Skill UI

This skill outlines the implementation of advanced runtime defenses for production Large Language Model (LLM) applications. It covers using multiple industry-leading guardrail systems—including Llama Guard, NeMo Guardrails, and LLM Guard—to detect and block adversarial attacks such as prompt injection, jailbreaks, and toxic content. It provides a comprehensive defense-in-depth strategy for ensuring model safety and output integrity in real-world deployments.

A comprehensive security tool designed to detect and defend against subtle prompt injection attacks hidden within untrusted multi-modal content, such as web pages, PDFs, and images. It scans for obfuscated payloads (e.g., hidden CSS, metadata, zero-width characters) by combining content normalization, heuristic analysis, and dedicated ML detectors, ensuring that LLM agents only consume sanitized, trustworthy input.

PyRIT (Python Risk Identification Tool) is an open-source automation framework designed for advanced, multi-turn adversarial red-teaming of conversational LLMs. It simulates real-world attack scenarios by orchestrating an attacker model and a scorer model in a feedback loop. Features include Crescendo (gradual escalation) and Tree-of-Attacks with Pruning (TAP) techniques to detect complex vulnerabilities like prompt injection and jailbreaks in stateful dialogues.

This skill utilizes NVIDIA's open-source garak framework to conduct comprehensive red-teaming assessments on Large Language Models (LLMs). It tests for critical vulnerabilities such as prompt injection, jailbreaks, data leakage, and toxic content generation by sending thousands of adversarial probes. Ideal for pre-deployment security validation, API guardrail testing, and generating defensible evidence for AI risk assessments.

This skill provides a comprehensive defense-in-depth framework for securing autonomous AI agents. It implements least-privilege tool allowlisting, identity binding, and human-in-the-loop controls to mitigate risks like prompt injection and tool poisoning. Use this when building agents that interact with sensitive systems (e.g., payments, file writes) to ensure governance, auditability, and compliance.

This tool provides comprehensive safety scanning for untrusted inputs, such as user submissions, API payloads, and webhook data. It actively detects various security threats, including prompt injection, jailbreak attempts, instruction override attacks, and unsafe content. Beyond basic checks, it offers deep analysis, full multi-layer scanning, and even capabilities to train defensive models using detected threats. Essential for secure AI application development.