robustness.evaluate_prompt_injection_resistance

What robustness.evaluate_prompt_injection_resistance does on ContextForge MCP Gateway

AI agents call robustness.evaluate_prompt_injection_resistance to retrieve information from ContextForge MCP Gateway without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why robustness.evaluate_prompt_injection_resistance is rated Low

The tool performs a read-only assessment of security posture. 'Check' and 'evaluate' are diagnostic verbs implying observation and reporting of existing conditions, not creation, modification, execution, or deletion of resources. While security-focused, it fits the Read category as it retrieves/queries security metrics and returns findings without triggering external operations or changing system state.

From the tool's definition Tool description states 'Check prompt injection defenses and security measures'—uses passive language ('check') indicating inspection or assessment of existing defenses rather than modification or execution.

The rule that runs robustness.evaluate_prompt_injection_resistance safely

PolicyLayer is an MCP gateway: it sits between your AI agents and ContextForge MCP Gateway, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For robustness.evaluate_prompt_injection_resistance, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "robustness.evaluate_prompt_injection_resistance": {}
  }
}

Questions about robustness.evaluate_prompt_injection_resistance