Tier 1 · instant download
Prompt injection test suite
Test cases you run against your own system to make it misbehave, including through the documents it retrieves.
What you get
- Direct injection cases
- Indirect injection through retrieved documents, the one most suites miss
- Scoring rubric, so a result means the same thing twice
Three ways to tell whether this applies to you.
If none of these describes your situation, this is the wrong product, and the catalog has nine others.
- Your system takes untrusted text, or retrieves documents you do not control
- You need evidence that injection was tested, not an assurance that it was considered
- You have a CI pipeline and somewhere to put a suite that runs in it
The file, before you buy it
Read from the artifact itself rather than described, so what is printed here and what arrives cannot drift apart.
Every column, as it ships
- 01
case_id - 02
class - 03
vector - 04
what_it_attempts - 05
how_to_deliver_it - 06
expected_safe_behaviour - 07
why_it_matters - 08
severity_if_failed - 09
result_0_3 - 10
tester_note
prompt-injection-test-suite.html
5 sections, in the same download.
- Before you run it
- The scoring rubric
- The cases
- Recording a run
- What this suite does not cover
Where the attacks actually come from
Counted from the cases themselves, because the distribution is the argument for a suite rather than a handful of clever prompts.
10 of the 21 cases are indirect: the payload arrives inside content the model retrieves, not in anything a user typed. 16 cases carry the top severity of 3. Every one of the three Tool cases carries it.
- Indirect10 cases
- Direct8 cases
- Tool3 cases
Severity if the case fails
Every case states what it attempts, how to deliver it, the safe behaviour expected, and a 0 to 3 result column, so a run is recorded rather than remembered.
SourceCounted from the class and severity_if_failed columns of deliverables/T1-ASR-01/test-cases.csv at build time.
Delivery and license
Stated here rather than in the terms, because these are the questions asked before a purchase and not after it.
- Delivery
- Immediate download.
- License
- Single organization, internal use, perpetual. Adapt it for your own systems freely. Do not resell it or publish it as your own.
HTML and CSV · 21 test cases, 8 direct and 10 indirect and 3 tool, with a four-level rubric · Version 1.0 · 21 September 2026
What usually goes with this
Each of these does something this one does not, and the line under it says what. They are separate items, not an upsell path.
Hallucination evaluation starter kit
Injection is a security failure and an ungrounded answer is an accuracy one. Different test sets, the same CI job.
$490
AI use policy template
A test suite finds the behavior. The policy is what tells staff what to do about it.
$290
Before you ask
These are the same strings this page puts in its structured data, so a person and an answer engine read identical text.
Can I buy this today?
Yes. It is $390, one payment, in USD, and the file downloads as soon as the payment clears.
What if I want the work done rather than the file?
The fixed-scope engagements on the services page cover the same ground with a person doing the work, at a published price and a fixed duration. Those are available now: a vendor AI assessment at $2,500 over three days is the smallest, an EU AI Act readiness assessment is $4,900 over one week, and an ISO/IEC 42001 gap assessment is $8,900 over two to three weeks.
What exactly is Prompt injection test suite?
Test cases you run against your own system to make it misbehave, including through the documents it retrieves. It is a Tier 1 instant product from MetaMinds, listed at $390 in USD as a single payment. Tier 1 is the entry rung of a three-tier catalog: instant products from $99 to $890, fixed-scope engagements from $2,500 to $8,900, and scoped builds from $18,000.
What happens after I pay?
The download link and your invoice are emailed to you immediately, and the link stays good for 30 days and up to 20 downloads. Because a file you have already downloaded cannot be returned, the checkout asks you to confirm before paying that downloading ends your 14-day right to withdraw. That is Article 16(m) of the Consumer Rights Directive, and it is why the box is there and why it starts unticked.
It downloads the moment you pay.
No call, no scoping, no waiting. If you would rather a person did this work, the engagements on the services page cover the same ground at a fixed price and a fixed duration.