v1.30.0: Skill Scanning + Snyk Parity
What's New
- 🕵️ Skill scanning: detect credential theft, exfiltration, remote execution, prompt injection in agent skill files
- 🌐 13+ agent auto-discovery: Cursor, Windsurf, VS Code, OpenCode, Codex, Gemini CLI, and more
- 🔤 Unicode obfuscation detection: zero-width characters, bidi overrides, Unicode tag sequences
- 🧬 YARA-inspired compound rules: credential-exfiltration, supply-chain-hijack, hidden-execution, social-engineering
- 📊 572 tests, 59 test files
New Contributors
- @albatrossflyon-coder made their first contribution in #201
Full Changelog: v1.29.2...v1.30.0