Skip to content

feat(score): Add CCSOutputScorer - Correctover CCS security detection for AI agent outputs#2273

Open
Correctover wants to merge 2 commits into
microsoft:mainfrom
Correctover:ccs-scanner
Open

feat(score): Add CCSOutputScorer - Correctover CCS security detection for AI agent outputs#2273
Correctover wants to merge 2 commits into
microsoft:mainfrom
Correctover:ccs-scanner

Conversation

@Correctover

Copy link
Copy Markdown

Summary

Adds CCSOutputScorer - a Correctover CCS (Call Shield) scorer for PyRIT that detects AI security vulnerabilities in LLM outputs using 24 deterministic rules across 7 categories.

Key Features

  • Deterministic regex-based - extends RegexScorer, 22us P50 latency
  • 7 detection categories: prompt injection, RCE, SSRF, path traversal, credential leaks, insecure deserialization, sensitive data exposure
  • Same pattern as existing XSSOutputScorer, SQLInjectionOutputScorer, ShellCommandOutputScorer
  • Configurable categories - filter which rule groups to apply

Usage

from pyrit.score import CCSOutputScorer
scorer = CCSOutputScorer()
score = await scorer.score_text_async(text="...")

Related


Generated with Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant