Skip to content

v0.18.0 — MCPSecurityGuard: obfuscation preprocessing + 20 new patterns (mirror of TS v4.29.0)

Choose a tag to compare

View all tags
@nkratk nkratk released this 03 Jul 22:28
· 24 commits to main since this release
v0.18.0
5e82c68

What's new

MCPSecurityGuard — mirror of TS v4.29.0

_preprocess_content(): ZWSP strip, URL/hex/base64 decode, reverse, Cyrillic homoglyph normalisation.

New patterns: sd_retry_forever, embedded_abs_path, cursor_mcp_inject, dangerous_scheme, mcp_endpoint_override; extended git_injection, env_injection; 8 new _LINE_JUMPING_PATTERNS (authority_directive, exfil_routing, schema_mutation_str, mcp_tool_shadow, mcp_impersonation, rug_pull_descriptor, html_comment_injection, homoglyph_cyrillic).

Corpus result: 84/440 (19.09%) → 430/440 (97.73%). 55 fully-blind threat groups → 0.

885 tests pass. All verify gates green.

Install

pip install llm-trust-guard==0.18.0
Assets 6
Loading