hunt-llm-ai
⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
- Ask the user to state the exact target URL, IP, account, or resource.
- Ask the user to confirm written authorization and the permitted scope.
- Show the exact command(s) and explain their expected effect.
- Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
11. LLM / AI FEATURES
LLM bugs are only worth reporting when they cross a trust boundary you can prove — an OOB callback, a verbatim-reproducible secret, a cross-tenant record, or code execution. A single response alone is insufficient to distinguish a defect from unsupported generated content. Read the False-Positive Gate before claiming anything.
Naming note (was wrong in v1): the model-level list is OWASP Top 10 for LLM Applications 2025 (LLM01 Prompt Injection, LLM07 System Prompt Leakage, LLM08 Vector/Embedding Weaknesses). The agent-level list is OWASP Top 10 for Agentic Applications (2026) from the Agentic Security Initiative (ASI), codes ASI01–ASI10. Do not write "OWASP ASI 2026" as if it were one document — cite the correct list per finding.