shield-llm 0.1.0 → 0.1.1

package/bin/shield-llm.js

@@ -1,2 +1,2 @@
-#!/usr/bin/env node
-import "../dist/cli.js";
+#!/usr/bin/env node
+import "../dist/cli.js";

package/dist/{chunk-6HLD55BG.js → chunk-XTU2RLZM.js}

@@ -2411,6 +2411,9 @@ function extractQuotedText(text2) {
   }
   return results;
 }
+function escapeHtml(str) {
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#x27;");
+}
 
 // ../../packages/shared/src/remediation/types.ts
 var LAYER_META = {
@@ -24059,8 +24062,9 @@ function buildOwaspCoverage(map) {
   });
 }
 function buildExecutiveSummary(totalVulns, critical, crescendo, combo, high, medium, totalTests, target) {
+  const safeTarget = escapeHtml(target);
   if (totalVulns === 0) {
-    return `The assessment identified <strong>no vulnerabilities</strong> across ${totalTests} automated tests mapped to the OWASP LLM Top 10 2025 framework. The chatbot at <strong>${target}</strong> successfully defended against all attack vectors tested. No immediate action is required.`;
+    return `The assessment identified <strong>no vulnerabilities</strong> across ${totalTests} automated tests mapped to the OWASP LLM Top 10 2025 framework. The chatbot at <strong>${safeTarget}</strong> successfully defended against all attack vectors tested. No immediate action is required.`;
   }
   const parts = [];
   if (critical > 0) parts.push(`${critical} critical`);

package/dist/cli.js

@@ -16,7 +16,7 @@ import {
   generatePdf,
   loadConfig,
   loadSystemPrompt
-} from "./chunk-6HLD55BG.js";
+} from "./chunk-XTU2RLZM.js";
 import "./chunk-7D5WVZW5.js";
 
 // src/cli.ts
@@ -1344,7 +1344,7 @@ process.on("uncaughtException", (err) => {
 });
 var program = new Command();
 program.exitOverride();
-program.name("shield-llm").description("AI chatbot security scanner \u2014 automated red teaming for LLMs").version("0.1.0");
+program.name("shield-llm").description("AI chatbot security scanner \u2014 automated red teaming for LLMs").version("0.1.1");
 program.command("scan").description("Run a security scan against a target chatbot").option("-c, --config <path>", "Path to shield.config.json").option("-p, --provider <name>", "Target provider (openai, mistral)").option("-m, --model <name>", "Target model name").option("-e, --endpoint <url>", "Target chatbot HTTP endpoint URL").option("--auth <type>", "Auth type: bearer, api-key, oauth2").option("--token <value>", "Bearer token or API key value").option("--auth-header <name>", "Custom auth header name (for api-key auth)").option(
   "--response-field <path>",
   "Dot-notation path to response text in JSON (default: response)"

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   generatePdf,
   loadConfig,
   loadSystemPrompt
-} from "./chunk-6HLD55BG.js";
+} from "./chunk-XTU2RLZM.js";
 import "./chunk-7D5WVZW5.js";
 export {
   ConfigError,