ai-offensive

Test AI and LLM systems for offensive security risks like prompt injection.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/noname300989/Security-Claw --skill ai-offensive
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ai-offensive
Source: https://github.com/noname300989/Security-Claw/tree/main/skills/ai-offensive
Command: npx skills add https://github.com/noname300989/Security-Claw --skill ai-offensive

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the critical security vulnerabilities inherent in AI and LLM systems, protecting against sophisticated attacks that can compromise data, functionality, and user trust.

Core Features & Use Cases

  • Prompt Injection Testing: Detects and simulates attacks designed to override AI instructions or hijack agent behavior.
  • System Prompt Leakage: Identifies weaknesses that allow extraction of sensitive system prompts.
  • Excessive Agency Exploitation: Tests if AI agents can be tricked into performing unauthorized actions.
  • RAG Poisoning: Assesses the risk of malicious data corrupting Retrieval-Augmented Generation pipelines.
  • Use Case: A security team can use this Skill to proactively test their new AI-powered customer service chatbot for prompt injection vulnerabilities before deployment, ensuring it cannot be manipulated to reveal sensitive company information or perform unauthorized actions.

Quick Start

Use the ai-offensive skill to test the AI chatbot at https://example.com/chat for prompt injection vulnerabilities.

Frequently Asked Questions about ai-offensive

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my LLM chatbot for prompt injection vulnerabilities?▼

To test an LLM chatbot for prompt injection vulnerabilities, you can use this Skill to simulate attacks designed to override AI instructions and hijack agent behavior across chat APIs. It validates security against malicious instruction overrides before deployment.

What is RAG poisoning and how does it affect AI security?▼

RAG poisoning involves malicious data corrupting Retrieval-Augmented Generation pipelines. This Skill assesses RAG security by testing if corrupted retrieval data can manipulate your AI system's generated outputs and compromise pipeline integrity.

Can I run red teaming tests for excessive agency in AI agents?▼

Yes, you can run red teaming tests for excessive agency in AI agents. This Skill tests whether AI agents can be tricked into performing unauthorized actions, covering vulnerabilities listed in the OWASP LLM Top 10 and Agentic AI Top 10.

Does this cover the OWASP LLM Top 10 and MCP security vulnerabilities?▼

Yes, this Skill covers the OWASP LLM Top 10, Agentic AI Top 10, and MCP Top 10 vulnerabilities. It tests chat APIs, agent communication, and RAG pipelines to validate security against malicious instruction overrides and unauthorized actions.

How do I check my AI system for system prompt leakage?▼

To check your AI system for system prompt leakage, this Skill identifies weaknesses that allow extraction of sensitive system prompts. It simulates attacks across chat APIs to ensure your proprietary instructions cannot be extracted by malicious users.