Skip to content

v0.5.1 — zero-config agent scanner

Choose a tag to compare

View all tags
@CorwinFoundation CorwinFoundation released this 29 Aug 11:49
· 43 commits to main since this release
v0.5.1
6a3ae57

What changed

  • Zero-argument discovery for Claude, Cursor, VS Code, Windsurf, and Gemini agent/MCP configs
  • Live runtime intake through --stdin and MCP scan_my_runtime
  • Compact finding output with immediate Stop instructions and explicit [derived] evidence
  • OpenAPI and OpenTelemetry OTLP JSON adapters
  • Semantic schema checks BB007 (unconstrained command/expression/SQL) and BB008 (unvalidated destinations)
  • Non-enforcing --suggest-policy actions and review-required patch templates
  • SARIF 2.1.0 output, stronger multi-input receipts, and three non-BackBond wild fixtures

Static only: no hosted upload, second analyzer, automatic mutation, or active probe.

Pin it: npx @backbond/agent-scan@0.5.1 scan

Assets 2
Loading