Skip to content

skim v0.5.1 — Enterprise Hardening + Honest Messaging

Latest
Latest

Choose a tag to compare

View all tags
@bb1nfosec bb1nfosec released this 31 May 21:09
v0.5.1
611a797

Enterprise hardening

  • Login rate limiting — per-IP sliding window, brute-force protection (SKIM_LOGIN_MAX_ATTEMPTS / SKIM_LOGIN_WINDOW_SEC)
  • last_login tracking; login audit records origin IP
  • Data retention — skim admin purge --older-than N and POST /api/v1/admin/purge for compliance

Honest Claude Code messaging

Confirmed via Claude Code docs: a Pro/Max subscription (OAuth) ignores ANTHROPIC_BASE_URL and routes straight to Anthropic — the proxy cannot intercept subscription traffic. README, docs, the proxy banner, and the demo now state plainly that Claude Code requires API-key auth to use the proxy. Cursor / SDK / OpenAI-compatible tools are unaffected.

Demo

Rewrote the landing page with the subscription caveat surfaced inline. No fake trial/SCIM claims.

pip install -U skim-llm

Assets 2
Loading