v0.5.2

What's Changed

Documentation accuracy fixes

• Corrected security check counts per category to match actual code (MCP 12→10, CLAUDE 8→7, PERM 4→3, GIT 4→3, VSCODE 4→2, CURSOR 4→1)
• Removed WINDSURF category from docs (0 checks exist in code)
• Updated totals: 147 checks across 30 categories (was "147+ across 31")
• Fixed registerPlugin example: factory: → create: to match actual interface
• Fixed CLI README --payloads → --payload-file to match actual flag
• Removed undocumented HACKMYAGENT_TIMEOUT env var from docs
• Removed Windsurf from supported platforms table
• Fixed --with-aim flag description in Quick Start

Newly documented flags

• --no-color — global flag to disable colored output
• -c/--category — filter benchmark to a specific category
• --api-format — API format for attack targets (openai, anthropic, custom)
• --model — specify model to test against
• -H/--header — custom request headers
• --timeout — request timeout in ms
• --delay — delay between requests in ms
• --stop-on-success — stop after first successful attack

Bug fixes

• Synced core VERSION constant to 0.4.3 (was exporting 0.4.0)
• Updated secure command help text from "100+ across 24" to "147 across 30"