---
title: "Buy: Prompt-Injection Defenses Playbook & Detection Ruleset ($39.00)"
method: GET
path: "/v1/buy/prompt-injection-defenses-playbook"
---

# Buy: Prompt-Injection Defenses Playbook & Detection Ruleset ($39.00)

`GET /v1/buy/prompt-injection-defenses-playbook`

## Request

- Base URL: `https://fetchgate.dev`
- URL: `https://fetchgate.dev/v1/buy/prompt-injection-defenses-playbook`
- Auth: none declared

The defense counterpart to our attack corpus: a layered playbook for hardening an agent/LLM app against prompt injection, tool hijacking, data exfiltration, system-prompt leaks, jailbreaks, and encoding obfuscation. Includes a 6-layer defense taxonomy mapped to attack categories, 119 machine-readable detection rules (85 base + 34 extended, each with honest false-positive notes), and a stdlib-only Python detector with two profiles (strict for tool arguments and output, content for web pages and documents), decode-and-rescan for obfuscated instructions, and hidden-HTML-text scanning. Measured: held-out recall 53% strict / 38% content on the 156-case corpus; 0.35% false positives on 1,714 unseen top-site homepages (the base rules as written flag 69%). Full method and limits in MEASUREMENTS.md. Grounded in OWASP LLM/MCP guidance. Unpaid GET returns a 402 x402 challenge; a paid GET returns a signed, time-limited download URL.

## Response `200`

Payment accepted; a signed, time-limited download URL.

- object
  - `productId` string, required
  - `downloadUrl` string, uri, required
  - `expiresInSeconds` integer, required

## Other responses

- `402`: Payment required: an x402 challenge (accepts[]) for this product.

---

[API](https://skmtc.dev/fetchgate/apis/fetchgate-api.md) · [All operations](https://skmtc.dev/fetchgate/apis/fetchgate-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fetchgate/apis/fetchgate-api/revisions/8925577a6e79?raw)