user@yamraj:~$ whoamiI build full-stack web apps by day and study how to break them by night.
Lately that means AI security — I ship open-source tooling for prompt injection, agent/MCP supply chain, ML model integrity, and SOC triage. Seven engines, one platform.
Yamasabha · EchoTrap · SkillSentry · PatchPilot · IOCForge · IdentityWatch · PickleGuard · LeakLens
What each engine does
Yamasabha — the court of Yama: one FastAPI dashboard + API that runs all seven engines below.
| Engine | What it does | |
|---|---|---|
| 🪤 | EchoTrap | Zero-click prompt-injection lab + the defense that stops it OWASP LLM01 |
| 🛡️ | SkillSentry | Semantic scanner for malicious MCP servers & agent skills OWASP Agentic |
| 🛠️ | PatchPilot | Patch what's actually exploited — CISA KEV + FIRST EPSS over raw CVSS |
| ⚒️ | IOCForge | One unified verdict from many free intel feeds — SOC IOC enrichment & triage |
| 🛂 | IdentityWatch | Detection-as-code for identity attacks (impossible travel, MFA fatigue) MITRE ATT&CK |
| 🥒 | PickleGuard | Statically detect malicious pickle opcodes in ML models — without unpickling them |
| 🔦 | LeakLens | Ransomware leak-site OSINT — group/sector/country trend dashboards CTI |
All MIT-licensed, Python, with docs and tests.
[ BUILDING ] |
[ EVOLVING ] |
[ BREACHING ] |
|---|---|---|
| Python / JS / TS | AI & LLM integration | Red teaming |
| React / Next.js / Node | Agent & MCP security | WAPT / OSINT |
| FastAPI / Postgres | Detection engineering | Threat intel (CTI) |
- StudyHub — platform to organize and streamline study workflows
JavaScript - SportsEra — sports community web app with posts, events, and auth
PHP - Penalty_money — group penalty tracker
FastAPI· live
PS C:\Users\YAMRAJ> shutdown /s /t 0