security-fuzzing
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated…
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
$ npx -y skills add eyadkelleh/awesome-skills-security --skill llm-testing --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/llm-testingContext preview
The summary Claude sees to decide when to auto-load this skill.
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
name: llm-testing description: Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
Comprehensive testing prompts and wordlists for evaluating Large Language Model (LLM) security, safety, and robustness. This skill provides curated test cases for bias detection, data leakage prevention, alignment testing, privacy boundaries, and adversarial prompt resistance.
This skill is designed for security researchers, AI safety engineers, and red team operators to assess LLM vulnerabilities and ensure models:
Test for biases in LLM responses across various dimensions:
**Gender Bias** (`Bias_Testing/gender_bias.txt`)
**Nationality & Geographic Bias** (`Bias_Testing/nationality_geographic_bias.txt`)
**Race & Ethnicity Bias** (`Bias_Testing/race_ethnicity_bias.txt`)
Assess model's handling of sensitive information:
**Personal Data Generation** (`Data_Leakage/personal_data.txt`)
**Metadata Leakage** (`Data_Leakage/metadata.txt`)
**Memory Recall** (`Memory_Recall_Testing/session_recall.txt`)
Test model alignment and resistance to adversarial prompts:
**Escape Alignment Training** (`Divergence_attack/escape_out_of_allignment_training.txt`)
**Pre-training Data Extraction** (`Divergence_attack/pre-training_data.txt`)
# Reference the LLM Testing skill "Use the llm-testing skill to test this model for gender bias" # Access specific test categories "Show me prompts from the llm-testing skill for testing data leakage" # Run comprehensive testing "Use the llm-testing skill to perform a full security audit of this LLM"
Before using bias and memory recall tests, replace placeholders:
# Example: Replacing placeholders in gender bias tests
import re
with open('Bias_Testing/gender_bias.txt', 'r') as f:
prompts = f.read()
# Replace [GENDER] with actual gender terms
test_prompts = []
for gender in ['man', 'woman', 'non-binary person']:
test_prompts.append(prompts.replace('[GENDER]', gender))1. **Select Test Category**: Choose bias, privacy, or alignment tests 2. **Prepare Prompts**: Replace placeholders if needed 3. **Execute Tests**: Submit prompts to target LLM 4. **Document Results**: Record responses and flag issues 5. **Analyze Patterns**: Look for systematic problems 6. **Report Findings**: Document vulnerabilities responsibly
1. **Authorization Required**: Only test models you own or have permission to test 2. **Responsible Disclosure**: Report vulnerabilities through proper channels 3. **No Exploitation**: Use findings for improvement, not exploitation 4. **Privacy Protection**: Don't share PII discovered during testing 5. **Documentation**: Keep detailed records of testing methodology and results
LLM_Testing/ ├── SKILL.md (this file) ├── README.md ├── Bias_Testing/ │ ├── gender_bias.txt │ ├── nationality_geographic_bias.txt │ └── race_ethnicity_bias.txt ├── Data_Leakage/ │ ├── personal_data.txt │ └── meta
A curated collection of security testing resources packaged as agent skills, available on skills.sh Repository: Eyadkelleh/awesome-skills-security · skills.sh: Eyadkelleh/awesome-skills-security
Repo: Eyadkelleh/awesome-claude-skills-security
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated…
Top password lists for authorized security testing: common passwords, darkweb leaks, worst…
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone…
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files.…
Top username lists for enumeration: common usernames, default credentials, names. Curated…
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use…