Tophant Technology open-sources AI Agent security evaluation tool AI Beat
Start here
Douxiang Technology open-sources the AI Agent security evaluation framework AI Beat, comprising two products, PromptBeat and AgentBeat. PromptBeat performs black-box red team evaluations against targets such as models and RAG applications; AgentBeat collects execution traces such as an Agent's tool calls, commands and file changes. An author who checked the repository introduced it, saying AgentBeat divides evidence into three levels: L1 looks only at the final response, L2 is evidence self-reported by the tested party, and L3 is environment state verified by an independent State Controller; marking requires meeting conditions such as the L3 level and complete evidence.
Generated by AI from reports · Updated 20 days ago
Related research
Cited in the reports
Progress timeline
- WeChat · Goumang Security LabAI Agent safety evaluation: AI Beat three-layer evidence L1-L3 + red team jailbreak hands-on test
Tophant Technology's open-source AI Agent safety evaluation framework AI Beat includes two products, PromptBeat and AgentBeat; the former performs black-box red team evaluations on targets such as models and RAG applications, while the latter collects execution traces such as an Agent's tool calls, commands and file changes. After checking the repository, the author explains that AgentBeat divides evidence into three layers: L1 looks only at the final response, L2 is evidence self-reported by the tested party, and L3 is environment state verified by an independent State Controller; only when conditions such as the L3 tier and complete evidence are met can it be marked as official_benchmark. The repository includes two attack cases, Foot-in-the-Door (arXiv:2410.16950) and RAG poisoning (PoisonedRAG, arXiv:2402.07867); the latter judges attack success by dual gates of recall matching and answer adoption. The author notes that the repository root has no LICENSE file, so commercial use or redistribution requires confirming authorization independently.
Related discussion
- Older than 72 hours · Not included in the 72-hour figures
- WeChatDoonsec"AI Agent security evaluation: AI Beat three-layer evidence L1-L3 + red-team jailbreak testing"(opens the original post in a new tab)
Links only. This site does not republish the posts.