No description
/api/mcp/srv-hugging-face-attackMCP enable + token are only for calling from an external client — the playground below needs neither.
Create automated detection rule for identifying malicious patterns in Hugging Face repositories
{
"type": "object",
"required": [
"rule_name",
"rule_type",
"pattern",
"severity"
],
"properties": {
"tags": {
"type": "array",
"items": {
"type": "string"
}
},
"enabled": {
"type": "boolean",
"default": true
},
"pattern": {
"type": "string",
"description": "Detection pattern or signature"
},
"severity": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"rule_name": {
"type": "string",
"description": "Human-readable rule name"
},
"rule_type": {
"enum": [
"yara",
"behavioral",
"metadata",
"content_hash"
],
"type": "string"
}
}
}Extract and analyze IOCs from model files including suspicious URLs, IP addresses, and embedded payloads
{
"type": "object",
"required": [
"model_id"
],
"properties": {
"model_id": {
"type": "string",
"description": "Hugging Face model identifier"
},
"ioc_types": {
"type": "array",
"items": {
"enum": [
"urls",
"ips",
"domains",
"file_hashes",
"suspicious_strings"
],
"type": "string"
}
},
"artifact_types": {
"type": "array",
"items": {
"enum": [
"weights",
"config",
"tokenizer",
"metadata",
"readme"
],
"type": "string"
}
}
}
}Retrieve detailed security analysis for a specific model including scan results, behavioral analysis, and risk assessment
{
"type": "object",
"required": [
"model_id"
],
"properties": {
"model_id": {
"type": "string",
"description": "Hugging Face model identifier (author/model-name)"
},
"scan_depth": {
"enum": [
"basic",
"standard",
"deep"
],
"type": "string",
"default": "standard"
},
"include_artifacts": {
"type": "boolean",
"default": false,
"description": "Include model weights and file analysis"
}
}
}Retrieve threat intelligence feed for known malicious authors, repositories, and attack patterns targeting Hugging Face
{
"type": "object",
"required": [
"feed_type"
],
"properties": {
"format": {
"enum": [
"json",
"stix",
"csv"
],
"type": "string",
"default": "json"
},
"feed_type": {
"enum": [
"malicious_authors",
"known_backdoors",
"supply_chain_attacks",
"recent_campaigns"
],
"type": "string"
},
"time_range": {
"enum": [
"1h",
"24h",
"7d",
"30d",
"90d"
],
"type": "string",
"default": "24h"
},
"confidence_level": {
"enum": [
"low",
"medium",
"high"
],
"type": "string",
"default": "medium"
}
}
}Search for models and repositories with similar threat patterns using behavioral and content similarity
{
"type": "object",
"required": [
"reference_threat_id"
],
"properties": {
"hunt_scope": {
"enum": [
"all_repos",
"same_author",
"similar_tasks",
"recent_uploads"
],
"type": "string"
},
"max_results": {
"type": "integer",
"default": 50,
"maximum": 500
},
"reference_threat_id": {
"type": "string",
"description": "Base threat to find similarities for"
},
"similarity_threshold": {
"type": "number",
"default": 0.7,
"maximum": 1,
"minimum": 0.1
}
}
}List repositories flagged for potential security issues including malicious code, data exfiltration, or adversarial content
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"status": {
"enum": [
"open",
"investigating",
"confirmed",
"false_positive",
"resolved"
],
"type": "string"
},
"severity": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"threat_type": {
"type": "array",
"items": {
"enum": [
"malicious_code",
"data_exfiltration",
"adversarial_model",
"backdoor",
"supply_chain"
],
"type": "string"
}
},
"created_after": {
"type": "string",
"format": "date-time"
}
}
}Initiate security scan of a Hugging Face repository for malicious content, backdoors, and policy violations
{
"type": "object",
"required": [
"repo_id"
],
"properties": {
"repo_id": {
"type": "string",
"description": "Repository identifier (author/repo-name)"
},
"priority": {
"enum": [
"low",
"normal",
"high",
"urgent"
],
"type": "string",
"default": "normal"
},
"scan_type": {
"enum": [
"quick",
"comprehensive",
"behavioral"
],
"type": "string",
"default": "comprehensive"
},
"callback_url": {
"type": "string",
"format": "uri",
"description": "Webhook URL for scan completion notification"
}
}
}Search Hugging Face models by name, task, or metadata with filters for potentially malicious content
{
"type": "object",
"required": [
"query"
],
"properties": {
"task": {
"enum": [
"text-generation",
"image-classification",
"object-detection",
"question-answering",
"sentiment-analysis",
"translation"
],
"type": "string"
},
"limit": {
"type": "integer",
"default": 50,
"maximum": 1000
},
"query": {
"type": "string",
"description": "Search query for model name or description"
},
"author": {
"type": "string",
"description": "Model author username"
},
"suspicious_indicators": {
"type": "boolean",
"description": "Filter for models flagged with suspicious patterns"
}
}
}Update threat status and assign analyst for suspicious repository or model findings
{
"type": "object",
"required": [
"threat_id",
"status"
],
"properties": {
"notes": {
"type": "string",
"description": "Analyst notes and reasoning"
},
"status": {
"enum": [
"open",
"investigating",
"confirmed",
"false_positive",
"resolved"
],
"type": "string"
},
"priority": {
"enum": [
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"threat_id": {
"type": "string",
"description": "Unique threat identifier"
},
"assigned_analyst": {
"type": "string",
"description": "Analyst username"
}
}
}