airedlab.com valid

PromptTrace

PromptTrace is a free, hands-on AI security training platform where you practice prompt injection, RAG poisoning, and tool exploitation against real LLMs. Its Context Trace visualizes the prompt layers used for a request - system instructions, RAG documents, tool definitions, and user input - while challenge secrets and other protected values may be redacted. Built by Abdelrahman Adel, AI Security Researcher with 9+ years of offensive security experience (OSCP, CREST CRT, Bugcrowd Top 100).

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-26T11:46:51.311Z. Cached copy · Source on airedlab.com

# PromptTrace

License: CC-BY-4.0

> PromptTrace is a free, hands-on AI security training platform where you practice prompt injection, RAG poisoning, and tool exploitation against real LLMs. Its Context Trace visualizes the prompt layers used for a request - system instructions, RAG documents, tool definitions, and user input - while challenge secrets and other protected values may be redacted. Built by Abdelrahman Adel, AI Security Researcher with 9+ years of offensive security experience (OSCP, CREST CRT, Bugcrowd Top 100).

- URL: https://prompttrace.airedlab.com
- Pricing: 100% free, no paid tiers
- LLM Providers: Multiple production-grade LLMs, rotated for availability
- Curriculum references: OWASP Top 10 for LLM Applications 2025, OWASP Top 10 for Agentic Applications 2026 (risks facing autonomous and agentic systems), and MITRE ATLAS

## Learning Modules (9 total, free)

- [How LLMs Work](https://prompttrace.airedlab.com/learn/how-llms-work): Tokenization, context windows, and text generation fundamentals
- [System Prompts](https://prompttrace.airedlab.com/learn/system-prompts): How system prompts shape LLM behavior and their security limits
- [RAG Explained](https://prompttrace.airedlab.com/learn/rag-explained): Retrieval-augmented generation pipelines and trust boundaries
- [Tools and Function Calling](https://prompttrace.airedlab.com/learn/tools-and-function-calling): How LLMs interact with external systems via tool calling
- [The Bare LLM](https://prompttrace.airedlab.com/learn/the-bare-llm): Direct prompt injection against unprotected models
- [LLM + External Data](https://prompttrace.airedlab.com/learn/llm-external-data): RAG poisoning and indirect prompt injection
- [LLM + Tools](https://prompttrace.airedlab.com/learn/llm-tools): Tool abuse, excessive agency, and improper output handling
- [LLM + Defenses](https://prompttrace.airedlab.com/learn/llm-defenses): Bypassing system-level protections and defense-in-depth
- [LLM Agents & Agentic Security](https://prompttrace.airedlab.com/learn/agentic-security): MCP, A2A, the Lethal Trifecta, and why agents amplify prompt injection

## Prompt Injection Labs (10 free labs with real LLMs)

- [Hello, Injection](https://prompttrace.airedlab.com/labs/hello-injection): Extract a secret from the system prompt using direct prompt injection (Difficulty: 1/5)
- [The Obedient Assistant](https://prompttrace.airedlab.com/labs/obedient-assistant): Trick AI into generating misinformation (Difficulty: 2/5)
- [Poisoned Knowledge](https://prompttrace.airedlab.com/labs/poisoned-knowledge): RAG retrieval manipulation with document poisoning (Difficulty: 2/5)
- [The Helpful Tool](https://prompttrace.airedlab.com/labs/helpful-tool): Hidden tool discovery and exploitation (Difficulty: 3/5)
- [Output Injection](https://prompttrace.airedlab.com/labs/output-injection): XSS through AI-generated HTML output (Difficulty: 3/5)
- [Break the Defenses](https://prompttrace.airedlab.com/labs/defend-the-bot): Extract a secr
…

Machine-readable: GET /v1/resolve?q=airedlab.com · GET /v1/domain/airedlab.com · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for airedlab.com:
1. POST https://agentwebmap.com/v1/sites/airedlab.com/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://airedlab.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/airedlab.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/airedlab.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.