Primes Claude with drop-in SKILL.md files that encode concise offensive-security methodology across 78 skills in 23 categories, enabling Claude to act as a context-aware red team operator. Intended for authorized red team engagements, bug-bounty triage, security research and CTF practice.
Terminal-first toolkit that automates bug bounty workflows — recon, hunting across 20 vulnerability classes, validation, and submission-ready report generation; runs as a Claude Code plugin or standalone CLI with support for free local AI providers (Ollama, Groq, DeepSeek).
A 23-skill Claude Code toolkit that composes an LLM-driven virtual engineering team (CEO, designer, eng manager, QA, security, release) into slash-command workflows — includes real-browser QA, a persistent GBrain memory, multi-agent integrations, and team auto-update semantics.
Provides a sanitized, labeled SOC capture and merged provenance graph for intrusion-detection research, including 2,011,674 live signals, 51,371 incident graphs, MITRE ATT&CK mappings, and deterministic attack reports.
Scans AI agent skills for security issues—detecting vulnerabilities, malicious patterns, and supply-chain risks before installation. Combines static AST checks (64 patterns across 16 categories) with optional LLM semantic review, OSV live CVE lookups, and JSON/Markdown/SARIF outputs for CI or manual review.
Provides a pytest-native framework to write safety and security tests for agentic AI applications. Defines adversarial attacks, benign-failure suites, and harm-category assertions with evaluation-driven checks and CI-friendly reporting, so red-teaming becomes testable and automatable.
Multimodal image-text-to-text fork of Gemma 4 (31B) using a 'CRACK v2' abliteration — tuned for conversational vision inputs and thinking-mode support in JANG v2 safetensors format. Recommended to run in vMLX; published by dealignai.
Provides hardware-isolated, sub-60ms, ultra-low-overhead sandboxes to run untrusted LLM/agent code. Offers event-level snapshots, kernel-level egress control, credential vaulting, and drop-in E2B SDK compatibility for high-density AI agent deployment.
Removes safety refusals from a Gemma 4 E4B–based model and publishes uncensored, locally runnable GGUF/safetensors variants while preserving all tensors and fixing prior corruption. Intended for red‑teaming and offline research; not recommended for production.
Browser-based agent workspace and sandboxed app platform that lets organizations run AI agents to perform tasks and build shareable 'Gadgets'. Uses Gatekeepers for fine-grained, zero-trust access control and runs on Cloudflare Workers with multi-LLM support.
Runs goal-driven penetration tests by orchestration of an LLM agent and an MCP toolchain to perform reconnaissance, vulnerability discovery, exploitation, and structured PoC/report generation; supports multiple LLM providers and local MCP integrations; for authorized security testing only.
Monitors and detects risky behavior in enterprise AI agents via high-fidelity telemetry, security benchmarking, and a two-tier detector. Comprises ADR Sensor, ADR-Bench, and ADR Detector; deployed in production at Uber and validated on public benchmarks.