Kjell Tore Guttormsen 32199965f2 fix(llm-security): post-mcp-verify reads live PostToolUse tool_response field ... The PostToolUse hook read input.tool_output, but live Claude Code delivers the tool result as tool_response — so the indirect-injection scan on MCP tool output silently never fired outside the test harness (which sent tool_output). The hook now reads tool_response with a tool_output fallback for older harnesses/fixtures. +3 tests covering string and object tool_response and the precedence. Found via a live-session check during the v7.8.3 sweep; not one of the 52 MEDIUM-tier findings. Suite 2016/0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TcQyMTQfyrsAapaCMPxTtQ		2026-07-18 11:00:34 +02:00
..
scripts	fix(llm-security): post-mcp-verify reads live PostToolUse tool_response field	2026-07-18 11:00:34 +02:00
hooks.json	fix(llm-security): hook coverage — pathguard on Edit, trifecta window, pipe-to-shell, provider keys (#9,#10,#12,#13,#11-doc)	2026-07-18 10:36:39 +02:00