Skip to content

AIP v1.1.0 - Security Test Suite Release

Choose a tag to compare

@santoshmanya santoshmanya released this 09 Feb 13:39

Highlights

  • 63 automated security tests covering OWASP LLM Top 10
  • Moltbook vulnerability mitigations (credential theft, file deletion, attack prevention)
  • OpenClaw CVE-2026-25253 protection (WebSocket exfil, sandbox escape)
  • Enhanced TrustPolicy with platform-specific security controls
  • Human-in-the-loop enforcement for dangerous actions

Test Coverage

Category Tests Status
LLM01: Prompt Injection 5
LLM02: Credential Theft 6
LLM03: Supply Chain 7
LLM06: Excessive Agency 9
LLM10: Unbounded Consumption 5
Moltbook-specific 11
OpenClaw CVE-2026-25253 20
Total 63

New Security Features

Platform-Specific Mitigations

  • \�locked_network_patterns\ - Blocks WebSocket connections to malicious C2 servers
  • \dangerous_filesystem_patterns\ - Prevents Docker socket access and sandbox escape

  • equire_human_approval_for\ - Enforces human-in-the-loop for sensitive actions
  • \�lock_wildcard_delete\ - Prevents file deletion attacks

CVE-2026-25253 Protection

OpenClaw users should update to version 2026.1.29+ AND use AIP for defense-in-depth.

Quick Start

\\�ash

Clone and run tests

git clone https://github.com/santoshmanya/agent-integrity-protocol.git
cd agent-integrity-protocol
python -m venv .venv
.venv\Scripts\activate
pip install pytest
python -m pytest tests/ -v
\\

Breaking Changes

None

Requirements

  • Python 3.9+
  • pytest 9.0+