hunt-rag-vector
Installation
SKILL.md
LLM08 — Vector & Embedding Weaknesses (RAG Pipeline Attacks)
hunt-llm-ai already owns session-scoped indirect injection — a hidden instruction in one
document that fires when that specific document is summarized, and ASI06 memory poisoning
(a RAG-indexed document that reaches later users). This skill goes one level deeper: it owns
the vector storage and retrieval layer itself — attacks that don't need any prompt-injection
payload at all, because the bug lives in how the embeddings are stored, scoped, and searched.
Read hunt-llm-ai's False-Positive Gate first — it applies here unchanged (run-twice rule,
anchor to a known secret, cross-tenant proof not assertion, OOB-or-it-didn't-happen for exfil).
This document adds gates specific to the vector layer.