aig-agent-redteam
|
Choose how to use this skill
You do not need every option. Choose the path your AI client supports. The stable page stays the same; versioned files are immutable.
1. Native installer
This listing has no registered native installer command. Use the complete package or source fallback below, depending on what your client supports.
Do not guess an installer command or replace an existing version without reviewing the diff.
2. Complete package recommended
Download the ZIP when available. It includes SKILL.md plus the references, security notes and version metadata.
No complete ProSkills package is published for this listing yet.3. Prompt-only
Copy the prompt above when the agent can read the stable page or when you want to adopt the workflow without installing a skill.
Need only the instruction file?
Download SKILL.md only if your client requires a single file. The complete ZIP is safer for a full installation because it preserves the references and release context.
No path installs or executes anything by itself. Your agent still needs access to the project files. Before updating, compare the installed version and review the diff.
// RATINGS
Not yet listed on ClawHub or SkillsMP
// README
A.I.G Agent Red Team — Agent Security Assessment in One Command
A comprehensive AI Agent red-team security assessment skill. Install into your Agent client and let it attack itself — testing prompt injection, indirect injection, tool abuse, data leakage, privilege escalation, SSRF, supply chain risks, and infrastructure exposure.
Powered by first-principles red-team methodology from Tencent Zhuque Lab A.I.G.
Install
npx skills add https://github.com/Tencent/AI-Infra-Guard.git --skill aig-agent-redteam
Alternatively, install from source:
https://github.com/Tencent/AI-Infra-Guard/tree/main/skills/aig-agent-redteam
Requires node and git. Supports Claude Code, CodeBuddy, Cursor, and other Agent clients.
If npx skills is unavailable, install manually:
git clone https://github.com/Tencent/AI-Infra-Guard.git /tmp/aig
cp -r /tmp/aig/skills/aig-agent-redteam ~/.claude/skills/
Usage
After installation, just chat:
Personal Developer (IDE Agent) — audit installed Skills, MCP Servers, and supply chain:
帮我进行安全演习
Production Agent — full attack surface coverage: infrastructure scan, code audit, dynamic testing, jailbreak evaluation, workflow attack:
帮我进行安全演习
The skill automatically identifies the agent type and adapts the test scope. For production agents, it covers:
- Infrastructure Scan: fingerprint + CVE matching for AI services (Ollama, vLLM, Dify, etc.)
- Code Audit: static analysis of Skill source, MCP Server code, and dependency supply chain
- Dynamic Testing: 30+ prompt injection payloads with adaptive mutation (role-play, encoding, multi-turn escalation)
- Jailbreak Evaluation: LLM boundary testing via Parseltongue encoding engine
- Workflow Attack: multi-step task chain abuse, indirect injection via documents/RAG
- Full Report: severity-rated findings with evidence chains, defense validation, and remediation advice — all data stays local
Notes
- All test data stays on your machine; no data is uploaded to any server.
- The skill uses first-principles reasoning, not blind payload execution.
- Target scope must be confirmed before execution; destructive actions require explicit authorization.
- Compatible with Claude Code, CodeBuddy, Cursor, and any Agent client supporting skills.
Powered by Tencent Zhuque Lab A.I.G
// HOW IT'S BUILT
KEY FILES