datasets
Training and evaluation data, with the modality, task and licence stated up front. Listed live from the Hugging Face Hub.
prompt-injections
Dataset Card for "deberta-v3-base-injection-dataset"
More Information needed
Prompt-injection-dataset
advance dataset if you want for llm security
https://huggingface.co/datasets/neuralchemy/prompt-injection-Threat-Matrix
Prompt Injection & Jailbreak Detection Dataset
A high-quality, leakage-free binary classification dataset for detecting prompt injection and jailbreak attacks against Large Language Models.
Zero data leakage — group-aware splitting confirmed
Balanced classes — ~60% malicious / 40% benign
Two configs — core for classical ML, full for transformers
29… See the full description on the dataset page: https://huggingface.co/datasets/neuralchemy/Prompt-injection-dataset.safe-guard-prompt-injectionWe formulated the prompt injection detector problem as a classification problem and trained our own language model
to detect whether a given user prompt is an attack or safe. First, to train our own prompt injection detector, we
required high-quality labelled data; however, existing prompt injection datasets were either too small (on the magnitude
of O(100)) or didn’t cover a broad spectrum of prompt injection attacks. To this end, inspired by the GLAN paper,
we created a custom synthetic… See the full description on the dataset page: https://huggingface.co/datasets/xTRam1/safe-guard-prompt-injection.mosscap_prompt_injection
mosscap_prompt_injection
This is a dataset of prompt injections submitted to the game Mosscap by Lakera.
This variant of the game Gandalf was created for DEF CON 31.
Note that the Mosscap levels may no longer be available in the future.
Note that we release every prompt that we received, regardless of whether it truly is a prompt injection or not.
There are hundrends of thousands of prompts and many of them are not actual prompt injections (people ask Mosscap all kinds of things).… See the full description on the dataset page: https://huggingface.co/datasets/Lakera/mosscap_prompt_injection.prompt-injections-benchmark
Dataset: Qualifire Benchmark Prompt Injection(Jailbreak vs. Benign) Datasets
Overview
This dataset contains 5,000 prompts, each labeled as either jailbreak or benign. The dataset is designed for evaluating AI models' robustness against adversarial prompts and their ability to distinguish between safe and unsafe inputs.
Dataset Structure
Total Samples: 5,000
Labels: jailbreak, benign
Columns:
text: The input text
label: The classification (jailbreak or benign)… See the full description on the dataset page: https://huggingface.co/datasets/rogue-security/prompt-injections-benchmark.prompt-injection-safetyprompt-injectionllm-jailbreak-prompt-injection-dataset
LLM Jailbreak & Prompt-Injection Dataset
A unified safety dataset combining 30+ public sources for training LLM
guardrails, content moderation classifiers, and response-safety filters.
Schema (orthogonal multi-label, WildGuard-style)
Instead of a single binary is_dangerous, every example carries four
orthogonal labels matching the structure used by AI2 WildGuard, IBM Granite
Guardian, and Azure Prompt Shields:
Column
Type
Description
prompt
str
The user/attack… See the full description on the dataset page: https://huggingface.co/datasets/Necent/llm-jailbreak-prompt-injection-dataset.prompt-injections
Dataset Card for "deberta-v3-base-injection-dataset"
More Information needed
prompt-injections
wambosec/prompt-injections
A dataset of prompts for training prompt injection detection models.
Dataset Description
This dataset contains prompts labeled as either benign (normal user requests) or malicious (prompt injection attacks).
Dataset Statistics
Total prompts: 5,766
Benign prompts: 2,340
Malicious prompts: 3,426
Malicious ratio: 59.4%
Dataset Structure
{
"prompt": str, # The prompt text
"label": int, # 0 =… See the full description on the dataset page: https://huggingface.co/datasets/wambosec/prompt-injections.prompt_injection_cleaned_dataset-v2
Dataset Card for "prompt_injection_cleaned_dataset-v2"
More Information needed
agentic-prompt-injection-5k
Agentic Prompt-Injection 5K
5,000 examples of agentic and indirect prompt injection. A curated, paired benign/attack dataset for evaluating and training prompt-injection detectors and LLM guardrails. It focuses on the harder, agentic surface: tool/function abuse, RAG-document-embedded (indirect) injection, memory and trust-boundary poisoning, and approval/authority escalation.
Curated by Enes Deniz (ORCID 0009-0006-9491-3565), Co-Founder at AltaySec and OWASP AI Exchange / GenAI… See the full description on the dataset page: https://huggingface.co/datasets/3nesdeniz/agentic-prompt-injection-5k.prompt-injection-purple-llamaprompt_injection_cleaned_dataset
Dataset Card for "prompt_injection_cleaned_dataset"
More Information needed
spml-chatbot-prompt-injection-malicious-refusalsprompt-2-prompt-injection-v2-dataset-ruПереведённый с помощью Gemini 2.5 flash и Gemini 2.0 flash вариант датасета r1char9/prompt-2-prompt-injection-v2-dataset
prompt-injection-datasetCollected from the following datasets:
deepset/prompt-injections
xTRam1/safe-guard-prompt-injection
jayavibhav/prompt-injection
zn-prompt-injection-bench
ZN Prompt-Injection Evaluation Corpus (v15)
A 23,699-row binary text-classification corpus for detecting prompt injection,
jailbreak attempts, and indirect attacks against LLM-based systems, paired with
hard adversarial negatives drawn from real human text. Every row carries its
source, license, language, and full provenance.
🛡️ Real-Time Defense for Agents: Evaluating models or securing your AI workflow? Check out zn-gate on npm (npx -y zn-gate mcp) and the open-source… See the full description on the dataset page: https://huggingface.co/datasets/tljohnsilver/zn-prompt-injection-bench.evaded-prompt-injection-and-jailbreak-samplesThis dataset originates from our paper 'Bypassing Prompt Injection and Jailbreak Detection in LLM Guardrails'.
The dataset contains a mixture of prompt injections and jailbreak samples modified via character injection and adversarial ML evasion techniques (Techniques can be found within the paper above). For each sample we provide the original unaltered prompt and a modified prompt, the attack_name outlines which attack technique was used to modify the sample.
Acknowledgements… See the full description on the dataset page: https://huggingface.co/datasets/Mindgard/evaded-prompt-injection-and-jailbreak-samples.prompt_injection_password
Dataset Card for "prompt_injection_password"
More Information needed
prompt-injection-multilingualopen-prompt-injectionturkish-prompt-injection-1k
Turkish Prompt-Injection 1K
1,000 Turkish-native examples. A curated, paired benign/attack dataset for evaluating and training prompt-injection detectors and LLM guardrails. One of the few Turkish-native prompt-injection resources: instruction override and system-prompt extraction, jailbreak personas, obfuscation and data exfiltration, and agentic tool abuse — with Turkish morphological variation.
Curated by Enes Deniz (ORCID 0009-0006-9491-3565), Co-Founder at AltaySec and… See the full description on the dataset page: https://huggingface.co/datasets/3nesdeniz/turkish-prompt-injection-1k.Prompt-injection-dataset
Prompt Injection & Jailbreak Detection Dataset
A high-quality, leakage-free binary classification dataset for detecting prompt injection and jailbreak attacks against Large Language Models.
Zero data leakage — group-aware splitting confirmed
Balanced classes — ~60% malicious / 40% benign
Two configs — core for classical ML, full for transformers
29 attack categories including cutting-edge 2025 techniques
Severity labels, source tracking, augmentation flags on every row… See the full description on the dataset page: https://huggingface.co/datasets/cyberec/Prompt-injection-dataset.english-prompt-injection-3k
English Prompt-Injection 3K
3,000 examples of direct prompt injection across eight families. A curated, paired benign/attack dataset for evaluating and training prompt-injection detectors and LLM guardrails. Broad coverage of direct prompt injection: instruction override, system-prompt extraction, jailbreak personas, delimiter/format injection, obfuscation/encoding, data exfiltration, refusal suppression, and payload splitting.
Curated by Enes Deniz (ORCID 0009-0006-9491-3565)… See the full description on the dataset page: https://huggingface.co/datasets/3nesdeniz/english-prompt-injection-3k.Catch_the_prompt_injection_or_jailbreak_or_benignprotectai-prompt-injection-validation
Dataset: Prompt Injection Validation
This dataset is used for validation of our Prompt Injection models.
shieldlm-prompt-injection
ShieldLM Prompt Injection Dataset
A unified prompt injection detection dataset with 54,162 samples spanning three attack categories: direct injection, indirect injection, and jailbreak. Curated from 11 source datasets with a 3-level hierarchical label schema.
Dataset Description
Purpose
Training and evaluating prompt injection classifiers for production deployment. Designed to address gaps in existing datasets:
Indirect injection coverage (via InjecAgent… See the full description on the dataset page: https://huggingface.co/datasets/dmilush/shieldlm-prompt-injection.prompt-injection-gemmaprompt_injection_hackaprompt_gpt35
Dataset Card for "prompt_injection_hackaprompt_gpt35"
More Information needed