sudp
xhyumiracle/sudpSecret-Use Delegation Protocol — protocol-level secret use for agentic systems
ai-securityauthentication-authorizationcryptography+5
42 months ago
xhyumiracle/sudpSecret-Use Delegation Protocol — protocol-level secret use for agentic systems
owasp/xpsdReachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually…
tencent-hunyuan/diagsafeDiagnostic LLM safety benchmark with 3,489 bilingual prompts, an 84-label taxonomy, and prompt-level rubric judging for explainable, fine-grained…
cygnux-labs/tracekitTamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
genai-security-project/genai-llm-top10OWASP Top 10 for Large Language Model Applications
gmh5225/nova-frameworkYARA-inspired prompt pattern matching engine that combines keyword, regex, semantic similarity, and LLM evaluation rules to detect jailbreaks and…
lsudoko/antibodyGitLab Duo DevSecOps loop where a second AI re-attacks every AI-written fix, saving each successful bypass as a permanent antibody replayed in CI and…
hanxi19/black_hole_attack_for_vector_databaseResearch implementation of the Black-Hole Attack that poisons vector database indexes via centrality-driven hubness, with FAISS pipelines and…
trhhubsd/artexMulti-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…
ag3ntsc4rn/autorun-auditFind code that runs without you asking: repo files that execute on folder open (VS Code tasks, agent hooks, MCP, devcontainers) and Python…
peach-research-lab/authorizationbenchThe first benchmark to evaluate how well do LLM agents act in alignment with their assigned authorization scope.
owasp/ai-threat-modelerOWASP project for AI-assisted threat modeling, helping teams identify, analyze, and document security threats and mitigations in system designs.
tencentcloud/cubesandboxInstant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
tridents10/vader-pro-vdrAI-assisted Vulnerability Detection & Remediation platform featuring a Go endpoint agent, centralized dashboard, and vulnerability intelligence…
infobyte/ai-pentest-agentStandalone autonomous AI pentest agent with a plan→act→judge loop, generic skills, destructive-action gate, and swappable LLM providers, plus a…
happytotoro116/ghidra-llm-pipelineDeterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.
fazmin/cve-intelLocal security intelligence for CVE triage — 31 tools, 25 sources, risk scores and an MCP server for AI agents, all in native Rust. Private by…
oyesanyf/oshoosiclawAutonomous Rust endpoint security agent combining Ring-0 Windows driver and Linux eBPF pre-execution blocking, YARA detection, MITRE ATT&CK mapping,…