open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity

Commit graph

  • de23a630b8 feat(llm-security): playground v7.6.2-dev — katalog list-view + builder-pane [skip-docs] Kjell Tore Guttormsen 2026-05-18 11:56:44 +02:00
  • a66f7f28c9 chore: roll up in-progress changes across plugins Kjell Tore Guttormsen 2026-05-16 21:02:23 +02:00
  • 6b3ece96a8 docs: add Communication patterns section to all plugin CLAUDE.md Kjell Tore Guttormsen 2026-05-16 21:01:45 +02:00
  • 330dca4b71 docs(llm-security): tre doc-nivåer oppdatert for v7.6.1 Kjell Tore Guttormsen 2026-05-06 14:44:55 +02:00
  • 97b054c703 fix(llm-security): playground v7.6.1 — visuelle bugs i v7.6.0 Kjell Tore Guttormsen 2026-05-06 14:33:19 +02:00
  • 0a70c6f44f feat(llm-security): playground v7.6.0 — Tier 3 referanse-case komplett Kjell Tore Guttormsen 2026-05-06 14:12:59 +02:00
  • 4c4a5ec562 feat(llm-security): playground v7.6.0 fase 5e-h — Tier 3 spesialkomponenter (del 2) [skip-docs] Kjell Tore Guttormsen 2026-05-06 14:00:04 +02:00
  • 569542d6eb feat(llm-security): playground v7.6.0 fase 5a-d — Tier 3 spesialkomponenter (del 1) [skip-docs] Kjell Tore Guttormsen 2026-05-06 13:25:35 +02:00
  • 8197957f84 feat(llm-security): playground v7.6.0 fase 3-4 — scope-identitet + Tier 3 form-progress [skip-docs] Kjell Tore Guttormsen 2026-05-06 13:13:03 +02:00
  • eb8f6761e1 feat(llm-security): playground v7.6.0 fase 1-2 — fjern DS-duplikater + page-shell harmonisering Kjell Tore Guttormsen 2026-05-06 12:55:25 +02:00
  • e64343be86 feat(llm-security): playground Fase 3 — v7.5.0 med 18 parsere/renderere Kjell Tore Guttormsen 2026-05-05 22:15:47 +02:00
  • 992fd8edfe feat(llm-security): playground Fase 1 — single-file SPA skjelett [skip-docs] Kjell Tore Guttormsen 2026-05-05 18:47:45 +02:00
  • 8c3de5c09e chore(llm-security): v7.4.0 — examples + e2e suite minor Kjell Tore Guttormsen 2026-05-05 15:34:02 +02:00
  • 5e21ebdc91 feat(llm-security): add pre-compact-poisoning example for PreCompact hook [skip-docs] Kjell Tore Guttormsen 2026-05-05 15:22:28 +02:00
  • 4f5857f452 feat(llm-security): add toxic-agent-demo example for TFA scanner [skip-docs] Kjell Tore Guttormsen 2026-05-05 15:15:04 +02:00
  • e7e332bcd6 feat(llm-security): add 3 more runnable threat examples [skip-docs] Kjell Tore Guttormsen 2026-05-05 15:01:20 +02:00
  • 24b65b3f27 feat(llm-security): add lethal-trifecta + mcp-rug-pull example contents [skip-docs] Kjell Tore Guttormsen 2026-05-05 14:45:39 +02:00
  • 075f159c1f feat(llm-security): add lethal-trifecta + mcp-rug-pull examples [skip-docs] Kjell Tore Guttormsen 2026-05-05 14:45:15 +02:00
  • b5d29f8cd6 test(llm-security): add e2e suite proving framework works as coordinated system Kjell Tore Guttormsen 2026-05-05 12:06:57 +02:00
  • c68c395927 docs: introduce GOVERNANCE.md and unify fork-and-own blurb Kjell Tore Guttormsen 2026-05-03 14:57:00 +02:00
  • 43ca4bd5e8 chore(privacy): scrub real-org references from plugin internals (phase 2) Kjell Tore Guttormsen 2026-05-03 04:28:15 +02:00
  • be41a22f1a fix(llm-security): correct distribution URLs to marketplace path Kjell Tore Guttormsen 2026-05-01 06:20:54 +02:00
  • fa16ffdd28 chore(llm-security): v7.3.1 — stabilization patch for forkers and downstream users Kjell Tore Guttormsen 2026-05-01 06:14:03 +02:00
  • 2979e57d8f docs(readme): total overhaul for v7.3.0 Kjell Tore Guttormsen 2026-05-01 05:37:42 +02:00
  • 46371395f5 chore(release): bump to v7.3.0 Kjell Tore Guttormsen 2026-05-01 05:28:45 +02:00
  • f49f9a7e4f docs(claude-md): 8.10 — fix hooks count + add doc-consistency test for hook-table sync Kjell Tore Guttormsen 2026-04-30 17:12:49 +02:00
  • 7f921b3cf3 feat(policy-loader): 8.7 — env-var deprecation warnings (v8.0.0 removal) Kjell Tore Guttormsen 2026-04-30 17:11:07 +02:00
  • 3912916013 docs(hardening-guide): 8.6 — sandbox-architecture rationale (no code consolidation) Kjell Tore Guttormsen 2026-04-30 16:55:45 +02:00
  • f80a1d70ea docs(severity): 8.4 — @deprecated annotation on riskScoreV1 Kjell Tore Guttormsen 2026-04-30 16:54:37 +02:00
  • 1b38af3946 feat(commands): E14 part 3 — /security mcp-baseline-reset slash command Kjell Tore Guttormsen 2026-04-30 16:49:01 +02:00
  • d3d07997eb feat(post-mcp-verify): E14 part 2 — cumulative-drift MEDIUM advisory [skip-docs] Kjell Tore Guttormsen 2026-04-30 16:40:52 +02:00
  • 3fd8cd90b3 feat(mcp-description-cache): E14 part 1 — baseline + history schema (cumulative drift) [skip-docs] Kjell Tore Guttormsen 2026-04-30 16:37:33 +02:00
  • 470019209d feat(workflow-scanner): E11 part 2 — re-interpolation + auth-bypass + WFL prefix + orchestrator Kjell Tore Guttormsen 2026-04-30 15:57:10 +02:00
  • 4e917c1d4a feat(workflow-scanner): E11 part 1 — core file-walk + 23-field blacklist + sink-restriction Kjell Tore Guttormsen 2026-04-30 15:48:48 +02:00
  • 6adf620f79 feat(pre-install-supply-chain): E13 — npm scope-hopping MEDIUM advisory with allowlist Kjell Tore Guttormsen 2026-04-30 15:38:28 +02:00
  • 25f4468807 feat(git-clone): E12 — .gitattributes filter-driver post-clone advisory Kjell Tore Guttormsen 2026-04-30 15:29:13 +02:00
  • bae94aacaf feat(injection): E3 — rot13 layer for comment-block injection Kjell Tore Guttormsen 2026-04-30 15:21:03 +02:00
  • 8e341ef63d feat(pre-bash-destructive): T8 — base64-pipe-shell idiom (E9) Kjell Tore Guttormsen 2026-04-30 15:15:29 +02:00
  • 2bf5ff5156 feat(bash-normalize): T7 — process substitution collapse (E8) Kjell Tore Guttormsen 2026-04-30 15:14:04 +02:00
  • f217fc73d1 feat(bash-normalize): T9 — one-level variable substitution (E10) Kjell Tore Guttormsen 2026-04-30 15:12:02 +02:00
  • b951f3a898 chore(llm-security): stage ignore patterns for session files Kjell Tore Guttormsen 2026-04-30 15:07:35 +02:00
  • 2d8cef63d7 chore(release): bump to v7.2.0 Kjell Tore Guttormsen 2026-04-29 15:40:15 +02:00
  • c635140666 feat(red-team): 8 new evasion-arsenal scenarios for v7.2.0 (E1/E4/E5/E7/E16/E17) Kjell Tore Guttormsen 2026-04-29 15:35:32 +02:00
  • 27099584cc fix(entropy): E18 — rule 18 markdown-image CDN-aware + secret pre-check Kjell Tore Guttormsen 2026-04-29 15:18:37 +02:00
  • ff0f9cf9ad refactor(entropy): B5 — two-stage context-classified suppression pipeline Kjell Tore Guttormsen 2026-04-29 15:13:13 +02:00
  • 42885d84e0 feat(post-mcp-verify): E7 — scan HTML comment nodes for injection Kjell Tore Guttormsen 2026-04-29 15:01:56 +02:00
  • ebbf50629c feat(post-mcp-verify): E5 — scan SVG desc/title/metadata/foreignObject Kjell Tore Guttormsen 2026-04-29 14:54:58 +02:00
  • 983990e8bf feat(post-mcp-verify): E4 — scan markdown link titles for injection Kjell Tore Guttormsen 2026-04-29 14:52:30 +02:00
  • a1b2bf7304 fix(injection): E16 ASCII fast-path + UNI-003 expectation update (v7.2.0) Kjell Tore Guttormsen 2026-04-29 14:44:41 +02:00
  • c026fddc39 feat(post-session-guard): E17 — configurable escalation window + 20-call MEDIUM advisory Kjell Tore Guttormsen 2026-04-29 14:26:18 +02:00
  • b191ce6da3 feat(injection): E16 — homoglyph NFKC fold before every pattern match Kjell Tore Guttormsen 2026-04-29 14:22:05 +02:00
  • bab1eb300b feat(unicode): E1 — extend hidden-Unicode detection to PUA-A and PUA-B Kjell Tore Guttormsen 2026-04-29 14:18:49 +02:00
  • 95ae305651 fix(memory-poisoning): E15 — add .claude/agents/*.md to target glob Kjell Tore Guttormsen 2026-04-29 14:13:01 +02:00
  • d65bb70347 fix(dep): B7 — token-overlap typosquat heuristic alongside Levenshtein Kjell Tore Guttormsen 2026-04-29 14:10:53 +02:00
  • e1c29424e5 fix(taint-tracer): B6 — recognize destructuring + spread + rest patterns Kjell Tore Guttormsen 2026-04-29 14:05:34 +02:00
  • 137057dd02 docs(scoring): unify scan/audit/mcp-scanner/posture-assessor to v2 formula Kjell Tore Guttormsen 2026-04-29 13:58:25 +02:00
  • 9f3230be1c docs(severity): B3 — document info as scoring-inert (v7.2.0 prep) Kjell Tore Guttormsen 2026-04-29 13:56:11 +02:00
  • cd0708897c docs(llm-security): v7.1.1 — narrative coherence patch Kjell Tore Guttormsen 2026-04-29 12:57:54 +02:00
  • 3aac6c6a7a test(llm-security): narrative-coherence contract test (v7.1.1) Kjell Tore Guttormsen 2026-04-29 12:50:27 +02:00
  • b5b672c322 test(llm-security): hyperframes-like fixture for narrative coherence Kjell Tore Guttormsen 2026-04-29 12:49:19 +02:00
  • 8dab82d2bc fix(llm-security): skill-scanner-agent — context-first severity, v2 alignment, Suppressed Signals section Kjell Tore Guttormsen 2026-04-29 12:47:58 +02:00
  • 3d5aca5bb4 fix(llm-security): template — v1 → v2 risk constants + narrative_audit block Kjell Tore Guttormsen 2026-04-29 12:45:28 +02:00
  • 358425ce3c docs(llm-security): add v7.1.0 row to README version history Kjell Tore Guttormsen 2026-04-29 12:03:10 +02:00
  • b58c1f5095 chore(release): bump llm-security to v7.1.0 Kjell Tore Guttormsen 2026-04-29 11:57:16 +02:00
  • 88c2c75d73 docs(llm-security): A3 honesty-sweep — 7 sitater nedtonet (critical-review §9) Kjell Tore Guttormsen 2026-04-29 11:52:55 +02:00
  • 037befa985 fix(llm-security): A2 batch — JSDoc arithmetic + co-monotonicity test + CaMeL nedton Kjell Tore Guttormsen 2026-04-29 11:49:08 +02:00
  • 547b84865c fix(llm-security): B2 block-mode blocks all detected trifectas, not only high-confidence Kjell Tore Guttormsen 2026-04-20 00:04:36 +02:00
  • e0bdaf84c0 fix(llm-security): B1 pathguard regex — match multi-segment .env.*.* Kjell Tore Guttormsen 2026-04-19 23:59:38 +02:00
  • 112d13d5a0 docs(llm-security): add critical review 2026-04-20 (v7.0.0 adversarial audit) Kjell Tore Guttormsen 2026-04-19 23:27:52 +02:00
  • 4ae6ca95fe feat(llm-security): v7.0.0 commit 7 — rule 18 (markdown image URL suppression) Kjell Tore Guttormsen 2026-04-19 22:37:39 +02:00
  • cd04e9340c feat(llm-security)!: v7.0.0 commit 6 — tests, docs, version bump Kjell Tore Guttormsen 2026-04-19 22:26:35 +02:00
  • 3b58089deb feat(llm-security): v7.0.0 commit 5 — synthesizer scan calibration section Kjell Tore Guttormsen 2026-04-19 22:04:29 +02:00
  • 2ec25d794a feat(llm-security): v7.0.0 commit 4 — typosquat allowlist for short legit names Kjell Tore Guttormsen 2026-04-19 22:03:46 +02:00
  • 0732287860 feat(llm-security): v7.0.0 commit 3 — policy-driven entropy thresholds Kjell Tore Guttormsen 2026-04-19 22:02:52 +02:00
  • 0a7eea6846 feat(llm-security)!: v7.0.0 commit 2 — context-aware entropy scanner Kjell Tore Guttormsen 2026-04-19 22:00:42 +02:00
  • 14356a07b1 feat(llm-security)!: v7.0.0 commit 1 — severity-dominated log-scaled risk score Kjell Tore Guttormsen 2026-04-19 22:00:29 +02:00
  • ad379365e3 docs: add AI-generated code disclosure to marketplace and all plugins Kjell Tore Guttormsen 2026-04-19 19:27:05 +02:00
  • e64580fbf3 feat(llm-security): honor LLM_SECURITY_IDE_ROOTS for JetBrains discovery Kjell Tore Guttormsen 2026-04-18 11:09:02 +02:00
  • 4de35e0362 docs(llm-security): update ide-scan command + marketplace README for v6.6.0 Kjell Tore Guttormsen 2026-04-18 11:05:34 +02:00
  • a437144c6e chore(release): bump llm-security to v6.6.0 Kjell Tore Guttormsen 2026-04-18 11:04:42 +02:00
  • 8a415ffb74 test(llm-security): loosen git-forensics finding count thresholds Kjell Tore Guttormsen 2026-04-18 11:00:20 +02:00
  • e7b46a5b6f test(llm-security): add end-to-end JetBrains scan integration tests Kjell Tore Guttormsen 2026-04-18 10:51:48 +02:00
  • c5912b2466 test(llm-security): add JetBrains fixture tree + build helper Kjell Tore Guttormsen 2026-04-18 10:49:49 +02:00
  • 4b68254127 feat(llm-security): URL-fetch support for JetBrains Marketplace (v6.6.0) Kjell Tore Guttormsen 2026-04-18 10:46:13 +02:00
  • 5df80e73fc feat(llm-security): add fetchJetBrainsPlugin + URL detection for plugins.jetbrains.com Kjell Tore Guttormsen 2026-04-18 10:39:54 +02:00
  • 0959faaa0d refactor(llm-security): parameterize buildSandboxedWorker with workerPath Kjell Tore Guttormsen 2026-04-18 10:37:10 +02:00
  • 633ba134f4 feat(llm-security): wire JetBrains branch into scanOneExtension Kjell Tore Guttormsen 2026-04-18 10:35:46 +02:00
  • d86dd50693 feat(llm-security): add runJetBrainsChecks with 7 JB-specific checks (inc. shaded-jar advisory) Kjell Tore Guttormsen 2026-04-18 10:20:42 +02:00
  • abdff5eb76 feat(llm-security): implement JetBrains discovery + Android Studio base dir Kjell Tore Guttormsen 2026-04-18 10:16:28 +02:00
  • 82905e4edc feat(llm-security): implement parseIntelliJPlugin with nested-jar extraction Kjell Tore Guttormsen 2026-04-18 10:15:12 +02:00
  • ed7b52dbf3 feat(llm-security): add zero-dep plugin.xml + MANIFEST.MF parsers Kjell Tore Guttormsen 2026-04-18 10:07:14 +02:00
  • d7ed1b2d62 feat(llm-security): add .kt .groovy .scala to taint-tracer CODE_EXTENSIONS Kjell Tore Guttormsen 2026-04-18 10:04:32 +02:00
  • 7abc2aacd1 docs(llm-security): add knowledge/jetbrains-marketplace-api-notes.md Kjell Tore Guttormsen 2026-04-18 10:02:04 +02:00
  • 8775c1d316 docs(llm-security): add JetBrains sections to ide-extension-threat-patterns Kjell Tore Guttormsen 2026-04-18 10:00:59 +02:00
  • facc15f54a feat(llm-security): seed top-jetbrains-plugins.json + loadJetBrainsBlocklist export Kjell Tore Guttormsen 2026-04-18 09:56:55 +02:00
  • 4d0213fe04 docs(llm-security): research brief + URL-support plan for ide-scan Kjell Tore Guttormsen 2026-04-17 18:47:01 +02:00
  • a9759e0b16 feat(llm-security): OS sandbox for /security ide-scan <url> (v6.5.0) Kjell Tore Guttormsen 2026-04-17 17:28:57 +02:00
  • b88880f757 feat(llm-security): /security ide-scan <url> — Marketplace/OpenVSX/direct VSIX (v6.4.0) Kjell Tore Guttormsen 2026-04-17 17:16:26 +02:00
  • acf0d8077d feat(llm-security): add /security ide-scan — VS Code / JetBrains extension prescan (v6.3.0) Kjell Tore Guttormsen 2026-04-17 16:23:35 +02:00
  • ce82d86a47 docs: update READMEs for llm-security v6.2.0 (9 hooks, PreCompact, Opus 4.7) Kjell Tore Guttormsen 2026-04-17 15:35:52 +02:00