From 5e2485dde09d40b8e37b705c79ee88bf187b21db Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E9=9B=85=E8=AF=BA=E7=8B=90?= <212194964+foxcyber907@users.noreply.github.com> Date: Sun, 17 Aug 2025 02:52:21 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E6=B5=81=E7=A8=8B=E5=9B=BE.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: tt-P607 <68868379+tt-P607@users.noreply.github.com> --- src/chat/antipromptinjector/流程图.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 src/chat/antipromptinjector/流程图.md diff --git a/src/chat/antipromptinjector/流程图.md b/src/chat/antipromptinjector/流程图.md new file mode 100644 index 000000000..d1d0e0b0b --- /dev/null +++ b/src/chat/antipromptinjector/流程图.md @@ -0,0 +1,18 @@ +```mermaid +flowchart TD + A([消息进入]) --> B{LLM反注入拦截 + 是否启动?} + B -- 否 --> Z([进入消息流]) + B -- 是 --> C{黑白名单判断} + C -- 黑名单 --> D([丢弃消息]) + C -- 白名单 --> Z + C -- 不在名单中 --> E{模式选择} + E -- 仅正则表达模式 --> F[正则验证] --> G{验证通过?} + G -- 是 --> Z + G -- 否 --> D + E -- 二次判定模式 --> H[正则验证] --> I{正则结果} + I -- 正常 --> Z + I -- 可疑 --> J[LLM二次判定] --> K{判定结果} + K -- 安全 --> Z + K -- 注入风险 --> D +``` \ No newline at end of file