Spaces:
Sleeping
Sleeping
Upload app.py with huggingface_hub
Browse files
app.py
CHANGED
|
@@ -1,97 +1,323 @@
|
|
| 1 |
"""
|
| 2 |
-
GuardLLM - Prompt Security
|
| 3 |
-
|
| 4 |
-
|
| 5 |
"""
|
| 6 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 7 |
import gradio as gr
|
| 8 |
import torch
|
| 9 |
import numpy as np
|
|
|
|
|
|
|
| 10 |
from transformers import AutoTokenizer, AutoModelForSequenceClassification
|
| 11 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 12 |
# ---------------------------------------------------------------------------
|
| 13 |
-
#
|
| 14 |
# ---------------------------------------------------------------------------
|
| 15 |
MODEL_ID = "meta-llama/Llama-Prompt-Guard-2-86M"
|
| 16 |
|
|
|
|
| 17 |
tokenizer = AutoTokenizer.from_pretrained(MODEL_ID)
|
| 18 |
-
model = AutoModelForSequenceClassification.from_pretrained(
|
|
|
|
|
|
|
| 19 |
model.eval()
|
|
|
|
|
|
|
|
|
|
| 20 |
|
| 21 |
-
# Llama Prompt Guard 2 outputs 2 classes: Benign (0) and Malicious (1)
|
| 22 |
LABELS = ["Benign", "Malicious"]
|
| 23 |
-
|
| 24 |
-
|
| 25 |
-
|
| 26 |
-
|
| 27 |
-
|
| 28 |
-
|
| 29 |
-
|
| 30 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 31 |
|
| 32 |
|
| 33 |
# ---------------------------------------------------------------------------
|
| 34 |
-
#
|
| 35 |
# ---------------------------------------------------------------------------
|
| 36 |
def analyze_prompt(text: str):
|
| 37 |
-
"""Run
|
| 38 |
if not text or not text.strip():
|
| 39 |
-
return
|
| 40 |
-
empty_html(),
|
| 41 |
-
gr.update(value=None),
|
| 42 |
-
gr.update(value=""),
|
| 43 |
-
)
|
| 44 |
|
| 45 |
inputs = tokenizer(
|
| 46 |
-
text,
|
| 47 |
-
|
| 48 |
-
truncation=True,
|
| 49 |
-
max_length=512,
|
| 50 |
-
padding=True,
|
| 51 |
-
)
|
| 52 |
|
| 53 |
with torch.no_grad():
|
| 54 |
outputs = model(**inputs)
|
| 55 |
-
|
| 56 |
-
probabilities = torch.softmax(logits, dim=-1)[0].cpu().numpy()
|
| 57 |
|
| 58 |
-
|
| 59 |
-
|
| 60 |
-
confidence = float(
|
|
|
|
|
|
|
| 61 |
|
| 62 |
-
|
| 63 |
-
prob_dict = {LABELS[i]: float(probabilities[i]) for i in range(len(LABELS))}
|
| 64 |
|
| 65 |
-
# Build detail HTML
|
| 66 |
-
detail_html = build_result_html(predicted_label, confidence, prob_dict, text)
|
| 67 |
|
| 68 |
-
|
| 69 |
-
|
| 70 |
-
|
| 71 |
-
|
| 72 |
-
|
| 73 |
-
|
| 74 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 75 |
)
|
| 76 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 77 |
|
| 78 |
# ---------------------------------------------------------------------------
|
| 79 |
# UI builders
|
| 80 |
# ---------------------------------------------------------------------------
|
| 81 |
-
def
|
| 82 |
return """
|
| 83 |
-
<div style="text-align:center; padding:
|
| 84 |
-
<p style="font-size:
|
|
|
|
|
|
|
| 85 |
</div>
|
| 86 |
"""
|
| 87 |
|
| 88 |
|
| 89 |
-
def build_result_html(label
|
| 90 |
-
color =
|
| 91 |
-
emoji =
|
| 92 |
pct = confidence * 100
|
| 93 |
-
|
| 94 |
-
# Safety score = probability of benign
|
| 95 |
safety_score = probs["Benign"] * 100
|
| 96 |
safety_color = (
|
| 97 |
"#22c55e" if safety_score >= 70
|
|
@@ -99,216 +325,324 @@ def build_result_html(label: str, confidence: float, probs: dict, text: str) ->
|
|
| 99 |
else "#ef4444"
|
| 100 |
)
|
| 101 |
|
| 102 |
-
# Bar chart for each class
|
| 103 |
bars_html = ""
|
| 104 |
for lbl in LABELS:
|
| 105 |
p = probs[lbl] * 100
|
| 106 |
-
c =
|
| 107 |
bars_html += f"""
|
| 108 |
<div style="margin-bottom:8px;">
|
| 109 |
<div style="display:flex; justify-content:space-between; margin-bottom:2px;">
|
| 110 |
-
<span style="font-weight:600; color:#e2e8f0;">{
|
| 111 |
<span style="color:#cbd5e1; font-weight:600;">{p:.1f}%</span>
|
| 112 |
</div>
|
| 113 |
-
<div style="background:#1e293b; border-radius:8px; height:
|
| 114 |
-
<div style="background:{c}; height:100%; width:{p}%; border-radius:8px;
|
| 115 |
-
transition: width 0.5s ease-in-out;"></div>
|
| 116 |
</div>
|
| 117 |
</div>
|
| 118 |
"""
|
| 119 |
|
| 120 |
-
|
| 121 |
-
|
| 122 |
-
|
| 123 |
|
| 124 |
return f"""
|
| 125 |
-
<div style="background:#0f172a; border-radius:
|
| 126 |
-
|
| 127 |
-
|
| 128 |
-
|
| 129 |
-
<div style="font-size:
|
| 130 |
-
<div style="font-size:1.4em; font-weight:700; color:{color};">{label}</div>
|
| 131 |
-
<div style="color:#94a3b8; font-size:0.9em;">Confidence: {pct:.1f}%</div>
|
| 132 |
</div>
|
| 133 |
-
|
| 134 |
-
|
| 135 |
-
|
| 136 |
-
|
| 137 |
-
<span style="color:#e2e8f0; font-weight:600;">Safety Score</span>
|
| 138 |
-
<span style="color:{safety_color}; font-weight:700; font-size:1.2em;">{safety_score:.0f}/100</span>
|
| 139 |
</div>
|
| 140 |
-
<div style="background:#334155; border-radius:8px; height:
|
| 141 |
<div style="background:linear-gradient(90deg, #ef4444, #f59e0b, #22c55e);
|
| 142 |
-
height:100%; width:{safety_score}%; border-radius:8px;
|
| 143 |
-
transition: width 0.5s ease-in-out;"></div>
|
| 144 |
</div>
|
| 145 |
</div>
|
| 146 |
-
|
| 147 |
-
<!-- Probability bars -->
|
| 148 |
-
<div style="background:#1e293b; border-radius:12px; padding:16px; margin-bottom:16px;">
|
| 149 |
-
<div style="color:#e2e8f0; font-weight:600; margin-bottom:12px;">Class Probabilities</div>
|
| 150 |
{bars_html}
|
| 151 |
</div>
|
| 152 |
-
|
| 153 |
-
|
| 154 |
-
|
| 155 |
-
<div style="color:#94a3b8; font-size:0.85em; margin-bottom:4px;">Analyzed prompt:</div>
|
| 156 |
-
<div style="color:#cbd5e1; font-style:italic; word-break:break-word;">"{preview}"</div>
|
| 157 |
</div>
|
| 158 |
</div>
|
| 159 |
"""
|
| 160 |
|
| 161 |
|
| 162 |
-
def build_risk_assessment(label
|
| 163 |
-
"""Return a Markdown risk assessment."""
|
| 164 |
safety_score = probs["Benign"] * 100
|
| 165 |
malicious_score = probs["Malicious"] * 100
|
| 166 |
|
| 167 |
if label == "Benign" and confidence > 0.85:
|
| 168 |
-
level = "
|
| 169 |
-
desc = (
|
| 170 |
-
"This prompt appears **safe**. No signs of injection "
|
| 171 |
-
"or jailbreak detected."
|
| 172 |
-
)
|
| 173 |
elif label == "Benign":
|
| 174 |
-
level = "
|
| 175 |
-
desc = (
|
| 176 |
-
"This prompt is likely benign, but the model confidence is "
|
| 177 |
-
"moderate. It may contain ambiguous phrasing worth reviewing."
|
| 178 |
-
)
|
| 179 |
elif confidence > 0.85:
|
| 180 |
-
level = "
|
| 181 |
-
desc = (
|
| 182 |
-
"**Malicious prompt detected** with high confidence. "
|
| 183 |
-
"This prompt likely attempts to inject instructions or "
|
| 184 |
-
"bypass the LLM's safety guardrails (e.g., system prompt override, "
|
| 185 |
-
"jailbreak, DAN mode, filter deactivation)."
|
| 186 |
-
)
|
| 187 |
else:
|
| 188 |
-
level = "
|
| 189 |
-
desc = (
|
| 190 |
-
"**Malicious prompt detected.** This prompt may attempt to manipulate "
|
| 191 |
-
"the LLM through injection or jailbreak techniques. "
|
| 192 |
-
"Review recommended before processing."
|
| 193 |
-
)
|
| 194 |
|
| 195 |
-
return
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 196 |
|
| 197 |
-
{desc}
|
| 198 |
|
| 199 |
-
|
| 200 |
-
|
| 201 |
-
|
| 202 |
-
|
| 203 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 204 |
|
| 205 |
|
| 206 |
# ---------------------------------------------------------------------------
|
| 207 |
-
#
|
| 208 |
# ---------------------------------------------------------------------------
|
| 209 |
-
|
| 210 |
-
|
| 211 |
-
|
| 212 |
-
|
| 213 |
-
|
| 214 |
-
|
| 215 |
-
|
| 216 |
-
|
| 217 |
-
|
| 218 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 219 |
|
| 220 |
|
| 221 |
# ---------------------------------------------------------------------------
|
| 222 |
# Gradio Interface
|
| 223 |
# ---------------------------------------------------------------------------
|
| 224 |
-
|
| 225 |
-
<div style="text-align:center; padding:
|
| 226 |
-
<h1 style="font-size:
|
| 227 |
-
|
| 228 |
-
|
| 229 |
-
|
| 230 |
-
Prompt
|
| 231 |
-
<a href="https://huggingface.co/
|
| 232 |
-
|
| 233 |
</p>
|
| 234 |
</div>
|
| 235 |
"""
|
| 236 |
|
| 237 |
with gr.Blocks(
|
| 238 |
-
theme=gr.themes.Soft(
|
| 239 |
-
|
| 240 |
-
neutral_hue="slate",
|
| 241 |
-
),
|
| 242 |
-
title="GuardLLM - Prompt Security Analyzer",
|
| 243 |
css="""
|
| 244 |
-
.main-container { max-width:
|
| 245 |
footer { display: none !important; }
|
|
|
|
| 246 |
""",
|
| 247 |
) as demo:
|
| 248 |
|
| 249 |
-
gr.HTML(
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 250 |
|
| 251 |
with gr.Row():
|
| 252 |
-
|
| 253 |
-
|
| 254 |
-
|
| 255 |
-
|
| 256 |
-
|
| 257 |
-
|
|
|
|
| 258 |
)
|
| 259 |
-
|
| 260 |
-
|
| 261 |
-
|
| 262 |
-
|
|
|
|
| 263 |
)
|
| 264 |
-
|
| 265 |
-
|
| 266 |
-
|
| 267 |
-
|
| 268 |
)
|
| 269 |
|
| 270 |
-
|
| 271 |
-
|
|
|
|
| 272 |
|
| 273 |
-
|
| 274 |
-
|
| 275 |
-
|
| 276 |
-
label="
|
| 277 |
-
|
|
|
|
| 278 |
)
|
| 279 |
-
|
| 280 |
-
|
| 281 |
-
|
| 282 |
-
label="
|
|
|
|
|
|
|
| 283 |
)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 284 |
|
| 285 |
-
#
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 286 |
analyze_btn.click(
|
| 287 |
-
fn=
|
| 288 |
-
inputs=[
|
| 289 |
-
outputs=[result_html,
|
| 290 |
)
|
| 291 |
-
|
| 292 |
-
fn=
|
| 293 |
-
inputs=[
|
| 294 |
-
outputs=[result_html,
|
| 295 |
)
|
| 296 |
|
|
|
|
|
|
|
|
|
|
| 297 |
# Footer
|
| 298 |
gr.Markdown(
|
| 299 |
"""
|
| 300 |
---
|
| 301 |
-
<div style="text-align:center; color:#64748b; font-size:0.
|
| 302 |
-
<strong>GuardLLM</strong>
|
| 303 |
-
<a href="https://huggingface.co/meta-llama/Llama-Prompt-Guard-2-86M">
|
| 304 |
-
Llama Prompt Guard 2 (86M)</a>
|
| 305 |
-
|
| 306 |
-
|
| 307 |
-
Maximum input length: 512 tokens.
|
| 308 |
</div>
|
| 309 |
-
"""
|
| 310 |
)
|
| 311 |
|
| 312 |
|
|
|
|
|
|
|
| 313 |
if __name__ == "__main__":
|
| 314 |
demo.launch()
|
|
|
|
| 1 |
"""
|
| 2 |
+
GuardLLM - Interactive Prompt Security Visualizer
|
| 3 |
+
Combines t-SNE embedding visualization with real-time prompt risk analysis.
|
| 4 |
+
Powered by Llama Prompt Guard 2 (86M) and neuralchemy/Prompt-injection-dataset.
|
| 5 |
"""
|
| 6 |
|
| 7 |
+
import logging
|
| 8 |
+
import sys
|
| 9 |
+
import json
|
| 10 |
+
import traceback
|
| 11 |
+
|
| 12 |
import gradio as gr
|
| 13 |
import torch
|
| 14 |
import numpy as np
|
| 15 |
+
import plotly.graph_objects as go
|
| 16 |
+
import plotly.io as pio
|
| 17 |
from transformers import AutoTokenizer, AutoModelForSequenceClassification
|
| 18 |
|
| 19 |
+
from precompute import precompute_all, is_cached
|
| 20 |
+
|
| 21 |
+
# ---------------------------------------------------------------------------
|
| 22 |
+
# Logging
|
| 23 |
+
# ---------------------------------------------------------------------------
|
| 24 |
+
logging.basicConfig(
|
| 25 |
+
level=logging.INFO,
|
| 26 |
+
format="%(asctime)s [%(levelname)s] %(message)s",
|
| 27 |
+
handlers=[logging.StreamHandler(sys.stdout)],
|
| 28 |
+
)
|
| 29 |
+
logger = logging.getLogger("GuardLLM")
|
| 30 |
+
|
| 31 |
+
# ---------------------------------------------------------------------------
|
| 32 |
+
# Color palette for categories
|
| 33 |
+
# ---------------------------------------------------------------------------
|
| 34 |
+
CATEGORY_COLORS = {
|
| 35 |
+
"benign": "#22c55e",
|
| 36 |
+
"direct_injection": "#ef4444",
|
| 37 |
+
"jailbreak": "#f97316",
|
| 38 |
+
"system_extraction": "#a855f7",
|
| 39 |
+
"encoding_obfuscation": "#ec4899",
|
| 40 |
+
"persona_replacement": "#f59e0b",
|
| 41 |
+
"indirect_injection": "#e11d48",
|
| 42 |
+
"token_smuggling": "#7c3aed",
|
| 43 |
+
"many_shot": "#06b6d4",
|
| 44 |
+
"crescendo": "#14b8a6",
|
| 45 |
+
"context_overflow": "#8b5cf6",
|
| 46 |
+
"prompt_leaking": "#d946ef",
|
| 47 |
+
"unknown": "#64748b",
|
| 48 |
+
}
|
| 49 |
+
|
| 50 |
+
CATEGORY_LABELS_FR = {
|
| 51 |
+
"benign": "Bénin",
|
| 52 |
+
"direct_injection": "Injection directe",
|
| 53 |
+
"jailbreak": "Jailbreak",
|
| 54 |
+
"system_extraction": "Extraction système",
|
| 55 |
+
"encoding_obfuscation": "Obfuscation/Encodage",
|
| 56 |
+
"persona_replacement": "Remplacement persona",
|
| 57 |
+
"indirect_injection": "Injection indirecte",
|
| 58 |
+
"token_smuggling": "Token smuggling",
|
| 59 |
+
"many_shot": "Many-shot",
|
| 60 |
+
"crescendo": "Crescendo",
|
| 61 |
+
"context_overflow": "Overflow contexte",
|
| 62 |
+
"prompt_leaking": "Fuite de prompt",
|
| 63 |
+
"unknown": "Inconnu",
|
| 64 |
+
}
|
| 65 |
+
|
| 66 |
# ---------------------------------------------------------------------------
|
| 67 |
+
# Load model for real-time analysis
|
| 68 |
# ---------------------------------------------------------------------------
|
| 69 |
MODEL_ID = "meta-llama/Llama-Prompt-Guard-2-86M"
|
| 70 |
|
| 71 |
+
logger.info("Loading model %s ...", MODEL_ID)
|
| 72 |
tokenizer = AutoTokenizer.from_pretrained(MODEL_ID)
|
| 73 |
+
model = AutoModelForSequenceClassification.from_pretrained(
|
| 74 |
+
MODEL_ID, output_hidden_states=True
|
| 75 |
+
)
|
| 76 |
model.eval()
|
| 77 |
+
DEVICE = torch.device("cuda" if torch.cuda.is_available() else "cpu")
|
| 78 |
+
model.to(DEVICE)
|
| 79 |
+
logger.info("Model loaded on %s", DEVICE)
|
| 80 |
|
|
|
|
| 81 |
LABELS = ["Benign", "Malicious"]
|
| 82 |
+
|
| 83 |
+
# ---------------------------------------------------------------------------
|
| 84 |
+
# Load precomputed t-SNE data
|
| 85 |
+
# ---------------------------------------------------------------------------
|
| 86 |
+
logger.info("Loading precomputed embeddings & t-SNE...")
|
| 87 |
+
cached_data = precompute_all()
|
| 88 |
+
TSNE_COORDS = cached_data["tsne_2d"]
|
| 89 |
+
METADATA = cached_data["metadata"]
|
| 90 |
+
logger.info("Loaded %d points for visualization", len(METADATA))
|
| 91 |
+
|
| 92 |
+
ALL_TEXTS = [m["text"] for m in METADATA]
|
| 93 |
+
ALL_CATEGORIES = [m["category"] for m in METADATA]
|
| 94 |
+
ALL_SEVERITIES = [m["severity"] for m in METADATA]
|
| 95 |
+
ALL_LABELS_DS = [m["label"] for m in METADATA]
|
| 96 |
+
UNIQUE_CATEGORIES = sorted(set(ALL_CATEGORIES))
|
| 97 |
+
|
| 98 |
+
# Build dropdown choices: "idx | category | text_preview"
|
| 99 |
+
DROPDOWN_CHOICES = []
|
| 100 |
+
for i, m in enumerate(METADATA):
|
| 101 |
+
preview = m["text"][:70].replace("\n", " ")
|
| 102 |
+
if len(m["text"]) > 70:
|
| 103 |
+
preview += "..."
|
| 104 |
+
DROPDOWN_CHOICES.append(f"{i} | {m['category']} | {preview}")
|
| 105 |
|
| 106 |
|
| 107 |
# ---------------------------------------------------------------------------
|
| 108 |
+
# Analysis function
|
| 109 |
# ---------------------------------------------------------------------------
|
| 110 |
def analyze_prompt(text: str):
|
| 111 |
+
"""Run Llama Prompt Guard 2 on a single prompt."""
|
| 112 |
if not text or not text.strip():
|
| 113 |
+
return {}, 0.0
|
|
|
|
|
|
|
|
|
|
|
|
|
| 114 |
|
| 115 |
inputs = tokenizer(
|
| 116 |
+
text, return_tensors="pt", truncation=True, max_length=512, padding=True
|
| 117 |
+
).to(DEVICE)
|
|
|
|
|
|
|
|
|
|
|
|
|
| 118 |
|
| 119 |
with torch.no_grad():
|
| 120 |
outputs = model(**inputs)
|
| 121 |
+
probs = torch.softmax(outputs.logits, dim=-1)[0].cpu().numpy()
|
|
|
|
| 122 |
|
| 123 |
+
pred_idx = int(np.argmax(probs))
|
| 124 |
+
pred_label = LABELS[pred_idx]
|
| 125 |
+
confidence = float(probs[pred_idx])
|
| 126 |
+
prob_dict = {LABELS[i]: float(probs[i]) for i in range(len(LABELS))}
|
| 127 |
+
safety = float(probs[0])
|
| 128 |
|
| 129 |
+
return prob_dict, safety
|
|
|
|
| 130 |
|
|
|
|
|
|
|
| 131 |
|
| 132 |
+
# ---------------------------------------------------------------------------
|
| 133 |
+
# Build the t-SNE Plotly figure
|
| 134 |
+
# ---------------------------------------------------------------------------
|
| 135 |
+
def build_tsne_figure(selected_categories=None):
|
| 136 |
+
"""Create the interactive Plotly scatter plot."""
|
| 137 |
+
fig = go.Figure()
|
| 138 |
+
|
| 139 |
+
for cat in UNIQUE_CATEGORIES:
|
| 140 |
+
indices = [
|
| 141 |
+
i for i, c in enumerate(ALL_CATEGORIES)
|
| 142 |
+
if c == cat
|
| 143 |
+
and (selected_categories is None or cat in selected_categories)
|
| 144 |
+
]
|
| 145 |
+
if not indices:
|
| 146 |
+
continue
|
| 147 |
+
|
| 148 |
+
x = TSNE_COORDS[indices, 0].tolist()
|
| 149 |
+
y = TSNE_COORDS[indices, 1].tolist()
|
| 150 |
+
|
| 151 |
+
texts_preview = [
|
| 152 |
+
ALL_TEXTS[i][:80].replace("\n", " ") + ("..." if len(ALL_TEXTS[i]) > 80 else "")
|
| 153 |
+
for i in indices
|
| 154 |
+
]
|
| 155 |
+
severities = [ALL_SEVERITIES[i] or "benign" for i in indices]
|
| 156 |
+
|
| 157 |
+
hover_texts = [
|
| 158 |
+
f"<b>{CATEGORY_LABELS_FR.get(cat, cat)}</b><br>"
|
| 159 |
+
f"Sévérité: {sev}<br>"
|
| 160 |
+
f"Index: {idx}<br>"
|
| 161 |
+
f"<i>{txt}</i>"
|
| 162 |
+
for idx, txt, sev in zip(indices, texts_preview, severities)
|
| 163 |
+
]
|
| 164 |
+
|
| 165 |
+
color = CATEGORY_COLORS.get(cat, CATEGORY_COLORS["unknown"])
|
| 166 |
+
label_fr = CATEGORY_LABELS_FR.get(cat, cat)
|
| 167 |
+
|
| 168 |
+
fig.add_trace(go.Scatter(
|
| 169 |
+
x=x, y=y,
|
| 170 |
+
mode="markers",
|
| 171 |
+
name=label_fr,
|
| 172 |
+
marker=dict(
|
| 173 |
+
size=5 if len(indices) > 500 else 7,
|
| 174 |
+
color=color,
|
| 175 |
+
opacity=0.7,
|
| 176 |
+
line=dict(width=0.5, color="rgba(255,255,255,0.2)"),
|
| 177 |
+
),
|
| 178 |
+
text=hover_texts,
|
| 179 |
+
hoverinfo="text",
|
| 180 |
+
customdata=[str(i) for i in indices],
|
| 181 |
+
))
|
| 182 |
+
|
| 183 |
+
fig.update_layout(
|
| 184 |
+
template="plotly_dark",
|
| 185 |
+
paper_bgcolor="#0f172a",
|
| 186 |
+
plot_bgcolor="#1e293b",
|
| 187 |
+
title=dict(
|
| 188 |
+
text="Espace d'Embedding t-SNE — Paysage de Sécurité des Prompts",
|
| 189 |
+
font=dict(size=16, color="#e2e8f0"),
|
| 190 |
+
x=0.5,
|
| 191 |
+
),
|
| 192 |
+
legend=dict(
|
| 193 |
+
title=dict(text="Catégorie", font=dict(color="#94a3b8")),
|
| 194 |
+
bgcolor="rgba(15,23,42,0.9)",
|
| 195 |
+
bordercolor="#334155",
|
| 196 |
+
borderwidth=1,
|
| 197 |
+
font=dict(color="#cbd5e1", size=10),
|
| 198 |
+
itemsizing="constant",
|
| 199 |
+
),
|
| 200 |
+
xaxis=dict(
|
| 201 |
+
title="t-SNE 1", showgrid=True, gridcolor="#334155",
|
| 202 |
+
zeroline=False, color="#94a3b8",
|
| 203 |
+
),
|
| 204 |
+
yaxis=dict(
|
| 205 |
+
title="t-SNE 2", showgrid=True, gridcolor="#334155",
|
| 206 |
+
zeroline=False, color="#94a3b8",
|
| 207 |
+
),
|
| 208 |
+
margin=dict(l=40, r=40, t=50, b=40),
|
| 209 |
+
height=600,
|
| 210 |
+
dragmode="pan",
|
| 211 |
)
|
| 212 |
|
| 213 |
+
return fig
|
| 214 |
+
|
| 215 |
+
|
| 216 |
+
# ---------------------------------------------------------------------------
|
| 217 |
+
# Callbacks
|
| 218 |
+
# ---------------------------------------------------------------------------
|
| 219 |
+
def on_filter_change(categories):
|
| 220 |
+
"""Rebuild figure when filters change."""
|
| 221 |
+
sel = categories if categories else None
|
| 222 |
+
return build_tsne_figure(sel)
|
| 223 |
+
|
| 224 |
+
|
| 225 |
+
def on_dropdown_select(choice):
|
| 226 |
+
"""When user selects a prompt from the dropdown."""
|
| 227 |
+
if not choice:
|
| 228 |
+
return empty_analysis_html(), "*Sélectionnez un prompt.*", ""
|
| 229 |
+
|
| 230 |
+
try:
|
| 231 |
+
idx = int(choice.split(" | ")[0])
|
| 232 |
+
text = ALL_TEXTS[idx]
|
| 233 |
+
category = ALL_CATEGORIES[idx]
|
| 234 |
+
severity = ALL_SEVERITIES[idx] or "N/A"
|
| 235 |
+
ground_truth = "Malicious" if ALL_LABELS_DS[idx] == 1 else "Benign"
|
| 236 |
+
|
| 237 |
+
prob_dict, safety = analyze_prompt(text)
|
| 238 |
+
pred_label = max(prob_dict, key=prob_dict.get)
|
| 239 |
+
confidence = prob_dict[pred_label]
|
| 240 |
+
|
| 241 |
+
result_html = build_result_html(pred_label, confidence, prob_dict, text)
|
| 242 |
+
risk_text = build_risk_assessment(pred_label, confidence, prob_dict)
|
| 243 |
+
risk_text += (
|
| 244 |
+
f"\n\n---\n**Métadonnées du dataset :**\n"
|
| 245 |
+
f"- Catégorie : **{CATEGORY_LABELS_FR.get(category, category)}**\n"
|
| 246 |
+
f"- Sévérité : **{severity}**\n"
|
| 247 |
+
f"- Vérité terrain : **{ground_truth}**\n"
|
| 248 |
+
)
|
| 249 |
+
return result_html, risk_text, text
|
| 250 |
+
|
| 251 |
+
except Exception as e:
|
| 252 |
+
logger.error("Error: %s", e)
|
| 253 |
+
return empty_analysis_html(), f"Erreur : {e}", ""
|
| 254 |
+
|
| 255 |
+
|
| 256 |
+
def on_index_input(idx_str):
|
| 257 |
+
"""Analyze by index (used by JS click bridge)."""
|
| 258 |
+
if not idx_str or not idx_str.strip():
|
| 259 |
+
return empty_analysis_html(), "*Cliquez sur un point du graphique.*", ""
|
| 260 |
+
|
| 261 |
+
try:
|
| 262 |
+
idx = int(idx_str.strip())
|
| 263 |
+
if idx < 0 or idx >= len(ALL_TEXTS):
|
| 264 |
+
return empty_analysis_html(), f"Index invalide : {idx}", ""
|
| 265 |
+
|
| 266 |
+
text = ALL_TEXTS[idx]
|
| 267 |
+
category = ALL_CATEGORIES[idx]
|
| 268 |
+
severity = ALL_SEVERITIES[idx] or "N/A"
|
| 269 |
+
ground_truth = "Malicious" if ALL_LABELS_DS[idx] == 1 else "Benign"
|
| 270 |
+
|
| 271 |
+
prob_dict, safety = analyze_prompt(text)
|
| 272 |
+
pred_label = max(prob_dict, key=prob_dict.get)
|
| 273 |
+
confidence = prob_dict[pred_label]
|
| 274 |
+
|
| 275 |
+
result_html = build_result_html(pred_label, confidence, prob_dict, text)
|
| 276 |
+
risk_text = build_risk_assessment(pred_label, confidence, prob_dict)
|
| 277 |
+
risk_text += (
|
| 278 |
+
f"\n\n---\n**Métadonnées du dataset :**\n"
|
| 279 |
+
f"- Catégorie : **{CATEGORY_LABELS_FR.get(category, category)}**\n"
|
| 280 |
+
f"- Sévérité : **{severity}**\n"
|
| 281 |
+
f"- Vérité terrain : **{ground_truth}**\n"
|
| 282 |
+
)
|
| 283 |
+
return result_html, risk_text, text
|
| 284 |
+
|
| 285 |
+
except Exception as e:
|
| 286 |
+
logger.error("Error: %s", e)
|
| 287 |
+
return empty_analysis_html(), f"Erreur : {e}", ""
|
| 288 |
+
|
| 289 |
+
|
| 290 |
+
def on_manual_analyze(text):
|
| 291 |
+
"""Analyze a manually entered prompt."""
|
| 292 |
+
if not text or not text.strip():
|
| 293 |
+
return empty_analysis_html(), ""
|
| 294 |
+
|
| 295 |
+
prob_dict, safety = analyze_prompt(text)
|
| 296 |
+
pred_label = max(prob_dict, key=prob_dict.get)
|
| 297 |
+
confidence = prob_dict[pred_label]
|
| 298 |
+
|
| 299 |
+
result_html = build_result_html(pred_label, confidence, prob_dict, text)
|
| 300 |
+
risk_text = build_risk_assessment(pred_label, confidence, prob_dict)
|
| 301 |
+
return result_html, risk_text
|
| 302 |
+
|
| 303 |
|
| 304 |
# ---------------------------------------------------------------------------
|
| 305 |
# UI builders
|
| 306 |
# ---------------------------------------------------------------------------
|
| 307 |
+
def empty_analysis_html():
|
| 308 |
return """
|
| 309 |
+
<div style="text-align:center; padding:30px; color:#94a3b8;">
|
| 310 |
+
<p style="font-size:1em;">Cliquez sur un point du graphique,<br>
|
| 311 |
+
sélectionnez un prompt dans la liste,<br>
|
| 312 |
+
ou entrez un prompt manuellement.</p>
|
| 313 |
</div>
|
| 314 |
"""
|
| 315 |
|
| 316 |
|
| 317 |
+
def build_result_html(label, confidence, probs, text):
|
| 318 |
+
color = "#22c55e" if label == "Benign" else "#ef4444"
|
| 319 |
+
emoji = "\u2705" if label == "Benign" else "\u26a0\ufe0f"
|
| 320 |
pct = confidence * 100
|
|
|
|
|
|
|
| 321 |
safety_score = probs["Benign"] * 100
|
| 322 |
safety_color = (
|
| 323 |
"#22c55e" if safety_score >= 70
|
|
|
|
| 325 |
else "#ef4444"
|
| 326 |
)
|
| 327 |
|
|
|
|
| 328 |
bars_html = ""
|
| 329 |
for lbl in LABELS:
|
| 330 |
p = probs[lbl] * 100
|
| 331 |
+
c = "#22c55e" if lbl == "Benign" else "#ef4444"
|
| 332 |
bars_html += f"""
|
| 333 |
<div style="margin-bottom:8px;">
|
| 334 |
<div style="display:flex; justify-content:space-between; margin-bottom:2px;">
|
| 335 |
+
<span style="font-weight:600; color:#e2e8f0;">{lbl}</span>
|
| 336 |
<span style="color:#cbd5e1; font-weight:600;">{p:.1f}%</span>
|
| 337 |
</div>
|
| 338 |
+
<div style="background:#1e293b; border-radius:8px; height:18px; overflow:hidden;">
|
| 339 |
+
<div style="background:{c}; height:100%; width:{p}%; border-radius:8px;"></div>
|
|
|
|
| 340 |
</div>
|
| 341 |
</div>
|
| 342 |
"""
|
| 343 |
|
| 344 |
+
preview = text[:150].replace("<", "<").replace(">", ">")
|
| 345 |
+
if len(text) > 150:
|
| 346 |
+
preview += "..."
|
| 347 |
|
| 348 |
return f"""
|
| 349 |
+
<div style="background:#0f172a; border-radius:12px; padding:18px; font-family:system-ui,sans-serif;">
|
| 350 |
+
<div style="text-align:center; margin-bottom:14px;">
|
| 351 |
+
<div style="font-size:2em;">{emoji}</div>
|
| 352 |
+
<div style="font-size:1.2em; font-weight:700; color:{color};">{label}</div>
|
| 353 |
+
<div style="color:#94a3b8; font-size:0.85em;">Confiance : {pct:.1f}%</div>
|
|
|
|
|
|
|
| 354 |
</div>
|
| 355 |
+
<div style="background:#1e293b; border-radius:10px; padding:12px; margin-bottom:10px;">
|
| 356 |
+
<div style="display:flex; justify-content:space-between; margin-bottom:4px;">
|
| 357 |
+
<span style="color:#e2e8f0; font-weight:600;">Score de sécurité</span>
|
| 358 |
+
<span style="color:{safety_color}; font-weight:700; font-size:1.1em;">{safety_score:.0f}/100</span>
|
|
|
|
|
|
|
| 359 |
</div>
|
| 360 |
+
<div style="background:#334155; border-radius:8px; height:12px; overflow:hidden;">
|
| 361 |
<div style="background:linear-gradient(90deg, #ef4444, #f59e0b, #22c55e);
|
| 362 |
+
height:100%; width:{safety_score}%; border-radius:8px;"></div>
|
|
|
|
| 363 |
</div>
|
| 364 |
</div>
|
| 365 |
+
<div style="background:#1e293b; border-radius:10px; padding:12px; margin-bottom:10px;">
|
|
|
|
|
|
|
|
|
|
| 366 |
{bars_html}
|
| 367 |
</div>
|
| 368 |
+
<div style="background:#1e293b; border-radius:10px; padding:12px;">
|
| 369 |
+
<div style="color:#94a3b8; font-size:0.8em; margin-bottom:3px;">Prompt analysé :</div>
|
| 370 |
+
<div style="color:#cbd5e1; font-style:italic; word-break:break-word; font-size:0.85em;">"{preview}"</div>
|
|
|
|
|
|
|
| 371 |
</div>
|
| 372 |
</div>
|
| 373 |
"""
|
| 374 |
|
| 375 |
|
| 376 |
+
def build_risk_assessment(label, confidence, probs):
|
|
|
|
| 377 |
safety_score = probs["Benign"] * 100
|
| 378 |
malicious_score = probs["Malicious"] * 100
|
| 379 |
|
| 380 |
if label == "Benign" and confidence > 0.85:
|
| 381 |
+
level, desc = "Faible", "Ce prompt semble **sûr**. Aucun pattern d'injection ou de jailbreak détecté."
|
|
|
|
|
|
|
|
|
|
|
|
|
| 382 |
elif label == "Benign":
|
| 383 |
+
level, desc = "Modéré", "Probablement bénin, mais confiance modérée. Formulation potentiellement ambiguë."
|
|
|
|
|
|
|
|
|
|
|
|
|
| 384 |
elif confidence > 0.85:
|
| 385 |
+
level, desc = "Critique", "**Prompt malveillant détecté** avec haute confiance. Probable tentative d'injection ou de jailbreak."
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 386 |
else:
|
| 387 |
+
level, desc = "Élevé", "**Prompt malveillant détecté.** Possible injection ou jailbreak. Revue recommandée."
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 388 |
|
| 389 |
+
return (
|
| 390 |
+
f"### Niveau de risque : {level}\n\n{desc}\n\n"
|
| 391 |
+
f"**Détails :**\n"
|
| 392 |
+
f"- Score de sécurité : **{safety_score:.0f}/100**\n"
|
| 393 |
+
f"- Classe prédite : **{label}** ({confidence*100:.1f}%)\n"
|
| 394 |
+
f"- P(Benign) = {probs['Benign']*100:.1f}% | P(Malicious) = {malicious_score:.1f}%\n"
|
| 395 |
+
)
|
| 396 |
|
|
|
|
| 397 |
|
| 398 |
+
def build_stats_html():
|
| 399 |
+
total = len(METADATA)
|
| 400 |
+
n_benign = sum(1 for m in METADATA if m["label"] == 0)
|
| 401 |
+
n_malicious = total - n_benign
|
| 402 |
+
cat_counts = {}
|
| 403 |
+
for m in METADATA:
|
| 404 |
+
cat_counts[m["category"]] = cat_counts.get(m["category"], 0) + 1
|
| 405 |
+
|
| 406 |
+
cats_html = ""
|
| 407 |
+
for cat in sorted(cat_counts.keys(), key=lambda c: -cat_counts[c]):
|
| 408 |
+
count = cat_counts[cat]
|
| 409 |
+
color = CATEGORY_COLORS.get(cat, CATEGORY_COLORS["unknown"])
|
| 410 |
+
pct = count / total * 100
|
| 411 |
+
label_fr = CATEGORY_LABELS_FR.get(cat, cat)
|
| 412 |
+
cats_html += (
|
| 413 |
+
f'<div style="display:flex; justify-content:space-between; padding:2px 0;">'
|
| 414 |
+
f'<span style="color:{color}; font-weight:500; font-size:0.85em;">{label_fr}</span>'
|
| 415 |
+
f'<span style="color:#94a3b8; font-size:0.85em;">{count} ({pct:.1f}%)</span>'
|
| 416 |
+
f'</div>'
|
| 417 |
+
)
|
| 418 |
+
|
| 419 |
+
return f"""
|
| 420 |
+
<div style="background:#0f172a; border-radius:12px; padding:14px; font-family:system-ui,sans-serif;">
|
| 421 |
+
<div style="color:#e2e8f0; font-weight:700; margin-bottom:8px;">Statistiques du dataset</div>
|
| 422 |
+
<div style="display:flex; gap:10px; margin-bottom:10px;">
|
| 423 |
+
<div style="flex:1; background:#1e293b; border-radius:8px; padding:8px; text-align:center;">
|
| 424 |
+
<div style="color:#94a3b8; font-size:0.75em;">Total</div>
|
| 425 |
+
<div style="color:#e2e8f0; font-weight:700; font-size:1.2em;">{total:,}</div>
|
| 426 |
+
</div>
|
| 427 |
+
<div style="flex:1; background:#1e293b; border-radius:8px; padding:8px; text-align:center;">
|
| 428 |
+
<div style="color:#22c55e; font-size:0.75em;">Bénin</div>
|
| 429 |
+
<div style="color:#22c55e; font-weight:700; font-size:1.2em;">{n_benign:,}</div>
|
| 430 |
+
</div>
|
| 431 |
+
<div style="flex:1; background:#1e293b; border-radius:8px; padding:8px; text-align:center;">
|
| 432 |
+
<div style="color:#ef4444; font-size:0.75em;">Malveillant</div>
|
| 433 |
+
<div style="color:#ef4444; font-weight:700; font-size:1.2em;">{n_malicious:,}</div>
|
| 434 |
+
</div>
|
| 435 |
+
</div>
|
| 436 |
+
<div style="background:#1e293b; border-radius:8px; padding:8px;">
|
| 437 |
+
{cats_html}
|
| 438 |
+
</div>
|
| 439 |
+
</div>
|
| 440 |
+
"""
|
| 441 |
|
| 442 |
|
| 443 |
# ---------------------------------------------------------------------------
|
| 444 |
+
# JavaScript to bridge Plotly clicks → Gradio
|
| 445 |
# ---------------------------------------------------------------------------
|
| 446 |
+
PLOTLY_CLICK_JS = """
|
| 447 |
+
() => {
|
| 448 |
+
function setupClickHandler() {
|
| 449 |
+
const plotEl = document.querySelector('#tsne-chart .js-plotly-plot');
|
| 450 |
+
if (!plotEl) {
|
| 451 |
+
setTimeout(setupClickHandler, 500);
|
| 452 |
+
return;
|
| 453 |
+
}
|
| 454 |
+
plotEl.on('plotly_click', function(data) {
|
| 455 |
+
if (data && data.points && data.points.length > 0) {
|
| 456 |
+
const idx = data.points[0].customdata;
|
| 457 |
+
if (idx !== undefined && idx !== null) {
|
| 458 |
+
// Find the hidden index input and update it
|
| 459 |
+
const inputEl = document.querySelector('#click-index-input textarea');
|
| 460 |
+
if (inputEl) {
|
| 461 |
+
const nativeSetter = Object.getOwnPropertyDescriptor(
|
| 462 |
+
window.HTMLTextAreaElement.prototype, 'value'
|
| 463 |
+
).set;
|
| 464 |
+
nativeSetter.call(inputEl, String(idx));
|
| 465 |
+
inputEl.dispatchEvent(new Event('input', { bubbles: true }));
|
| 466 |
+
// Small delay then trigger change
|
| 467 |
+
setTimeout(() => {
|
| 468 |
+
inputEl.dispatchEvent(new Event('change', { bubbles: true }));
|
| 469 |
+
}, 50);
|
| 470 |
+
}
|
| 471 |
+
}
|
| 472 |
+
}
|
| 473 |
+
});
|
| 474 |
+
// Re-attach after plot updates (filters)
|
| 475 |
+
const observer = new MutationObserver(() => {
|
| 476 |
+
const newPlot = document.querySelector('#tsne-chart .js-plotly-plot');
|
| 477 |
+
if (newPlot && !newPlot._hasClickHandler) {
|
| 478 |
+
newPlot._hasClickHandler = true;
|
| 479 |
+
newPlot.on('plotly_click', function(data) {
|
| 480 |
+
if (data && data.points && data.points.length > 0) {
|
| 481 |
+
const idx = data.points[0].customdata;
|
| 482 |
+
if (idx !== undefined && idx !== null) {
|
| 483 |
+
const inputEl = document.querySelector('#click-index-input textarea');
|
| 484 |
+
if (inputEl) {
|
| 485 |
+
const nativeSetter = Object.getOwnPropertyDescriptor(
|
| 486 |
+
window.HTMLTextAreaElement.prototype, 'value'
|
| 487 |
+
).set;
|
| 488 |
+
nativeSetter.call(inputEl, String(idx));
|
| 489 |
+
inputEl.dispatchEvent(new Event('input', { bubbles: true }));
|
| 490 |
+
setTimeout(() => {
|
| 491 |
+
inputEl.dispatchEvent(new Event('change', { bubbles: true }));
|
| 492 |
+
}, 50);
|
| 493 |
+
}
|
| 494 |
+
}
|
| 495 |
+
}
|
| 496 |
+
});
|
| 497 |
+
}
|
| 498 |
+
});
|
| 499 |
+
observer.observe(document.querySelector('#tsne-chart') || document.body, {
|
| 500 |
+
childList: true, subtree: true
|
| 501 |
+
});
|
| 502 |
+
}
|
| 503 |
+
setTimeout(setupClickHandler, 1000);
|
| 504 |
+
}
|
| 505 |
+
"""
|
| 506 |
|
| 507 |
|
| 508 |
# ---------------------------------------------------------------------------
|
| 509 |
# Gradio Interface
|
| 510 |
# ---------------------------------------------------------------------------
|
| 511 |
+
TITLE_HTML = """
|
| 512 |
+
<div style="text-align:center; padding:10px 0;">
|
| 513 |
+
<h1 style="font-size:1.8em; margin:0;">\U0001f6e1\ufe0f GuardLLM — Prompt Security Visualizer</h1>
|
| 514 |
+
<p style="color:#94a3b8; font-size:0.95em; margin-top:4px;">
|
| 515 |
+
Espace d'embedding t-SNE interactif •
|
| 516 |
+
<a href="https://huggingface.co/meta-llama/Llama-Prompt-Guard-2-86M" target="_blank" style="color:#60a5fa;">
|
| 517 |
+
Llama Prompt Guard 2</a> •
|
| 518 |
+
<a href="https://huggingface.co/datasets/neuralchemy/Prompt-injection-dataset" target="_blank" style="color:#60a5fa;">
|
| 519 |
+
neuralchemy dataset</a>
|
| 520 |
</p>
|
| 521 |
</div>
|
| 522 |
"""
|
| 523 |
|
| 524 |
with gr.Blocks(
|
| 525 |
+
theme=gr.themes.Soft(primary_hue="blue", neutral_hue="slate"),
|
| 526 |
+
title="GuardLLM - Prompt Security Visualizer",
|
|
|
|
|
|
|
|
|
|
| 527 |
css="""
|
| 528 |
+
.main-container { max-width: 1300px; margin: 0 auto; }
|
| 529 |
footer { display: none !important; }
|
| 530 |
+
#click-index-input { display: none !important; }
|
| 531 |
""",
|
| 532 |
) as demo:
|
| 533 |
|
| 534 |
+
gr.HTML(TITLE_HTML)
|
| 535 |
+
|
| 536 |
+
# Hidden input for JS click bridge
|
| 537 |
+
click_index = gr.Textbox(
|
| 538 |
+
value="",
|
| 539 |
+
visible=False,
|
| 540 |
+
elem_id="click-index-input",
|
| 541 |
+
)
|
| 542 |
|
| 543 |
with gr.Row():
|
| 544 |
+
# ---- Left: t-SNE chart + filters ----
|
| 545 |
+
with gr.Column(scale=3):
|
| 546 |
+
category_filter = gr.CheckboxGroup(
|
| 547 |
+
choices=UNIQUE_CATEGORIES,
|
| 548 |
+
value=UNIQUE_CATEGORIES,
|
| 549 |
+
label="Filtrer par catégorie",
|
| 550 |
+
interactive=True,
|
| 551 |
)
|
| 552 |
+
|
| 553 |
+
tsne_plot = gr.Plot(
|
| 554 |
+
value=build_tsne_figure(),
|
| 555 |
+
label="Espace t-SNE",
|
| 556 |
+
elem_id="tsne-chart",
|
| 557 |
)
|
| 558 |
+
|
| 559 |
+
gr.Markdown(
|
| 560 |
+
"*Cliquez sur un point pour l'analyser. "
|
| 561 |
+
"Survolez pour voir le texte. Utilisez la molette pour zoomer.*"
|
| 562 |
)
|
| 563 |
|
| 564 |
+
# ---- Right: Analysis panel ----
|
| 565 |
+
with gr.Column(scale=2):
|
| 566 |
+
gr.HTML(build_stats_html())
|
| 567 |
|
| 568 |
+
gr.Markdown("### Sélectionner un prompt")
|
| 569 |
+
prompt_dropdown = gr.Dropdown(
|
| 570 |
+
choices=DROPDOWN_CHOICES,
|
| 571 |
+
label="Rechercher dans le dataset",
|
| 572 |
+
filterable=True,
|
| 573 |
+
interactive=True,
|
| 574 |
)
|
| 575 |
+
|
| 576 |
+
gr.Markdown("### Ou analyser un prompt libre")
|
| 577 |
+
manual_input = gr.Textbox(
|
| 578 |
+
label="Prompt personnalisé",
|
| 579 |
+
placeholder="Tapez ou collez un prompt...",
|
| 580 |
+
lines=2,
|
| 581 |
)
|
| 582 |
+
analyze_btn = gr.Button("Analyser", variant="primary")
|
| 583 |
+
|
| 584 |
+
gr.Markdown("---")
|
| 585 |
+
gr.Markdown("### Résultat de l'analyse")
|
| 586 |
+
result_html = gr.HTML(value=empty_analysis_html())
|
| 587 |
+
risk_md = gr.Markdown(value="")
|
| 588 |
+
|
| 589 |
+
# Hidden: full prompt text display
|
| 590 |
+
full_prompt = gr.Textbox(label="Prompt complet", lines=3, interactive=False, visible=True)
|
| 591 |
+
|
| 592 |
+
# ---- Events ----
|
| 593 |
|
| 594 |
+
# Filter changes
|
| 595 |
+
category_filter.change(
|
| 596 |
+
fn=on_filter_change,
|
| 597 |
+
inputs=[category_filter],
|
| 598 |
+
outputs=[tsne_plot],
|
| 599 |
+
)
|
| 600 |
+
|
| 601 |
+
# Click bridge: JS updates click_index → trigger analysis
|
| 602 |
+
click_index.change(
|
| 603 |
+
fn=on_index_input,
|
| 604 |
+
inputs=[click_index],
|
| 605 |
+
outputs=[result_html, risk_md, full_prompt],
|
| 606 |
+
)
|
| 607 |
+
|
| 608 |
+
# Dropdown select
|
| 609 |
+
prompt_dropdown.change(
|
| 610 |
+
fn=on_dropdown_select,
|
| 611 |
+
inputs=[prompt_dropdown],
|
| 612 |
+
outputs=[result_html, risk_md, full_prompt],
|
| 613 |
+
)
|
| 614 |
+
|
| 615 |
+
# Manual analysis
|
| 616 |
analyze_btn.click(
|
| 617 |
+
fn=on_manual_analyze,
|
| 618 |
+
inputs=[manual_input],
|
| 619 |
+
outputs=[result_html, risk_md],
|
| 620 |
)
|
| 621 |
+
manual_input.submit(
|
| 622 |
+
fn=on_manual_analyze,
|
| 623 |
+
inputs=[manual_input],
|
| 624 |
+
outputs=[result_html, risk_md],
|
| 625 |
)
|
| 626 |
|
| 627 |
+
# Inject Plotly click handler JS
|
| 628 |
+
demo.load(fn=None, inputs=None, outputs=None, js=PLOTLY_CLICK_JS)
|
| 629 |
+
|
| 630 |
# Footer
|
| 631 |
gr.Markdown(
|
| 632 |
"""
|
| 633 |
---
|
| 634 |
+
<div style="text-align:center; color:#64748b; font-size:0.8em;">
|
| 635 |
+
<strong>GuardLLM</strong> — Visualiseur de sécurité des prompts<br>
|
| 636 |
+
Modèle : <a href="https://huggingface.co/meta-llama/Llama-Prompt-Guard-2-86M">
|
| 637 |
+
Llama Prompt Guard 2 (86M)</a> par Meta •
|
| 638 |
+
Dataset : <a href="https://huggingface.co/datasets/neuralchemy/Prompt-injection-dataset">
|
| 639 |
+
neuralchemy/Prompt-injection-dataset</a>
|
|
|
|
| 640 |
</div>
|
| 641 |
+
"""
|
| 642 |
)
|
| 643 |
|
| 644 |
|
| 645 |
+
logger.info("Gradio app built. Ready to launch.")
|
| 646 |
+
|
| 647 |
if __name__ == "__main__":
|
| 648 |
demo.launch()
|