About Me

Welcome to Xiaozao Sec

I’m Xiaozao, an independent researcher dedicated to the frontier of AI Security.

In this era of rapidly evolving Generative AI, security should not be a hurdle to innovation, but rather its guardrail. My mission for “Xiaozao Sec” is simple: To systematize fragmented AI security knowledge and grow alongside fellow security enthusiasts.

Research Areas

Currently, I focus on security defense and Red Teaming in the following areas:

• LLM Security: Prompt injection, jailbreaking, and robust defense.
• AI Agent & MCP Security: Risks in automated agent workflows and Model Context Protocols.
• SKILL Security: Research on the utilization and protection of SKILL skills.
• AI-Assisted Cybersecurity: Leveraging AI for automated vulnerability discovery and defense.
• Robotics Security: Security boundaries for Embodied AI in the physical world.

My Philosophy

I firmly believe that “sharing is the best way to learn.” Xiaozao Sec is more than just a blog; it’s an open knowledge base. I hope these contents empower more people to contribute to the cybersecurity industry.

Let’s explore the wilderness of AI security together.