Trifecta Checker AI Safety Gate for Lethal Agents Trifecta Checker is an AI safety gate that blocks Lethal Trifecta attacks - the dangerous combination of Private Data + Untrusted Content + External Communication that enables data theft via prompt injection.
The problem: AI agents with tools like read_gmail, browse_web, and send_email can be tricked by malicious web content to steal private emails and exfiltrate them. This is called the Lethal Trifecta.
Our solution: One API call - POST /api/check-trifecta - analyzes the agent's tool manifest and returns instant verdict:
- LETHAL (3/3 tools): 403 Forbidden - BLOCKED - Cannot execute
- WARNING (2/3 tools): 200 OK with caution flag
- SAFE (1/3 tools): 200 OK - Safe to proceed
Live and tested: https://trifecta-checker.vercel.app/
- LETHAL test [read_gmail, browse_web, send_email] -> 403
- WARNING [browse_web, send_email] -> 200 warning
- SAFE [read_gmail] -> 200 safe
For 【entity-AMD¦canonical_name=AMD】 AI League Match 4 - Intelligent Web Information Retrieval - we extend with Trusted Source Verification: before allowing external communication, we verify web sources are trusted (.gov, .edu, Concordium ID verified). If source is untrusted, block or flag.
Tech: Next.js 14 + TypeScript, Vercel Edge, Python/JS SDKs, 【entity-AMD¦canonical_name=AMD】 ROCm ready for LLM inference. GitHub: github.com/altima261/trifecta-checker. Blog: dev.to/altima261. Built by Mohammed Binashwan (altima261) from Jeddah, Saudi Arabia. Team trifecta-checker solo UTC+3.
This project also registered in Concordium Trusted Agents (ZK Proofs + on-chain audit) and Vultr Agent Rush (Blast Radius Zero sandbox).