open/llm-security
1
0
Fork 0
Code Issues Releases 1 Activity
llm-security/conformance
History
Kjell Tore Guttormsen bc23b07cf9 Squashed 'scanners/commons/' changes from 4641a7b..7ce0ba7 
7ce0ba7 docs(carriers): the third verdict exists, and publishing an alias is what takes it away
302625e fix(conformance): the tag carrier has no output: label, and our blocker claimed it did
fe5e6b2 docs(conventions): the merge button is off for a reason, and the reason now lives in the repo
2d86151 fix(divergence): our own iframe number read 3x low, and the reported cause was not the cause
daa7ba4 release(0.4.0): two values moved by two mechanisms, and the difference is the release
2eee7e1 feat(lexicon): both unbounded rows narrow to [^><]*, and the mechanism is new here
d467324 feat(signatures): the staleness we disclosed is closed by reading the module, not the message
4187715 docs(divergence): our own form has a number now, and it is quadratic
0e765a0 docs(security): the attack surface here is data, so the report route had to say where a wrong entry gets fixed
d96fbbf docs(divergence): the span row had one witness; llm-security measured five more

git-subtree-dir: scanners/commons
git-subtree-split: 7ce0ba706cadd032ec3c16622dcfdb5ce4dc32d6
2026-08-13 20:08:20 +02:00
..
active__autolink Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
active__data-uri Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
active__markdown-image Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
active__markdown-link Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
active__raw-html Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
active__reference-link Squashed 'scanners/commons/' changes from 0ffee85..532d70d 2026-08-11 13:02:33 +02:00
config__bypass-safety Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
config__disable-filtering Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
config__ignore-claudemd Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
config__override-system-prompt Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
data-uri__executable Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__academic-context Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__educational Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__fictional Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__hypothetical Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__red-team Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__research-purpose Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__security-audit-sim Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__test-pretense Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
evasion__thought-experiment Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hidden-comment__agent-directed Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__approve-immediately Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__brevity-skip Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__details-omitted Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__just-approve Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__no-need-review Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__scope-minimization Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__suppress-review Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hitl-trap__too-long Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
homoglyph__cyrillic-latin-mix Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__aria-label Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__display-none Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__offscreen Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__visibility-hidden Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__zero-font Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__zero-opacity Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
html-obfuscation__zero-size-overflow Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-p2sql__inject-sql Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-p2sql__sql-inject Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-recursive__conditional-response Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-recursive__inject-output Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-xss__event-handler Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-xss__iframe-src Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-xss__javascript-uri Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-xss__script-tag Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
hybrid-xss__script-tag--src-no-close Squashed 'scanners/commons/' changes from 532d70d..4641a7b 2026-08-11 14:03:23 +02:00
identity__new-directive Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
identity__new-role Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
identity__no-longer Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
identity__pretend Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
identity__you-are-now Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
indirect__direct-address Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
indirect__instruction-to-ai Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
indirect__trigger-based Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
leetspeak__disregard Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
leetspeak__forget-instructions Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
leetspeak__ignore-previous Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
leetspeak__override Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
markdown__link-anchor-injection Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
markdown__link-ref-comment Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
multi-lang__french Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
multi-lang__german Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
multi-lang__spanish Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
nl-indirection__download-execute Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
nl-indirection__extract-exfiltrate Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
nl-indirection__fetch-execute Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
nl-indirection__read-dotfile Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
nl-indirection__send-external Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
normalization__claudemd-conflict Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
normalization__prioritize-user Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
normalization__skip-confirmation Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
normalization__user-precedence Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__disregard Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__forget-instructions Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__ignore-previous Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__override-instructions Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__prior-constraints Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
override__suspend-constraints Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
reframing__actual-task Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
reframing__real-purpose Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
reframing__should-actually-do Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-header__hash-system Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-header__inst Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-header__instructions Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-header__pipe-system Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-tag__system-close Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
spoofed-tag__system-open Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
sub-agent__delegate-bypass Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
sub-agent__spawn-dangerous Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
unicode__zero-width-in-word Squashed 'scanners/commons/' content from commit 0ffee85 2026-08-10 20:40:16 +02:00
manifest.json Squashed 'scanners/commons/' changes from 4641a7b..7ce0ba7 2026-08-13 20:08:20 +02:00