#55th of 14 in Security
ai-infra-guard
Red-teaming platform for AI infra CVEs, MCP servers, agent skills and jailbreaks
- Stars
- 7.3k
- License
- Apache-2.0
- Last commit
- Oct 2026
- Last release
- Oct 2026
- Language
- Python
3,325 on 4 Apr 20267,264 on 31 Oct 2026
From GitHub's daily star counts.
Checked on GitHub.
Overview
A.I.G (AI-Infra-Guard) from Tencent Zhuque Lab is a web platform that fingerprints running AI services such as Ollama, vLLM, ComfyUI and n8n against 2000+ CVE rules. It also scans MCP servers and agent skills from source or URL, runs jailbreak evaluations against a target LLM API, and includes a model and API relay checker. Standalone CLIs exist for skill, MCP and agent scanning.
Who it is for: Security teams auditing self-hosted AI services, MCP servers and agent skills
Strengths
- Fingerprints 100+ AI components (Ollama, vLLM, ComfyUI, n8n, Triton) against 2000+ CVE rules
- Covers infra CVEs, MCP and skill scanning, and jailbreak evaluation in one web UI
- Separate CLIs such as pip-installable aig-skill-scan fit into CI/CD pipelines
- Rules are YAML files under data/, so contributing fingerprints is straightforward
Weaknesses
- No authentication; README says not to deploy on public networks
- Skill scanning needs an external LLM API key
- Online Pro version with extra features requires an invitation code
- API checker from source needs a Python venv and a Go build
What it needs
- RAM ≥ 4 GB
- no GPU
- Docker + Compose
- Needs Docker 20.10+, LLM API key for skill, MCP and jailbreak scans
- Models: OpenAI-compatible LLM APIs (base URL + key)
- port 8088
Quick answers
Is ai-infra-guard open source?
Yes. Its code is on GitHub under the Apache-2.0 license.
Can you run ai-infra-guard with Docker?
Yes. Its repository has a Docker setup: a Dockerfile, a Compose file or a published image.
Does ai-infra-guard need a GPU?
No, it runs without one. Plan for at least 4 GB of RAM.
Also in Security
See all 14| Rank | Project | Score |
|---|---|---|
| 1 | shannonAutonomous pentester that exploits web apps and APIs using source code analysis | 91 out of 100 |
| 2 | ifixaiPython CLI that audits AI agents for policy, access and reliability failures | 86 out of 100 |
| 3 | StrixAutonomous AI pentesting agents that validate vulnerabilities with working exploits | 84 out of 100 |
| #4 | pentagiAutonomous multi-agent penetration testing system with sandboxed security tools | 78 out of 100 |
| #6 | garakCommand-line scanner that probes LLMs for jailbreaks, leakage and injection | 68 out of 100 |