Skip to content

HandoffProbe v0.1.1

Marketplace
Marketplace

Choose a tag to compare

View all tags
@Heaviside479 Heaviside479 released this 08 Sep 20:43
· 82 commits to main since this release
v0.1.1
8e58c2f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

HandoffProbe v0.1.1

Security maintenance release for the supported HandoffProbe 0.1.x line.

Security maintenance

  • updates the transitive qs dependency from 6.15.3 to patched 6.16.0
  • preserves the existing HandoffProbe behavior and public contracts
  • no new attack IDs, adapters, schemas or CLI features
  • no Phase 8 or Phase 9 implementation work included

Stable scope

  • A2A 1.0 → MCP 2026-07-28 baseline
  • exactly 22 stable attacks
  • bundled secure and intentionally vulnerable fixtures
  • terminal, JSON and Markdown reporters
  • deterministic exit codes 0, 1, 2 and 3
  • report schema version 1
  • reusable GitHub Action
  • local-first execution

Install and run

npx --yes --package=handoffprobe@0.1.1 handoffprobe --version
npx --yes --package=handoffprobe@0.1.1 handoffprobe test

Expected secure result: 22 PASS / 0 FAIL / 0 ERROR.

Composition-security demonstration:

npx --yes --package=handoffprobe@0.1.1 handoffprobe test --target vulnerable --test HP-AUTH-001

The vulnerable demonstration reports the HIGH finding and exits with security code 1.

Release integrity

  • Release commit: 8e58c2f6553c735bec3857945ca5afde8c8a3177
  • npm package: handoffprobe@0.1.1
  • npm shasum: fa26c211b93edeada7503ded85cc4a2286b0845a
  • SHA-256: 06b18a038f471189c0a03c36f394672edf4849b83b0952f2233dbd6465f73a31
  • npm integrity: sha512-l2k8re073RqSXYUOqTVMirGaZq2f65F8B9WDh2HQKXQ89NofIG6dsmrC9+bopSNZ/w6ClLC0pjFJP4j4r2eg8g==
  • package files: 295

The GitHub release asset is the exact tarball that was tested locally and published to npm.

Safety boundary

Use HandoffProbe only with bundled synthetic fixtures, systems you own, controlled test environments, or targets for which you have explicit authorization.

Assets 3
Loading