claude

rag-security

Maps retrieval surfaces and assesses source integrity, tenant isolation, context handling, data exposure, and cleanup in RAG systems.

152 on GitHubby zero-lab.aiv0.2.1Apache-2.0updated 28 days ago
/

Plugin rag-security from marketplace zero-lab in zero-lab-ai/skills. Commands read from the repo's manifest — 19 days ago.

What it installs

Skills (3)

  • rag-data-exposure-audit

    Assesses document authorization, tenant isolation, raw-chunk fields, citations, caches, exports, and sensitive-source leakage in retrieval systems. Use when an authorized RAG assessment must determine what data each identity can retrieve or disclose.

  • rag-surface-recon

    Maps an authorized retrieval system's sources, connectors, chunking, embeddings, indexes, filters, ranking, caches, citations, and exposed retrieval fields. Use when scoping a RAG security assessment or explaining observed retrieval behavior.

  • retrieval-integrity-assessment

    Assesses whether an authorized retrieval-augmented AI system preserves source, index, retrieval, context, and output integrity. Use when testing RAG poisoning, retrieval hijacking, context saturation, semantic substitution, or citation controls with benign canaries.

View source on GitHub zero-lab.ai

More from zero-lab-ai/skills

All 10 plugins →

Provides authorized network, public-exposure, human, physical, and AI-system reconnaissance with explicit scope, contact, noise, evidence, and automation boundaries.

9 skills

152

Assesses Active Directory, AD CS, Kerberos, credentials, privilege escalation, lateral movement, and durable identity exposure while separating structural paths from demonstrated access.

8 skills

152

Provides engagement planning, AI threat modeling, action-proof review, security-tool governance, findings writing, and report assembly with defensible evidence boundaries.

7 skills

152

Tracks authorized security assessment coverage across web, cloud, mobile, firmware, endpoint persistence, and offline password auditing without turning missing evidence into clean results.

6 skills

152

Builds and validates detections, audits telemetry coverage, tests defensive resilience, correlates incident evidence, and synthesizes control evidence without inflating coverage.

6 skills

152

Plans and assesses wireless, network-protocol, traffic, command-channel, and bounded covert-channel security work with explicit scope, safety, evidence, and detection boundaries.

5 skills

152

Maintain rag-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins10 plugins