Directories
¶
| Path | Synopsis |
|---|---|
|
Document Injection targets AI browsers that read shared documents (Google Docs, PDFs, etc.) by embedding instructions within them.
|
Document Injection targets AI browsers that read shared documents (Google Docs, PDFs, etc.) by embedding instructions within them. |
|
Package deception implements attacks testing for deceptive agent behavior, including alignment faking, covert goal pursuit, and multi-agent collusion.
|
Package deception implements attacks testing for deceptive agent behavior, including alignment faking, covert goal pursuit, and multi-agent collusion. |
|
Filesystem Escape tests MCP filesystem/git sandbox escape vectors.
|
Filesystem Escape tests MCP filesystem/git sandbox escape vectors. |
|
Package multi_agent implements attacks targeting LLM-controlling-LLM architectures where orchestrator agents delegate tasks to sub-agents with varying privilege levels.
|
Package multi_agent implements attacks targeting LLM-controlling-LLM architectures where orchestrator agents delegate tasks to sub-agents with varying privilege levels. |
|
Package persistence implements attacks that establish persistent footholds in agent systems through configuration modification, credential harvesting, and multi-step exploitation chains.
|
Package persistence implements attacks that establish persistent footholds in agent systems through configuration modification, credential harvesting, and multi-step exploitation chains. |
|
Package skill_injection implements attacks targeting agent skill/plugin marketplaces and loading mechanisms.
|
Package skill_injection implements attacks targeting agent skill/plugin marketplaces and loading mechanisms. |
|
AgentExploitation implements attacks against AI coding editor agents using the AIShellJack pattern: 75-88% execution rate, 71.5% privilege escalation.
|
AgentExploitation implements attacks against AI coding editor agents using the AIShellJack pattern: 75-88% execution rate, 71.5% privilege escalation. |
Click to show internal directories.
Click to hide internal directories.