| name | vulnerability-discovery |
| description | Systematic vulnerability finding, threat modeling, and attack surface analysis for AI/LLM security assessments |
| sasmp_version | 1.3.0 |
| version | 2.0.0 |
| bonded_agent | 04-llm-vulnerability-analyst |
| bond_type | PRIMARY_BOND |
| input_schema | {"type":"object","required":["target_system"],"properties":{"target_system":{"type":"string","description":"System to assess"},"methodology":{"type":"string","enum":["STRIDE","PASTA","OWASP_LLM","MITRE_ATLAS"],"default":"OWASP_LLM"},"depth":{"type":"string","enum":["surface","standard","comprehensive"],"default":"standard"}}} |
| output_schema | {"type":"object","properties":{"threat_model":{"type":"object"},"vulnerabilities":{"type":"array"},"attack_surface":{"type":"object"},"risk_matrix":{"type":"object"}}} |
| owasp_llm_2025 | ["LLM01","LLM02","LLM03","LLM04","LLM05","LLM06","LLM07","LLM08","LLM09","LLM10"] |
| nist_ai_rmf | ["Map","Measure"] |
| mitre_atlas | ["AML.T0000","AML.T0001","AML.T0002"] |
Vulnerability Discovery Framework
Systematic approach to finding LLM vulnerabilities through structured threat modeling, attack surface analysis, and OWASP LLM Top 10 2025 mapping.
Quick Reference
Skill: Vulnerability Discovery
Frameworks: OWASP LLM 2025, NIST AI RMF, MITRE ATLAS
Function: Map (identify), Measure (assess)
Bonded to: 04-llm-vulnerability-analyst
OWASP LLM Top 10 2025 Checklist
┌─────────────────────────────────────────────────────────────┐
│ OWASP LLM TOP 10 2025 - ASSESSMENT CHECKLIST │
├─────────────────────────────────────────────────────────────┤
│ □ LLM01: Prompt Injection │
│ Test: Direct and indirect injection attempts │
│ Agent: 02-prompt-injection-specialist │
│ │
│ □ LLM02: Sensitive Information Disclosure │
│ Test: Data extraction, training data leakage │
│ Agent: 04-llm-vulnerability-analyst │
│ │
│ □ LLM03: Supply Chain │
│ Test: Model provenance, dependency security │
│ Agent: 06-api-security-tester │
│ │
│ □ LLM04: Data and Model Poisoning │
│ Test: Training data integrity, adversarial inputs │
│ Agent: 03-adversarial-input-engineer │
│ │
│ □ LLM05: Improper Output Handling │
│ Test: Output injection, XSS, downstream effects │
│ Agent: 05-defense-strategy-developer │
│ │
│ □ LLM06: Excessive Agency │
│ Test: Action scope, permission escalation │
│ Agent: 01-red-team-commander │
│ │
│ □ LLM07: System Prompt Leakage │
│ Test: Prompt extraction, reflection attacks │
│ Agent: 02-prompt-injection-specialist │
│ │
│ □ LLM08: Vector and Embedding Weaknesses │
│ Test: RAG poisoning, context injection │
│ Agent: 04-llm-vulnerability-analyst │
│ │
│ □ LLM09: Misinformation │
│ Test: Hallucination rates, fact verification │
│ Agent: 04-llm-vulnerability-analyst │
│ │
│ □ LLM10: Unbounded Consumption │
│ Test: Resource limits, cost abuse, DoS │
│ Agent: 06-api-security-tester │
└─────────────────────────────────────────────────────────────┘
