Skill UI

Scans Solana and Anchor programs for six critical security vulnerabilities—arbitrary CPI, improper PDA validation, missing signer/ownership checks, sysvar spoofing, and instruction introspection issues—to support audits and pre-launch reviews.

Trivy is a comprehensive open-source vulnerability scanner used for detecting vulnerabilities, misconfigurations, secrets, and license violations across OS packages, language dependencies, and container images. It integrates seamlessly into CI/CD pipelines for robust security testing and compliance.

Detects goal hijacking vulnerabilities where malicious instructions are hidden within external content sources processed by the agent, such as retrieved documents (RAG), uploaded files, or web page content. This skill simulates these attack vectors to ensure the agent only uses the provided context for the stated task and does not execute embedded hidden commands.

This tool provides comprehensive AI security scanning using the Tencent AI-Infra-Guard framework. It systematically audits AI infrastructure, scans tools and skills, checks agent security, and performs advanced LLM jailbreak evaluations to identify vulnerabilities and ensure the robustness and reliability of AI systems.

A comprehensive tool designed to scan any agent skill for potential security risks and vulnerabilities before implementation or use. Powered by local static analysis (A.I.G.), it ensures that no file contents, credentials, or personal data ever leave your device, providing maximum privacy and safety for integrating new AI capabilities across various agent platforms.

A comprehensive offensive checklist for assessing the security and robustness of AI and Large Language Model (LLM) applications. It covers advanced adversarial techniques such as prompt injection, jailbreaking, model extraction, data poisoning, and analyzing system vulnerabilities across components. Essential for red-teaming and security assessment.

A comprehensive guide detailing advanced security threats in Machine Learning and AI systems. Covers model supply chain attacks (RCE via pickle, poisoning), adversarial examples (FGSM, PGD, physical-world), data privacy breaches, and LLM-specific vulnerabilities. Essential for building robust, secure AI pipelines.

PyRIT (Python Risk Identification Tool) is an open-source automation framework designed for advanced, multi-turn adversarial red-teaming of conversational LLMs. It simulates real-world attack scenarios by orchestrating an attacker model and a scorer model in a feedback loop. Features include Crescendo (gradual escalation) and Tree-of-Attacks with Pruning (TAP) techniques to detect complex vulnerabilities like prompt injection and jailbreaks in stateful dialogues.

This skill utilizes NVIDIA's open-source garak framework to conduct comprehensive red-teaming assessments on Large Language Models (LLMs). It tests for critical vulnerabilities such as prompt injection, jailbreaks, data leakage, and toxic content generation by sending thousands of adversarial probes. Ideal for pre-deployment security validation, API guardrail testing, and generating defensible evidence for AI risk assessments.