Skip to content

v5.1.0

Choose a tag to compare

View all tags
@rrrrrredy rrrrrredy released this 16 Jun 07:21
· 3 commits to main since this release
v5.1.0
4197a23
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Add an executable Python standard-library scanner for agent skill packages.
  • Support path, directory, zip, stdin, inline text, URL, and JSON output modes.
  • Add safe zip extraction with path traversal, size, and file-count checks.
  • Add A-F risk scoring with rule IDs, confidence levels, evidence lines, and remediation guidance.
  • Add unittest fixtures for safe, high-risk, frontmatter, missing-file, and zip-slip cases.
  • Add GitHub Actions CI for Python 3.11 and 3.12.
  • Improve README badges, examples, requirements, contribution guidance, and security reporting guidance.

Validation

  • CI on main completed successfully.
  • Local repository self-scan reports A (100/100).
Assets 2
Loading