Skip to content

v0.6.0 — MCP security suite, detection benchmark, ReDoS hardening

Choose a tag to compare

View all tags
@jnMetaCode jnMetaCode released this 05 Jun 09:58
v0.6.0
d682cda

Highlights

  • MCP tool-poisoning scanner + rug-pull detection + /scan-mcp (stdio + remote HTTP)
  • Custom rules (customRules) for extending detection without forking
  • Detection benchmark (npm run bench) — 100% precision/recall on labeled corpus, CI-gated
  • ReDoS audit — fixed 2 catastrophic-backtracking self-DoS vulns
  • Default injectionThreshold 60→40 (benchmark-calibrated; revertible via config)
  • PII false-positive fixes (carrier-validated mobile, UnionPay-only bank card)

See CHANGELOG. Published to npm: shellward@0.6.0.

Note: npm provenance via CI activates once the repo NPM_TOKEN secret is set; 0.6.0 was published from the maintainer's authenticated local environment.

Assets 2
Loading