@gendigital/sage-openclaw 0.9.0 → 0.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +63 -20
- package/dist/index.cjs +695 -203
- package/dist/index.cjs.map +4 -4
- package/dist/model-download-worker.cjs +426 -19
- package/dist/model-download-worker.cjs.map +4 -4
- package/openclaw.plugin.json +1 -1
- package/package.json +11 -2
- package/resources/threats/prompt-injection.yaml +2 -1
- package/resources/threats/win-credentials.yaml +1 -1
package/openclaw.plugin.json
CHANGED
package/package.json
CHANGED
|
@@ -1,9 +1,18 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@gendigital/sage-openclaw",
|
|
3
3
|
"license": "Apache-2.0",
|
|
4
|
-
"version": "0.
|
|
4
|
+
"version": "0.10.0",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"description": "Safety for Agents — ADR layer for OpenClaw",
|
|
7
|
+
"homepage": "https://github.com/gendigitalinc/sage",
|
|
8
|
+
"repository": {
|
|
9
|
+
"type": "git",
|
|
10
|
+
"url": "https://github.com/gendigitalinc/sage.git",
|
|
11
|
+
"directory": "packages/openclaw"
|
|
12
|
+
},
|
|
13
|
+
"bugs": {
|
|
14
|
+
"url": "https://github.com/gendigitalinc/sage/issues"
|
|
15
|
+
},
|
|
7
16
|
"main": "./dist/index.cjs",
|
|
8
17
|
"files": [
|
|
9
18
|
"dist/**",
|
|
@@ -21,7 +30,7 @@
|
|
|
21
30
|
"esbuild": "^0.25.0",
|
|
22
31
|
"typescript": "^5.9.0",
|
|
23
32
|
"vitest": "^4.0.0",
|
|
24
|
-
"@gendigital/sage-core": "0.
|
|
33
|
+
"@gendigital/sage-core": "0.10.0"
|
|
25
34
|
},
|
|
26
35
|
"openclaw": {
|
|
27
36
|
"extensions": [
|
|
@@ -257,7 +257,8 @@
|
|
|
257
257
|
confidence: 0.85
|
|
258
258
|
action: block
|
|
259
259
|
case_insensitive: true
|
|
260
|
-
|
|
260
|
+
# Require a reasonably long hidden link target/title plus a high-signal PI phrase.
|
|
261
|
+
pattern: "\\[[^\\]]*\\]\\((?=[^)]{40,}\\))[^)]*(?:ignore\\s+previous\\s+instructions|forget\\s+instructions|system\\s+prompt|override\\s+instructions)[^)]*\\)"
|
|
261
262
|
match_on: content
|
|
262
263
|
title: "Structural injection: markdown link with hidden injection"
|
|
263
264
|
expires_at: null
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
severity: high
|
|
33
33
|
confidence: 0.80
|
|
34
34
|
action: require_approval
|
|
35
|
-
pattern: "
|
|
35
|
+
pattern: "(^|[^\\w-])(?:type|more|[Gg]et-[Cc]ontent)\\b.*\\.(?:env|credentials|pgpass|netrc)(?=$|[.\\s\"'`;&|)<>])"
|
|
36
36
|
match_on: command
|
|
37
37
|
title: "Reading credential file via type/more/Get-Content"
|
|
38
38
|
expires_at: null
|