[good first issue]🎯 security: prompt injection detection tree-shaken out of dist - v0.3.6 has zero injection detection

[MuBeiGe]

Summary

The source file src/utils/sanitize.ts contains a fully implemented looksLikePromptInjection() function (L170-L243) with comprehensive pattern matching for jailbreak payloads. The function is called at L153 in shouldExtractL1().

However, in the published dist/index.mjs (v0.3.6), neither the function nor the call exists. The bundler tree-shakes it away because the call at L153 is commented out in the source.

Impact

v0.3.6 has no prompt injection detection at the L1 extraction gate. Any conversation content including explicit jailbreak payloads will pass shouldExtractL1() and be persisted as structured L1 memory. When recalled in future sessions, the injected content enters the system prompt context.

Evidence

Source (src/utils/sanitize.ts):

Published dist (dist/index.mjs):

The shouldExtractL1() function in the bundle (L8451) only checks for empty text, symbolic-only strings, and question marks - no injection detection whatsoever.

Suggested Fix

Uncomment L153 in src/utils/sanitize.ts:

1-line change. The function body is already complete and covers English/Chinese injection patterns.

[Maxwell-Code07]

Thanks for the code audit! We've received your report about prompt injection detection being missing from the dist build and will review it internally. We'll get back to you once we have results. Thank you for the security analysis!

[Maxwell-Code07]

We've selected this issue as 🎯 Good First Issue — perfect for new contributors to get started!

Task Details

Field	Content
Type	Bug
Difficulty	Low
Estimated Effort	3 days
Acceptance Criteria	1. Investigate the root cause of tree-shaking; 2. Fix the build configuration to ensure the function is included in the dist output; 3. Add a build verification test to confirm the function is not tree-shaken

Questions welcome! 🚀

[zhenliemao]

I have joined the TencentDB Agent Memory Open Source Co-creation Program and claimed this issue. cc @Maxwell-Code07

[kbob3687-hub]

I have joined the TencentDB Agent Memory Open Source Co-creation Program and claimed this issue.