Skip to content

Cybermes v1.3.0 — Automated PDF/HTML Reporting, Token Economy & Universal AI Standards

Choose a tag to compare

View all tags
@Zyrexnn Zyrexnn released this 21 Aug 14:30
· 97 commits to main since this release
v1.3.0
85b80ca

🛡️ Cybermes v1.3.0 — Automated PDF/HTML Reporting, Token Economy & Universal AI Standards

Welcome to Cybermes v1.3.0, bringing a major leap in automated vulnerability reporting, context window efficiency, seamless multi-user permission handling, and standardized AI agent operations.

🌟 Key Highlights & New Capabilities:

1. 📑 Automated PDF & Interactive HTML Report Generator

  • Playwright Headless Chromium Engine: Introduced tools/generate_pdf.py converting markdown findings and structured metadata into executive-grade PDF and HTML reports.
  • End-to-End Automation: Integrated directly into tools/aggregate_reports.py to automatically output:
    • reports/<TARGET_SLUG>/SUMMARY.md (Markdown summary)
    • reports/<TARGET_SLUG>/metadata.json (Structured metrics & CWE/CVSS stats)
    • reports/<TARGET_SLUG>/report.html (Interactive standalone HTML dashboard)
    • reports/<TARGET_SLUG>/REPORT.pdf (Print-ready, pixel-perfect executive PDF)
  • Executive Styling: Includes vulnerability breakdown risk bars, color-coded severity badges, syntax-highlighted HTTP request/response boxes, and print-ready page-break isolation (page-break-inside: avoid).

2. 🧠 Token Economy & Context Optimization (70–85% Token Savings)

  • Smart CLI Output Filter (tools/smart_pipe.py): Captures 100% of raw verbose tool logs (from katana, ffuf, gau, httpx, subfinder) to recon/<TARGET_SLUG>/<tool>_raw.txt while streaming only top high-signal entries to the AI context.
  • Streamlined Autoloading: Optimized .hermes/config.yaml to load the master orchestrator (autonomous-godmode-hunter) by default, preventing initial context bloat.
  • MCP Fetch Server Integration: Added mcp-server-fetch to convert external web endpoints directly into clean markdown, stripping raw HTML/CSS/JS noise.

3. 🛡️ Live Docker Permission Daemon & POSIX ACLs

  • Background Permission Daemon: Enhanced entrypoint.sh with a live background loop ensuring all artifacts written by Docker containers retain open rw-rw-rw- permissions.
  • POSIX Default ACLs: Upgraded setup.sh with automated setfacl configuration across workspace directories, eliminating host user permission errors permanently.
  • CLI Wrappers: Enforced umask 0002 across host CLI runners (hermes, bin/hermes, env.sh).

4. 📋 Universal AI Developer Standards

  • Master Directives (AGENTS.md): Established universal operating directives for all AI assistants (Hermes, Cursor, Windsurf, Copilot, Antigravity) covering core persona, non-destructive validation boundaries, tool syntax, and error recovery.
  • Coding Standards (.cursorrules): Standardized Python PoC script structure (requests, explicit timeouts, error handling) and clean snake_case file naming conventions.

5. 🔐 Zero-Leak Credential Architecture

  • Sanitized Template Config: Created .hermes/config.yaml.example for safe public tracking.
  • Dynamic Config Injection: setup.sh automatically reads local .env and configures active model endpoints, base URLs, and API keys without risking accidental secret commits.

6. 🎯 New Specialized Offensive Skills

  • custom-ai-router-assessment: Black-box methodology for Next.js App Router AI gateways.
  • blackbox-web-audit: Zero-credential attack surface mapping and non-destructive gate probing.
  • engagement-deliverables-and-validation: Strict workspace deliverable conventions and negative matrix validation.

📦 Installation & Upgrade:

# Clone the latest release
git clone https://github.com/Zyrexnn/Cybermes.git
cd Cybermes

# Run setup (automatically configures venv, MCPs, ACLs, and tools)
./setup.sh

# Activate environment
source env.sh

Full Changelog: v1.2.0...v1.3.0

Assets 2
Loading