Files
codeql/python/ql/test/query-tests/Security/CWE-1427-SystemPromptInjection/agent_test.py
Sotiris Dragonas 018ba92b1e Add additional Python prompt-injection sinks for uncovered SDK methods
Cover prompt-carrying public API methods that were missing from the
framework models:

- OpenAI: videos.create/create_and_poll/edit/remix/extend (Sora, user),
  beta.realtime.sessions.create instructions (system), and role-filtered
  beta.threads.messages.create content (Assistants API).
- Anthropic: legacy completions.create prompt (user).
- agents: Agent.as_tool tool_description (system).
- Google GenAI: caches.create CreateCachedContentConfig system_instruction
  (system) and contents (user).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-18 17:02:14 +03:00

46 lines
1.3 KiB
Python

from agents import Agent, FunctionTool, Runner
from flask import Flask, request # $ Source
app = Flask(__name__)
@app.route("/agent")
def get_input_agent():
persona = request.args.get("persona")
topic = request.args.get("topic")
tool = FunctionTool(
name="lookup",
description="Look up reference material about " + topic, # $ Alert[py/system-prompt-injection]
params_json_schema={},
on_invoke_tool=lambda ctx, args: "...",
)
agent = Agent(
name="Assistant",
instructions="This prompt is customized for " + persona, # $ Alert[py/system-prompt-injection]
handoff_description="Hands off to " + persona, # $ Alert[py/system-prompt-injection]
tools=[tool],
)
agent_tool = agent.as_tool(
tool_name="assistant",
tool_description="Delegates to " + persona, # $ Alert[py/system-prompt-injection]
)
print(agent_tool)
result = Runner.run_sync(
agent,
[
{
"role": "system",
"content": "Behave like " + persona, # $ Alert[py/system-prompt-injection]
},
{
"role": "user",
"content": "A user message.",
}
]
)
print(result.final_output)