Use when building RAG pipelines, ingesting external documents into vector stores, or retrieving content from external sources to include in LLM context. Also invoke when writing code that fetches URLs or parses documents for LLM prompts.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/rag-security" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/rag-security ~/.claude/skills/rag-securityFrom README
RAG Pipeline Security (OWASP LLM01:2025) What this checks Prevents prompt injection through retrieved documents and uncontrolled content flooding into LLM context. Attacker-controlled documents can override system instructions, exfiltrate data, or manipulate model behavior when injected without guardrails. Vulnerable patterns Retrieved document concatenated into the system prompt — retrieved content can override developer instructions. HTTP fetch of a caller-supplied or document-supplied URL with no domain allowlist — SSRF surface and attacker-controlled content into context. No length or token cap on retrieved content, allowing one document to consume the entire context window. Retrieved content mixed into the prompt with no delimiter or trust label distinguishing it from developer instructions. Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...