v0.3.0 — production runner

agent-security-bench 0.3.0

Production-oriented upgrade of the open ML agent + security bench.

Runner

• AST checks (python_parses, ast_has_call, …)
• Weighted required checks + weighted_score
• JSON Schema receipt validation (jsonschema)
• Security severity weights + SSRF must_not_call_with_arg_substr
• CLI: catalog, selftest

Content

• 15 ML tasks (adds calibration, temporal split, cache isolation, tool schema, receipts)
• sec.production_v1 (confused deputy, SSRF args, secret echo, …)
• Hardened MCP fixture (JSON-RPC + path confinement)

Verify

pip install agent-security-bench==0.3.0
asb selftest