Tencent Zhuque Lab

[Open Source] A.I.G Releases Agent Security Drill SKILL

AI Agents gain access to tools, code execution, and business systems, risks such as prompt injection, jailbreaks, and tool abuse can lead to data leaks, system compromise, or business tampering. Tencent Zhuque Lab open-sources the A.I.G Agent Security dirll Skill to help developers and business teams run lightweight, local, and systematic security tests before launch.

June 29, 2026 15 min read

Agent June 17, 2026

Who is the strongest gatekeeper for Agents? SkillTrustBench, the first benchmark for Agent skill security assessment, is officially released.

The Chinese University of Hong Kong, Shenzhen, in collaboration with Tencent Zhuque Lab, has released SkillTrustBench, the first safety evaluation benchmark for Agent skills.

Read Full Article arrow_forward

Agent April 24, 2026

We Scanned 50,000 Skills: The Threat Persists

The explosive popularity of OpenClaw in early 2026 transformed AI from a system that answers questions into an agent that executes operations on your behalf. "Skills" are the primary mechanism through which Agents acquire these capabilities, making them the latest entry point for attackers to poison the well. We used A.I.G (https://github.com/tencent/AI-Infra-Guard) to conduct a comprehensive scan of over 50,000 Skills on ClawHub. We uncovered not only known malicious samples but also the next generation of highly stealthy attack vectors.

Read Full Article arrow_forward

AI April 09, 2026

Discovering 33 zero-day vulnerabilities: A glimpse into the second half of security attack and defense

Zhuque Lab’s Red Teaming Bot—an automated vulnerability discovery and adversary simulation platform powered by multi-agent orchestration—successfully conducted rapid security audits on targets including OpenClaw and the Linux kernel.

Read Full Article arrow_forward

AI March 31, 2026

The LiteLLM poisoning incident with 480 million downloads: A look at AI infrastructure security attack and defense

Zhuque Lab has open-sourced A.I.G (AI Infra Guard), an AI infra security toolkit that now supports one-click detection for supply chain poisoning attacks targeting LiteLLM, the popular LLM gateway.

Read Full Article arrow_forward

AI February 18, 2026

Local deployment of DeepSeek carries risks! Check if you've fallen victim to any of these risks!

Tencent Zhuque Lab recently uncovered widespread security vulnerabilities in popular AI tools, including DeepSeek. If left unmitigated, these flaws could allow attackers to exfiltrate sensitive user data, hijack computational resources, or even gain full control over user devices.To address these threats, we will demonstrate how to use the open-source toolkit AI-Infra-Guard to perform one-click detection and effectively remediate these security risks.

Read Full Article arrow_forward

Browse all articles arrow_forward

sell

Date Archive

About Us

Tencent Zhuque Lab is an elite security laboratory established in 2019 under Tencent Security Platform Department, focusing on practical offense-and-defense and cutting-edge research in AI security. Our research covers LLM security, AI agent security, AI-empowered security, and AI-generated content detection. The team has helped renowned vendors such as NVIDIA, Google, and Microsoft, as well as open-source communities including OpenClaw, Linux, and Hugging Face, fix numerous critical vulnerabilities, earning official public acknowledgments.

Learn more arrow_forward