PFI: Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents
☆32Mar 26, 2025Updated last year
Alternatives and similar repositories for pfi
Users that are interested in pfi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PeTAL: Ensuring Access Control Integrity against Data-only Attacks on Linux (ACM CCS 2024)☆17Nov 4, 2024Updated last year
- Progent: Securing AI Agents with Privilege Control☆53Sep 24, 2026Updated 2 weeks ago
- An Execution Isolation Architecture for LLM-Based Agentic Systems☆125Jan 31, 2025Updated last year
- Flow Integrity Deterministic Enforcement System. Mechanisms for securing AI agents with information-flow control.☆119May 30, 2025Updated last year
- ☆29Aug 31, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A public repository for the class, "Software Security" at Seoul National University (SNU)☆13May 11, 2021Updated 5 years ago
- AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents☆39Aug 31, 2025Updated last year
- ☆172Jul 2, 2024Updated 2 years ago
- Codebase of https://arxiv.org/abs/2410.14923☆55Oct 22, 2024Updated last year
- A survey and analysis of source code sandboxing☆17Jun 16, 2025Updated last year
- Distribution Preserving Backdoor Attack in Self-supervised Learning☆21Jan 27, 2024Updated 2 years ago
- [NeurIPS 2025] The official implementation of the paper "DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agen…☆61Jul 16, 2026Updated 2 months ago
- ☆16Aug 7, 2026Updated 2 months ago
- A research workbench for developing and testing attacks against large language models, with a focus on prompt injection vulnerabilities a…☆62Jul 24, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Code for the paper "Defeating Prompt Injections by Design"☆404Jun 20, 2025Updated last year
- Official Implementation of implicit reference attack☆11Oct 16, 2024Updated last year
- The official implementation of the paper "AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks"☆43Jun 1, 2026Updated 4 months ago
- Source code of AsiaCCS'22 paper - RecIPE: Revisiting the Evaluation of Memory Error Defenses☆14Sep 19, 2023Updated 3 years ago
- DynAuditClaw — A security audit skill that dynamically discovers your OpenClaw agent's real configuration, designs targeted attack scenar…☆15Apr 6, 2026Updated 6 months ago
- [Findings of ACL 2023] Bridge the Gap Between CV and NLP! A Optimization-based Textual Adversarial Attack Framework.☆14Aug 27, 2023Updated 3 years ago
- A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.☆911Jun 2, 2026Updated 4 months ago
- [S&P 2026] SoK: Evaluating Jailbreak Guardrails for Large Language Models☆50Dec 17, 2025Updated 9 months ago
- Agent Security Bench (ASB)☆312Sep 30, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Onsite Analysis Infrastructure☆16Jun 23, 2020Updated 6 years ago
- A benchmark and generation framework for malicious agent skills.☆60Jun 10, 2026Updated 4 months ago
- Linux kernel source tree patched with Hypervisor-Enforced Kernel Integrity☆14Nov 14, 2023Updated 2 years ago
- ☆199Oct 31, 2025Updated 11 months ago
- Official implementation of the WASP web agent security benchmark☆97Apr 13, 2026Updated 5 months ago
- ☆15Jun 6, 2023Updated 3 years ago
- [ICML'25] MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents☆39Jul 31, 2025Updated last year
- ☆101May 27, 2024Updated 2 years ago
- [NDSS 2025] "CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models"☆26Aug 20, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The official implementation of the paper "AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?"☆85May 19, 2026Updated 4 months ago
- First formal security scanner for AI agent skills & plugins. Static analysis, supply chain verification, SBOM generation. 22 frameworks s…☆36Oct 2, 2026Updated last week
- Source code for the ACL'2025 paper titled "Unveiling privacy risks in llm agent memory"☆37Dec 2, 2025Updated 10 months ago
- ☆55Oct 20, 2025Updated 11 months ago
- official implementation of [USENIX Sec'25] StruQ: Defending Against Prompt Injection with Structured Queries☆78Nov 10, 2025Updated 11 months ago
- The repo for paper: Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models.☆15Dec 16, 2024Updated last year
- [EMNLP 2025 Oral] IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents☆25Sep 16, 2025Updated last year