Tencent/AI-Infra-Guard
Tencent open-sources a security scanner that checks AI services, agents, and MCP servers all at once
AI-Infra-Guard (A.I.G) is an AI red teaming platform from Tencent Zhuque Lab that scans AI infrastructure for known vulnerabilities, evaluates agent and MCP server risks, checks agent skills, and tests LLMs against jailbreak attacks. It can run as a Docker web app or as separate CLI tools plugged into CI/CD pipelines. It's released as open source under Apache 2.0.
What it does
- Point it at a running AI service address (vLLM, Ollama, ComfyUI, n8n, etc.) and it fingerprints the software to match against over 100 supported frameworks and more than 2,000 known CVE vulnerabilities
- MCP servers and Agent Skills can be scanned from source code or a remote URL alone, covering 14 major risk categories; on the project's own SkillTrustBench benchmark spanning 9 risk types (T01-T09), the top-performing model reached an F1 score of 0.9848
- Jailbreak Evaluation tests LLM safety using multiple attack methods, including multi-turn attacks like Many-Shot, PAIR, GOAT, and ActorAttack that try to manipulate a model over several conversation turns
- Skill, MCP, and Agent scanning are each packaged as standalone pip-installable CLI tools so they can be embedded directly into enterprise CI/CD pipelines
- The maintainers explicitly warn the tool has no authentication mechanism and is meant for internal enterprise or individual use, not public-facing deployment
Why it matters
Teams running their own AI services or building agent/MCP-based workflows get a free way to self-check for known vulnerabilities and permission-abuse risks before shipping. Citations in 19 academic papers and a Black Hat Europe presentation suggest the tool has become a reference point within the AI security research community.
Terms in this repo
- MCP (Model Context Protocol) · A standard connector protocol that lets AI models plug into external tools and data
- CVE · A publicly registered identifier for a known software vulnerability
- Jailbreak · An attack that bypasses an AI model's safety guardrails to elicit forbidden outputs
- Red Teaming · Proactively probing a system for weaknesses by simulating an attacker's perspective
- F1 score · A detection accuracy metric combining precision and recall, closer to 1 is better
Repository description (English)
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Open on GitHubTrending repos
- vorssaint/vorssaint-utilsOne free menu bar app replaces a dozen paid Mac utilities
- Alishahryar1/free-claude-codeA local proxy that lets coding AI agents run on 49 free or cheap model providers instead of one paid service
- freestylefly/awesome-gpt-image-2A library of 532 reverse-engineered prompts that turn GPT-Image2 into a predictable image-making tool
- block/buzzAn open-source workspace where humans and AI agents chat, code, and review in the same rooms
- NousResearch/hermes-agentNous Research's Hermes is an AI agent that gets smarter the more you use it
- virgiliojr94/book-to-skillA tool that turns technical book PDFs into on-demand reference skills for AI coding agents
- VoltAgent/awesome-agent-skillsA single hub collecting over 1000 'how-to' manuals that make AI coding assistants act like experts
- anthropics/claude-plugins-communityA shared shelf where anyone's Claude add-ons get listed for install