Skill UI

This skill systematically probes an AI model's core behavioral patterns across six critical dimensions, including reasoning, refusal, formatting, and grounding. It generates a comprehensive, styled HTML report with radar charts and actionable insights, allowing users to understand a model's true capabilities, compare different models, or perform compliance and red-team assessments without needing an external API key.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.

NVIDIA garak is an open-source LLM vulnerability scanner designed for comprehensive red-teaming and security assessment. It systematically probes large language models (via OpenAI-compatible APIs, Hugging Face, etc.) using thousands of adversarial prompts. It covers critical vulnerabilities such as prompt injection, jailbreaking, data leakage, and toxicity. Use this tool to establish a repeatable security baseline before or after deployment, validate the effectiveness of safety guardrails, or generate quantitative evidence for AI risk assessments.

This skill provides comprehensive techniques for security-testing Retrieval-Augmented Generation (RAG) pipelines. It probes for indirect prompt injection, which occurs when malicious instructions are embedded in retrieved documents, and tests for embedding-space manipulation. Using advanced tools like NVIDIA garak, Promptfoo, and PyRIT against vector stores (FAISS, Chroma, etc.), users can validate retrieval guardrails and secure CI/CD gates against adversarial inputs and data leakage.

This skill detects supply chain compromise risks in AI agents. It identifies vulnerabilities related to compromised dependencies, malicious plugins, tools, models, and untrusted update sources. It is used when agents dynamically load external resources or pull remote configurations. The skill probes for untrusted loading, dependency integrity, and malicious artifact injection to ensure agent security.