鈻堚枅鈻堚枅鈻堚枅鈺椻枅鈻堚晽   鈻堚枅鈺椻枅鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚枅鈺?鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚枅鈻堚晽 鈻堚枅鈻堚枅鈻堚枅鈺?
  鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈺氣枅鈻堚晽 鈻堚枅鈺斺暆鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨晲鈺愨暆鈻堚枅鈺斺晲鈺愨晲鈺愨暆
  鈻堚枅鈺?     鈺氣枅鈻堚枅鈻堚晹鈺?鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚晽  鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈻堚枅鈻堚晽  鈻堚枅鈺?
  鈻堚枅鈺?      鈺氣枅鈻堚晹鈺? 鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈻堚枅鈺斺晲鈺愨暆  鈻堚枅鈺斺晲鈺愨枅鈻堚晽鈺氣晲鈺愨晲鈺愨枅鈻堚晳鈻堚枅鈺斺晲鈺愨暆  鈻堚枅鈺?
  鈺氣枅鈻堚枅鈻堚枅鈻堚晽   鈻堚枅鈺?  鈻堚枅鈻堚枅鈻堚枅鈺斺暆鈻堚枅鈻堚枅鈻堚枅鈻堚晽鈻堚枅鈺? 鈻堚枅鈺戔枅鈻堚枅鈻堚枅鈻堚枅鈺戔枅鈻堚枅鈻堚枅鈻堚枅鈺椻暁鈻堚枅鈻堚枅鈻堚枅鈺?
   鈺氣晲鈺愨晲鈺愨晲鈺?  鈺氣晲鈺?  鈺氣晲鈺愨晲鈺愨晲鈺?鈺氣晲鈺愨晲鈺愨晲鈺愨暆鈺氣晲鈺? 鈺氣晲鈺濃暁鈺愨晲鈺愨晲鈺愨晲鈺濃暁鈺愨晲鈺愨晲鈺愨晲鈺?鈺氣晲鈺愨晲鈺愨晲鈺?
              Security 路 Identity 路 Collaboration 路 Trust

馃枼锔?鏈湴浼樺厛 路 寮€婧?路 鏃犱簯 AIShield 寮€婧愮増瀹屽叏鍦ㄤ綘鏈哄櫒涓婅繍琛?*锛氶浂绗笁鏂逛緷璧栥€佸彲 100% 绂荤嚎銆佷唬鐮佷笌閰嶇疆缁濅笉涓婁紶浜戠銆佹壂鎻忔椂缁濅笉鎵ц**琚壂閰嶇疆銆? 鈿狅笍 涓?aishield.ai 鐨勫尯鍒?*锛氭湰浠撳簱鏄?*鏈湴寮€婧愮増锛屼笌鍚屽悕鍟嗕笟浜?SaaS **aishield.ai**锛堟敞鍐?/ 瀵嗛挜 / 璁¤垂寮忎簯绔湇鍔★級鏄?*瀹屽叏涓嶅悓鐨勪骇鍝?*锛岃鍕挎贩娣嗐€?

鏍稿績鐗规€?

馃洝锔?227 鏉?MCP 瑙勫垯 / 233 鏉?Skill 瑙勫垯 鈥?瀵归綈 OWASP MCP Top 10 (2025 v0.1) 涓?OWASP Agentic AI Top 10 (ASI01鈥揂SI10)锛岃鐩?Prompt 娉ㄥ叆銆佽秺鏉冭闂€佹暟鎹硠闇层€佸崗璁敾鍑汇€佷緵搴旈摼椋庨櫓銆佹矙绠遍€冮€?6 澶х淮搴?

馃О Agent 璁＄畻鏈虹殑鍐呭瀹夊叏骞抽潰 鈥?Cloudflare Sandboxes銆乫orgevm銆丒2B銆丱pen Interpreter銆丟oose 杩欑被杩愯鏃剁鐨勬槸鐖嗙偢鍗婂緞锛坅gent 鑳界鍒颁粈涔堬級锛孉IShield 绠＄殑鏄?*鍐呭鍙俊**锛坅gent 璇昏繘鏉ョ殑 MCP server銆乻kill銆佸伐鍏锋弿杩拌涓嶈淇★級銆備袱鑰呬簰琛ワ細鍚姩鍓嶅伐浣滃尯棰勬壂 鈫?娌欑纭寲瑙勫垯 鈫?姣忔璋冪敤鍑嗗叆 鈫?鎸佺画閴磋瘉銆傝瑙?Agent 璁＄畻鏈虹殑涓や釜瀹夊叏骞抽潰

馃搫 *Markdown 鎸夊彲鎵ц浣撴壂鎻? 鈥?瀵?Skill 绫昏祫浜э紝SKILL.md 鏈韩灏辨槸绋嬪簭銆傛妸 .md 涓€寰嬪綋銆屾枃妗ｇず渚嬨€嶉檷绾х殑鎵弿鍣紝浼氭暣鏉℃紡鎺?skill 渚涘簲閾?

馃 *鏅鸿兘 Prompt 娉ㄥ叆妫€娴? 鈥?鍘熺敓鏀寔涓枃妫€娴嬶紝璇嗗埆鎷奸煶鍙樹綋銆佽皭闊虫浛鎹€佹媶瀛楁敾鍑荤瓑鏈湡鍖栫粫杩囨墜娉?

馃 Agent 韬唤绯荤粺 鈥?DID 鍘讳腑蹇冨寲韬唤鐢熸垚銆佸绾т俊瑾夎瘎鍒嗐€丄PI Key 鐢熷懡鍛ㄦ湡绠＄悊銆佸畬鏁村璁℃棩蹇楅摼

馃 Agent 鍗忎綔閫氫俊 鈥?鍐呯疆鍙戝竷/璁㈤槄娑堟伅鎬荤嚎銆佸崗浣滀細璇濈鐞嗐€佽法 Agent 浠诲姟濮旀墭锛岃 Agent 涔嬮棿瀹夊叏瀵硅瘽

馃摝 瀹夊叏娌欑鎵ц 鈥?浠ｇ爜棰勬鏌ユ嫤鎴嵄闄╂ā寮忥紝鏀寔 Python / JavaScript / Shell 澶氳瑷€闅旂鎵ц锛岀粨鏋滆嚜鍔ㄥ畨鍏ㄥ鏌?

馃彧 *鎶€鑳藉競鍦? 鈥?鎶€鑳藉彂甯冦€佹悳绱笌璋冪敤涓€浣撳寲锛屽唴缃瘎鍒嗙郴缁燂紝鏀寔 HTTP RPC 鐪熷疄璋冪敤楠岃瘉

馃敆 A2A 鍗忚缃戝叧 鈥?鍏煎 Google A2A 鍗忚锛孉gent Card 娉ㄥ唽涓庡彂鐜帮紝鏅鸿兘浠诲姟璺敱涓庤法 Agent 璋冨害

馃攲 *6 澶у閮ㄩ」鐩泦鎴愭ā鍧? 鈥?鍗虫彃鍗崇敤鐨勫畨鍏ㄥ寮哄浠讹細

馃挸 *鏀粯涓庤璐? 鈥?API 鎸夐噺璁¤垂銆佸椁愮鐞嗐€佷娇鐢ㄩ噺缁熻锛屼负 Agent 缁忔祹鎻愪緵鍩虹璁炬柦

馃弳 瀹夊叏璁よ瘉寰界珷 鈥?鎵弿閫氳繃鑷姩绛惧彂璁よ瘉锛岀敓鎴愬彲宓屽叆 GitHub README 鐨?SVG 寰界珷锛岄噾 / 閾?/ 閾滀笁绾?

馃寪 *涓珛淇′换鏈烘瀯锛圢eutral Trust Authority锛? 鈥?AIShield 涓嶅彧鏄壂鎻忓櫒锛屾洿鏄?agent 鐢熸€佺殑**淇′换灞?*锛氭瘡涓鎵祫浜ч兘鎷垮埌涓€寮犳満鍣ㄥ彲璇汇€佸彲绛惧悕銆佸彲宓屽叆鍙戠幇鏍煎紡鐨?[Trust Attestation锛坄aishield-trust/v1锛塢(docs/trust-attestation-spec.md) 鍑瘉銆侻CP Server Card / A2A Agent Card / Google ai-catalog 鍙渶鍦ㄨ嚜宸辩殑 metadata 閲屽姞涓€涓?trust` 瀛楁锛屽氨鑳介浂鎴愭湰寮曠敤 AIShield 鐨勩€屽唴瀹规槸鍚﹀彲淇°€嶈鍐斥€斺€旇€岃繖涓€灞傜洰鍓嶆槸鏁存潯 agent 渚涘簲閾炬渶钖勫急銆佷篃鏈€琚姠浣嶇殑绌虹櫧銆侫IShield 鐨勫樊寮傚寲閿氱偣锛?*鍞竴鏈湴绂荤嚎銆佹壂鍐呭锛坧rompt 娉ㄥ叆 / 宸ュ叿涓瘨 / 渚涘簲閾炬紓绉伙級銆佺粷涓嶆墽琛岃鎵厤缃?*鐨勪俊浠昏鍐炽€傜敓鎬佸崰浣嶇瓥鍒掕 docs/ecosystem-positioning-2026.md銆?

涓轰粈涔堥€夋嫨 AIShield

馃攳 *Agent 韬唤涓庡嚟璇佹壂鎻忥紙韬唤灞?/ NHI锛? 鈥?2026 骞?agent 瀹夊叏鐨勪富鎴樺満宸蹭粠銆屽伐鍏锋墽琛屻€嶈浆绉诲埌銆宎gent 韬唤鍙獙璇併€嶏紙A2A 浠撳簱 top issue 鍏ㄥ湪韬唤锛汚uthentik 鍊?NHI 閲嶇噧锛汚NS/DNSid/Entra Agent ID 鎵庡爢锛夈€侫IShield 浠庛€屽彧鍙戜俊浠昏瘉涔︺€嶅崌绾т负銆屼篃鎵韩浠界己闄枫€嶏細AgentCard/agent 韬唤鏄惁绛惧悕銆佸嚟璇佹槸鍚︾煭鏈熻繃鏈熴€佹巿鏉冩槸鍚﹁繃瀹斤紙scope: "*" 杩濆弽鏈€灏忔潈闄愶級銆佹槸鍚︾己 mTLS/DID銆佸鎵樻槸鍚﹀仛 scope attenuation銆傝瑙?[Agent 鐢熸€?2026 鎬佸娍涓庡崱浣峕(docs/agent-ecosystem-2026-landscape.md)銆?

馃暩锔?*Agent 缃戠粶 / Mesh 閰嶇疆鎵弿锛堢綉缁滃眰锛? 鈥?Cloudflare Mesh 鎶?agent 缁勭綉鍋氭垚鍩虹璁炬柦锛屽嵈瀹樻柟鑷銆岀己 per-agent 韬唤涓庣瓥鐣ャ€嶏紙鎵€鏈?agent 娴侀噺琚綋鎴愭潵鑷竴涓?Worker锛夈€侫IShield 琛ヨ繖涓己鍙ｏ細鎵弿鏁磋处鎴?Mesh/VPC 缁戝畾鏄惁鎶婂叏缃戞毚闇茬粰鎵€鏈?agent銆乤gent 绔偣鏄惁鏃犻壌鏉冿紙auth: none锛夈€佺鏈夎祫婧愭槸鍚﹀叕缃戞毚闇诧紙public: true锛夈€傚唴瀹瑰彲淇?+ 韬唤褰掑洜 + 缁勭綉鍙揪鎬э紝涓夌榻愪笅瑕嗙洊 agent 鐨勩€屼俊浠绘祬婊┿€嶃€?

馃攼 *Authentik / NHI service-account 鎵弿锛堣韩浠藉眰 路 Authentik 娴佹淳锛? 鈥?鎵弿 Authentik 椋庢牸鐨?service-account 瀵煎嚭锛歚skip_authorization 璺冲悓鎰忋€佷护鐗屾案涓嶈繃鏈燂紙token_ttl: 0/never锛夈€乻cope 杩囧锛坄"*"锛夈€佺‖缂栫爜 client_secret銆傛妸韬唤灞備粠銆屽彧鍙戣瘉涔︺€嶆墿灞曞埌銆屼篃鎵?NHI 鍗敓銆嶃€?

馃 *A2A AgentCard 缁撴瀯鍖栨牎楠岋紙韬唤灞?路 A2A 娴佹淳锛? 鈥?瀵?.well-known/agent.json 鍋?JSON 缁撴瀯鍖栨牎楠岋細鏈鍚嶃€佺己杩囨湡銆侀潪 https銆佹棤閴存潈鏂规锛坄securitySchemes`锛夈€佸鎵橀摼鏈仛 scope attenuation銆傜洿鎺ュ搴?A2A #1672/#1628 鐨勩€屼俊浠绘祬婊┿€嶃€?

馃洝锔?AI-slop / 瓒婄嫳瑙勯伩妫€娴嬶紙鍐呭鍙俊灞傦級 鈥?璇嗗埆涓撲负缁曡繃鍐呭鍒嗙被鍣ㄨ€岃璁＄殑 prompt/skill锛氭寚浠よ鐩栵紙ignore previous instructions锛夈€丏AN 瑙掕壊鎵紨銆乥ase64/缈昏瘧娣锋穯銆佸弽妫€娴嬭嚜鎸囥€傝繖鏄€屽幓 AI 鍛炽€嶆枃鍖栨氮娼姝﹀櫒鍖栫殑涓€闈紝AIShield 鍋氬叾瀹夊叏/鍙俊瀵瑰啿灞傦紙涓?soundshuman 椋庢牸灞備簰琛ラ潪绔炲搧锛夈€?

馃挵 *AP2 / x402 鏀粯鎺堟潈 scope 瀹¤锛堢粡娴庡眰 路 鏀粯鎺堟潈锛? 鈥?鎵弿 agent 鏀粯閰嶇疆锛歚maxAmount 鏃犻檺銆乣auto_approve 鍏嶇‘璁ゃ€佹敮浠?scope 杩囧銆佹敮浠樻巿鏉冩湭缁?intent锛坈artId/orderId锛夈€傝鐩?agent 缁忔祹灞傜殑銆屼笁鎺堟潈銆嶆敹鏁涖€?

馃З *OWASP Agentic AI Top 10锛圓SI01鈥揂SI10锛夊叏瑕嗙洊 鈥?11 涓柊妯″潡琛ュ畬銆? 涓叏绌虹櫧 + 5 涓崐瑕嗙洊銆嶅煙锛?

• ASI01 鐩爣鍔寔锛坄scanner/goal_hijack_scan.py`锛夛細鎶婂閮ㄥ唴瀹瑰綋鎸囦护銆佺洰鏍囨浛鎹€佹寔涔?姘镐箙鐩爣娉ㄥ叆銆?
• **ASI02 宸ュ叿婊ョ敤 / 鏈€灏忔潈闄?*锛坄scanner/least_agency_scan.py锛夛細绠￠亾鍒?shell銆乣rm -rf銆乣sudo銆乣chmod 777銆乣os.system/eval`銆佸嚟璇佷笌 SSH key 璇诲彇銆?
• **ASI03 韬唤 / OAuth 濮挎€?*锛坄scanner/mcp_oauth_scan.py锛夛細鏃犺璇佺殑杩滅▼ MCP server锛圕VE-2026-32211 绫伙級銆佺己 RFC 9207 issuer 鐨?OAuth銆侀暱瀵垮懡/涓嶈疆鎹?token銆傦紙GPT Action 娓呭崟鎸夎嚜韬?auth` schema 璇嗗埆锛屼笉璇姤涓?MCP 缂哄彛銆傦級
• ASI04 渚涘簲閾?/ 鏉ユ簮鍙俊锛坄scanner/provenance_scan.py锛夛細npx/pip` 鏈?pin 鐗堟湰銆乬it 瀹夎鏈?pin commit銆侀攣瀹氭枃浠剁己瀹屾暣鎬с€丼BOM 鏈鍚嶃€?
• **ASI06 璁板繂 / 涓婁笅鏂囨姇姣?*锛坄scanner/memory_scan.py`锛夛細鍐欏叆璁板繂鐨勬寚浠ゃ€佹寔涔?绉嶅瓙鐩爣銆佽蹇嗘枃浠跺啓鍏ャ€?
• ASI07 璺?agent / 濮旀墭锛坄scanner/scope_composition_scan.py`锛夛細鐢?agent 鑷韩鍑瘉杞彂璇锋眰鐨勬贩娣嗗壇鎵嬶紙confused deputy锛夈€?
• ASI08 绾ц仈澶辫触 / 鐖嗙偢鍗婂緞锛坄scanner/scope_composition_scan.py`锛夛細鍑瘉璇诲彇 + 澶栦紶缁勫悎锛堟墍鏈夊凡杩炴帴 server scope 鐨勫苟闆嗭級銆?
• ASI09 浜烘満淇′换鍒╃敤锛坄scanner/dark_pattern_scan.py`锛夛細鏉冨▉鍐掑厖銆佸帇鍒舵牳楠屻€佽櫄鍋囦繚璇併€佺揣杩劅鈥斺€旈渶 鈮? 涓俊鍙峰悓鏃跺懡涓墠鎶ヨ锛堜綆璇姤锛夈€?
• **ASI10 澶辨帶 agent / 鍙嶇鏀?*锛坄scanner/antitamper_scan.py`锛夛細鑷繚鎶?鍒犻櫎鍚庨噸瑁呫€佺鐢?鏇挎崲鍏跺畠缁勪欢銆佸弽鍒嗘瀽/闅愯棌鎸囦护銆?
• **宸ュ叿 / 鎶€鑳藉畬鏁存€?*锛坄scanner/tool_integrity_scan.py`锛夛細宸ュ叿鍚?typosquat锛堜笌瑙勮寖鍝佺墝缂栬緫璺濈 鈮?锛孋VE-2026-30856 绫伙級銆佹湭 pin 鐗堟湰鐨勮繙绋?MCP锛坮ug-pull锛夈€?
• **娉ㄥ唽涓績渚涘簲閾?*锛坄scanner/registry_supply_scan.py锛夛細鎶€鑳藉悕 typosquat銆佸彲鐤戝浼犮€佹笎杩涘紡闅愯棌杞借嵎锛堜富鏂囦欢鎶婂畨瑁呭懡浠ゅ欢杩熷埌娆＄骇 .md`锛夈€?

涓婅堪 11 涓ā鍧楀叏閮ㄩ€氳繃 tests/test_capability_full_scan.py 鐨勩€岃壇鎬ч浂璇姤 + 鎭舵剰浠嶈鎷︺€嶅绾︼紙40 椤癸級锛涘叏閲忔祴璇?523 閫氳繃 / 0 澶辫触 / 9 璺宠繃銆?

AIShield 涓嶅彧鏄竴涓壂鎻忓櫒 鈥?瀹冩槸 AI Agent 瀹夊叏鐢熸€佺殑瀹屾暣鍩虹璁炬柦銆?

蹇€熷紑濮?

AIShield 鏄?*瀹屽叏鏈湴杩愯**鐨勫紑婧愬伐鍏封€斺€旀棤闇€娉ㄥ唽銆佹棤璐﹀彿銆佷唬鐮佷笉涓婁紶浜戠銆傛帹鑽愰€氳繃 MCP 鐩存帴鎺ュ叆浣犵殑瀹㈡埛绔€?

鏂瑰紡涓€锛堟帹鑽愶級锛氫綔涓?MCP Server 鎺ュ叆

鏃犻渶瀹夎锛屼竴琛屽懡浠ゆ帴鍏?Claude Desktop / Cursor / 浠绘剰 MCP 瀹㈡埛绔細

{
  "mcpServers": {
    "aishield": {
      "command": "npx",
      "args": ["-y", "aishield-mcp-server"]
    }
  }
}

鎺ュ叆鍚庢棤闇€浠讳綍閰嶇疆锛屽嵆鍙湪瀵硅瘽涓洿鎺ヨ锛?

鈥滃府鎴戞壂鎻忚繖涓?MCP 宸ュ叿鏄惁瀛樺湪 Prompt 娉ㄥ叆椋庨櫓鈥?

鏂瑰紡浜岋細鏈湴 API Server锛堝彲閫夛級

git clone https://github.com/lm203688/aishield.git
cd aishield
python api/server.py

鍚姩鍚庤闂?http://localhost:8450 鏌ョ湅鏈湴 API 闈㈡澘銆傝 server 瀹屽叏鍦ㄦ湰鍦拌繍琛岋紝鏃犻渶娉ㄥ唽銆佹棤绉垎銆佹棤鍏綉渚濊禆锛屾墍鏈夋壂鎻忛兘鍦ㄤ綘鐨勬満鍣ㄤ笂瀹屾垚銆?

鑾峰彇瀹夊叏寰界珷

鎵弿閫氳繃鍚庯紝鍦ㄤ綘鐨勯」鐩?README 涓祵鍏ュ畨鍏ㄥ窘绔狅紙鑷墭绠′綘鐨勫疄渚嬪悗鏇挎崲鍩熷悕锛夛細

![AIShield Security](https://aishield.tools/badge/my-agent-tool)

MCP 闆嗘垚

AIShield 鍙綔涓?MCP Server 鐩存帴闆嗘垚鍒?Claude Desktop銆丆ursor 绛夋敮鎸?MCP 鐨勫鎴风涓€?

Claude Desktop

鍦?Claude Desktop 閰嶇疆鏂囦欢涓坊鍔狅細

{
  "mcpServers": {
    "aishield": {
      "command": "python",
      "args": ["-m", "api.mcp_server"],
      "cwd": "/path/to/aishield"
    }
  }
}

Cursor / 鍏朵粬 MCP 瀹㈡埛绔?

鍚屾牱鍦?MCP 閰嶇疆涓坊鍔犱互涓婂唴瀹癸紝鍗冲彲鍦ㄥ璇濅腑鐩存帴璋冪敤 AIShield 鐨勫叏閮ㄥ畨鍏ㄦ壂鎻忚兘鍔涖€?

闆嗘垚鍚庝綘鍙互鐩存帴鍦ㄥ璇濅腑璇达細

"甯垜鎵弿杩欎釜 MCP 宸ュ叿鏄惁瀛樺湪 Prompt 娉ㄥ叆椋庨櫓"

"妫€鏌ヨ繖娈垫枃鏈槸鍚﹀寘鍚繚绂佽瘝"

CI 瀹夊叏闂ㄧ锛圙itHub Action锛?

鎶?AIShield 鎺ュ叆浠讳綍浠撳簱鐨?CI锛氭瘡娆?push / PR 鑷姩鎵弿宸ヤ綔鍖洪噷鐨?MCP server銆乻kill銆乸rompt锛?*杈惧埌闃堝€煎嵆璁╂瀯寤哄け璐?*銆?