Scanners-Box 每日 AI 工具推荐 Scanners-Box Daily AI Tool Picks
Security Toolkits for Agentic Workflows Security Toolkits for Agentic Workflows
共 1 个工具 · 专栏不定期更新 1 tools · new issues as they're written
把 Burp 那一层重做成 Agent 原生工作台：浏览器驱动 + 抓包改包重放 + 沙箱 box + Lean 4 形式化验证，纪律条款编译进二进制 The Burp layer rebuilt as an agent-native workbench — browser driving, HTTP capture/tamper/replay, sandbox boxes and Lean 4 proofs, with the discipline compiled into the binary
Rust 写的双轨项目：红队侧给 agent 一套统一原语（browser / websec / recon / box / app），证明侧用 h5i-app 把纯函数 kernel 经 Aeneas 翻成 Lean 4。最值钱的是那份 include_str! 编进可执行文件的 SKILL.md —— message id 当证据链的 join 键、「No complete PoC, no vulnerability」、「denial 是策略结果不是障碍」、禁止在 box 里关 hook。短板：概念密度高没有 GUI、证明侧只覆盖自家框架、插件不装等于回路跑不通、macOS 借道 Chromium 时 --ignore-https-errors。
A two-track Rust project: the red-team leg gives an agent one set of primitives (browser / websec / recon / box / app); the proof leg extracts a pure-function h5i-app kernel through Aeneas into Lean 4. The most valuable part is the SKILL.md embedded in the executable via include_str! — message ids as the evidence-chain join key, "No complete PoC, no vulnerability", "a denial is a policy result, not an obstacle", never disable a hook inside a box. Caveats: concept-dense with no GUI, the proof side covers only its own framework, skipping the plugins breaks most of the loop, and macOS Chromium proxying uses --ignore-https-errors.
https://github.com/h5i-dev/h5i
其他分类Other categories
AI 智能体与应用安全审计Security Auditing for AI Agents & Apps 自主漏洞发现与修复技能Autonomous Vulnerability Discovery and Remediation Skills Agent Skills 安全审计Security Auditing for Agent Skills LLM 驱动的漏洞扫描器LLM-Powered Vulnerability Scanners AI 自主网络安全智能体AI Autonomous Cybersecurity Agents AI 智能体运行时管控AI Agent Runtime Controls