Skip to content

v0.2.0

Choose a tag to compare

View all tags
@munzzyy munzzyy released this 15 Jul 23:40
· 44 commits to main since this release
v0.2.0
16c6129
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First PyPI release that makes pipx install skillxray real.

  • Added a terminal demo, a runnable (fake, inert) malicious example skill in examples/, MCP-bundle positioning, and a "where it fits" section against Semgrep, TruffleHog, and Lakera.
  • Closed eval/exec, a ReDoS, terminal-escape, oversized-file, and secret/injection gaps.
  • Added a rules reference kept honest by a drift test.
  • Added the noslop code-mode gate to CI.
  • Hardened the workflows: pinned actions to commit SHAs, stopped persisting checkout credentials.
Assets 2
Loading