<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>AI-Infra-Guard — The AI Toolchain</title>
    <link>https://aitoolchain.io/tools/ai-infra-guard</link>
    <description>New releases and features in AI-Infra-Guard, tracked by The AI Toolchain.</description>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 11:15:00 GMT</lastBuildDate>
    <atom:link href="https://aitoolchain.io/tools/ai-infra-guard/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>AI-Infra-Guard v4.6.0</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0</guid>
      <pubDate>Wed, 26 Aug 2026 11:15:00 GMT</pubDate>
      <description>AI-Infra-Guard v4.6.0 adds an API security audit module, LLM API poisoning detection, and a refactored agent red-team mutation engine.
• Adds `aig-agent-redteam` v5.0.0 mutation engine with `mutation-attack` (merging the former `workflow-attack` into it) for agent red-teaming.
• New API security audit module (`API Checker`) with web proxy integration, unified CLI command, and detection algorithms.
• New detection for LLM API poisoning attacks.
• Adds strict YAML validation enforcing required `id` and `severity` fields in vulnerability rules.
• New DeepSeek Harness prompt injection assessment research.
Breaking changes:
• In `aig-agent-redteam`, `workflow-attack` is merged into `mutation-attack`; any invocation or automation referencing `workflow-attack` must be updated to use `mutation-attack`.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.6.0</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.6.0</guid>
      <pubDate>Wed, 26 Aug 2026 11:15:00 GMT</pubDate>
      <description>AI-Infra-Guard v4.6.0 adds an API security audit module, LLM API poisoning detection, and a refactored agent red-team mutation engine.
• Adds `aig-agent-redteam` v5.0.0 mutation engine with `mutation-attack` (merging the former `workflow-attack` into it) for agent red-teaming.
• New API security audit module (`API Checker`) with web proxy integration, unified CLI command, and detection algorithms.
• New detection for LLM API poisoning attacks.
• Adds strict YAML validation enforcing required `id` and `severity` fields in vulnerability rules.
• New DeepSeek Harness prompt injection assessment research.
Breaking changes:
• In `aig-agent-redteam`, `workflow-attack` is merged into `mutation-attack`; any invocation or automation referencing `workflow-attack` must be updated to use `mutation-attack`.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.2</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.2</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.2</guid>
      <pubDate>Mon, 17 Aug 2026 02:30:47 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.2 adds SkillJack research, GET-only fingerprints for Qdrant/Chroma/Weaviate, and expands the vuln library to 2000+ CVE rules.
• Adds the SkillJack research project, a new AI red-teaming research capability within the platform.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.2</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.2</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.2</guid>
      <pubDate>Mon, 17 Aug 2026 02:30:47 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.2 adds SkillJack research, GET-only fingerprints for Qdrant/Chroma/Weaviate, and expands the vuln library to 2000+ CVE rules.
• Adds the SkillJack research project, a new AI red-teaming research capability within the platform.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.1</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.1</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.1</guid>
      <pubDate>Thu, 30 Jul 2026 07:48:52 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.1 adds 4 multi-turn jailbreak attacks, 6 new Agent-Scan OWASP skills, and 4 new MCP security detection rules.
• Adds `Many-Shot`, `PAIR`, `GOAT`, and `ActorAttack` multi-turn jailbreak attack methods to PromptSecurity evaluation.
• Adds 5 new OWASP detection skills to Agent-Scan: `agentic-supply-chain`, `cascading-failure`, `human-agent-trust`, `inter-agent-comm`, and `unexpected-code-execution`.
• Adds `web-exfiltration-detection` skill to Agent-Scan, bringing the total to 10 detection skills.
• Adds 4 new MCP security detection rules to MCP-Scan covering hardcoded secrets and insecure deserialization.
• Updates AIG detection rules library with the 2026-07-24 rule set.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.1</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.1</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.1</guid>
      <pubDate>Thu, 30 Jul 2026 07:48:52 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.1 adds 4 multi-turn jailbreak attacks, 6 new Agent-Scan OWASP skills, and 4 new MCP security detection rules.
• Adds `Many-Shot`, `PAIR`, `GOAT`, and `ActorAttack` multi-turn jailbreak attack methods to PromptSecurity evaluation.
• Adds 5 new OWASP detection skills to Agent-Scan: `agentic-supply-chain`, `cascading-failure`, `human-agent-trust`, `inter-agent-comm`, and `unexpected-code-execution`.
• Adds `web-exfiltration-detection` skill to Agent-Scan, bringing the total to 10 detection skills.
• Adds 4 new MCP security detection rules to MCP-Scan covering hardcoded secrets and insecure deserialization.
• Updates AIG detection rules library with the 2026-07-24 rule set.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.0</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.0</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.0</guid>
      <pubDate>Mon, 27 Jul 2026 07:21:58 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.0 open-sources its frontend, ships standalone CLI modules for Agent/MCP/Skill scanning, and adds SARIF 2.1.0 output for skill audits.
• Repackages Skill-Scan as a standalone PyPI package `aig-skill-scan` for easy CI/CD integration.
• Modularizes Agent-Scan as a standalone CLI with AIG integration support.
• Modularizes MCP-Scan with dual-mode support (CLI + AIG Web) and adds a standalone `mcp-scan-lite` module.
• Adds 4 new detection skills for AI agent security to `Agent-Scan`.
• Adds 2 new MCP security detection rules and ATR-derived MCP detection rules covering additional attack surfaces.
• Adds `Skill-Scan` Agent Skill security auditing support with 9 risk categories, achieving a SkillTrustBench top score of 0.9848.
• Open-sources the full frontend code with open-source environment configuration.
• Adds an agentic-tool-misuse evaluation dataset to the `Eval` module.
• Expands the vulnerability library to 130 AI components and 1888 rules with new AI component fingerprints.
Breaking changes:
• Skill-Scan Stage 2 Code Audit now outputs a Markdown report instead of XML.</description>
    </item>
    <item>
      <title>AI-Infra-Guard v4.5.0</title>
      <link>https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.0</link>
      <guid isPermaLink="true">https://github.com/Tencent/AI-Infra-Guard/releases/tag/v4.5.0</guid>
      <pubDate>Mon, 27 Jul 2026 07:21:58 GMT</pubDate>
      <description>AI-Infra-Guard v4.5.0 open-sources its frontend, ships standalone CLI modules for Agent/MCP/Skill scanning, and adds SARIF 2.1.0 output for skill audits.
• Repackages Skill-Scan as a standalone PyPI package `aig-skill-scan` for easy CI/CD integration.
• Modularizes Agent-Scan as a standalone CLI with AIG integration support.
• Modularizes MCP-Scan with dual-mode support (CLI + AIG Web) and adds a standalone `mcp-scan-lite` module.
• Adds 4 new detection skills for AI agent security to `Agent-Scan`.
• Adds 2 new MCP security detection rules and ATR-derived MCP detection rules covering additional attack surfaces.
• Adds `Skill-Scan` Agent Skill security auditing support with 9 risk categories, achieving a SkillTrustBench top score of 0.9848.
• Open-sources the full frontend code with open-source environment configuration.
• Adds an agentic-tool-misuse evaluation dataset to the `Eval` module.
• Expands the vulnerability library to 130 AI components and 1888 rules with new AI component fingerprints.
Breaking changes:
• Skill-Scan Stage 2 Code Audit now outputs a Markdown report instead of XML.</description>
    </item>
  </channel>
</rss>
