llm-security-auditlisted
Install: claude install-skill ismael-joffroy-chandoutis/claude-skills-public
# LLM Security Audit
## Triggers
- security audit
- llm pentest
- ai security assessment
- compliance audit
- vulnerability assessment
## Patterns
### OWASP LLM Top 10 Audit Checklist
Systematic assessment against OWASP LLM vulnerabilities
Starting any LLM security audit
```
interface AuditFinding {
id: string;
category: OWASPCategory;
severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
title: string;
description: string;
evidence: string;
reproduction: string;
recommendation: string;
references: string[];
}
type OWASPCategory =
| 'LLM01_PromptInjection'
| 'LLM02_InsecureOutputHandling'
| 'LLM03_TrainingDataPoisoning'
| 'LLM04_ModelDenialOfService'
| 'LLM05_SupplyChainVulnerabilities'
| 'LLM06_SensitiveInformationDisclosure'
| 'LLM07_InsecurePluginDesign'
| 'LLM08_ExcessiveAgency'
| 'LLM09_Overreliance'
| 'LLM10_ModelTheft';
class OWASPLLMAudit {
private findings: AuditFinding[] = [];
async runFullAudit(target: LLMApplication): Promise<AuditReport> {
console.log('Starting OWASP LLM Top 10 Audit...');
// LLM01: Prompt Injection
await this.auditPromptInjection(target);
// LLM02: Insecure Output Handling
await this.auditOutputHandling(target);
// LLM03: Training Data Poisoning
await this.auditTrainingData(target);
// LLM04: Model Denial of Service
await this.auditDoS(target);
// LLM05: Supply C