Agent Prompt Injection Runbook Auditor v1.0.0

Released for the 2026-06-20 Iceman KPI recovery batch.

What it does

Prompt injection, tool-output trust, external content handling, approvals, and redaction controls before agents browse or ingest untrusted text.

Validation

• python3 -m py_compile scripts/audit_prompt_injection_runbook.py
• python3 scripts/audit_prompt_injection_runbook.py --self-test --json

Security boundary

Local, read-only, stdlib-only scanner. It does not call APIs, execute commands, mutate files, read protected config, enable cron jobs, create Stripe products, or deploy website changes.

Pipeline status

Iceman built gate passed locally. Downstream Viper, Warlock, Hollywood, Rooster, Slider, and production verification gates remain pending.