ziran

Analyze AI agents for tool interaction and dynamic attack path vulnerabilities.

10|3|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/taoq-ai/ziran --skill ziran
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ziran
Source: https://github.com/taoq-ai/ziran/tree/main
Command: npx skills add https://github.com/taoq-ai/ziran --skill ziran

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill enables automated identification of security risks within AI agents by analyzing their capabilities, tools, and interactions.

Core Features & Use Cases

  • Tool Chain Mapping: Automatically constructs a capability graph to detect dangerous tool sequences.
  • Multi-Phase Campaign Simulation: Runs multi-step exploits to evaluate agent safety under varied scenarios.
  • Security Event Detection: Identifies side-effects, prompt injections, and unsafe behavior at both the text and execution levels.
  • Use Case: Security teams can simulate attack campaigns on proprietary AI agents to find vulnerabilities before deployment.

Quick Start

Run the ZIRAN security analysis against your AI agent by providing its source code or API endpoint to identify potential security issues.

Frequently Asked Questions about ziran

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect vulnerabilities in AI agent tool chains?

Detect vulnerabilities in AI agent tool chains by analyzing agent capabilities and tool interactions to identify dangerous sequences. The Skill constructs a capability graph to map tools and discover dynamic attack paths within multi-agent systems.

Can I simulate attack campaigns against remote API AI agents?

Yes, you can simulate attack campaigns against remote API AI agents by running multi-phase exploit scenarios. The Skill orchestrates multi-step attacks to evaluate agent safety and identify side-effects under varied conditions before deployment.

What is the best way to test for prompt injection in multi-agent systems?

The best way to test for prompt injection in multi-agent systems is through automated security event detection. The Skill identifies unsafe behavior and prompt injections at both the text and execution levels during campaign simulation.

How does an attack simulation evaluate AI agent safety during deployment?

Attack simulation evaluates AI agent safety by running multi-step exploits against the target agent's capabilities. It requires graph analysis and detection modules to assess vulnerabilities arising from tool interactions comprehensively.

Does this vulnerability assessment work with proprietary AI agent source code?

Yes, this vulnerability assessment works with proprietary AI agent source code. You provide the source code or API endpoint to run the security analysis and identify potential issues within your deployment pipeline.

When do I need tool chain mapping for AI security testing?

You need tool chain mapping for AI security testing when you must automatically detect dangerous tool sequences. It constructs a capability graph to visualize and evaluate how interacting tools create dynamic attack paths.