Skip to content

v0.12.2

Choose a tag to compare

View all tags
@thebenignhacker thebenignhacker released this 27 Mar 09:50
· 990 commits to main since this release
v0.12.2
09b4c26

What's New

  • Supply chain typosquat detection: Levenshtein distance matching against known package orgs (modelcontextprotocol, anthropic-ai). Catches @m0delcontextprotocol, @anthroplc-ai, etc.
  • Data exfiltration patterns: SELECT * FROM + external URL, include-pii, bulk data export detection.
  • Governance doc false positive fix: SOUL.md and system prompts with defensive language no longer flagged as attacks. harden-soul output no longer triggers CONFIG-002 or AST-EXFIL.
  • CONFIG-002 defensive context: Wider context window (200 chars) and governance doc detection prevents false positives on well-written governance files.
  • create-skill -o flag: Output message now shows the correct directory path.
  • postinstall/curl|sh detection: Shell execution patterns in MCP configs flagged as supply chain risk.

OASB Benchmark

  • F1: 0.83 (SILVER tier)
  • 9/9 categories detected
  • FPR: 1.8%
  • 4 categories at F1 >= 0.91

1,301 tests passing.

Assets 2
Loading