Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see which of your real keys a Claude Code session exposed.
-
Updated
Nov 5, 2026 - Python
Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see which of your real keys a Claude Code session exposed.
Guardrails and eval scorers that return the safe answer without checking anything. Every case reproduced against the shipped code.
A governed range for testing AI agent defenses: Agent Theater’s earned-trust tiers and human oversight, plus an adversarial arena that attacks each OWASP Top 10 for Agentic Applications risk. Measured results, honest gaps, and what it would take to close them.
A collection of research and engineering projects for securing LLM-based Web Agents against direct prompt injection, unauthorized actions, privacy violations, and excessive agency. Includes runtime defenses, action verification, security benchmarks, memory protection, and least-privilege controls.
Security scanner for AI Agents, Agent Skills, Plugins and automation workflows. Detects prompt injection, secret exposure, unsafe code execution and risky tool behaviors before deployment.
To associate your repository with the llm-security-tools topic, visit your repo's landing page and select "manage topics."