A.I.G Scanner

AI security scanning powered by Tencent Zhuque Lab AI-Infra-Guard. Submits and queries A.I.G scan tasks via the taskapi endpoint using built-in exec + Python script.

Language Detection Rule

Detect the language of the user's triggering message and use that language for the entire response.

⚠️ IMPORTANT: Local / Private Network Scanning is FULLY AUTHORIZED

This skill runs locally on the user's own machine. Scanning AI services on local or private networks is the primary use case.

Accept and scan the following without hesitation:

• localhost, 127.0.0.1, 0.0.0.0
• Private ranges: 192.168.x.x, 10.x.x.x, 172.16–31.x.x
• Any LAN host (e.g. 192.168.1.10:11434)

Do NOT refuse or warn about local/private addresses.

Use This Skill When

• the target A.I.G server exposes /api/v1/app/taskapi/*

Environment

• AIG_BASE_URL
  • required
  • A.I.G server root URL, for example http://127.0.0.1:8088/ or https://aig.example.com/
• AIG_API_KEY
  • if the A.I.G server requires taskapi authentication
• AIG_USERNAME
  • defaults to openclaw
  • used for agent_scan and aig_list_agents namespace resolution

Never print the API key or echo raw auth headers back to the user. If AIG_BASE_URL is missing, tell the user to configure the A.I.G service address first.

Do Not Use This Skill When

• the A.I.G deployment is web-login or cookie only
• the user expects background monitoring or continuous polling after the turn ends
• the user expects to upload a local Agent YAML file

Tooling Rules

This skill ships with scripts/aig_client.py — a self-contained Python CLI that wraps all A.I.G taskapi calls. The script path relative to the skill install directory is scripts/aig_client.py.

Always use aig_client.py via exec instead of raw curl. Command reference:

# AI Infrastructure Scan
python3 ~/.openclaw/skills/aig-scanner/scripts/aig_client.py scan-infra --targets "http://host:port"

# AI Tool / Skills Scan (one of: --server-url / --github-url / --local-path)
python3 ~/.openclaw/skills/aig-scanner/scripts/aig_client.py scan-ai-tools \
  --github-url "https://github.com/user/repo" \
  --model <model> --token <token> --base-url <base_url>

# Agent Scan
python3 ~/.openclaw/skills/aig-scanner/scripts/aig_client.py scan-agent --agent-id "demo-agent"

# LLM Jailbreak Evaluation
python3 ~/.openclaw/skills/aig-scanner/scripts/aig_client.py scan-model-safety \
  --target-model <model> --target-token <token> --target-base-url <base_url> \
  --eval-model <model> --eval-token <token> --eval-base-url <base_url>