v0.13.1

New Attack Categories

Adds 30 new attack payloads across 3 new categories (145 total, 14 categories):

PARSE-001 to PARSE-010: Parser Differential

Exploits where different parsers interpret the same input differently to bypass security controls. Covers JSON comment injection, YAML anchor abuse, markdown fence escape, Unicode normalization bypass, duplicate key override, type coercion, content-type mismatch, nested encoding chains, polyglot payloads, and zero-width character injection.

PERSIST-001 to PERSIST-010: Persistent Agent Security

Attacks that persist across agent sessions. Covers memory poisoning, session state enumeration, cached context injection, preference backdoors, cross-session credential harvesting, state accumulation, scheduled task injection, knowledge base poisoning, session fixation, and embedding vector poisoning.

FAKETOOL-001 to FAKETOOL-010: Fake Tool Detection

MCP tool impersonation and squatting attacks. Covers name squatting, description impersonation, shadow injection via config, schema poisoning, priority escalation, capability expansion, response manipulation, batch flooding, identity spoofing, and persistence via auto-install hooks.

Bug Fix

• Fix wild --json output truncation for reports exceeding 64KB