Skip to content

Add Red Team / Blue Team Agent Fabric to Tools and code#73

Open
msaleme wants to merge 1 commit intoPuliczek:mainfrom
msaleme:add-red-team-framework
Open

Add Red Team / Blue Team Agent Fabric to Tools and code#73
msaleme wants to merge 1 commit intoPuliczek:mainfrom
msaleme:add-red-team-framework

Conversation

@msaleme
Copy link
Copy Markdown

@msaleme msaleme commented Mar 22, 2026

Adding an open-source security testing framework with an MCP wire-protocol harness that sends real JSON-RPC 2.0 messages (not application-layer HTTP simulation).

MCP-specific tests (10):

  • Tool discovery poisoning (exfiltration URLs in descriptions)
  • Tool registration injection
  • Capability escalation during initialize handshake
  • Protocol version downgrade
  • Resource URI path traversal
  • Prompt template injection via prompts/get
  • Sampling context exfiltration
  • Malformed JSON-RPC handling
  • Batch request DoS
  • Tool argument injection (SQL, command, prototype pollution)

Supports Streamable HTTP and stdio transports. Zero external dependencies.

Also includes A2A protocol tests (12), L402 payment flow tests (14), 20 enterprise platform adapters, GTG-1002 APT simulation, and NIST AI 800-2 aligned statistical evaluation. 189 tests total.

Repo: https://github.com/msaleme/red-team-blue-team-agent-fabric

189 security tests for AI agent systems, including:
- MCP wire-protocol harness (10 tests, real JSON-RPC 2.0 messages)
- A2A protocol harness (12 tests)
- L402 payment flow harness (14 tests)
- 20 enterprise platform adapters
- GTG-1002 APT simulation
- NIST AI 800-2 aligned evaluation protocol
- Zero external dependencies, Python 3.10+
@msaleme
Copy link
Copy Markdown
Author

msaleme commented Mar 28, 2026

Hi @Puliczek — friendly bump on this. We've continued shipping since the PR was opened: now at v3.8 with 330 tests across 24 modules, a GitHub Action for CI/CD integration, and an AIUC-1 certification prep tool. Happy to update the PR description if anything needs adjusting. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant