v0.9.1

Installation

Node.js:

npm install -g @rafter-security/cli@0.9.1

Python:

pip install rafter-cli==0.9.1

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• feat: add mailchimp api key scanning pattern and tests by @Minh-Nguyen-2k7 in #190
• fix(audit): redact secret-named env-assignment prefixes before logging (ob-y5ep) by @Rome-1 in #191
• test(scan): Mailchimp negative-case tests + whitespace tidy (follow-up to #190) by @Rome-1 in #194
• docs(skills): scope rafter security skills by surface, not task label by @Rome-1 in #195
• fix(agent): scope injected instruction block by surface, not task label by @Rome-1 in #196
• fix(agent): correct Codex hooks dry-run plan string (PostToolUse parity with #196) by @Rome-1 in #197
• fix(deps): pin cryptography >=46.0.7 (GHSA-537c-gmf6-5ccf) + resync stale poetry.lock by @Rome-1 in #198
• fix(skills): restore rafter SKILL.md line budget broken by #195 by @Rome-1 in #199
• fix(hook): argument-aware command matching so quoted prose isn't run as a command by @Rome-1 in #200
• feat(scan): add SendGrid API key secret pattern (#24) by @perez-eduardo in #201
• Add npm script by @Minh-Nguyen-2k7 in #202
• chore: post-merge tidy for #201 + #202 by @Rome-1 in #203
• feat(scan): opt-in approval gate for paid Plus scans (sable-9ddf) by @Rome-1 in #204
• chore(release): bump to v0.9.1 by @Rome-1 in #206

New Contributors

• @perez-eduardo made their first contribution in #201

Full Changelog: v0.9.0...v0.9.1