source-code-analysis-worker-template v0.1.1

What's Changed

• fix(source-code-analysis-worker-template): refresh lock to dreadnode 2.0.51 (ENG-8859) by @briangreunke in #173

Full Changelog: capability/ai-red-teaming/v1.18.5...capability/source-code-analysis-worker-template/v0.1.1

network-ops v2.1.9

What's Changed

• feat(ai-red-teaming): ATLAS multi-agent campaign generator by @rdheekonda in #67
• fix(ai-red-teaming): import get_generator in generated ATLAS script by @rdheekonda in #100
• fix(ai-red-teaming): import get_generator in generated agentic script by @rdheekonda in #101
• fix(ai-red-teaming): collect multimodal attack results via assessment.run() by @rdheekonda in #102
• feat(airt): model-extraction & membership-inference attack generators by @rdheekonda in #104
• Add measured ProjectDiscovery reconnaissance to web-security by @GangGreenTemperTatum in #105
• Promote llm-wiki and analysis-ledger by @monoxgas in #106
• feat: promote data-integration connectors (atlassian, azure-devops, github, gitlab, linear) by @monoxgas in #107
• feat(web-security): add ast-grep to runtime for AST-based JS static a… by @GangGreenTemperTatum in #108
• fix(ai-red-teaming): scope get_session_context to AIRT + make it pull-only (CAP-1169) by @rdheekonda in #109
• refactor(web-security): remove report-writer skill, align reporting p… by @GangGreenTemperTatum in #110
• Actionable hashcat error on GPU-less environments by @mkultraWasHere in #111
• feat(web-security): add upstream Caido Go MCP server (caido-go) (CAP-1173) by @GangGreenTemperTatum in #113
• fix(web-security): preflight tooling guard when pdtm tools unavailable (CAP-1174) by @GangGreenTemperTatum in #114
• docs(ai-red-teaming): unify capability counts (590+ transforms, 70+ attacks, 140+ scorers) by @rdheekonda in #115
• Add response-queue-poisoning skill to web-security by @GangGreenTemperTatum in #116
• fix(web-security): bump to 1.6.0 to unblock dev capability sync by @rdheekonda in #117
• chore(web-security): bump version to 1.6.0 by @GangGreenTemperTatum in #118
• feat(web-security): add caido-mode skill (Caido TypeScript SDK / caido-ts) by @GangGreenTemperTatum in #119
• feat(web-security): add webhook.site API key support to callback tool by @GangGreenTemperTatum in #120
• feat(web-security): expand SQLi-to-RCE, math-rendering, and XS-Leak coverage by @GangGreenTemperTatum in #122
• feat(web-security): add HTTP desync tooling and smuggling skill by @GangGreenTemperTatum in #125
• fix(web-security): align Caido surfaces on the 0.57 replay schema by @GangGreenTemperTatum in #124
• feat(web-security): postMessage listener discovery and origin-validation depth by @GangGreenTemperTatum in #126
• feat(web-security): geo-distributed DNS resolution via Shodan/Censys open resolvers by @GangGreenTemperTatum in #127
• web-security: add stegano LSB steganography as a runtime dependency by @GangGreenTemperTatum in #128
• feat(web-security): self-contained Flareprox IP rotation tool and skill by @GangGreenTemperTatum in #48
• fix(web-security): complete the install without reaching the network by @monoxgas in #130
• feat(web-security): include wrangler (Cloudflare Workers) in web-security tooling (CAP-1190) by @GangGreenTemperTatum in #131
• fix(attack-surface-management): provision runtime dependencies by @GangGreenTemperTatum in #132
• feat(ai-red-teaming): honeytoken tool (mint/use canaries) by @rdheekonda in #129
• feat(ai-red-teaming): agentic-suite tool (run all attacks on an agent) + scenario docs by @rdheekonda in #112
• feat(airt): multi-step tool-attack search tool (Kaggle techniques) by @rdheekonda in #134
• fix(airt): bump capability version to 1.11.0 (unblock dev sync) by @rdheekonda in #135
• feat(ai-red-teaming): tear down provisioned environments on assessment completion by @rdheekonda in #137
• fix(ai-red-teaming): make extraction/membership/inversion work in the TUI by @rdheekonda in #138
• fix(ai-red-teaming): recover cleanly from transient tool errors + right endpoint per target (ENG-8427) by @rdheekonda in #141
• fix(ai-red-teaming): resolve bare task names across accessible orgs + steer off the CLI (ENG-8434) by @rdheekonda in #142
• fix(ai-red-teaming): register provision_environment and generate_agentic_suite_attack as tools (ENG-8467) by @GangGreenTemperTatum in #143
• fix(ai-red-teaming): rename errors.py helper to _errors.py to clear degraded-component warning by @rdheekonda in #144
• feat(ai-red-teaming): guardrail hook to block CLI/shell provisioning (ENG-8477), release 1.16.2 by @rdheekonda in #145
• feat(ai-red-teaming): extensible guardrail policy table + teardown rule, release 1.16.3 by @rdheekonda in #146
• feat(ai-red-teaming): wire agentic-probes 2026 attacks into generate_attack by @rdheekonda in #147
• fix(ai-red-teaming): bump version to 1.17.0 to unblock dev/staging sync by @rdheekonda in #150
• fix(ai-red-teaming): normalize agent tool_calls in generated targets by @rdheekonda in #151
• fix(ai-red-teaming): JSON-encode prompt in generated agent target bodies by @rdheekonda in #152
• fix(ai-red-teaming): correct best_score scale in analytics-interpretation skill by @rdheekonda in #153
• fix(web-security): stop installing unlicensed surf at sandbox boot (ADM-447) by @briangreunke in #154
• Remove proprietary jxscout-pro-v2 material from MIT web-security capability (ADM-81) by @briangreunke in #155
• fix: pin web security fallback tools (ENG-8602) by @briangreunke in #149
• Add MIT license and third-party NOTICE (ADM-454) by @briangreunke in #156
• fix(attack-surface-management): stop downgrading cryptography and dnspython by @monoxgas in #158
• fix(attack-surface-management): relax pyOpenSSL in the bbot MCP script by @monoxgas in #159
• fix(ai-red-teaming): record OWASP-Agentic slug as airt_goal_category by @rdheekonda in #161
• fix(ai-red-teaming): record custom-target attacks via assessment by @rdheekonda in #162
• docs(ai-red-teaming): drop competition attribution from multistep tool attack by @rdheekonda in #163
• fix/web security provisioning by @danielvaughn in #157
• adds dependency path by @danielvaughn in #164
• feat(binary-analysis): structured findings/assets output by @monoxgas in #166
• loosens constraints on web security tools by @danielvaughn in #165
• feat(ai-red-teaming): natural-language severity policy on generate_attack by @rdheekonda in #167
• fix(ai-red-teaming): align severity_policy with score-only model (1.18.1) by @rdheekonda in #168
• fix(ai-red-teaming): default ATLAS attacker to dn/gpt-5.4-mini by @rdheekonda in #169
• feat(ai-red-teaming): add generate_slip_attack tool (SLIP jailbreak) by @rdheekonda in #170
• fix(ai-red-teaming): authenticate agentic attacks + lighten ATLAS default budget by @rdheekonda in #171
• fix(source-code-analysis-worker-template): refresh lock to dreadnode 2.0.51 (ENG-8859) by @briangreunke in #173
• fix(network-ops): provision the full toolchain and harden the install script (ENG-8822) by @thomasqbrady in #172
• ENG-8819 fix(network-ops): collect cracked passwords on time-boxed/partial hashcat and john runs by @thomasqbrady in #174

New Contributors

• @briangreunke made their first contributi...

ai-red-teaming v1.18.5

What's Changed

• fix(ai-red-teaming): authenticate agentic attacks + lighten ATLAS default budget by @rdheekonda in #171

Full Changelog: capability/ai-red-teaming/v1.18.4...capability/ai-red-teaming/v1.18.5

ai-red-teaming v1.18.4

What's Changed

• feat(ai-red-teaming): add generate_slip_attack tool (SLIP jailbreak) by @rdheekonda in #170

Full Changelog: capability/ai-red-teaming/v1.18.2...capability/ai-red-teaming/v1.18.4

ai-red-teaming v1.18.2

What's Changed

• fix(ai-red-teaming): default ATLAS attacker to dn/gpt-5.4-mini by @rdheekonda in #169

Full Changelog: capability/ai-red-teaming/v1.18.1...capability/ai-red-teaming/v1.18.2

ai-red-teaming v1.18.1

What's Changed

• fix/web security provisioning by @danielvaughn in #157
• adds dependency path by @danielvaughn in #164
• feat(binary-analysis): structured findings/assets output by @monoxgas in #166
• loosens constraints on web security tools by @danielvaughn in #165
• feat(ai-red-teaming): natural-language severity policy on generate_attack by @rdheekonda in #167
• fix(ai-red-teaming): align severity_policy with score-only model (1.18.1) by @rdheekonda in #168

New Contributors

• @danielvaughn made their first contribution in #157

Full Changelog: capability/ai-red-teaming/v1.17.6...capability/ai-red-teaming/v1.18.1

web-security v2.0.2

What's Changed

• Remove proprietary jxscout-pro-v2 material from MIT web-security capability (ADM-81) by @briangreunke in #155
• fix: pin web security fallback tools (ENG-8602) by @briangreunke in #149
• Add MIT license and third-party NOTICE (ADM-454) by @briangreunke in #156
• fix(attack-surface-management): stop downgrading cryptography and dnspython by @monoxgas in #158
• fix(attack-surface-management): relax pyOpenSSL in the bbot MCP script by @monoxgas in #159
• fix(ai-red-teaming): record OWASP-Agentic slug as airt_goal_category by @rdheekonda in #161
• fix(ai-red-teaming): record custom-target attacks via assessment by @rdheekonda in #162
• docs(ai-red-teaming): drop competition attribution from multistep tool attack by @rdheekonda in #163
• fix/web security provisioning by @danielvaughn in #157
• adds dependency path by @danielvaughn in #164
• feat(binary-analysis): structured findings/assets output by @monoxgas in #166
• loosens constraints on web security tools by @danielvaughn in #165

New Contributors

• @danielvaughn made their first contribution in #157

Full Changelog: capability/web-security/v1.15.1...capability/web-security/v2.0.2

ai-red-teaming v1.17.6

What's Changed

• docs(ai-red-teaming): drop competition attribution from multistep tool attack by @rdheekonda in #163

Full Changelog: capability/ai-red-teaming/v1.17.5...capability/ai-red-teaming/v1.17.6

ai-red-teaming v1.17.5

What's Changed

• fix(ai-red-teaming): record custom-target attacks via assessment by @rdheekonda in #162

Full Changelog: capability/ai-red-teaming/v1.17.4...capability/ai-red-teaming/v1.17.5

ai-red-teaming v1.17.4

What's Changed

• fix(web-security): stop installing unlicensed surf at sandbox boot (ADM-447) by @briangreunke in #154
• Remove proprietary jxscout-pro-v2 material from MIT web-security capability (ADM-81) by @briangreunke in #155
• fix: pin web security fallback tools (ENG-8602) by @briangreunke in #149
• Add MIT license and third-party NOTICE (ADM-454) by @briangreunke in #156
• fix(attack-surface-management): stop downgrading cryptography and dnspython by @monoxgas in #158
• fix(attack-surface-management): relax pyOpenSSL in the bbot MCP script by @monoxgas in #159
• fix(ai-red-teaming): record OWASP-Agentic slug as airt_goal_category by @rdheekonda in #161

New Contributors

• @briangreunke made their first contribution in #154

Full Changelog: capability/ai-red-teaming/v1.17.3...capability/ai-red-teaming/v1.17.4