Matches detection paradigms to four stratified attack-surface layers of AI agents — infrastructure, protocol/tool, agent behavior, and model — and presents AI-Infra-Guard: an open-source red-teaming framework with rule-based infra scanning, LLM-driven audits of MCP servers and skill packages, and a jailbreak/attack-operator harness.