CalvinBackup/agentic_security
1
0
Fork 0
mirror of https://github.com/msoedov/agentic_security.git synced 2026-08-09 03:06:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
705 Commits 16 Branches 23 Tags
42615e506ac991b1ebdb23689fa0c618dafea00a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexander Myasoedov 42615e506a fix(build): 2026-06-23 10:20:10 +03:00
Alexander MyasoedovandGitHub e6459a551a Merge pull request #321 from DevamShah/config-pluggable-detectors 
feat: config-pluggable refusal classifiers and leak detectors
 2026-06-23 10:12:26 +03:00
Alexander MyasoedovandGitHub 8e12141df8 Merge pull request #318 from nakshaatraa/docs/fuzzer-module-docstring 
docs: add module-level docstring and document constants in fuzzer.py
 2026-06-15 12:55:19 +03:00
Alexander MyasoedovandGitHub b90b80a0af Merge pull request #317 from nakshaatraa/fix/image-generator-matplotlib-warnings 
fix: set matplotlib Agg backend and sanitize prompt whitespace
 2026-06-15 12:54:41 +03:00
Alexander MyasoedovandGitHub b827a0b186 Merge pull request #316 from jasoncobra3/chore/delete-agno-dead-code-v2 
chore: delete Agno dead code (Phase 1)
 2026-06-15 12:52:19 +03:00
Alexander MyasoedovandGitHub 21f7517ef9 Merge pull request #314 from JackSpiece/chore/remove-mcp 
chore: delete MCP server and client
 2026-06-11 17:46:04 +03:00
Alexander MyasoedovandGitHub 438f30bfb2 Merge pull request #313 from JackSpiece/chore/remove-agno 
chore: remove leftover Agno artifacts
 2026-06-10 23:55:45 +03:00
Alexander MyasoedovandGitHub 13b03b958f Merge pull request #310 from zhanz5/fix/cost-calculation-model-aware 
fix: make cost calculation model-aware instead of hardcoded to deepseek-chat
 2026-06-05 10:12:41 +03:00
Alexander Myasoedov 6ae9ea8bfe fix(pc): 2026-06-04 18:32:42 +03:00
Alexander Myasoedov 40a8284656 feat(clean readme): 2026-06-04 18:29:25 +03:00
Alexander Myasoedov ead8f85836 feat(feat(refusal): detect Docker/K8s sandbox escape probes (#280)): 2026-06-04 18:28:12 +03:00
Alexander Myasoedov 6dcda7c931 fix(fix(security): bind server to 127.0.0.1 instead of 0.0.0.0 by default): 2026-06-04 17:53:35 +03:00
Alexander MyasoedovandGitHub 7b8d238254 Merge pull request #305 from zhanz5/fix/remove-duplicate-probedataset-msj 
fix: remove duplicate ProbeDataset class from msj_data.py
 2026-06-04 17:47:17 +03:00
Alexander Myasoedov 3b26e57b9e fix(pc): 2026-06-03 15:13:19 +03:00
Alexander MyasoedovandGitHub 5ce4ed5d91 Merge pull request #301 from JackSpiece/fix/tailwind-v4-static-classes 
fix: migrate static UI to Tailwind v4
 2026-06-03 15:10:49 +03:00
Alexander Myasoedov 816c8c6bc7 fix(make litellm optional import): 2026-06-03 15:08:23 +03:00
Alexander Myasoedov a193ef9c2c fix(pc): 2026-06-03 15:05:59 +03:00
Alexander MyasoedovandGitHub 67cedfb116 Merge pull request #299 from RheagalFire/feat/add-litellm-provider 
feat: add LiteLLM as provider for 100+ LLM backends
 2026-06-03 15:04:18 +03:00
Alexander MyasoedovandGitHub 50266554fe Merge pull request #297 from ykd007/feat/mcp-claude-docs-193 
document Claude MCP usage in README
 2026-06-03 15:02:59 +03:00
Alexander MyasoedovandGitHub 1fa66bd292 Merge pull request #300 from JackSpiece/fix/mcp-client-usage-examples 
docs: add MCP client usage examples
 2026-06-03 15:01:02 +03:00
Alexander Myasoedov 1bfb7dcc20 fix(use_agg_backend): 2026-06-03 14:59:43 +03:00
Alexander MyasoedovandGitHub c0322d1130 Merge pull request #303 from Carlos-Projects/feat/agno-mcp-integration 
feat: add MCP+Agno integration docs and report chart tests
 2026-06-03 14:55:58 +03:00
Alexander MyasoedovandGitHub a47543e5e0 Merge pull request #304 from zhanz5/fix/scan-csv-route-implementation 
fix: implement scan-csv route to actually use uploaded CSV data
 2026-06-03 14:54:28 +03:00
Alexander Myasoedov 47ee4f09a6 fix(security alerts): 2026-06-03 14:52:45 +03:00
Alexander Myasoedov bcc12a9443 fix(cost fn): 2026-06-03 14:52:29 +03:00
Alexander Myasoedov d2bbad32b4 fix(fmt): 2026-05-27 22:05:37 +03:00
Alexander MyasoedovandGitHub 40e59860c0 Merge pull request #302 from Carlos-Projects/main 
fix: strip Content-Length and make hardcoded values configurable (closes #139, #167)
 2026-05-27 22:00:20 +03:00
Alexander MyasoedovandGitHub 2aabcef414 Merge pull request #291 from Dawn-Fighter/feat/pii-leak-detector 
feat: add PII leak detector
 2026-05-14 20:25:09 +03:00
Alexander Myasoedov 2896974005 fix(pc): 2026-05-14 19:23:22 +03:00
Alexander MyasoedovandGitHub e38365c904 Merge pull request #290 from ykd007/feat/google-sheets-dataset-support 
feat(datasets): support Google Sheets URLs in dataset loader
 2026-05-14 19:20:49 +03:00
Alexander Myasoedov 669169bd11 feat(vercel): 2026-05-14 19:19:44 +03:00
Alexander Myasoedov cb64a3b70c fix(script): 2026-05-14 19:16:51 +03:00
Alexander Myasoedov e2bf837e00 fix(docs): 2026-05-14 19:15:12 +03:00
Alexander Myasoedov 0fba1ccadf feat(docs/vercel.sh): 2026-05-14 19:14:09 +03:00
Alexander Myasoedov d5cd85f8cb fix(ci): 2026-05-14 19:08:40 +03:00
Alexander Myasoedov 695eac4144 fix(build): 2026-05-14 19:04:16 +03:00
Alexander Myasoedov 50785b9850 fix(pc): 2026-05-14 18:59:37 +03:00
Alexander Myasoedov a0b2b9ec70 feat(py upgrade): 2026-05-14 18:56:24 +03:00
Alexander Myasoedov 46ec775266 feat(deprecate ui): 2026-05-14 18:40:27 +03:00
Alexander MyasoedovandGitHub 5b90eb032a Merge pull request #277 from niveshdandyan/add-full-event-log 
feat: add full event log export for all scan events
 2026-02-03 18:54:09 +02:00
Alexander MyasoedovandGitHub 796bd33432 Merge pull request #276 from msoedov/feat/research-enhancements 
Feat/research enhancements
 2026-01-28 21:09:00 +02:00
Alexander Myasoedov bc7fdd7cfa fix(pc): 2026-01-28 21:04:29 +02:00
Alexander Myasoedov 8d42a84a9d fix(cleanup): 2026-01-28 21:00:08 +02:00
Alexander Myasoedov 49b2243258 docs: Update PRD and progress for US-005 completion 2026-01-28 18:52:42 +02:00
Alexander Myasoedov b38a27d78c feat: US-005 - Enhanced Refusal Detection with Hybrid Approach 
Implement hybrid refusal classifier combining multiple detection methods:
- Add confidence scoring to refusal detection (HybridResult)
- Implement weighted voting with configurable thresholds
- Support require_unanimous mode for strict classification
- Add factory function create_hybrid_classifier for common setup
- Include 32 unit tests with table-driven test patterns
 2026-01-28 18:52:20 +02:00
Alexander Myasoedov d5e2746567 docs: Update PRD and progress for US-004 completion 2026-01-28 18:35:07 +02:00
Alexander Myasoedov 41567925aa feat: US-004 - Unified LLM Provider Abstraction 
Create unified provider abstraction layer for direct LLM integrations beyond
HTTP specs, inspired by FuzzyAI's comprehensive provider system.

- Add BaseLLMProvider abstract class with standard interface (generate, chat,
  sync_generate, sync_chat methods)
- Implement OpenAIProvider supporting chat completions API
- Implement AnthropicProvider supporting messages API
- Create provider factory for instantiation by name (create_provider,
  get_provider_class)
- Add 60 unit tests covering all provider implementations
 2026-01-28 18:34:38 +02:00
Alexander Myasoedov 29decc5c4e docs: Update PRD and progress for US-003 completion 2026-01-28 18:29:44 +02:00
Alexander Myasoedov f8e3f6f4a5 feat: US-003 - Composable Fuzzing Chain System 
Implement FuzzNode and FuzzChain classes for multi-step attack chains
with pipe operator syntax, inspired by FuzzyAI architecture.

- FuzzNode: Single LLM call with {var} template substitution
- FuzzChain: Sequential execution passing output as input
- Pipe operator (|) for composing nodes into chains
- LLMProvider protocol for provider abstraction
- 22 unit tests covering composition and execution
 2026-01-28 18:29:22 +02:00
Alexander Myasoedov d5ec249b6c docs: Update PRD and progress for US-002 completion 2026-01-28 18:23:30 +02:00
Alexander Myasoedov ef35c1f82e feat: US-002 - YAML-based Attack Rule System 
Implement a YAML-based rule system for defining attack patterns and success
conditions, inspired by Promptmap's 50+ YAML rule definitions.

Features:
- AttackRule model with name, type, severity, prompt, pass/fail conditions
- RuleLoader for parsing YAML files with validation
- Support for recursive directory loading and filtering by type/severity
- Template variable substitution in prompts
- Dataset integration for converting rules to ProbeDataset format
- YAMLRulesDatasetLoader for loading rules from multiple directories

Tested with 47 unit tests covering models, loader, and dataset integration.
Successfully loads 69 rules from promptmap research directory.
 2026-01-28 18:23:04 +02:00
Alexander Myasoedov 93a85029cb docs: Update PRD and progress for US-001 completion 2026-01-28 18:18:32 +02:00
Alexander Myasoedov 32f103acbc feat: US-001 - Dual-LLM Evaluation for Attack Success Detection 
Add LLM-based refusal classifier inspired by Promptmap's dual-LLM
architecture. The controller LLM evaluates whether an attack succeeded
by analyzing the target's response against pass/fail conditions.

- Create LLMRefusalClassifier plugin integrating with existing system
- Support OpenAI and Anthropic providers with lazy initialization
- Add configurable system prompts and pass/fail conditions
- Include 20 unit tests for comprehensive coverage
 2026-01-28 18:18:09 +02:00
Alexander Myasoedov ce7636fe9e feat(restruct tests): 2025-12-26 22:58:21 +02:00
Alexander Myasoedov 433c999600 feat(clean up obsolete agents): 2025-12-24 08:21:48 +02:00
Alexander MyasoedovandGitHub 268f9ecf86 Merge pull request #275 from msoedov/poc-concurrency-reporting-unified 
Poc concurrency reporting, general improvements
 2025-12-24 08:20:42 +02:00
Alexander Myasoedov 5238d67846 feat(cleanup): 2025-12-24 08:18:17 +02:00
Alexander Myasoedov a9adb22458 fix(pc): 2025-12-24 08:16:21 +02:00
Alexander Myasoedov 2dc41af98d feat(cleanup): 2025-12-24 08:11:43 +02:00
Alexander Myasoedov 48125bd106 feat(add executor): 2025-12-24 08:10:08 +02:00
Alexander Myasoedov 5285fdd0a0 codex quality run #1 2025-12-10 23:06:40 +02:00
Alexander Myasoedov bf628db5c4 codex quality run #1 2025-12-10 22:53:55 +02:00
Alexander Myasoedov d56b406e1a fix(tests runtime): 2025-12-09 20:00:04 +02:00
Alexander Myasoedov b9dc5de708 feat(add cache dir): 2025-12-09 19:51:47 +02:00
Alexander Myasoedov 9a4fb05491 fix(pc): 2025-11-30 18:50:00 +02:00
Alexander Myasoedov 3e2df49976 fix(pc): 2025-11-30 18:47:15 +02:00
Alexander Myasoedov 14eefb7a67 fix(clean up): 2025-11-30 18:43:37 +02:00
Alexander Myasoedov 7a9c884333 fix(pc): 2025-11-30 18:41:00 +02:00
Alexander Myasoedov a8b5876883 fix(ga): 2025-11-30 18:38:41 +02:00
Alexander Myasoedov fbe9885c0b fix(simplify workflow): 2025-11-30 18:37:23 +02:00
Alexander Myasoedov 583eec1a67 fix(gh): 2025-11-30 18:36:33 +02:00
Alexander Myasoedov f19664f95c fix(pc): 2025-11-30 18:32:58 +02:00
Alexander Myasoedov b3ae0026fb fix(warnings): 2025-11-30 18:30:55 +02:00
Alexander Myasoedov 8ddfec303f feat(poetry update): 2025-11-30 14:21:20 +02:00
Alexander MyasoedovandGitHub c45778f196 Merge pull request #252 from Davda-James/feat/mcp_client_logging 
logging added for mcp client operations
 2025-08-21 15:00:22 +03:00
Alexander Myasoedov a5bdbe54a2 Merge branch 'main' of github.com:msoedov/agentic_security 2025-08-13 13:52:19 +03:00
Alexander Myasoedov 61da912f18 feat(update deps): 2025-08-13 13:46:37 +03:00
Alexander MyasoedovandGitHub c5406e8a0e Merge pull request #238 from msoedov/dependabot/npm_and_yarn/ui/multi-96c788614a 
build(deps): bump on-headers and compression in /ui
 2025-07-18 13:33:47 +03:00
Alexander MyasoedovandGitHub 0a07fc54d6 Merge pull request #229 from msoedov/dependabot/pip/requests-2.32.4 
build(deps): bump requests from 2.32.3 to 2.32.4
 2025-06-10 14:03:41 +03:00
Alexander Myasoedov d0353e3ab9 fix(bump pyproject): 2025-05-27 13:46:33 +03:00
Alexander Myasoedov 926c583a17 fix(csv ds loading): 2025-05-27 13:41:10 +03:00
Alexander Myasoedov 17e34356e1 feat(bump version): 2025-05-19 12:35:44 +03:00
Alexander Myasoedov 312fa756a5 feat(rm ref): 2025-05-19 12:33:27 +03:00
Alexander Myasoedov 145e7f81e1 feat(Update readme): 2025-05-19 12:32:48 +03:00
Alexander MyasoedovandGitHub 04af7d24a1 Merge pull request #223 from lwsinclair/add-mseep-badge 
Add MseeP.ai badge
 2025-05-19 12:31:16 +03:00
Alexander Myasoedov c5c5ae2e4b fix(makedir): 2025-05-19 12:29:28 +03:00
Alexander MyasoedovandGitHub 2bc0605a1d Merge pull request #224 from Mundi-Xu/datasets-optimize 
refactor: standardize CSV loading from ./datasets and improve robustness
 2025-05-19 12:27:25 +03:00
Alexander MyasoedovandGitHub 444f908009 Merge pull request #220 from msoedov/dependabot/npm_and_yarn/ui/http-proxy-middleware-2.0.9 
build(deps-dev): bump http-proxy-middleware from 2.0.7 to 2.0.9 in /ui
 2025-05-02 13:04:54 +03:00
Alexander MyasoedovandGitHub 4a55b99d70 Merge pull request #215 from Davda-James/fix/Dockerfile 
Fixed the Dockerfile error of setuptools and wheel
 2025-04-09 19:56:08 +03:00
Alexander Myasoedov aa2fe4d1ad feat(bump version): 2025-04-07 14:37:59 +03:00
Alexander Myasoedov cf7c017621 feat(add mcp to deps): 2025-04-07 14:32:40 +03:00
Alexander Myasoedov 73184e3454 fix(simplify tests): 2025-04-07 14:29:41 +03:00
Alexander Myasoedov 3720ece2af fix(test vars): 2025-04-03 20:48:23 +03:00
Alexander Myasoedov 0dc738a11e fix(pc): 2025-04-03 20:43:53 +03:00
Alexander MyasoedovandGitHub 47ca656d59 Merge pull request #213 from sjay8/main 
Fixed issues 191 195
 2025-04-03 20:42:50 +03:00
Alexander Myasoedov 77557ade85 feat(bump version): 2025-04-02 20:03:19 +03:00
Alexander Myasoedov 5cdbf933de fix(handling InvalidHTTPSpecError): 2025-04-02 20:02:46 +03:00
Alexander Myasoedov 54d159a737 fix(Level: Error/Cannot read properties of undefined (reading 'contains')): 2025-04-02 19:56:48 +03:00
Alexander Myasoedov 35fd373cb2 fix(pc): 2025-04-02 13:33:20 +03:00
Alexander Myasoedov f2b95a0040 fix(tests): 2025-04-02 13:31:36 +03:00