AI-Infra-Guard: Open-source security scanner for AI systems
Tencent's Zhuque Lab open-sourced AI-Infra-Guard, a scanner that fingerprints AI services, checks 1,600+ CVEs, and evaluates MCP skills.
AI-Infra-Guard fingerprints running AI services such as Ollama, vLLM and ComfyUI, checks them against more than 1,600 known CVEs, and inspects MCP servers and agent skills across 14 risk categories. Its SkillTrustBench judging set contains 5,520 human-labeled samples, with false positive rates of 1.20%–18.67% depending on the judging model. Users include ICBC, China Merchants Bank, China Telecom, Lenovo, vivo and Bilibili. Release 4.1.9 hardened scanning agents against indirect prompt injection, and the open-source build ships without authentication, requiring a reverse proxy with Basic Auth or an IP allowlist.
- Fingerprints AI services (Ollama, vLLM, ComfyUI) and checks them against 1,600+ known CVEs.
- Inspects MCP servers and agent skills across 14 risk categories and runs jailbreak evaluations.
- SkillTrustBench judging false positive rates run 1.20%–18.67% depending on the judging model.
- Release 4.1.9 mitigates indirect prompt injection by isolating scanned content in a delimited prompt block.
- Open-source build lacks authentication; deploy behind a reverse proxy with Basic Auth or IP allowlist.
- Vendors
- TencentZhuque Lab
From the original article
2 min read at helpnetsecurity.com
Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills across 14 categories of risk, and runs jailbreak evaluations against a target model. To check a skill, the platform asks a language model whether it looks malicious.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.