OpenClaw adds Tencent's AI-Infra-Guard to ClawHub's skill security review pipeline
heyneighbor · x · 2026-10-03
OpenClaw has integrated Tencent's AI-Infra-Guard (AIG) into ClawScan, the open-source CLI that powers security review for every skill and plugin uploaded to ClawHub.
- ClawScan runs Tencent AIG and NVIDIA's SkillSpector independently, then an AI judge reviews both scanners' findings alongside the uploaded files for a final assessment
- AIG's skill scanner is an "LLM-driven multi-stage code audit and vulnerability review pipeline" that traces relationships between a skill's instructions and its scripts, dependencies, and data flows, covering nine risk categories including instruction hijacking, memory poisoning, remote payload execution, and insecure dependencies
- The team benchmarked the combined system with Tencent on a fixed 556-case subset of SkillTrustBench, a public benchmark from Tencent and CUHK-Shenzhen, with an ongoing feedback loop
More from coding & agent
- Dev runs 40-50 coding agents in parallel, ditches local coding for cloud sandboxes — brandon_galang · 2026-10-03
- Claude Code forces re-login every 2-3 days, breaking remote workflows — altryne · 2026-10-03
- Convex All Gas Hackathon winners announced: $25,000 prize pool backed by OpenAI, Firecrawl — devdigest · 2026-10-03
- Dev orchestrates 150 Opus sub-agents from his car via a home server and OpenAI Dot — haydendevs · 2026-10-03
- Gmail MCP Server brings secure email management to MCP clients — modelcontextprotocol · 2026-10-03
- ChapterPal dev: frontier vision models consistently fail to spot obvious webpage conversion artifacts — burkov · 2026-10-03