Havuz

OpenAI Codex 自定义系统提示词注入工具 | System Prompt Injection | CTF Security Research Red Team | Auto Install | Cross-Platform

Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression tes

Agents propose. People approve. Change control for AI agents: everyday work runs on its own, anything an agent can't take back waits for a t

Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier

Open-source adversary emulation for AI agents and MCP servers.

Self-hosted personal AI agent with a WebUI, memory, tools, MCP, sub-agents and automations. Connect local or cloud LLMs.

44 plug-and-play skills for OpenClaw — self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graph

[ACL 2026] PIArena: A Platform for Prompt Injection Evaluation

Self-hosted AI security proxy. Redact PII, block prompt injection, route to any LLM provider. OpenAI-compatible.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 1

🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Repro

Prompt-injection, jailbreak and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanit

Claude skill that catches hidden prompt-injection text in documents before acting on them

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

Privacy and security guardrails for Spring AI: request-scoped PII tokenization, least-privilege disclosure to tools, and tool authorization

Open-source runtime security and execution control for autonomous AI agents. ALLOW, BLOCK, ESCALATE at the execution boundary with auditable

Evidence-grounded evaluation for AI agents — verifies each claim against the agent's real tool outputs (constrained, evidence-grounded model

Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for pr

A Collection of Defensive Cyber Security skills designed to harden your Software, Infrastructure and even Game.

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and G

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Self-hosted LLM gateway that turns flat-rate AI subscriptions (Claude Code Max, ChatGPT Plus, Codex, Copilot, M365, Gemini) into one OpenAI/

Coding-agent tools on TypeSafe's Jev, measured in public. review-router: caught 13 of 13 CVE fixes a filename rule sent to a quick review. j

Prompt-injection guardrail for LLM applications. Compact model that outperforms larger open-source guards. No regex, no signatures. Demo: an

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidan

Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP

🦞 Local, read-only security audit for your OpenClaw agent. Finds config, prompt-injection and supply-chain risks, watches for drift, and ve

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking

Every way an LLM can break one SDK to stop it. Injection. Hallucination. Leakage. Handled.

Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, ref

Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol server

A terminal-based, multi-domain support-ticket triage agent grounded in a local support corpus.

Concurrent Go CLI that detects hidden prompt-injection content in documents — invisible Unicode, homoglyphs, hidden HTML, and known trigger

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (RAG

Python SDK for LLM guardrails with safety classification, PII detection, prompt injection defense, and grounding checks. Protect AI applicat

Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.

Governed Postgres access for AI assistants: an MCP gateway with OAuth 2.1 and OIDC login, one Postgres role per person, database-enforced re

Command-line tool for TypeSafe's Jev AI model

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

Safety benchmark for personal AI agents under realistic prompt injection. 120 test cases across 5 professional domains, 3 injection vectors,

Evidence-grounded AI secretary for Claude Code and Codex, with frozen context, deterministic retrieval, bounded quality review, and explicit

Skill router and prompt-injection firewall for AI coding agents: gives Claude Code, Codex and Cursor the few skills, MCP servers and tools e

Free security skills for AI-built apps — run /lictor-security-check in Claude Code before you ship. Plain English, read-only, no telemetry.

Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audit t