ai-runtime-security-sandbox

Skill by ara.so — Security Skills collection

A fully local RAG chatbot built to demonstrate OWASP LLM Top 10 and OWASP Agentic Top 10 vulnerabilities through 7 live attack scenarios. Features a secure/vulnerable mode toggle, offline mock provider, and support for OpenAI, Claude, Gemini, and custom endpoints.

What it does

This sandbox demonstrates real attacks against RAG (Retrieval-Augmented Generation) systems:

• Indirect prompt injection via poisoned documents in the knowledge base
• Data leakage of confidential information through retrieval
• Tool abuse (excessive agency) — forcing the LLM to call dangerous tools
• Direct jailbreaks against input guardrails
• Insecure output handling via markdown exfiltration
• MCP tool poisoning (supply chain attacks on agent tooling)

Each attack runs with Secure Mode OFF (vulnerable baseline) and ON (with 9-layer defense stack). Works 100% offline using the built-in mock provider.