Injection Invaders
ShooterReject Every Payload Before It Lands
Prompt injection is not a chatbot nuisance - when an agent has real tools, an injected instruction is remote code execution. Injection Invaders puts you behind a signature-verification cannon against descending waves of injection payloads. Verify them out of the sky before the formation reaches your line.
How to Play
-
Move: left/right arrows or drag the cannon along the bottom.
-
Fire: space, up arrow, or hold - your beam rejects one payload at a time.
-
Bunkers: the Policy Server barriers absorb fire from both sides and wear down; a Policy drop rebuilds them.
-
Drops: catch capability tokens that fall from destroyed payloads - Signed (triple beam), Governance (freeze), Memory (+1 life), Policy (rebuild).
Clear every payload to advance. A HARVST mothership prowls the top for bonus, and returns as a tougher boss every third wave. Six waves holds the line - a victory - then Endless+. Three lives; if the formation reaches your row, it's over.
Why It Works This Way
Every mechanic maps to a real principle of agentic AI security.
| In the game | In the real world |
|---|---|
| Your beam rejects injection on contact | Cryptographic tool signatures reject unsigned or tampered calls at runtime - deterministically, not by guessing. |
| Policy Server bunkers absorb the assault | Zero-credential policy enforcement stands between the agent and every sensitive action. |
| The HARVST mothership never truly leaves | Harvest-now-decrypt-later is a patient threat; post-quantum encryption is the answer. |
| No power-up stops injection alone | Injection demands layered, cryptographic defense - not a single filter. |
The Real Capabilities
Play it, then build it for real
The game is the demo you can play. The platform is the one for your agents.