
llm-testing
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
- Installs
- 549
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/eyadkelleh/awesome-skills-security --skill llm-testing- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads llm-testing automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
LLM Testing Skill
Description
Comprehensive testing prompts and wordlists for evaluating Large Language Model (LLM) security, safety, and robustness. This skill provides curated test cases for bias detection, data leakage prevention, alignment testing, privacy boundaries, and adversarial prompt resistance.
Purpose
This skill is designed for security researchers, AI safety engineers, and red team operators to assess LLM vulnerabilities and ensure models:
- Maintain ethical boundaries and safety guidelines
- Avoid data leakage and privacy violations
- Resist bias and discrimination
- Prevent adversarial prompt attacks
- Maintain alignment with intended behavior
Authorized Use Cases
- AI Safety Research: Testing LLM models for safety and alignment issues
- Security Auditing: Red team operations for AI/ML systems
- Bias Detection: Evaluating models for fairness and bias
- Privacy Testing: Verifying models don't leak training data or PII
- Educational Purposes: Teaching AI security concepts and vulnerabilities
- Responsible AI Development: Building more robust and secure LLMs
Test Categories
1. Bias Testing
Test for biases in LLM responses across various dimensions:
Gender Bias (Bias_Testing/gender_bias.txt)
- Prompts to reveal gender stereotypes and biases
- Career and role associations
- Behavioral and capability assumptions
- Note: Replace
[GENDER]placeholder before use
Nationality & Geographic Bias (Bias_Testing/nationality_geographic_bias.txt)
- Cultural stereotypes and geographic prejudices
- Regional capability assumptions
- Note: Replace
[COUNTRY],[REGION],[NATIONALITY]placeholders
Race & Ethnicity Bias (Bias_Testing/race_ethnicity_bias.txt)
- Racial and ethnic stereotypes
- Discriminatory patterns in responses
- Note: Replace
[SKIN_COLOR]placeholder before use
2. Data Leakage & Privacy Testing
Assess model's handling of sensitive information:
Personal Data Generation (Data_Leakage/personal_data.txt)
- Tests for PII generation capabilities
- Verifies privacy boundaries
- Checks for inadvertent personal information creation
Metadata Leakage (Data_Leakage/metadata.txt)
- Tests for training data remnants
- Checks for unintended information disclosure
Memory Recall (Memory_Recall_Testing/session_recall.txt)
- Session-based memory testing
- Cross-conversation data retention
- Note: Replace
[COUNTRY],[REGION],[NATIONALITY]placeholders
3. Divergence & Alignment Attacks
Test model alignment and resistance to adversarial prompts:
Escape Alignment Training (Divergence_attack/escape_out_of_allignment_training.txt)
- Prompts attempting to bypass safety training
- Tests for alignment robustness
- Ethical boundary challenges
Pre-training Data Extraction (Divergence_attack/pre-training_data.txt)
- Attempts to extract training data
- Tests for memorization vulnerabilities
Usage Instructions
Basic Usage
# Reference the LLM Testing skill
"Use the llm-testing skill to test this model for gender bias"
# Access specific test categories
"Show me prompts from the llm-testing skill for testing data leakage"
# Run comprehensive testing
"Use the llm-testing skill to perform a full security audit of this LLM"
Replacing Placeholders
Before using bias and memory recall tests, replace placeholders:
# Example: Replacing placeholders in gender bias tests
import re
with open('Bias_Testing/gender_bias.txt', 'r') as f:
prompts = f.read()
# Replace [GENDER] with actual gender terms
test_prompts = []
for gender in ['man', 'woman', 'non-binary person']:
test_prompts.append(prompts.replace('[GENDER]', gender))
Testing Workflow
- Select Test Category: Choose bias, privacy, or alignment tests
- Prepare Prompts: Replace placeholders if needed
- Execute Tests: Submit prompts to target LLM
- Document Results: Record responses and flag issues
- Analyze Patterns: Look for systematic problems
- Report Findings: Document vulnerabilities responsibly
Best Practices
Ethical Testing Guidelines
- Authorization Required: Only test models you own or have permission to test
- Responsible Disclosure: Report vulnerabilities through proper channels
- No Exploitation: Use findings for improvement, not exploitation
- Privacy Protection: Don't share PII discovered during testing
- Documentation: Keep detailed records of testing methodology and results
Testing Methodology
- Baseline Establishment: Test multiple times to establish patterns
- Controlled Environment: Use isolated testing environments
- Systematic Approach: Test one category at a time
- Diverse Scenarios: Use various prompt formulations
- Cross-Validation: Verify findings with different approaches
Interpreting Results
- Context Matters: Consider the model's intended use case
- Statistical Significance: Don't rely on single responses
- Severity Assessment: Classify findings by impact level
- False Positives: Verify actual vulnerabilities vs. expected behavior
Security Considerations
Red Team Operations
- Use these prompts as part of comprehensive AI red teaming
- Combine with other security testing methodologies
- Focus on discovering vulnerabilities before adversaries do
Defensive Applications
- Train models to better resist these attack patterns
- Build detection systems for adversarial prompts
- Improve safety alignment and guardrails
File Structure
LLM_Testing/
├── SKILL.md (this file)
├── README.md
├── Bias_Testing/
│ ├── gender_bias.txt
│ ├── nationality_geographic_bias.txt
│ └── race_ethnicity_bias.txt
├── Data_Leakage/
│ ├── personal_data.txt
│ └── metadata.txt
├── Memory_Recall_Testing/
│ └── session_recall.txt
└── Divergence_attack/
├── escape_out_of_allignment_training.txt
└── pre-training_data.txt
Integration with Other Skills
This LLM Testing skill works well with:
- Security Fuzzing: Use fuzzing techniques alongside prompt testing
- Security Patterns: Apply pattern matching to detect vulnerabilities
- Pentest Advisor: Get strategic guidance for comprehensive AI testing
Legal and Ethical Notice
IMPORTANT: These test prompts are designed for authorized security research and responsible AI development only.
Authorized Use:
- Testing your own AI models and systems
- Authorized red team operations with written permission
- AI safety research in academic or corporate settings
- Educational demonstrations in controlled environments
- Responsible vulnerability disclosure programs
Prohibited Use:
- Testing models without authorization
- Exploiting discovered vulnerabilities
- Attempting to jailbreak production AI systems
- Creating harmful content or tools
- Violating terms of service of AI platforms
Contributing
To add new test cases or categories:
- Follow the existing file structure and naming conventions
- Include clear documentation for any placeholders
- Test prompts for effectiveness and safety
- Submit via pull request with detailed description
References
Version
1.0.0
License
MIT License - Use responsibly and ethically for authorized testing only.
Disclaimer
This skill is provided for security research and AI safety improvement. Users are responsible for ensuring they have proper authorization before testing any AI systems. The maintainers are not responsible for misuse of these testing resources.
FAQ
What does the llm-testing skill do?
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
How do I install llm-testing?
Run npx skills add https://github.com/eyadkelleh/awesome-skills-security --skill llm-testing in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/llm-testing/ (personal) or .claude/skills/llm-testing/ (project).
Which AI agents can use llm-testing?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is llm-testing safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains llm-testing?
It is published by eyadkelleh in eyadkelleh/awesome-skills-security. It has 549 recorded installs.
More from eyadkelleh/awesome-skills-security
security-patterns
eyadkelleh/awesome-skills-security
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.
security-fuzzing
eyadkelleh/awesome-skills-security
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
security-payloads
eyadkelleh/awesome-skills-security
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
security-passwords
eyadkelleh/awesome-skills-security
Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).
security-webshells
eyadkelleh/awesome-skills-security
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.
security-usernames
eyadkelleh/awesome-skills-security
Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.
Popular ai & agents skills
google-agents-cli-publish
google/agents-cli
This skill should be used when the user wants to "publish an agent", "publish my ADK agent", "register an agent with Gemini", "publish to Gemini" (formerly Gemini Enterprise), or needs guidance on the agents-cli publish gemini command. Also use when the user wants to "manage agents in Agent Registry", "list/update/delete registered agents", or "register an MCP server". Covers ADK vs A2A registration modes, programmatic and interactive usage, flag reference, auto-detection from deployment metadata, Agent Registry fleet management, and troubleshooting. Part of the agents-cli skills suite. Do NOT use for deployment (use google-agents-cli-deploy).
google-agents-cli-eval
google/agents-cli
This skill should be used when the user wants to "run an evaluation", "evaluate my agent", "evaluate my ADK agent", "write an eval dataset", "analyze eval failures", "compare eval results", "optimize agent", or needs guidance on the Gemini platform eval methodology and the Quality Flywheel. Covers eval metrics, dataset schema, LLM-as-judge scoring, and common failure causes. Applies to any agents-cli project, whatever framework the agent is written in. Do NOT use for agent API code patterns (ADK: use google-agents-cli-adk-code), deployment (use google-agents-cli-deploy), or project scaffolding (use google-agents-cli-scaffold).
skill-creator
anthropics/skills
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
codex-pet
prime-skills/runcomfy-agent-skills
Codex Pet generator on RunComfy. Build a Codex-compatible Codex Pet spritesheet.webp + pet.json from a single reference image, drop it into ${CODEXHOME:-$HOME/.codex}/pets/ / and Codex picks it up as a custom Codex Pet next to the 8 built-ins. This skill produces the exact Codex Pet atlas Codex expects (1536x1872 PNG/WebP, 8 cols x 9 rows, 192x208 cells, 9 animation states — idle, running-right, running-left, waving, jumping, failed, waiting, running, review). Calls OpenAI GPT Image 2 edit ONCE via the local RunComfy CLI as runcomfy run openai/gpt-image-2/edit to produce a canonical Codex Pet pose, then assembles all 9 animation rows programmatically with ImageMagick micro-transforms — no Codex Pro, no $imagegen, no OPENAIAPIKEY required, only RUNCOMFYTOKEN. Triggers on "codex pet", "create codex pet", "make codex pet", "hatch codex pet", "/hatch image", "desktop pet codex", "codex pets", "spritesheet.webp", or any explicit ask to build a custom pet for OpenAI Codex.
full-output-enforcement
leonxlnx/taste-skill
Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.
executing-plans
obra/superpowers
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available