PFI: Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents
☆32Mar 26, 2025Updated last year
Alternatives and similar repositories for pfi
Users that are interested in pfi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Agent Data Injection (ADI) Attacks☆14Jul 13, 2026Updated 3 months ago
- PeTAL: Ensuring Access Control Integrity against Data-only Attacks on Linux (ACM CCS 2024)☆17Nov 4, 2024Updated last year
- ☆18Mar 9, 2025Updated last year
- An Execution Isolation Architecture for LLM-Based Agentic Systems☆125Jan 31, 2025Updated last year
- The official implementation of the paper "AgentSys: Secure and Dynamic LLM Agents Through Explicit Hierarchical Memory Management".☆15Feb 10, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆29Aug 31, 2025Updated last year
- ☆16Sep 14, 2026Updated last month
- Progent: Securing AI Agents with Privilege Control☆58Oct 26, 2026Updated last week
- TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution (IEEE S&P 2025)☆92Nov 25, 2024Updated last year
- Flow Integrity Deterministic Enforcement System. Mechanisms for securing AI agents with information-flow control.☆125May 30, 2025Updated last year
- AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents☆39Aug 31, 2025Updated last year
- ☆15Dec 18, 2025Updated 10 months ago
- ☆42Mar 12, 2025Updated last year
- [NeurIPS 2025] The official implementation of the paper "DRIFT: Dynamic Rule-Based Defense with Injection Isolation for Securing LLM Agen…☆62Jul 16, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A public repository for the class, "Software Security" at Seoul National University (SNU)☆13May 11, 2021Updated 5 years ago
- ACE: the Abstract-Concrete-Execute security architecture for LLM-integrated app systems.☆15Apr 21, 2026Updated 6 months ago
- DynAuditClaw — A security audit skill that dynamically discovers your OpenClaw agent's real configuration, designs targeted attack scenar…☆15Apr 6, 2026Updated 6 months ago
- Agent Skills Enable a New Class of Realistic and Trivially Simple Prompt Injections☆24Jul 2, 2026Updated 4 months ago
- ☆18Mar 25, 2026Updated 7 months ago
- ☆181Jul 2, 2024Updated 2 years ago
- ☆16Sep 17, 2024Updated 2 years ago
- Official code repo for HazardAuditor☆21Sep 20, 2026Updated last month
- A survey and analysis of source code sandboxing☆17Jun 16, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Codebase of https://arxiv.org/abs/2410.14923☆55Oct 22, 2024Updated 2 years ago
- [S&P 2026] SoK: Evaluating Jailbreak Guardrails for Large Language Models☆51Dec 17, 2025Updated 10 months ago
- Distribution Preserving Backdoor Attack in Self-supervised Learning☆21Jan 27, 2024Updated 2 years ago
- Multi-dimensional analysis of orthogonal safety directions in LLM alignment☆23Jun 12, 2026Updated 4 months ago
- ☆101May 27, 2024Updated 2 years ago
- Claude Code Reverse Engineering Itself☆13Aug 12, 2025Updated last year
- The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches, ACM CCS'24☆11Nov 11, 2024Updated last year
- ☆16Aug 7, 2026Updated 2 months ago
- ☆10Jan 29, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The official implementation of the paper "AgentLAB: Benchmarking LLM Agents against Long-Horizon Attacks"☆51Jun 1, 2026Updated 5 months ago
- Official implementation of the WASP web agent security benchmark☆97Apr 13, 2026Updated 6 months ago
- ☆33Oct 23, 2024Updated 2 years ago
- ☆24Oct 22, 2026Updated last week
- Code of paper: xJailbreak: Representation Space Guided Reinforcement Learning for Interpretable LLM Jailbreaking"☆18Apr 3, 2026Updated 6 months ago
- [ICLR 2026] Official implementation of "ChatInject: Abusing Chat Templates for Prompt Injection in LLM Agents"☆27Mar 23, 2026Updated 7 months ago
- A research workbench for developing and testing attacks against large language models, with a focus on prompt injection vulnerabilities a…☆63Jul 24, 2026Updated 3 months ago