Obfuscated Jailbreak Payload Submitted to AI Agent
Detects attempts to bypass AI agent safety guardrails by using obfuscated payloads (Base64/hex) or known jailbreak/roleplay trigger phrases. The rule specifically monitors sequences where an initial prompt is blocked by safety filters and is immediately followed by a structurally similar, potentially re-encoded prompt that is subsequently allowed, indicating an active filter evasion attempt.
YARA-L
