Skip to content

v1.2.0

Choose a tag to compare

View all tags
@gmpassos gmpassos released this 29 Jun 06:59
· 4 commits to master since this release
v1.2.0
459dd39
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Much wider command coverage, per-subcommand/argument refinement, and hardened risk classification so consumers (AI agents / remote executors) reason correctly about far more commands — and genuinely dangerous tools no longer slip through as "unknown → safe".

Added

  • New plugins: DiskKnowledge, VcsKnowledge, ModernCliKnowledge, IacKnowledge (+ new infrastructure category). ~370 new commands across network inspection/transfer/cloud (nmap, ip, ss, tcpdump, rclone, tailscale, doctl/flyctl/vercel/gsutil/…), build/test tooling (cmake, bazel, pytest, vite, tsc…), package/version managers (bun, uv, poetry, nix, rustup, asdf…), containers/orchestration (buildah, skopeo, minikube, kubectx, k9s…), databases (pgcli, duckdb, mongodump, dropdb/dropuser→highRisk…), editors (code, helix, man…), crypto/secrets (age, sops, cosign, pass, certbot…), and process/hardware inspection (lsof, vmstat, lscpu, dmesg…).
  • Security-critical disk/system tools that previously classified as safe: disk-format/wipe (mkfs/mkfs.*/wipefs/blkdiscard → critical), partitioners (fdisk/parted → highRisk), diskutil erase verbs, secure-delete (srm/wipe), kernel-module / power / privileged-config tools, and dd of=/dev/... → critical.

Changed / hardened

  • Per-subcommand refinement: kubectl/oc (read vs write vs delete[highRisk] vs exec), terraform/tofu/terragrunt/pulumi (plan → apply[medium] → destroy/-auto-approve[high]), systemctl (status read-only; reboot/poweroff highRisk), vault, npm/yarn/bun run/exec, docker rm/prune, aws/gcloud/az delete-tokens, ansible-playbook --become.
  • find / -delete → critical (through wrappers); recursive chmod/chown on a system root → highRisk; kill/pkill/killall catastrophic forms (PID 1 / -1 / pkill . / -u root) → highRisk.
  • ShellExecutionDetector flags inline interpreter eval (python -c, node -e, osascript -e, deno eval, …) as highRisk, without flagging script-file runs.
  • command -v/-V lookups no longer inherit the target's capabilities/risk (new WrapperSpec.lookupFlags).
  • DestructiveCommandDetector/CommandFamilies/RemoteExecDetector extended (disk-destructive family, whole-disk device targets, new downloaders/privilege wrappers, pwsh/cmd in download|shell). Normalization: batcat→bat, fdfind→fd, ripgrep→rg.

Full details in CHANGELOG.md. dart analyze clean; 394 tests pass.

Assets 2
Loading