Highlights
New MCP tools that unlock Nova's agentic research and investigation flows, plus a dryRun correctness fix in the automation loop.
New Features
athf_research_newMCP tool — deep research wrapper aroundHuntResearcherAgent+ResearchManager(Tavily + 5-skill methodology). Returns a structured JSON report consumable by Nova's intel triage. (4fc68af)athf_investigate_newMCP tool — investigation creation entrypoint for Nova chat integration. (5c9b240)
Fixes
automation/loop.ts— dryRun no longer mutates state. Previouslystate.issues/state.prswrites andsaveState()calls fired regardless ofdryRun; now every state mutation is gated on!dryRun. (8079d91)attack_toolsmodule restored — server.py referenced a missing module. (418ebb4)
Docs
- LLM provider configuration guide — getting-started.md now documents Anthropic, OpenAI, Bedrock, Ollama, and LiteLLM auto-detection plus the explicit
ATHF_LLM_PROVIDER/ATHF_LLM_MODELoverride path. (5a19cd0)
Tests
- Removed low-signal tests, strengthened provider contract assertions. (3499562)
Install
pip install agentic-threat-hunting-framework==0.13.0