“agent-security”的搜索结果

Expert en sécurité des agents IA (prompt injection, jailbreak prevention, tool misuse, output filtering)

中文简介正在准备中。当前显示原文说明。

Use when reviewing or writing LLM, RAG, MCP, tool, or agent code for OWASP-aligned security issues; triggered by "owasp my code", "owasp this PR", AI security review, PR review, or changes to AI system code.

中文简介正在准备中。当前显示原文说明。

Agent skill for security-manager - invoke with $agent-security-manager

中文简介正在准备中。当前显示原文说明。

梳理AI智能体读取外部信息并操作工具或文件时的安全措施，检查权限、保存路径、连接目标及凭据处理，并通过实际执行验证防护是否生效。

• 检查智能体的安全措施
• 验证用户与工作区之间的数据隔离
• 验证凭据清理和输出限制

调查预测市场价格所隐含的概率，记录来源与时间，并结合交易深度、结果判定规则和其他信息，评估其能否用于产品或业务决策。

• 评估产品采用预测市场数据的可行性
• 比较市场概率与内部指标
• 考虑用于智能体记忆或通知

为拥有钱包或交易执行权限的AI智能体设计并检查安全措施，涵盖外部输入防护、支出限额、发送前验证、停止条件、钱包隔离和私钥管理。

• 审计拥有交易权限的机器人
• 设计单笔及每日支出限额
• 设计发送前验证和自动停止条件

Design layered protections for AI agents against malicious instructions, tool misuse, and data leakage. Provides guidance and code examples for input checks, isolated tool execution, permission limits, and audit logging to help review and strengthen agent security.

中文简介正在准备中。当前显示英语简介。

• Review defenses against malicious instructions
• Isolate tool execution and restrict permissions
• Assess data leakage risks between tenants

Build a screening pipeline for web pages, PDFs, and images before an AI agent reads them. Extract hidden text, check for malicious instructions with detection models, and record decisions to block or allow content.

中文简介正在准备中。当前显示英语简介。

• Screening external content before an agent reads it
• Checking uploaded PDFs and images for hidden instructions
• Scanning documents before adding them to a knowledge base

Audit MCP servers, which provide external tools to AI agents, for hidden instructions, changes after approval, unsafe internal requests, and missing authentication. Use mcp-scan and manual checks to document risks and recommended fixes.

中文简介正在准备中。当前显示英语简介。

• Reviewing an MCP server before adding it to an agent
• Auditing an internally developed MCP server
• Checking approved tools for unexpected changes

Design security controls for Google Cloud Agent Gateway, covering incoming client requests and outgoing agent tool calls. Produce architecture diagrams, configuration files, deployment commands, and validation scripts using Model Armor, IAP, and Agent Registry.

中文简介正在准备中。当前显示英语简介。

• Design incoming and outgoing agent communication controls
• Prepare Model Armor filters and tool access policies
• Generate scripts to check authentication and allowed tool calls

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls. Use when building, deploying, or hardening agentic AI systems that invoke tools, access data, or interact with production infrastructure.

中文简介正在准备中。当前显示原文说明。

LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments

中文简介正在准备中。当前显示原文说明。

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.

中文简介正在准备中。当前显示原文说明。

Use when the diff calls a model, exposes a tool to one, feeds it fetched or user content, renders or executes its output, stores agent memory or conversation history, asks a user to approve an agent action, routes MCP tools, or changes agent settings, MCP configs, tool policies or prompt files - including this platform's own agents

中文简介正在准备中。当前显示原文说明。

Test Model Context Protocol (MCP) servers and tool-calling systems for security vulnerabilities including tool injection, parameter manipulation, privilege escalation, and data exfiltration through AI agent tool interfaces. Use this skill when assessing MCP server implementations, AI agent tool integrations, or any system that exposes tools to language models. Covers tool confusion attacks, cross-tool exploitation, and MCP server hardening assessment.

中文简介正在准备中。当前显示原文说明。

Test AI agent systems for tool abuse, unauthorized actions, privilege escalation through tool chaining, and safety bypass via agentic workflows. Use this skill when assessing autonomous AI agents that use tool-calling (function calling, plugins, actions) to interact with external systems. Covers multi-step attack chains, implicit trust exploitation, and capability boundary testing for AI agents.

中文简介正在准备中。当前显示原文说明。

Designs, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress (CLIENT_TO_AGENT), or egress (AGENT_TO_ANYWHERE) patterns involving Model Armor, IAP, and Agent Registry. Don't use for general Cloud Load Balancing or basic VPC setup not related to Agent Gateways.

中文简介正在准备中。当前显示原文说明。

Pre-production security checklist for Agentforce deployments: agent run-as permission scope, grounding-source data classification, action write-scope, audit trail. NOT for the full go-live readiness gate covering cost telemetry, rate limits, rollout and rollback — use agentforce/agentforce-production-readiness-checklist. NOT for a general org security review — use security/security-health-check.

中文简介正在准备中。当前显示原文说明。

Use for an adversarial red-team / blue-team / auditor review of an AI agent's CONFIG + behaviour (rules, skills, MCP, hooks, permissions) — attack-chain → defensive-gap list, not a code audit.

中文简介正在准备中。当前显示原文说明。

Use when designing defensive monitoring for agent systems whose risks accumulate across users, sessions, subagents, files, or tool calls. Adds online cross-context clustering with rare escalation, time-to-detect evaluation, provenance checks for control-like workspace content, and sanitized commits for persistent prompt-injection defense.

中文简介正在准备中。当前显示原文说明。

Detect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.

中文简介正在准备中。当前显示原文说明。

Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

中文简介正在准备中。当前显示原文说明。

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.

中文简介正在准备中。当前显示原文说明。

Run agent-adapted STRIDE + access-control analysis on an agent system. Produces a ranked risk list with agentic mitigations (scope / split / filter / gate / review).

中文简介正在准备中。当前显示原文说明。