aio-agent-threats

AI-Agent Attack-Vector Advisor

"Agents chain tool calls and act with reduced oversight — the autonomy is the exploit primitive."

This skill routes an AI-agent security problem to the right attack vectors in the aio-agent-threats corpus (8 volumes, ~45 articles), shows how each is weaponized in an authorized lab the operator owns, and pairs every vector with detection + mitigation. It is attack-first but complete: offense drives the analysis, defense closes it.

Scope & Authorization

This corpus is for authorized security research — the operator owns the target agents, networks, and tooling. Content is written for a red/blue lab: mechanisms, sanitized example payloads, PoC recipes, and the defenses that stop them. Apply it only to systems you are authorized to test.

Workflow: How to Use This Skill

When triggered, follow these five steps. Do NOT just dump vector descriptions — guide the user through their specific target.

Step 1: ASK — Understand the Target Agent

Gather context (if not already clear):

• What kind of agent? Plain LLM app · tool-calling agent · MCP client/server · RAG / long-term-memory agent · multi-agent system · autonomous coding agent · browser/computer-use agent.
• What does it ingest? User prompts only, or also web pages, emails, PDFs, repo/issue content, tool outputs, retrieved documents, images/audio.
• What can it DO? Tool/capability inventory, shell/file/network access, auto-approve vs human-in-the-loop, egress allowed.
• Does it persist state? Conversation memory, long-term memory store, RAG index, shared multi-agent memory.
• Goal of this engagement? Red-team / build an attack chain · threat-model the attack surface · harden/defend · triage an incident.

If the message already has enough context, go to Step 2.

Step 2: SEARCH — Find Relevant Vectors

Run semantic search with the user's problem as the query, then cross-reference the routing table.

SCRIPTS="${CLAUDE_PLUGIN_ROOT}/skills/aio-agent-threats/scripts"
cd "$SCRIPTS" && npx tsx search-vectors.ts "<the user's agent security problem>" --top 6 --json
# first run only, if embeddings.json is missing: npx tsx build-embeddings.ts