@drakon-systems/shieldcortex-realtime 4.47.6 → 4.47.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/interceptor.js +3 -0
- package/dist/openclaw.plugin.json +1 -1
- package/interceptor.ts +3 -0
- package/openclaw.plugin.json +1 -1
- package/package.json +1 -1
package/dist/interceptor.js
CHANGED
|
@@ -165,6 +165,9 @@ const FALLBACK_CATASTROPHIC_PATTERNS = [
|
|
|
165
165
|
// <interp>` admitted (issue #92 must-fix 3) — mirrors tool-action-guard.ts's
|
|
166
166
|
// pipe-download-to-shell pattern exactly; kept in sync there.
|
|
167
167
|
/\b(?:curl|wget|fetch)\b[^\n|]*\|(?:[^\n|]*\|)*\s*(?:\w+=\S*\s+)*(?:sudo\s+)?(?:env\s+)?(?:\w+=\S*\s+)*(?:bash|sh|zsh|ksh|python\d?|perl|ruby|node)\b(?!(?:\s+-[a-z]+)*\s+-[cem]\b)/i,
|
|
168
|
+
// Stdin-executing python MODULES defeat the -m exemption above (issue #86.1) —
|
|
169
|
+
// mirrors tool-action-guard.ts's pipe-download-module-exec; kept in sync there.
|
|
170
|
+
/\b(?:curl|wget|fetch)\b[^|\n]*\|[^\n]*\bpython\d?\b[^\n]*\s-m\s*(?:code|pty|pdb)(?![\w.])/i,
|
|
168
171
|
/\bch(?:mod|own)\b[^|;&\n]*(?:-\w*R\w*|--recursive)\b[^|;&\n]*\s\/(?:\s|$)/i,
|
|
169
172
|
];
|
|
170
173
|
const FALLBACK_SURFACE_KEYS = [
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"id": "shieldcortex-realtime",
|
|
3
|
-
"version": "4.47.
|
|
3
|
+
"version": "4.47.7",
|
|
4
4
|
"name": "ShieldCortex Real-time Scanner",
|
|
5
5
|
"description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
|
|
6
6
|
"kind": null,
|
package/interceptor.ts
CHANGED
|
@@ -269,6 +269,9 @@ const FALLBACK_CATASTROPHIC_PATTERNS: RegExp[] = [
|
|
|
269
269
|
// <interp>` admitted (issue #92 must-fix 3) — mirrors tool-action-guard.ts's
|
|
270
270
|
// pipe-download-to-shell pattern exactly; kept in sync there.
|
|
271
271
|
/\b(?:curl|wget|fetch)\b[^\n|]*\|(?:[^\n|]*\|)*\s*(?:\w+=\S*\s+)*(?:sudo\s+)?(?:env\s+)?(?:\w+=\S*\s+)*(?:bash|sh|zsh|ksh|python\d?|perl|ruby|node)\b(?!(?:\s+-[a-z]+)*\s+-[cem]\b)/i,
|
|
272
|
+
// Stdin-executing python MODULES defeat the -m exemption above (issue #86.1) —
|
|
273
|
+
// mirrors tool-action-guard.ts's pipe-download-module-exec; kept in sync there.
|
|
274
|
+
/\b(?:curl|wget|fetch)\b[^|\n]*\|[^\n]*\bpython\d?\b[^\n]*\s-m\s*(?:code|pty|pdb)(?![\w.])/i,
|
|
272
275
|
/\bch(?:mod|own)\b[^|;&\n]*(?:-\w*R\w*|--recursive)\b[^|;&\n]*\s\/(?:\s|$)/i,
|
|
273
276
|
];
|
|
274
277
|
|
package/openclaw.plugin.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"id": "shieldcortex-realtime",
|
|
3
|
-
"version": "4.47.
|
|
3
|
+
"version": "4.47.7",
|
|
4
4
|
"name": "ShieldCortex Real-time Scanner",
|
|
5
5
|
"description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
|
|
6
6
|
"kind": null,
|
package/package.json
CHANGED