Kjell Tore Guttormsen 52084204da docs(llm-security): describe the base64 exfil payloads instead of showing them ... v8.1.0 S2. security-assessment.md (two blobs, one split, plus the decoded exfil command) and the base64 pipe-to-shell one-liner in knowledge/skill-threat-patterns.md now describe the payload rather than reproduce it. The entropy path-suppression test builds its 84-char blob from 12-char fragments, so no contiguous decodable blob sits on disk. av-surface: b 5->0. a=0 a2=0 b=0 c=0 d=0 - the probe is green. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-09-22 13:23:24 +02:00
..
e2e	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
fixtures	test(llm-security): build poisoned fixtures at test time, never on disk	2026-09-22 13:07:38 +02:00
golden	refactor(llm-security): build the SIG ruleset from vendored commons (malware-signatures 0.1.0)	2026-08-13 21:28:14 +02:00
helpers	test(llm-security): store the poisoned-claude-md fixture encoded	2026-09-22 13:22:10 +02:00
hooks	refactor(llm-security): build the secret table from vendored commons (secret-egress 0.3.0)	2026-08-13 21:10:14 +02:00
lib	fix(llm-security): compileRules coerces a non-string pattern instead of dropping the rule	2026-08-13 21:51:10 +02:00
scanners	docs(llm-security): describe the base64 exfil payloads instead of showing them	2026-09-22 13:23:24 +02:00
av-surface.test.mjs	test(llm-security): narrow av-surface probe (b) to a command shape	2026-09-22 13:17:02 +02:00