Groq Provider

The shieldGroq wrapper adds transparent security to your existing Groq client. It intercepts every chat.completions.create call to harden system prompts, detect injections in user messages, and sanitize leaked content from responses.

Usage

import Groq from "groq-sdk";
import { shieldGroq } from "@zeroleaks/shield/groq";

const client = shieldGroq(new Groq(), {
  systemPrompt: "You are a support agent...",
});

const response = await client.chat.completions.create({
  model: "llama-3.3-70b-versatile",
  messages: [
    { role: "system", content: "You are a support agent..." },
    { role: "user", content: userInput },
  ],
});

How It Works

On every call to chat.completions.create, Shield:

1. Clones the messages array (never mutates your original objects)
2. Hardens any system message with security rules (unless harden: false)
3. Scans every user message for injection patterns (unless detect: false)
4. Calls the original Groq API
5. Sanitizes the response text for leaked system prompt fragments (unless sanitize: false)

Options

Multi-part Messages

Groq supports content as string | ContentPart[] (e.g. text + images). Shield extracts text from all parts for injection detection and hardening.

Streaming

Use streamingSanitize: "chunked" for long streams to limit memory (~8KB at a time). Use "passthrough" to skip sanitization when you accept the risk.