AI Infra Guard
A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Install / Use
npx skills add Tencent/AI-Infra-GuardInstalls into whichever agent you are using.
Quality Score
Category
Development & EngineeringSupported Platforms
README
<b>A.I.G (AI-Infra-Guard)</b> integrates capabilities such as ClawScan(OpenClaw Security Scan), Agent Scan，AI infra vulnerability scan, MCP Server & Agent Skills scan, and Jailbreak Evaluation, aiming to provide users with the most comprehensive, intelligent, and user-friendly solution for AI security risk self-examination.
<p> We are committed to making A.I.G(AI-Infra-Guard) the industry-leading AI red teaming platform. More stars help this project reach a wider audience, attracting more developers to contribute, which accelerates iteration and improvement. Your star is crucial to us! </p> <p align="center"> <a href="https://github.com/Tencent/AI-Infra-Guard"> <img src="https://img.shields.io/badge/⭐-Give%20us%20a%20Star-yellow?style=for-the-badge&logo=github" alt="Give us a Star"> </a> </p> <br>📋 User Feedback Survey
Help us improve A.I.G! Please take 3-5 minutes to fill out our User Feedback Survey. Users who provide high-quality feedback and leave a valid email address will receive an exclusive Tencent souvenir gift.
<br>🚀 What's New
- 2026-07-30 · v4.5.1 — Jailbreak Evaluation: 4 multi-turn jailbreak attacks (Many-Shot, PAIR, GOAT, ActorAttack); Agent-Scan: 5 new OWASP skills + web-exfiltration detection (10 skills total); MCP-Scan: 4 new security rules
- 2026-07-27 · v4.5.0 — AI Security Skill Market launched (3 official skills); frontend fully open-sourced; Skill scan engine upgraded (9 risk categories, SkillTrustBench top score 0.9848); Skill/MCP/Agent scan as standalone CLI; vuln library expanded to 130 components, 1888 rules
- 2026-06-25 · v4.1.15 — MCP Scan: 3 new threat detection rules (tool poisoning, credential exfiltration, command injection); 6 new llama.cpp CVE rules;
model.tokennow optional with system default fallback. - 2026-06-18 · v4.1.14 — Prompt Security: 9 new single-turn jailbreak operators; new
aig-agent-redteamskill for comprehensive Agent red-team assessment. - 2026-06-11 · v4.1.13 — New version check API endpoint; security scoring switched to absolute deduction model for clearer risk assessment.
- 2026-06-08 · v4.1.12 — Fingerprint library expanded: 39 new AI Web fingerprints added, 18 existing fingerprints enhanced.
👉 Earlier releases · 🛒 AI Security Skill Market · 🔍 skill-scan CLI · 🔍 mcp-scan CLI · 🔍 agent-scan CLI · 📊 SkillTrustBench
Table of Contents
- 🚀 Quick Start
- ✨ Features
- 🖼️ Showcase
- 📖 User Guide
- 🔧 API Documentation
- 🏗️ Architecture Evolution
- 📝 Contribution Guide
- 🛡️ About the Team
- 🙏 Acknowledgements
- 💬 Join the Community
- 📖 Citation
- 📚 Papers
- ⚖️ License & Attribution <br><br>
🚀 Quick Start
🐳 Deploy A.I.G with Docker
| Docker | RAM | Disk Space | |:-------|:----|:----------| | 20.10 or higher | 4GB+ | 10GB+ |
# This method pulls pre-built images from Docker Hub for a faster start
git clone https://github.com/Tencent/AI-Infra-Guard.git
cd AI-Infra-Guard
# For Docker Compose V2+, replace 'docker-compose' with 'docker compose'
docker-compose -f docker-compose.images.yml up -d
Once the service is running, you can access the A.I.G web interface at:
http://localhost:8088
<br>
Use from OpenClaw
You can also call A.I.G directly from OpenClaw chat via the aig-scanner skill.
clawhub install aig-scanner
Then configure AIG_BASE_URL to point to your running A.I.G service.
For more details, see the aig-scanner README.
Other Installation Methods
Method 2: One-Click Install Script （Recommended）
# This method will automatically install Docker and launch A.I.G with one command
curl https://raw.githubusercontent.com/Tencent/AI-Infra-Guard/refs/heads/main/docker.sh | bash
Method 3: Build and run from source
git clone https://github.com/Tencent/AI-Infra-Guard.git
cd AI-Infra-Guard
# This method builds a Docker image from local source code and starts the service
# (For Docker Compose V2+, replace 'docker-compose' with 'docker compose')
docker-compose up -d
Note: The AI-Infra-Guard project is positioned as an AI red teaming platform for internal use by enterprises or individuals. It currently lacks an authentication mechanism and should not be deployed on public networks.
For more information, see: https://tencent.github.io/AI-Infra-Guard/?menu=getting-started
</details>⚡ Install aig-skill-scan with a Single Command
Agent Skill security audit tool, easily integrated into enterprise CI/CD pipelines. Vulnerability classification aligns with SkillTrustBench T01–T09 taxonomy. Learn more →
pip install aig-skill-scan
# Set API key via environment variable
export LLM_API_KEY="your-api-key"
# Scan a local Skill project directory
aig-skill-scan --repo /path/to/your/skill \
-m deepseek-v4-flash \
--language en \
-o result.json
🌟 Try the Online Pro Version
Experience the Pro version with advanced features and improved performance. The Pro version requires an invitation code and is prioritized for contributors who have submitted issues, pull requests, or discussions, or actively help grow the community. Visit: https://aigsec.ai/.
<br> <br>✨ Features
🔍 aig-skill-scan Performance & Coverage
Performance on SkillTrustBench with different LLMs:
| # | Model | F1 | Precision | Recall | FPR | |:--|:------|:---|:----------|:-------|:----| | 1 | Claude Opus 4.6 | 0.9848 | 0.9725
Related Skills
healthcheck
385.5kAudit/harden OpenClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.
node-connect
385.5kDiagnose OpenClaw Android, iOS, or macOS node pairing, QR/setup code, route, auth, and connection failures.
python-debugpy
385.5kDebug Python with pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.
prose
385.5kOpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
