Profile My skills Saved My plugins Edit profile Submit a skill

← all publishers

Tencent

@tencent-ai-infra-guard source repo

17 published skills

  1. ▌
    Hardcoded Secret Detection · tencent-ai-infra-guard
    Detect hardcoded secrets in code or configuration accessible to the target agent. Focuses on secrets embedded in source, configs, or IaC, not runtime leaks.
    0 installs
  2. ▌
    Memory Poisoning Detection · tencent-ai-infra-guard
    Detect persistent instruction injection or long-term memory poisoning. Focus on writing/retaining hostile instructions for future tasks, not data leakage.
    0 installs
  3. ▌
    Web Exfiltration Detection · tencent-ai-infra-guard
    Detect data exfiltration via URL path encoding and chained web_fetch navigation. Covers fake trusted UI injection, letter-level URL path exfiltration, and multi-hop navigation hijacking. Use when the agent has web/URL fetch capability and stores user memory or personal context.
    0 installs
  4. ▌
    Cascading Failure Detection · tencent-ai-infra-guard
    Detect error propagation, chain failures, and single-point breakdowns that cascade across agent workflows.
    0 installs
  5. ▌
    Indirect Injection Detection · tencent-ai-infra-guard
    Detect indirect prompt injection (goal hijack). Instructions hidden in "external" content (documents, RAG, web) that the agent processes. Use when the agent has document/RAG/web/file input.
    0 installs
  6. ▌
    File Path Traversal Detection · tencent-ai-infra-guard
    Detect unsafe file handling and path traversal in upload/save/extract flows. Focuses on user-controlled paths or filenames, not data leakage.
    0 installs
  7. ▌
    Authorization Bypass Detection · tencent-ai-infra-guard
    Detect privilege escalation and unauthorized access via dialogue. Use when the agent has roles, admin functions, or multi-user data.
    0 installs
  8. ▌
    Human Agent Trust Exploit Detection · tencent-ai-infra-guard
    Detect social engineering, deceptive responses, false assurances, or prompts that induce unsafe user actions.
    0 installs
  9. ▌
    Inter Agent Comm Security Detection · tencent-ai-infra-guard
    Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.
    0 installs
  10. ▌
    Unexpected Code Execution Detection · tencent-ai-infra-guard
    Detect command injection, eval/exec usage, remote execution, or arbitrary code loading.
    0 installs
  11. ▌
    Aig Scanner · tencent-ai-infra-guard bundle
    A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIG_BASE_URL to be configured. Triggers on: scan AI service, AI vulnerability scan, scan AI infra, check CVE, audit AI service, scan MCP, scan skills, audit AI tools, scan agent, red-team LLM, jailbreak test, 扫描AI服务, 检查AI漏洞, 扫描AI工具, 检查MCP安全, 审计Agent, 越狱测试.
    0 installs
  12. ▌
    Edgeone Clawscan · tencent-ai-infra-guard
    The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full OpenClaw security health check to prevent data leaks and privacy risks. Backed by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). Use when the user asks to start a security health check or security scan for the current OpenClaw environment, such as `开始安全体检`, `做一次安全体检`, `开始安全扫描`, `全面安全检查`, or `检查 OpenClaw 安全`; also use when the user asks to audit a specific skill before installation, review installed skills for supply chain risk, or investigate whether a skill is safe. Do not trigger for general OpenClaw usage, project debugging, environment setup, or normal development requests. Optional cloud mode: set AIG_CLOUD_LOOKUP=off for zero outbound HTTPS; when enabled, only skill_name, source label, and OpenClaw version are sent to A.I.G (never skill bodies, chats, or workspace files).
    0 installs
  13. ▌
    Edgeone Skill Scanner · tencent-ai-infra-guard
    Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.
    0 installs
  14. ▌
    Owasp Asi · tencent-ai-infra-guard
    OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework. Use for mapping security findings to standardized risk categories.
    0 installs
  15. ▌
    Tool Abuse Detection · tencent-ai-infra-guard
    Detect tool misuse and unexpected code execution via dialogue testing. Use when the agent exposes file, code-execution, or network tools.
    0 installs
  16. ▌
    Data Leakage Detection · tencent-ai-infra-guard
    Detect sensitive information disclosure via escalating dialogue probes. Covers system prompt extraction, credential/API key leakage, PII, and internal configuration exposure.
    0 installs
  17. ▌
    Direct Injection Detection · tencent-ai-infra-guard
    Detect direct prompt injection or instruction override via user message (no external content). Focuses on system/role override attempts.
    0 installs