ai-security
星标11
分支1
更新时间2026年7月9日 10:16
Treat AI systems as chains of prompt, retrieval, memory, tools, and permissions.
安装
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
SKILL.md
readonly
下载
相关职业SOC
基于 SOC 职业分类
菜单
Treat AI systems as chains of prompt, retrieval, memory, tools, and permissions.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Four-phase autonomous bug bounty orchestration. Phase 0 maps external assets with deterministic Python helpers, Phase 1 lets AI prioritize attack surfaces, Phase 2 gives AI autonomous attack control, and Phase 3 produces verifier-only reports.
Four-phase autonomous bug bounty workflow. Python handles deterministic collection and verifier support; AI owns prioritization, attack reasoning, and autonomous direction changes.
Report generation agent. Convert verifier-confirmed findings into a fixed evidence-based report without adding speculative impact.
Rank reconnaissance-derived attack surfaces and design evidence-driven tests without active exploitation.
Test ranked attack surfaces autonomously, preserve evidence, and turn new access into additional attack-chain hypotheses.
A compact routing skill for choosing vulnerability hypotheses; detailed payloads live in references, not here.
| name | ai-security |
| description | Treat AI systems as chains of prompt, retrieval, memory, tools, and permissions. |
| metadata | {"tags":"ai,llm,rag,agentic"} |
判断用户或外部内容能否影响 AI 的数据访问、工具调用、记忆、检索结果或后端动作。
references/INDEX.md；候选资源：ai-security-testing.md、ai-security-vulnforge.md