- Smart scanner selection: Only shows/installs scanners your project needs
- Path traversal detection (MCP124): Detects file read/write with unvalidated paths
- Test file filtering: Filters B101 (assert) in test directories
- CVE-2025-6514 detection: mcp-remote OAuth SSRF → RCE
- Data leak detection (LLM02-DL): Slack/Discord/webhook exfiltration
- RAG hidden text (AIR013-015): Hidden text poisoning patterns
- Fixed /PATH-TO/ false positive in config scanner

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>