## Tencent/AI-Infra-Guard — v4.5.2…v4.6.0

_85 commits._

### Features
- **feat(yamlcheck): add strict validation for required ID and severity fields** (9775dc9)
- **Merge pull request #587 from Tencent/add-openclaw-badge-20260821** (4908db1)
- **feat: add LLM API poisoning detection** (f4c5803)
- **Merge pull request #561 from Tencent/add-research-link-to-papers-20260818** (8ef9de3)
- **feat(api-checker): add unified CLI command** (c5f491b)
- **feat(api-checker): add service and detection algorithms** (540386d)
- **data(api-checker): add reference distributions and charts** (a0427cc)
- **feat(api-checker): add web proxy integration** (4e92e4b)
- **research: add DeepSeek Harness prompt injection assessment** (d17b90c)
- **feat: add AIG rules [2026-08-14]** (417e242)
- **feat: add AIG rules [2026-08-07]** (eeeed7e)

### Fixes
- **Merge pull request #589 from rootkiller6788/fix/mcp-scan-surrogate-encoding** (b3fb1ff)
- **Merge pull request #601 from Aj7Ay/fix/report-language-localization** (45fab01)
- **Merge pull request #602 from donglige/fix/gradio-cve-panic** (364d1cf)
- **Merge pull request #605 from NY1024/fix/mcp-read-timeout-timedelta** (fc5ff98)
- **fix(mcp-scan): use timedelta for ClientSession read_timeout_seconds** (65de71f)
- **fix(parser): prevent panic on malformed advisory version rules** (dda00af)
- **fix(prompt-security): stop double-translating case.reason** (83c91cd)
- **fix(agent-scan): localize Agent Scan step titles like MCP Scan** (a88d71f)
- **fix(prompt-security): translate jailbreak report content to selected language** (389cc8a)
- **fix(i18n): honor selected report language for AI Infra Scan CVE data** (e2a8ffe)
- **fix(yamlcheck): validate Info.Name, reject empty severity, and restore EOF newline** (e9aa387)
- **Merge pull request #592 from Tencent/fix-main-docs-20260823-vuln-count-case-collision** (32df94d)
- **fix(mcp-scan): strip lone surrogates from non-UTF-8 filenames** (3b0e688)
- **Merge pull request #585 from Tencent/fix-research-papers-formatting-20260821** (2bb11a0)
- **Merge pull request #569 from ZedingZhang/fix/case-colliding-vuln-rules** (4d1d5cb)
- **Merge PR #571: fix(skill-scan): strip lone surrogates to prevent JSON serialization crash** (be8974c)
- **Merge PR #565: fix(agent): extract pure URL from user input for MCP remote scan** (e6ffe3b)
- **Merge PR #564: fix(mcp-scan): fix streamable_http_client headers param incompatibility with MCP SDK 1.28+** (1cfd6ee)
- **Merge pull request #567 from NY1024/fix/promptsecurity-missing-httpx-dependency** (a6b979d)
- **Merge pull request #535 from ichaobuster/fix/docker-uv-sync-agent-scan** (20df197)
- **Merge pull request #563 from kexinoh/fix/restore-images-compose-compat** (09859d0)
- **Merge pull request #566 from kexinoh/fix/api-checker-weighted-risk-score** (a7486e3)
- **fix(skill-scan): strip lone surrogates to prevent JSON serialization crash** (69801e2)
- **fix(mcp): migrate clients to SDK 2.0** (a68dbf4)
- **fix(data): remove case-colliding duplicate vulnerability rules** (42f8e4a)
- **fix(promptsecurity): add missing httpx dependency** (7a89db9)
- **fix(api-checker): preserve weighted audit deductions** (cd46f30)
- **fix(agent): extract pure URL from user input for MCP scan server_url** (464570e)
- **fix(mcp-scan): fix streamable_http_client headers param incompatibility with MCP SDK 1.28+** (76605e6)
- **Merge pull request #562 from Tencent/fix-main-docs-20260818-vuln-table-cleanup** (78e4bfb)
- **fix(docker): restore published image compose compatibility** (f2ca355)
- **Merge pull request #558 from Tencent/fix-main-docs-20260818-research-readme-entry** (13e6342)
- **Merge pull request #559 from Tencent/fix/aig-agent-redteam-payload-render** (a0a8a50)
- **fix(aig-agent-redteam): 修复 payload 渲染链与判定词表一致性** (06b9eb9)
- **fix(data): escape credential-like reference labels** (dc02b68)
- **Merge pull request #539 from feiiiiii5/fix/startswith-path-containment** (ac0384e)
- **Merge pull request #550 from Tencent/fix-main-docs-20260818-vuln-count-update** (7156efe)
- **Merge pull request #548 from Tencent/fix/update-model-recommendations** (2bee908)
- **Merge pull request #545 from Tencent/fix-readme-whats-new-20260817** (bcfd3ab)
- **Merge pull request #543 from Tencent/fix/update-cve-count-2000** (e6459c4)
- **fix: correct YAML format for CVE-2026-73483.yaml (rule singular, no metadata)** (c43c2df)
- **fix: correct YAML format for CVE-2026-73483.yaml (rule singular, no metadata)** (39f7252)
- **fix: use commonpath for path containment in file tools** (2a7a5bb)
- **fix(docker): use uv sync to install agent-scan Python deps** (1550124)

### Backend
- **Merge pull request #590 from Louis1125/feat/enhance-yaml-validation** (c2e598d)
- **Merge pull request #583 from Tencent/expand-research-papers-20260821** (bb9a4b1)
- **Merge pull request #570 from xixiaxibro/agent/mcp-sdk-2** (6bf7d74)
- **merge: 同步上游 main 并解决 MCP 客户端冲突** (70b3d22)
- **Merge pull request #568 from Tencent/feat/llm-api-poisoning-detection** (3f4a2ff)
- **Merge pull request #511 from kexinoh/feat/api-checker-integration** (cbc5420)
- **Merge pull request #551 from NY1024/research/deepseek-harness-security-assessment** (c42fa9c)
- **Merge pull request #536 from feiyang666/aig-rules/2026-08-14** (0e4d3c0)
- **Merge pull request #526 from feiyang666/aig-rules/2026-08-07** (c77216a)

### Tests
- **test(yamlcheck): reject case-insensitive path collisions** (2166481)

### Docs
- **docs: fix CVE counts after case-collision duplicate removal (PR #569)** (c77b0cb)
- **docs: add OpenClaw Recommended badge below ClawHub badges in all 9 language READMEs** (aad7784)
- **docs: fix Research & Papers section formatting and ordering** (0a7aa4b)
- **docs: expand Research Projects entries in Research & Papers section across all 9 languages** (28ac069)
- **docs(mcp): note private SDK factory import** (4cc69c7)
- **docs(mcp): update minimum Python version** (b7b292b)
- **docs: fix ai-infra-scan component table - update LiteLLM/LobeChat CVE counts, remove deleted components** (5ed3e75)
- **docs: add Research Projects link to Papers section in all 9 languages** (7244d83)
- **docs(api-checker): document integration and APIs** (aa8613f)
- **docs: add deepseek-harness-security-assessment to Research/README.md** (5c83c10)
- **docs: update ai-infra-scan component table - 4 new components, 14 CVE count updates** (0c6e4ba)
- **docs: update model recommendations - GLM to 5.3, Kimi to K3 (faq + mcp-scan only)** (1b1f2ef)
- **docs: add v4.5.2 What's New entry across all 9 README languages** (4d986fe)
- **docs: update CVE count from 1900+ to 2000+ across all README languages and docs** (b043b41)

### Chore
- **chore: bump version to v4.6.0** (e8931cc)
- **style(prompt-security): drop comments added in translation helpers** (709d7b1)
- **refactor(docker): embed api checker in agent** (5542f7f)
- **chore: remove 154 duplicate files already merged via PR #526** (5dca52f)
- **chore(skills): remove outdated v5.0.0 changelog from aig-agent-redteam SKILL.md** (1c14dcd)
- **refactor(skills/aig-agent-redteam): v5.0.0 变异引擎重构 + 合并 workflow-attack 到 mutation-attack** (e989411)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/Tencent/AI-Infra-Guard?utm_source=github-action)._