Skip to content

feat(detectors): Add CCSDetector - Correctover Runtime Call Verification for AI agent security#1987

Open
Correctover wants to merge 1 commit into
NVIDIA:mainfrom
Correctover:ccs-detector
Open

feat(detectors): Add CCSDetector - Correctover Runtime Call Verification for AI agent security#1987
Correctover wants to merge 1 commit into
NVIDIA:mainfrom
Correctover:ccs-detector

Conversation

@Correctover

Copy link
Copy Markdown

Summary

Adds CCSDetector - a Correctover CCS (Call Shield) detector for Garak that scans LLM-generated tool calls for 24 vulnerability patterns across 6 categories: RCE, SSRF, path traversal, credential leaks, insecure deserialization, and prompt injection.

Key Features

  • Deterministic rule matching - 22us P50 latency, no LLM dependency
  • OCSF-compliant alerts - standardized security event schema
  • Dual-mode - CCS CLI integration with built-in fallback when CLI unavailable
  • Configurable - specify rule categories and confidence threshold via DEFAULT_PARAMS

Usage

garak --model_type --probes agent_breaker --detectors ccs.CCSDetector

Tags

  • quality:Security:AgentSecurity
  • owasp:llm06
  • correctover:ccs:tool-call-scanning

Related


Generated with Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant