[v4.5.2] - 2026-08-17
Added
- Research: Add SkillJack project (536340d, 78ae6df)
- Data: Add AIG rules [2026-07-31] (3d9af43)
- Data: Add GET-only fingerprints for Qdrant, Chroma, and Weaviate (d54543c)
Refactored
- Refactor(skills/aig-agent-redteam): v5.0.0 mutation engine refactor + merge workflow-attack into mutation-attack (e989411)
Fixed
- Fix(mcp-scan): Prevent RCE via prompt injection in dynamic scan mode (9ebcff1)
- Fix(skill-scan): Prevent charset content smuggling (1649575)
- Fix(skill-scan): Stop hiding compiled bytecode from audit surface (8d52665)
- Fix: Correct streamable_http_client import name in mcp_tools.py (384c1c0)
- Fix(llm): Remove hardcoded temperature parameters (f18ae64)
- Fix(data): Correct CVE-2026-61428 version rule to version < "4.6.78" (16ed396)
Changed
- Docs: Sync component tables and agent-scan detection skills (788ae09)
- Docs(skill-scan): Add text_decoder.py to project structure, update pre_scan description (1736515)
- Docs: Trim What's New to latest 5 entries across all 9 README languages (cbe58e6)
- Docs: Reorder Xiangfan after Fyoung and add Elwood to Core Members across 9 README languages (5c29b24)
- Docs: Fix v4.5.0 release date from 2026-07-24 to 2026-07-27 across 9 README languages (a41187e)
- Docs: Rename PromptSecurity to Jailbreak Evaluation in v4.5.1 What's New; remove bug fix entries (240bc3a)
- Docs: Add v4.5.1 What's New entry across 9 README languages; update agent-scan skill list (ca2c2f2)
- Chore(skills): Remove outdated v5.0.0 changelog from aig-agent-redteam SKILL.md (1c14dcd)
Contributors
Special thanks to @Elwood Ying, @xiangfanwu, @zhuque, @hiddingtrojans, @NY1024, @kexinoh, @feiyang666, @AIG-Bot, @aig-doc-bot