superred-optimizer-chord-xthp
A Chord (Cross-Tool Harvesting and Polluting, XTHP) optimizer for superred agent targets.
Chord attacks tool-using LLM agents by slipping a malicious helper tool into the agent's pool of tools. Positioned right before or after a legitimate "victim" tool in the call sequence, the helper can harvest sensitive context the agent passes around, hijack the control flow, or pollute the final answer with attacker-controlled output.
Reference: Wang et al., "Les Dissonances: Cross-Tool Harvesting and Polluting in
Pool-of-Tools Empowered LLM Agents,"
arXiv:2504.03111 (NDSS 2026). Official
implementation:
systemsecurity-uiuc/Chord
(MIT License). See ASSUMPTIONS.md for the full paper-to-code
mapping and every deliberate departure.
Install
pip install superred-optimizer-chord-xthp
Usage
from chord_xthp_optimizer import ChordXTHPOptimizer
# Default direction is `both` (predecessor + successor helper variants),
# hijack attack enabled.
optimizer = ChordXTHPOptimizer()
# Target a specific victim tool and enable multiple attack types.
optimizer = ChordXTHPOptimizer(
victim_tool_name="get_user_address",
enabled_attacks=("hijack", "harvest", "pollute"),
)
This optimizer targets agent-style targets that expose a writable tool/skill
catalog. Wire it into a Controller like any other superred optimizer — see the
framework's architecture overview.
License
MIT for this port's code (see LICENSE). The upstream reference
implementation, systemsecurity-uiuc/Chord,
is MIT licensed. The bundled helper data originates from that repository; its
MIT copyright notice is preserved in NOTICE and
LICENSES/Chord-MIT.txt. This port reimplements the
attack against superred's event model rather than vendoring Chord's agent
runtime.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file superred_optimizer_chord_xthp-0.1.0.tar.gz.
File metadata
- Download URL: superred_optimizer_chord_xthp-0.1.0.tar.gz
- Upload date:
- Size: 36.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
91fd369a3e614ede0c690be5a9a4f53ab32c083595751ad3b9fe3639ed3fa0db
|
|
| MD5 |
0cee62501c743e1f8073cf160a60669c
|
|
| BLAKE2b-256 |
270dce9f07f385645a9a4b05e72a6c76552a2e13ae14c1a7b72607f99baebea9
|
Provenance
The following attestation bundles were made for superred_optimizer_chord_xthp-0.1.0.tar.gz:
Publisher:
release.yml on RoldSI/superred-modules
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
superred_optimizer_chord_xthp-0.1.0.tar.gz -
Subject digest:
91fd369a3e614ede0c690be5a9a4f53ab32c083595751ad3b9fe3639ed3fa0db - Sigstore transparency entry: 2227809269
- Sigstore integration time:
-
Permalink:
RoldSI/superred-modules@be1b4b03c78de2bec30d03265fcbd35605d2bd0e -
Branch / Tag:
refs/tags/superred-optimizer-chord-xthp-v0.1.0 - Owner: https://github.com/RoldSI
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@be1b4b03c78de2bec30d03265fcbd35605d2bd0e -
Trigger Event:
push
-
Statement type:
File details
Details for the file superred_optimizer_chord_xthp-0.1.0-py3-none-any.whl.
File metadata
- Download URL: superred_optimizer_chord_xthp-0.1.0-py3-none-any.whl
- Upload date:
- Size: 30.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3dce5e6edee8e8cb7f27630c60150b724e60cc2a9231d1523cee4c9506c00558
|
|
| MD5 |
a622303428de089f1b6789a657cd13c8
|
|
| BLAKE2b-256 |
2c410b1efcc40144e883426898cc33047daf79b704f0e511375772058f34b988
|
Provenance
The following attestation bundles were made for superred_optimizer_chord_xthp-0.1.0-py3-none-any.whl:
Publisher:
release.yml on RoldSI/superred-modules
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
superred_optimizer_chord_xthp-0.1.0-py3-none-any.whl -
Subject digest:
3dce5e6edee8e8cb7f27630c60150b724e60cc2a9231d1523cee4c9506c00558 - Sigstore transparency entry: 2227809280
- Sigstore integration time:
-
Permalink:
RoldSI/superred-modules@be1b4b03c78de2bec30d03265fcbd35605d2bd0e -
Branch / Tag:
refs/tags/superred-optimizer-chord-xthp-v0.1.0 - Owner: https://github.com/RoldSI
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@be1b4b03c78de2bec30d03265fcbd35605d2bd0e -
Trigger Event:
push
-
Statement type:
