/00. Claude Plugins

A Claude Code plugin is a folder of skills, agents, hooks, and slash commands that Claude installs per project. 33 plugins, 76 skills here.

/plugin marketplace add aiocean/claude-plugins
/plugin install <plugin-name>@aiocean-plugins

Skills load when their description matches your message, hooks fire on tool-call events, agents spawn on the Agent tool. Idle plugins cost nothing — browse plugins or read the guides.

Folders

Articles

/03. aio-agent-threats-reference

aio-agent-threats-reference

From plugin aio-agent-threats

Install

/plugin install aio-agent-threats@aiocean-plugins

AI-Agent Attack-Vector Reference

Semantic-search lookup over the aio-agent-threats corpus. This skill retrieves and reads; for a guided engagement workflow use the sibling aio-agent-threats advisor skill.

The corpus lives in the sibling skill folder ${CLAUDE_PLUGIN_ROOT}/skills/aio-agent-threats/: volume-NN-*/ directories, with search scripts in scripts/.

Lookup Workflow

1. Search by meaning

cd "${CLAUDE_PLUGIN_ROOT}/skills/aio-agent-threats/scripts" && npx tsx search-vectors.ts "<what you're looking for>" --top 6 --json
# first run only, if embeddings.json is missing: npx tsx build-embeddings.ts

Returns ranked {title, volume, file, score}. Read the full file for the top hits — the file field is the path under ${CLAUDE_PLUGIN_ROOT}/skills/aio-agent-threats/.

2. Browse a volume

List and read articles directly:

ls "${CLAUDE_PLUGIN_ROOT}/skills/aio-agent-threats/volume-03-tool-and-mcp/"
VolFocus
01 foundationsattack-surface taxonomy, instruction/data channel, kill chain, OWASP/NIST crosswalk, trust boundaries
02 prompt-injectiondirect, indirect, cross-modal, system-prompt leakage, obfuscation, delivery
03 tool-and-mcptool poisoning, rug-pull, shadowing, line-jumping, excessive agency, MCP CVEs
04 memory-and-contextMINJA, AgentPoison, RAG poisoning, persistent false beliefs, cross-session, misattribution gap
05 multi-agentcontagious poisoning/worms, A2A trust, orchestrator hijack, cascading failures, protocol attacks
06 jailbreak-evasionCrescendo/STAC, Echo Chamber, roleplay/DAN, encoding/GCG, many-shot, policy puppetry
07 supply-chain-exfilcoding-agent weaponization, repo poisoning, exfil channels, real incidents, espionage case, model supply chain
08 defense-hardeningdetection, spotlighting, dual-LLM/CaMeL, least-privilege, provenance/attestation, defense-in-depth

3. Read the article

Each article carries: Core Concept · Origin/First Seen · How It Works · Attack Surface · Weaponization (lab) · Real-World Instances · Detection · Mitigations · Related Vectors · References. Every factual claim carries a source URL and a HIGH/MEDIUM/LOW confidence label — carry that label through into whatever you report.

Common Mistakes

  • Answering from the title/snippet alone — read the full article; the nuance and confidence labels are in the body.
  • Dropping confidence labels — many figures are preprint/vendor-reported; preserve the article's label.
  • Using this for a live engagement — switch to the aio-agent-threats advisor skill for the ASK→SEARCH→APPLY→COMPOSE→STRESS-TEST workflow.