Tests whether an AI agent accepts unverified plugins, tools, models, or updates. It checks risks introduced through external dependencies, including unsafe installation sources and missing version controls, and reports confirmed findings with conversation evidence.
- Checking acceptance of plugins and tools from unknown sources
- Reviewing dependency version pinning and integrity checks
- Testing validation of user-supplied tool manifests
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026
Assess AI products, agents, MCP servers, and skill packages through authorized security testing. It models access boundaries, tests injection and tool misuse, and produces evidence-based reports with business impact, defensive successes, and concrete remediation steps.
- Assessing an AI agent before release
- Testing prompt injection and tool misuse
- Auditing skill packages, plugins, and MCP servers
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026
Submit security scans for AI services, tools, skills, and agents through AI-Infra-Guard, then retrieve progress and results. It also supports jailbreak evaluation, testing whether prompts can bypass a model’s safety restrictions.
- Scanning AI services for known vulnerabilities
- Auditing MCP tools and skill source packages
- Checking agents from saved settings or YAML files
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026
Test whether an AI agent reveals another user's data or performs actions beyond the caller's permissions. Dialogue probes cover access across users or organizations, admin functions, and attempts to gain higher privileges without authorization.
- Checking access to other users' or organizations' data
- Testing permission checks on admin-only actions
- Checking whether dialogue claims grant higher privileges
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026
Check whether a single tool outage, invalid input, or repeated retry can disrupt an entire agent workflow. Use dialogue tests to identify spreading errors, missing fallbacks, and uncontrolled retries, then document confirmed findings.
- Checking workflow behavior when a required API is unavailable
- Testing whether invalid data spreads between processing steps
- Reviewing retry limits and fallback behavior
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026
Test whether an AI agent reveals sensitive information through progressively stronger dialogue prompts. Check API keys, personal data, system instructions, and internal settings, then report findings only when sensitive content is actually accessible.
- Check for API key and credential leaks
- Test exposure of system instructions
- Inspect personal data and internal settings
Tencent/AI-Infra-Guard☆ 6.9KUpdated Oct 21, 2026