CalvinBackup/CyberStrikeAI
1
0
Fork 0
mirror of https://github.com/Ed1s0nZ/CyberStrikeAI.git synced 2026-08-18 08:57:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(hitl): expand safe read-only tool allowlist (#258)

Browse Source
This commit is contained in:
RuoJi6
2026-08-17 15:50:32 +08:00
committed by GitHub
parent 893f1342ae
commit f30a9de01d
3 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config.example.yaml
+1 -1
View File
@@ -146,7 +146,7 @@ hitl:
# 已决策审计日志保留天数（与 MCP 监控一致；省略默认 90；0 表示不自动清理）
retention_days: 90
# 按你环境里的真实工具名增删（与侧栏一致、小写不敏感）；不需要全局免审批可改为 []
tool_whitelist: [read_file, list_dir, glob, grep, tool_search, upsert_project_fact, get_project_fact]
tool_whitelist: [read_file, ls, list_dir, glob, grep, tool_search, upsert_project_fact, get_project_fact, list_project_facts, search_project_facts, list_vulnerabilities, get_vulnerability, get_asset, query_assets, list_knowledge_risk_types, get_tool_execution, wait_tool_execution, batch_task_list, batch_task_get, asm_list_resources, manage_webshell_list, c2_event, c2_file]
# audit_agent_prompt: | # 审批模式；留空使用内置默认，可在「人机协同」页编辑
# audit_agent_prompt_review_edit: | # 审查编辑模式；留空使用内置默认