claude

agent-hijacking

Use when testing an AI agent that can call tools or take actions on an authorized engagement.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agoai-security
/

Plugin agent-hijacking from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (2)

  • agent-hijacking

    Use when testing an AI agent that can call tools or take

  • agent-hijacking-tool-use-abuse-testing

    Use when you must test whether an AI agent can be pushed into abusing its own tools on an authorized engagement. Covers building a tool abuse matrix across email, calendar, code execution, file access, and browser tools, testing confused deputy chains where one tool output authorizes the next, and c

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

claude-mem

claudecodex

Persistent memory for Claude Code: the next session starts where the last one left off.

29 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

mem0

claudecodex

Cross-session memory and token savings for coding agents.

6 skills · 1 agent · 1 MCP server · hooks

mem0ai/mem0 68,893

context7

claudecodex

Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your coding agent's context.

1 MCP server

upstash/context7 64,709

Automates browser interactions for web testing, form filling, screenshots, and data extraction

12 skills

vercel-labs/agent-browser 50,373

Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices

16 skills · 1 command · 3 agents

wshobson/agents 42,461

Maintain agent-hijacking?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins