f153f969a0
Add /ultraresearch-local for structured research combining local codebase analysis with external knowledge via parallel agent swarms. Produces research briefs with triangulation, confidence ratings, and source quality assessment. New command: /ultraresearch-local with modes --quick, --local, --external, --fg. New agents: research-orchestrator (opus), docs-researcher, community-researcher, security-researcher, contrarian-researcher, gemini-bridge (all sonnet). New template: research-brief-template.md. Integration: --research flag in /ultraplan-local accepts pre-built research briefs (up to 3), enriches the interview and exploration phases. Planning orchestrator cross-references brief findings during synthesis. Design principle: Context Engineering — right information to right agent at right time. Research briefs are structured artifacts in the pipeline: ultraresearch → brief → ultraplan --research → plan → ultraexecute. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
28 lines
1.1 KiB
JavaScript
28 lines
1.1 KiB
JavaScript
#!/usr/bin/env node
|
|
// pre-prompt-inject-scan.mjs — Scan user input for prompt injection
|
|
// v5.0: MEDIUM advisory support + Unicode Tag steganography detection
|
|
import { readFileSync } from 'node:fs';
|
|
const input = JSON.parse(readFileSync('/dev/stdin', 'utf-8'));
|
|
const text = input.message || '';
|
|
|
|
// Unicode Tag detection (U+E0001-E007F)
|
|
const UNICODE_TAG_RE = /[\u{E0001}-\u{E007F}]/u;
|
|
if (UNICODE_TAG_RE.test(text)) {
|
|
process.stdout.write(JSON.stringify({ decision: 'block', reason: 'Unicode Tag steganography detected' }));
|
|
process.exit(0);
|
|
}
|
|
|
|
// Critical/High injection patterns
|
|
const INJECTION_RE = /ignore\s+(all\s+)?previous|system\s*:\s*you\s+are|<\|im_sep\|>/i;
|
|
if (INJECTION_RE.test(text)) {
|
|
process.stdout.write(JSON.stringify({ decision: 'block', reason: 'Prompt injection detected' }));
|
|
process.exit(0);
|
|
}
|
|
|
|
// MEDIUM patterns — advisory only, never block
|
|
const MEDIUM_RE = /[\u0410-\u044F]|l33t|h0m0glyph|z3r0.?w1dth/i;
|
|
if (MEDIUM_RE.test(text)) {
|
|
process.stderr.write('SECURITY ADVISORY: MEDIUM obfuscation signals detected.\n');
|
|
}
|
|
|
|
process.stdout.write(JSON.stringify({ decision: 'allow' }));
|