/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.
ai-security
ai-security is an open-source security skill for Claude Code and compatible agents, published by alirezarezvani. Its author describes it as: “Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection…”. The project has 25k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add alirezarezvani/claude-skills`.
What ai-security does
AI and LLM security assessment skill for detecting prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, and agent tool abuse. This is NOT general application security (see security-pen-testing) or behavioral anomaly detection in infrastructure (see threat-detection) — this is about security assessment of AI/ML systems and LLM-based agents specifically.
Installation
Add ai-security to your agent with:
/plugin marketplace add alirezarezvani/claude-skills Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
What's inside
The SKILL.md for ai-security is organised into these sections:
- Table of Contents
- Overview
- What This Skill Does
- Distinction from Other Security Skills
- Prerequisites
- AI Threat Scanner Tool
- Test File Format
- Exit Codes
- Prompt Injection Detection
- Injection Signature Categories
- Injection Score
- Indirect Injection via External Content
When to use it
Reach for ai-security when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear MIT license — safe to read and adapt
- Ships in alirezarezvani/claude-skills, an established project with 24,617 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does ai-security do?
- Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
- How do I install ai-security?
- Run /plugin marketplace add alirezarezvani/claude-skills in your agent, then reload your skills. Review the source at https://github.com/alirezarezvani/claude-skills before installing.
- Is ai-security free to use?
- Yes. ai-security is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Where does ai-security come from?
- ai-security ships inside alirezarezvani/claude-skills, a repository that contains 41 catalogued skills in total. The repository's 24,617 GitHub stars apply to that whole collection, not to this skill on its own.
Related skills
More Security →Audits and designs iOS/macOS/watchOS/visionOS interfaces against the Apple Human Interface Guidelines, including the Liquid Glass design language (announced WWDC25, shipped with iOS 26/macOS Tahoe, Sept 2025). Use when reviewing an Apple-platform mockup or app for HIG compliance, checking contrast or tap-target sizes, or designing native-feeling Apple UI (e.g., 'audit my iOS app against the HIG', 'is this text readable on Liquid Glass?').
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.