diff --git a/README.md b/README.md index e43ff27..13b6fc3 100644 --- a/README.md +++ b/README.md @@ -22,20 +22,20 @@ Then open Claude Code and type `/plugin` to browse and install plugins from the ## Plugins -### [LLM Security](plugins/llm-security/) `v6.0.0` +### [LLM Security](plugins/llm-security/) `v6.1.0` Security scanning, auditing, and threat modeling for agentic AI projects. Built on OWASP LLM Top 10 (2025), OWASP Agentic AI Top 10, and the AI Agent Traps taxonomy (Google DeepMind, 2025). Three layers of protection: - **Automated enforcement** — 8 hooks that block dangerous operations in real time (prompt injection, secrets in code, destructive commands, supply chain guardrails) -- **Deterministic scanning** — 16 Node.js scanners for byte-level analysis: Shannon entropy, Unicode codepoints, typosquatting detection, taint flow, DNS resolution, git forensics, AI-BOM +- **Deterministic scanning** — 21 Node.js scanners (10 orchestrated + 11 standalone) for byte-level analysis: Shannon entropy, Unicode codepoints, typosquatting detection, taint flow, DNS resolution, git forensics, AI-BOM, attack simulation - **Advisory analysis** — 18 commands that scan, audit, and model threats with structured reports, letter grades, and actionable remediation - **Enterprise governance** — Compliance mapping (EU AI Act, NIST AI RMF, ISO 42001), SARIF 2.1.0 output, structured audit trail, policy-as-code, standalone CLI Key commands: `/security posture`, `/security audit`, `/security scan`, `/security threat-model`, `/security plugin-audit` -6 specialized agents · 16 scanners · 8 hooks · 15 knowledge docs +6 specialized agents · 21 scanners · 8 hooks · 16 knowledge docs · 1264 tests → [Full documentation](plugins/llm-security/README.md)