ai-security
Installation
SKILL.md
AI/ML Security
When to Activate
- Red-teaming an LLM/chatbot/copilot for direct & indirect prompt injection and multi-turn jailbreaks.
- Testing a RAG pipeline for document/embedding poisoning, embedding inversion, and cross-tenant retrieval leakage.
- Auditing an AI agent / MCP server for tool poisoning, excessive agency, and command injection (RCE).
- Scanning a model artifact (HuggingFace,
.pt/.pkl/.bin/.gguf) for deserialization payloads before loading it. - Assessing a model API for extraction/distillation, membership inference, and adversarial-suffix robustness.
- Mapping findings to OWASP LLM Top-10 (2025) + MITRE ATLAS for a report.