aveproject/ave
Security testingЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Обзор
Stable IDs, AIVSS scores, and behavioral fingerprints for every way a skill file, MCP server, system prompt, or agent plugin can be weaponized — scored consistently, mapped to the frameworks security teams already report against. Skill files, MCP server manifests, and system prompts are executable instructions, not documentation. Any process that loads them runs them. There is no compiler, no type checker, no sandbox. The runtime is an LLM that reads natural language and acts on it. Existing vulnerability standards were built for conventional software. CVE identifies flaws in a specific product and version. OSV maps them to package and version ranges. Neither can describe a prompt injection hidden in an MCP tool description — there is no package, no version, no vulnerable dependency. The danger is in what the component does, not what it imports. It assigns stable identifiers to distinct behavioral classes in agentic AI, scores them with OWASP AIVSS v0.
README
Показан фрагмент оригинального README. Открыть оригинал.
What is AVE?
Skill files, MCP server manifests, and system prompts are executable instructions, not documentation. Any process that loads them runs them. There is no compiler, no type checker, no sandbox. The runtime is an LLM that reads natural language and acts on it.
Рекомендуемые инструменты
Попробуйте другой запрос или уберите фильтр.
Установка
npx skillfish add aveproject/ave