v0.18.2
What's Changed
Bug Fixes
- Fix rule loading path —
scan.pynow correctly resolvesagent_audit/rules/builtin/(3 parents instead of 2), so PyPI installs load all rules properly - Sync all 5 YAML rule files into the package — adds
langchain_security_v030.yamlandmcp_security_v030.yaml, updatesasi_coverage_v030.yaml - Fix unused imports flagged by ruff (F401)
- Fix mypy type errors in skill scanner integration
- Use dynamic version in e2e tests instead of hardcoded string
New Features
- SKILL.md security scanners (AGENT-058~064) — detects obfuscated shell commands, daemon persistence, sandbox overrides, and supply chain risks in Claude Code skill files
- New rules: AGENT-052 (sensitive data logging), AGENT-053 (agent self-modification)
Full Changelog
Install
```bash
pip install agent-audit==0.18.2
```