Tencent / AI-Infra-Guard

📖 Documentation  | 
 🌐 🇨🇳 中文 · 🇯🇵 日本語 · 🇪🇸 Español · 🇩🇪 Deutsch · 🇫🇷 Français · 🇰🇷 한국어 · 🇧🇷 Português · 🇷🇺 Русский 
 🚀 AI Red Teaming Platform by Tencent Zhuque Lab 
 A.I.G (AI-Infra-Guard) integrates capabilities such as ClawScan(OpenClaw Security Scan), Agent Scan，AI infra vulnerability scan, MCP Server & Agent Skills scan, and Jailbreak Evaluation, aiming to provide users with the most comprehensive, intelligent, and user-friendly solution for AI security risk self-examination.
 We are committed to making A.I.G(AI-Infra-Guard) the industry-leading AI red teaming platform. More stars help this project reach a wider audience, attracting more developers to contribute, which accelerates iteration and improvement. Your star is crucial to us!
## 📋 User Feedback Survey
Help us improve A.I.G! Please take 3-5 minutes to fill out our User Feedback Survey. Users who provide high-quality feedback and leave a valid email address will receive an exclusive Tencent souvenir gift.
## 🚀 What's New
- **2026-09-17** · v4.6.2 — Vuln library expanded with 155 new CVE rules across 40+ AI components (LangFlow, n8n, PraisonAI, vLLM, llama-cpp, MLflow & more); Skill-Scan accuracy improvements (fewer evidence-free false positives, stall-free streaming); new agent loss-of-control benchmarks (FORGE-Bench, RogueHandoff-20).
- **2026-09-10** · v4.6.1 — API Checker: expanded model fingerprint coverage (Gemini 2.5/3.1, Gemma 2/3/4, GLM-5.3 & GLM-5.3-Flash); MCP-Scan reliability: flags empty/incomplete scans, preserves security findings during context compaction, surfaces underlying connection errors; corrected mislabeled CVE product names.
- **2026-08-26** · v4.6.0 — LLM API poisoning detection (multi-probe black-box audit for model substitution & backdoor risks); Agent-Scan v5.0.0 mutation engine refactor; vuln library expanded to 146 AI components & 2000+ CVE rules; MCP/Skill scan stability & compatibility fixes.
- **2026-08-17** · v4.5.2 — Skill-Scan: .pyc bytecode bypass detection + charset smuggling defense; MCP-Scan: RCE prevention via tool whitelisting in dynamic mode; new SkillJack research project; vuln library expanded to 2000+ CVE rules.
- **2026-07-30** · v4.5.1 — Jailbreak Evaluation: 4 multi-turn jailbreak attacks (Many-Shot, PAIR, GOAT, ActorAttack); Agent-Scan: 5 new OWASP skills + web-exfiltration detection (10 skills total); MCP-Scan: 4 new security rules
👉 Earlier releases · 🛒 AI Security Skill Market · 🔍 skill-scan CLI · 🔍 mcp-scan CLI · 🔍 agent-scan CLI · 📊 SkillTrustBench
## Table of Contents
- 🚀 Quick Start
- ✨ Features
- 🖼️ Showcase
- 📖 User Guide
- 🔧 API Documentation
- 🏗️ Architecture Evolution
- 📝 Contribution Guide
- 🛡️ About the Team
- 🙏 Acknowledgements
- 💬 Join the Community
- 📖 Citation
- 📚 Research & Papers
- ⚖️ License & Attribution
## 🚀 Quick Start
### 🐳 Deploy A.I.G with Docker
| Docker | RAM | Disk Space |
|:-------|:----|:----------|
| 20.10 or higher | 4GB+ | 10GB+ |
 [code] 
Once the service is running, you can access the A.I.G web inte