augustus
LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary
파일 탐색기
최종 버전 다운로드 (.zip)- devcontainer.json
- devcontainer.json
- Dockerfile
- settings.json
- bug_report.md
- feature_request.md
- ci.yml
- claude-code.yml
- claude-md-drift.yml
- codex-code.yml
- external-contribution.yml
- gemini-code.yml
- graphify-graph.yml
- leaderboard-backfill-caller.yml
- leaderboard-metrics.yml
- release.yml
- secrets-scan.yml
- security.yml
- verify-pins.yml
- dependabot.yml
- PULL_REQUEST_TEMPLATE.md
- flipattack_benchmark_test.go
- banner.go
- cli.go
- cli_test.go
- common.go
- main.go
- recon_context_test.go
- recon_scan_test.go
- scan.go
- scan_errored_test.go
- scan_pair_ollama_test.go
- scan_test.go
- base.yaml
- benchmark.sh
- pull-models.sh
- setup.sh
- Makefile
- About This Vault.md
- Tag Index.md
- Glossary.md
- Installation & Build.md
- Quickstart.md
- Threat Model & Authorized Use.md
- What Is Augustus.md
- Architecture MOC.md
- Attempt & Conversation Model.md
- Concurrency & Scanner.md
- Configuration System.md
- Core Interfaces.md
- Plugin Registration & Registries.md
- Scan Pipeline.md
- System Overview.md
- Attack Engine (PAIR & TAP).md
- Buffs.md
- Concepts MOC.md
- Detectors.md
- Generators.md
- Harnesses.md
- Multi-turn Attacks.md
- Probes.md
- Rate Limiting & Retry.md
- Scoring & Verdicts.md
- Tool-Use & Agent Attacks.md
- Adversarial Patch.md
- ANSI Escape.md
- API Key.md
- Art Prompts.md
- AutoDAN.md
- AV Spam Scanning.md
- Bad Characters.md
- Browsing.md
- Continuation.md
- Crescendo.md
- DAN.md
- Divergence.md
- Do Not Answer.md
- DRA.md
- Exploitation.md
- FlipAttack.md
- GCG.md
- Glitch.md
- GOAT.md
- Goodside.md
- Grandma.md
- Guardrail.md
- Hydra.md
- Latent Injection.md
- Leak Replay.md
- LMRC.md
- Malware Generation.md
- MCP Config Secret Scan.md
- Mischievous.md
- Misleading.md
- Multi-Agent.md
- Multimodal.md
- Obscure Prompt.md
- Package Hallucination.md
- PAIR.md
- Phrasing.md
- Poetry.md
- Prefix.md
- Probes MOC.md
- Prompt Injection.md
- RAG Poisoning.md
- Real Toxicity Prompts.md
- Snowball.md
- Suffix.md
- TAP.md
- Test Probe.md
- Tool Coercion.md
- Tool Use.md
- Topic.md
- Tree Search.md
- Web Injection.md
- Anthropic.md
- Anyscale.md
- AWS Bedrock.md
- Azure OpenAI.md
- Cohere.md
- DeepInfra.md
- Fireworks AI.md
- Function.md
- Generators MOC.md
- GGML llama.cpp.md
- Google Vertex AI.md
- Groq.md
- Hugging Face.md
- IBM watsonx.md
- LangChain Serve.md
- LangChain.md
- LiteLLM.md
- Mistral.md
- NeMo Guardrails.md
- NVIDIA Cloud Functions.md
- NVIDIA NeMo.md
- NVIDIA NIM.md
- Ollama.md
- OpenAI-Compatible.md
- OpenAI.md
- Rasa.md
- Replicate.md
- REST.md
- Test Generator.md
- Together AI.md
- Adversarial Patch Detector.md
- Agent Detector.md
- Always Detector.md
- ANSI Escape Detector.md
- Any Detector.md
- API Key Detector.md
- Art Prompts Detector.md
- Base Detector.md
- Continuation Detector.md
- DAN Detector.md
- Detectors MOC.md
- Divergence Detector.md
- Encoding Detector.md
- Exploitation Detector.md
- File Formats Detector.md
- FlipAttack Detector.md
- Goodside Detector.md
- Hijacking Detector.md
- Judge Detector.md
- Known Bad Signatures Detector.md
- Latent Injection Detector.md
- Leak Replay Detector.md
- LMRC Detector.md
- Malware Generation Detector.md
- MCP Config Leak Detector.md
- Misleading Detector.md
- Mitigation Detector.md
- Multi-Agent Detector.md
- Package Hallucination Detector.md
- PAIR Detector.md
- Patterns Detector.md
- Perspective Detector.md
- Poetry Harm Judge Detector.md
- Product Key Detector.md
- Prompt Injection Detector.md
- RAG Poison Detector.md
- RAG Poisoning Detector.md
- Shields Detector.md
- Snowball Detector.md
- TAP Detector.md
- Tool Coercion Detector.md
- Toxic Comment Detector.md
- Unsafe Content Detector.md
- Visual Jailbreak Detector.md
- Web Injection Detector.md
- Buffs MOC.md
- Constructed Language.md
- Encoding Buffs.md
- Flip.md
- Low-Resource Language.md
- Lowercase.md
- Paraphrase.md
- Poetry.md
- Unicode Smuggling.md
- Buffs in Practice.md
- CLI Reference.md
- Output & Reports.md
- Probe Selection & Globs.md
- Provider Configuration.md
- Scan Recipes.md
- Adding a Buff.md
- Adding a Detector.md
- Adding a Generator.md
- Adding a Probe.md
- Contributing MOC.md
- Development Setup.md
- Linting, CI & Commits.md
- Testing & Equivalence Tests.md
- YAML Templates.md
- Key Packages.md
- Package Map (pkg vs internal).md
- 2026-07-10-go-generate-registry-files-design.md
- Home.md
- benchmark-comprehensive.yaml
- config.yaml
- crescendo.yaml
- goat.yaml
- hydra.yaml
- mischievous.yaml
- ahocorasick.go
- ahocorasick_test.go
- automaton.go
- byte_equivalence_test.go
- byte_frequencies.go
- classes.go
- dfa.go
- LICENSE
- nfa.go
- prefilter.go
- README.md
- unsafe.go
- config.go
- config_test.go
- engine.go
- engine_test.go
- parse.go
- parse_test.go
- prompts.go
- prompts_test.go
- prune.go
- prune_test.go
- toolcalls.go
- toolcalls_test.go
- klingon.go
- klingon_test.go
- metaprompt.go
- ascii85.go
- atbash.go
- atbash_test.go
- base16.go
- base2048.go
- base32.go
- base64.go
- base64_test.go
- braille.go
- camelcase.go
- camelcase_test.go
- charcode.go
- charcode_test.go
- ecoji.go
- emoji.go
- emoji_test.go
- hex.go
- leet.go
- leet_test.go
- mathprompt.go
- mathprompt_test.go
- morse.go
- nato.go
- nato_test.go
- newbuffs_verification_test.go
- piglatin.go
- piglatin_test.go
- quotedprintable.go
- rot13.go
- sneaky_bits.go
- unicode_tags.go
- uuencode.go
- zalgo.go
- buffs.go
- flip_test.go
- modes.go
- templates.go
- lowercase.go
- lowercase_test.go
- config.go
- config_test.go
- deepl.go
- deepl_test.go
- lrl.go
- lrl_test.go
- ratelimited.go
- ratelimited_test.go
- config.go
- config_test.go
- fast.go
- paraphrase_test.go
- pegasus.go
- ratelimited_test.go
- config.go
- config_test.go
- exemplars.go
- exemplars_test.go
- metaprompt.go
- metaprompt_test.go
- strategies.go
- strategies_test.go
- function.go
- hypothetical.go
- smuggling_test.go
- advpatch.go
- argument_exfiltration.go
- argument_exfiltration_test.go
- chain_length.go
- chain_length_test.go
- fake_tool_call_text.go
- fake_tool_call_text_test.go
- tool_calls.go
- tool_calls_test.go
- tool_leak_judge.go
- tool_leak_judge_live_test.go
- tool_leak_judge_prompt.go
- tool_leak_judge_test.go
- tool_manipulation.go
- tool_manipulation_test.go
- fail.go
- fail_test.go
- pass.go
- pass_test.go
- ansiescape_test.go
- escaped.go
- raw.go
- any.go
- any_test.go
- apikey.go
- apikey_test.go
- completekey.go
- completekey_test.go
- patterns.go
- artprompts.go
- config.go
- config_test.go
- mitigation_config.go
- mitigation_config_test.go
- mitigation_strings.go
- string_detector.go
- string_detector_test.go
- trigger_match_detector.go
- trigger_match_detector_test.go
- triggers.go
- wrapped_detector.go
- continuation.go
- continuation_test.go
- dan.go
- dan_test.go
- repeat.go
- repeat_test.go
- decode_approx.go
- decode_approx_test.go
- decode_match.go
- decode_match_test.go
- README.md
- templates.go
- templates_test.go
- exploitation.go
- exploitation_test.go
- fileformats.go
- fileformats_test.go
- bypass.go
- bypass_test.go
- glitch_test.go
- goodside.go
- goodside_test.go
- hijacking.go
- cache.go
- cache_test.go
- config.go
- config_test.go
- judge.go
- judge_test.go
- prompts.go
- prompts_test.go
- knownbadsignatures.go
- knownbadsignatures_test.go
- latentinjection.go
- latentinjection_test.go
- startswith.go
- triggerlist.go
- triggerlist_test.go
- lmrc.go
- lmrc_test.go
- malwaregen.go
- malwaregen_test.go
- contentinjection.go
- contentinjection_test.go
- mcpprimitive.go
- mcpprimitive_test.go
- mcpsecrets.go
- mcpsecrets_test.go
- authdifferential.go
- authdifferential_test.go
- authreview_test.go
- bola.go
- bola_test.go
- functionauthz.go
- mcptool.go
- mcptool_test.go
- pathtraversal.go
- pathtraversal_test.go
- ssrf.go
- ssrf_test.go
- tokenvalidation.go
- authreview_test.go
- mcptransport.go
- originvalidation.go
- originvalidation_test.go
- ssesession.go
- ssesession_test.go
- unauthenticated.go
- unauthenticated_test.go
- misleading.go
- misleading_test.go
- mitigation.go
- mitigation_test.go
- multiagent.go
- multiagent_test.go
- canary.go
- canary_test.go
- fuzzy_test.go
- pvalue.go
- pvalue_test.go
- dart.go
- dart_test.go
- generic.go
- generic_test.go
- go.go
- go_test.go
- npm.go
- npm_test.go
- packagechecker.go
- packagechecker_test.go
- perl.go
- perl_test.go
- pythonpypi.go
- pythonpypi_test.go
- rakuland.go
- rakuland_test.go
- rubygems.go
- rubygems_test.go
- rust.go
- rust_test.go
- pair.go
- pair_test.go
- config.go
- config_test.go
- patterns.go
- patterns_test.go
- config.go
- config_test.go
- perspective.go
- perspective_test.go
- harmjudge.go
- harmjudge_test.go
- win5x5.go
- win5x5_test.go
- promptinject.go
- promptinject_test.go
- config.go
- config_test.go
- ragpoison.go
- ragpoison_test.go
- ragpoisoning.go
- overthink.go
- reasoning.go
- reasoning_test.go
- schemattack.go
- schemattack_test.go
- shields.go
- shields_test.go
- snowball.go
- snowball_test.go
- tap.go
- tap_test.go
- toolcoercion.go
- toolcoercion_test.go
- toxic.go
- toxic_test.go
- ldnoobw-en.txt
- ofcom-potentially-offensive.txt
- profanity_en.csv
- ldnoobw.go
- ldnoobw_test.go
- ofcom_offensive.go
- ofcom_offensive_test.go
- slurs.go
- slurs_test.go
- surge_profanity.go
- surge_profanity_test.go
- figstep.go
- figstep_test.go
- detector.go
- detector_test.go
- markdown_exfil.go
- markdown_exfil_test.go
- xss.go
- xss_test.go
- verify_test.go
- atbash.go
- atbash_test.go
- braille.go
- braille_test.go
- camelcase.go
- charcode.go
- charcode_test.go
- emoji.go
- emoji_test.go
- encoding.go
- leet.go
- leet_test.go
- morse.go
- morse_test.go
- nato.go
- nato_test.go
- piglatin.go
- piglatin_test.go
- rot13.go
- rot13_test.go
- sneaky_bits.go
- sneaky_bits_test.go
- splitpunct_test.go
- unicode_tags.go
- unicode_tags_test.go
- zalgo.go
- zalgo_test.go
- anthropic.go
- anthropic_test.go
- config.go
- config_test.go
- messages.go
- messages_test.go
- anyscale.go
- anyscale.go.backup
- anyscale_test.go
- azure.go
- azure_test.go
- config.go
- config_test.go
- bedrock.go
- bedrock_test.go
- config.go
- config_test.go
- nova.go
- nova_test.go
- cohere.go
- cohere_test.go
- config.go
- config_test.go
- config.go
- config_test.go
- deepinfra.go
- deepinfra_test.go
- config.go
- config_test.go
- fireworks.go
- fireworks_test.go
- function.go
- function_test.go
- config.go
- gemini.go
- gemini_test.go
- config.go
- ggml.go
- ggml_test.go
- parts.go
- parts_test.go
- wire.go
- config.go
- groq.go
- groq_test.go
- nemoguardrails.go
- nemoguardrails_test.go
- inference.go
- inference_test.go
- inferenceendpoint.go
- inferenceendpoint_test.go
- llava.go
- llava_test.go
- pipeline.go
- pipeline_test.go
- hybrid.go
- hybrid_config.go
- hybrid_config_test.go
- hybrid_steps.go
- hybrid_test.go
- langchain.go
- langchain_test.go
- langchainserve.go
- langchainserve_test.go
- config.go
- config_test.go
- litellm.go
- litellm_test.go
- config.go
- config_test.go
- credentials.go
- credentials_test.go
- hardening_test.go
- headers_test.go
- mcp.go
- mcp_test.go
- pagination_test.go
- primitives.go
- primitives_test.go
- recon.go
- config.go
- mistral.go
- mistral_test.go
- config.go
- nemo.go
- nemo_test.go
- completion.go
- completion_test.go
- config.go
- multimodal.go
- multimodal_test.go
- nim.go
- nim_test.go
- nvcf.go
- nvcf_test.go
- config.go
- config_test.go
- ollama.go
- ollama_test.go
- config.go
- config_test.go
- openai.go
- openai_test.go
- reasoning.go
- reasoning_config.go
- reasoning_test.go
- audio.go
- audio_test.go
- base_config.go
- base_config_test.go
- compatgen_test.go
- conversation_test.go
- openaicompat.go
- openaicompat_test.go
- ratelimit.go
- README.md
- rasa.go
- rasa_test.go
- config.go
- config_test.go
- replicate.go
- replicate_test.go
- config.go
- config_test.go
- rest.go
- rest_test.go
- blank.go
- blank_test.go
- blankvision.go
- blankvision_test.go
- lipsum.go
- lipsum_test.go
- nones.go
- nones_test.go
- repeat.go
- repeat_test.go
- single.go
- single_test.go
- config.go
- config_test.go
- together.go
- together_test.go
- config.go
- config_test.go
- vertex.go
- vertex_test.go
- interface_test.go
- watsonx.go
- watsonx_test.go
- config.go
- config_test.go
- websocket.go
- websocket_test.go
- wsutil.go
- wsutil_proxy_test.go
- wsutil_test.go
- xai.go
- xai_test.go
- registration_test.go
- agentwise.go
- agentwise_test.go
- config.go
- config_test.go
- batch.go
- batch_test.go
- config.go
- config_test.go
- concurrent_test.go
- errored_precedence_test.go
- integration_test.go
- probewise.go
- probewise_test.go
- anonsession.go
- anonsession_test.go
- args.go
- args_test.go
- collector.go
- collector_test.go
- credentials.go
- declared.go
- declared_test.go
- destructive.go
- disclosed.go
- disclosed_test.go
- issued.go
- mcpprobe.go
- metadata.go
- refusal.go
- refused.go
- refused_test.go
- config.go
- config_test.go
- model_context_windows.yaml
- memory.go
- memory_test.go
- parse.go
- parse_test.go
- refusal.go
- refusal_test.go
- crescendo.go
- crescendo_test.go
- prompts.go
- goat.go
- goat_test.go
- prompts.go
- hcot.go
- prompts.go
- hydra.go
- hydra_test.go
- prompts.go
- mischievous.go
- mischievous_test.go
- prompts.go
- engine.go
- hooks.go
- hooks_test.go
- judge.go
- judge_test.go
- models.go
- models_test.go
- probe.go
- probeutil.go
- probeutil_test.go
- types.go
- types_test.go
- utils.go
- utils_test.go
- invoker.go
- store.go
- store_test.go
- TargetedPatch.yaml
- TransferPatch.yaml
- UniversalPatch.yaml
- advpatch.go
- advpatch_test.go
- generator.go
- parity_test.go
- templates.go
- ansiescape.go
- ansiescape_test.go
- payloads.go
- completekey.go
- completekey_test.go
- getkey.go
- getkey_test.go
- artprompts.go
- artprompts_test.go
- templates.go
- autodan.go
- autodan_test.go
- templates.go
- avspamscanning.go
- avspamscanning_test.go
- intentional.txt
- bidi.go
- bidi_test.go
- common.go
- config.go
- config_test.go
- deletions.go
- deletions_test.go
- homoglyphs.go
- homoglyphs_test.go
- invisible.go
- invisible_test.go
- accessibility.go
- accessibility_test.go
- zombais.go
- zombais_test.go
- slurprompts.jsonl
- slurprompts_mini.jsonl
- continuation.go
- continuation_test.go
- crescendo.go
- crescendo_test.go
- AntiDAN.yaml
- ChatGPT_Developer_Mode_RANTI.yaml
- ChatGPT_Developer_Mode_v2.yaml
- ChatGPT_Image_Markdown.yaml
- Dan_10_0.yaml
- Dan_11_0.yaml
- Dan_6_0.yaml
- Dan_6_2.yaml
- Dan_7_0.yaml
- Dan_8_0.yaml
- Dan_9_0.yaml
- DAN_Jailbreak.yaml
- DUDE.yaml
- STAN.yaml
- dan.go
- dan_test.go
- templates.go
- repeat.go
- repeat_test.go
- discrimination_exclusion_toxicity_hateful_offensive.txt
- human_chatbox.txt
- information_hazard.txt
- malicious_uses.txt
- misinformation_harms.txt
- donotanswer.go
- donotanswer_test.go
- harmful_behaviors.json
- letter_map.json
- moderation_cache.json
- prompt_templates.txt
- dra.go
- dra_test.go
- base.go
- exploitation.go
- jinja.go
- jinja_test.go
- payloads.go
- sql_echo.go
- sql_echo_test.go
- sql_system.go
- sql_system_test.go
- flipattack.go
- flipattack_test.go
- integration_test.go
- gcg.txt
- gcg.go
- gcg_test.go
- suffixes.go
- glitch.go
- glitch_probe_test.go
- glitch_test.go
- goat.go
- goat_test.go
- ChatMLExploit.yaml
- PayloadSplitting.yaml
- PoemExfiltration.yaml
- SystemPromptConfusion.yaml
- ThreatenJSON.yaml
- WhoIsRiley.yaml
- goodside.go
- goodside_test.go
- parity_test.go
- templates.go
- base.go
- grandma_test.go
- slurs.go
- substances.go
- win10.go
- win11.go
- framework.go
- framework_test.go
- techniques.go
- hcot.go
- hydra.go
- hydra_test.go
- LatentAgentConfig.yaml
- LatentExtraction.yaml
- LatentJailbreak.yaml
- LatentRefusal.yaml
- PayloadPropagation.yaml
- SemanticPropagation.yaml
- SummarizationResilient.yaml
- TagSmuggling.yaml
- latentinjection.go
- latentinjection_test.go
- templates.go
- book_cloze.tsv
- guardian_cloze.tsv
- nyt_cloze.tsv
- potter_cloze.tsv
- leakreplay.go
- leakreplay_test.go
- lmrc.go
- lmrc_test.go
- patterns.go
- malwaregen.go
- malwaregen_test.go
- credentialexposure.go
- credentialexposure_test.go
- riskinfo_test.go
- contentleak.go
- contentleak_test.go
- mcpprimitive.go
- mcpprimitive_test.go
- prompttemplateinjection.go
- prompttemplateinjection_test.go
- resourceinjection.go
- resourceinjection_test.go
- reviewfixes_test.go
- riskinfo_test.go
- authreview_test.go
- authz_nested_test.go
- authzfp_test.go
- bola.go
- bola_identity_test.go
- bola_test.go
- callshape_test.go
- canonical.go
- context_test.go
- functionauthz.go
- functionauthz_test.go
- injection.go
- injection_test.go
- mcptool.go
- observed_probe_test.go
- params_shim_test.go
- params_test.go
- pathtraversal.go
- pathtraversal_test.go
- policy_test.go
- readintent.go
- readintent_test.go
- recon_context.go
- refused_test.go
- responseleak.go
- responseleak_test.go
- reviewfixes_test.go
- riskinfo_test.go
- signatures.go
- ssrf.go
- ssrf_test.go
- tokenvalidation.go
- tokenvalidation_test.go
- mcptransport.go
- mcptransport_test.go
- oauthdiscovery.go
- oauthdiscovery_test.go
- originvalidation.go
- originvalidation_test.go
- riskinfo_test.go
- ssesession.go
- ssesession_test.go
- unauthenticated.go
- unauthenticated_test.go
- mischievous.go
- mischievous_test.go
- truefalse_falseclaims_50.txt
- misleading.go
- misleading_test.go
- config.go
- config_test.go
- coordinator.go
- framework.go
- framework_test.go
- orchestrator.go
- orchestrator_test.go
- figstep_canary.png
- instruction_canary1.png
- invisible_canary1.png
- metadata_canary.png
- metadata_exif_canary.jpg
- scaling_bicubic.png
- scaling_bilinear.png
- scaling_nearest.png
- scenetap_notebook.png
- scenetap_tshirt.png
- semantic_canary.png
- adaptive_lsb_canary.png
- dct_canary.png
- neural_canary.png
- stego_canary.png
- tinyfont_canary.png
- vsh_canary.png
- base.go
- base_test.go
- config.go
- config_test.go
- embed.go
- figstep.go
- instruction.go
- invisible.go
- metadata.go
- metadata_exif.go
- probe.go
- probe_construction_test.go
- run.go
- run_test.go
- scaling.go
- scenetap.go
- semantic.go
- stego.go
- stego_adaptive_lsb.go
- stego_dct.go
- stego_neural.go
- tinyfont.go
- vsh.go
- config.go
- config_test.go
- mutations.go
- obscureprompt.go
- obscureprompt_test.go
- base.go
- base_test.go
- config.go
- config_test.go
- dart.go
- javascript.go
- packagehallucination.go
- packagehallucination_test.go
- perl.go
- probes_test.go
- python.go
- python_test.go
- rakuland.go
- ruby.go
- rust.go
- PAIR.yaml
- PAIRBasic.yaml
- pair.go
- pair_config_test.go
- pair_test.go
- templates.go
- templates_test.go
- annotation_test.go
- metadata_test.go
- pdfbuild.go
- pdfbuild_test.go
- text_attacks_test.go
- annotation.go
- invisible.go
- metadata.go
- offpage.go
- onepointfont.go
- probe_construction_test.go
- probes.go
- future_tense_en.txt
- past_tense_en.txt
- data.go
- future_tense.go
- future_tense_test.go
- phrasing.go
- phrasing_test.go
- free_verse.txt
- haiku.txt
- limerick.txt
- rhyming_couplet.txt
- sonnet.txt
- harmful_payloads.txt
- payload_categories.txt
- base.go
- benchmark_test.go
- data.go
- free_verse.go
- haiku.go
- integration_test.go
- limerick.go
- poetry_test.go
- rhyming_couplet.go
- sonnet.go
- prefix.go
- prefix_test.go
- prefixes.go
- hijack.go
- hijack_test.go
- documents.go
- framework.go
- framework_test.go
- metadata.go
- metadata_test.go
- rtp_flirtation.txt
- rtp_identity_attack.txt
- rtp_insult.txt
- rtp_profanity.txt
- rtp_severe_toxicity.txt
- rtp_sexually_explicit.txt
- rtp_threat.txt
- realtoxicityprompts.go
- realtoxicityprompts_test.go
- AdversarialLogic.yaml
- DecisionHijack.yaml
- HCoT.yaml
- OverThink.yaml
- templates.go
- templates_test.go
- TrojanSchema.yaml
- templates.go
- templates_test.go
- graph_connectivity.json
- primality_testing.json
- senator_search.json
- snowball.go
- snowball_test.go
- Acrostic.yaml
- WordInitial.yaml
- templates.go
- templates_test.go
- gcg.txt
- gcg_cached.go
- gcg_cached_test.go
- TAPv1.yaml
- TAPv2.yaml
- tap.go
- tap_config_test.go
- tap_test.go
- templates.go
- blank.go
- blank_test.go
- test.go
- test_test.go
- AuthorityInjection.yaml
- CausalityLaundering.yaml
- DeprecationClaim.yaml
- HaystackDilution.yaml
- InstructionEmbed.yaml
- MCPToolPoison.yaml
- ParasiticChain.yaml
- SemanticLure.yaml
- templates.go
- templates_test.go
- chain_amplification.yaml
- confused_deputy_token_reuse.yaml
- cross_agent_propagation.yaml
- data_exfiltration.yaml
- function_calling_jailbreak.yaml
- indirect_return_exploitation.yaml
- mcp_supply_chain_poisoning.yaml
- memory_poisoning.yaml
- onboarding_poisoning.yaml
- parameter_injection.yaml
- parser_spoofing.yaml
- schema_mutation.yaml
- selection_hijacking.yaml
- unauthorized_invocation.yaml
- tooluse.go
- tooluse_test.go
- topic.go
- topic_test.go
- topictree.go
- treesearch.go
- treesearch_test.go
- payloads.go
- webinjection.go
- webinjection_test.go
- ConfigInjection.yaml
- templates.go
- templates_test.go
- iterative.go
- iterative_test.go
- llm.go
- llm_test.go
- identifiers.go
- identifiers_reader.go
- identifiers_reader_test.go
- identifiers_test.go
- inventory_reader.go
- inventory_reader_test.go
- mcp.go
- mcp_test.go
- mcpconfig.go
- mcpconfig_fifo_test.go
- mcpconfig_test.go
- generator.go
- toolpolicy.go
- toolpolicy_test.go
- call.go
- call_test.go
- param.go
- path.go
- signature.go
- signature_test.go
- source.go
- attempt.go
- attempt_test.go
- clone_independence_test.go
- conversation.go
- conversation_test.go
- message.go
- message_test.go
- metadata.go
- metadata_keys.go
- multimodal.go
- multimodal_test.go
- base.go
- buff.go
- buff_test.go
- chain.go
- chain_test.go
- coverage_test.go
- integration_test.go
- prober.go
- prober_test.go
- flags.go
- flags_test.go
- config.go
- config_test.go
- koanf_loader.go
- koanf_loader_test.go
- loader.go
- resolve.go
- resolve_test.go
- detector.go
- generator.go
- detection.go
- detection_test.go
- harness.go
- gen_caps.go
- generator.go
- generator_test.go
- hooked_caps_gen.go
- hooks.go
- hooks_test.go
- client.go
- client_test.go
- embed.go
- embed_test.go
- logging.go
- logging_test.go
- prometheus.go
- prometheus_test.go
- output.go
- prefilter.go
- prefilter_test.go
- embed.go
- embed_test.go
- probe.go
- probe_test.go
- run.go
- run_test.go
- simple.go
- simple_test.go
- http.go
- http_test.go
- limiter.go
- limiter_test.go
- context.go
- orchestrate.go
- orchestrate_test.go
- recon.go
- recon_test.go
- runner.go
- store.go
- buffs.go
- detectors.go
- generators.go
- harnesses.go
- probes.go
- recons.go
- generate.go
- register.go
- cache.go
- cache_test.go
- config_helpers.go
- config_helpers_test.go
- options.go
- options_test.go
- registry.go
- registry_test.go
- html.go
- html_test.go
- jsonl.go
- jsonl_test.go
- metadata_test.go
- results.go
- results_test.go
- stream.go
- stream_test.go
- verdict_test.go
- retry.go
- retry_test.go
- options.go
- scanner.go
- scanner_test.go
- invalid-cwe.yaml
- invalid-mitre.yaml
- invalid.yaml
- test.yaml
- integration_test.go
- loader.go
- loader_test.go
- probe.go
- probe_test.go
- types.go
- types_test.go
- validation_test.go
- context.go
- detector.go
- generator.go
- mcp_endpoint.go
- mcp_primitives.go
- mcp_recon.go
- mcp_recon_test.go
- prober.go
- README.md
- tool_invoker.go
- flipattack_wordorder.yaml
- drift_test.go
- main.go
- render_test.go
- scan.go
- scan_test.go
- .gitignore
- generate.py
- make_rebus.py
- manifest.py
- requirements.txt
- techniques.py
- verify.py
- .gitignore
- .golangci.yml
- .goreleaser.yaml
- .graphifyignore
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- CODE_OF_CONDUCT.md
- CONTRIBUTING.md
- FOLLOWUPS.md
- go.mod
- go.sum
- LICENSE
- Makefile
- README.md
- SECURITY.md
// repository documentation
Was this content helpful?
(0 ratings)