A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Install
npx skills add Tencent/AI-Infra-Guardgh skill install Tencent/AI-Infra-Guardgit clone --depth 1 https://github.com/Tencent/AI-Infra-GuardSkills in this collection
- Agentic Supply Chain DetectionTencentDetect agentic supply-chain risks: compromised dependencies, malicious plugins/tools/models, and untrusted update sources.
- Aig Agent RedteamTencent当用户要求 AI/Agent 安全评估、蓝军演习、AI 安全审查、提示词注入测试、MCP/Skill/插件/代码包审计、Agent 工具链滥用测试，或需要生成类似渗透测试报告的 Markdown/HTML 时，必须使用本 skill。本 skill 让 Agent 以授权蓝军视角成为 AI 安全专家，面向 AI 产品、Agent、MCP Server、Skill、代码仓库和 AI 基础设施进行安全演习。优先使用第一性原理推理和真实证据，而不是机械跑 payload 库；脚本只用于 HTTP 指纹识别、证据聚合、报告渲染等确定性辅助任务。
- Aig ScannerTencentA.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIG_BASE_URL to be configured.
- Authorization Bypass DetectionTencentDetect privilege escalation and unauthorized access via dialogue. Use when the agent has roles, admin functions, or multi-user data.
- Cascading Failure DetectionTencentDetect error propagation, chain failures, and single-point breakdowns that cascade across agent workflows.
- Data Leakage DetectionTencentDetect sensitive information disclosure via escalating dialogue probes. Covers system prompt extraction, credential/API key leakage, PII, and internal configuration exposure.
- Direct Injection DetectionTencentDetect direct prompt injection or instruction override via user message (no external content). Focuses on system/role override attempts.
- edgeone skill scannerTencentScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
- Edgeone ClawscanTencentThe first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full OpenClaw security health check to prevent data leaks and privacy risks. Backed by Tencent Zhuque Lab A.I.G (AI-Infra-Guard).
- File Path Traversal DetectionTencentDetect unsafe file handling and path traversal in upload/save/extract flows. Focuses on user-controlled paths or filenames, not data leakage.
- Hardcoded Secret DetectionTencentDetect hardcoded secrets in code or configuration accessible to the target agent. Focuses on secrets embedded in source, configs, or IaC, not runtime leaks.
- Human Agent Trust Exploit DetectionTencentDetect social engineering, deceptive responses, false assurances, or prompts that induce unsafe user actions.
- Indirect Injection DetectionTencentDetect indirect prompt injection (goal hijack). Instructions hidden in "external" content (documents, RAG, web) that the agent processes. Use when the agent has document/RAG/web/file input.
- Inter Agent Comm Security DetectionTencentDetect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.
- Memory Poisoning DetectionTencentDetect persistent instruction injection or long-term memory poisoning. Focus on writing/retaining hostile instructions for future tasks, not data leakage.
- Memory Rag Poisoning DetectionTencentDetect persistent-memory poisoning and RAG/knowledge-base contamination via dialogue testing. Use when the agent has long-term memory, a user/preference store, or writes to a retrievable knowledge base.
- Owasp AsiTencentOWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
- PDF SummarizerTencentSummarize the key points of a PDF document into a short bullet list.
- Tool Abuse DetectionTencentDetect tool misuse and unexpected code execution via dialogue testing. Use when the agent exposes file, code-execution, or network tools.
- Unexpected Code Execution DetectionTencentDetect command injection, eval/exec usage, remote execution, or arbitrary code loading.
- Web Exfiltration DetectionTencentDetect data exfiltration via URL path encoding and chained web_fetch navigation. Covers fake trusted UI injection, letter-level URL path exfiltration, and multi-hop navigation hijacking. Use when the agent has web/URL fetch capability and stores user memory or personal context.