ai-agent-redteam

用于对具备工具与记忆的代理化 LLM 做红队测试与攻击演练。

帮你找出把模型做成“会用工具、有记忆、会规划”的代理型 LLM 应用里的安全漏洞：比如通过工具或持久化记忆注入恶意指令、借多轮对话越狱、或毒化第三方工具接口。适合在部署前或合规/红队评估时用来模拟真实攻击路径，检验代理管道的薄弱环节。特别之处是关注“代理化流水线”的攻击面（工具集成、内存、检索和授权委派），不是只盯着模型本身。

# AI Agent Red Teaming

Offensive testing of **autonomous LLM agents** — systems that combine model reasoning with
tools, memory, retrieval, and multi-step planning. This is distinct from model-level testing
(see `ai-security`): the attack surface here is the *agentic pipeline* — untrusted data channels,
tool/MCP integrations, persistent memory, and delegated authority. Assumes authorized engagement.

## When to Activate

- Pentesting an LLM agent with tool/function-calling, an MCP client, or a code interpreter
- Testing RAG / email / browser assistants for indirect or zero-click prompt injection
- Auditing MCP server integrations for tool poisoning, rug-pull, or line-jumping
- Assessing per