Test Model Context Protocol (MCP) servers and tool-calling systems for security vulnerabilities including tool injection, parameter manipulation, privilege escalation, and data exfiltration through AI agent tool interfaces. Use this skill when assessing MCP server implementations, AI agent tool integrations, or any system that exposes tools to language models. Covers tool confusion attacks, cross-tool exploitation, and MCP server hardening assessment.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트
Test Large Language Models for direct prompt injection vulnerabilities where user input overrides system instructions, extracts system prompts, bypasses safety filters, or causes unauthorized actions. Use this skill when assessing chatbots, AI assistants, LLM-powered tools, or any application that processes natural language input through an LLM. Covers role-playing attacks, instruction hierarchy exploitation, multi-turn manipulation, and context window abuse for comprehensive AI security testing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ShulkwiSEC/bb-huge☆ 232026년 7월 11일 업데이트