hackagent 0.10.1__tar.gz → 0.12.0__tar.gz

{hackagent-0.10.1 → hackagent-0.12.0}/.gitignore

@@ -5,6 +5,9 @@ logs/
 reports/
 .adk/
 slurm/
+tools/
+docs/docs/attacks/walkthroughs/
+.worktrees/
 
 # Editors
 .vscode/
@@ -52,6 +55,8 @@ MANIFEST
 #  before PyInstaller builds the exe, so as to inject date/other infos into it.
 *.manifest
 *.spec
+# The release build spec is checked in, unlike generated ones.
+!packaging/hackagent.spec
 
 # Installer logs
 pip-log.txt
@@ -134,4 +139,9 @@ dmypy.json
 
 
 .copilotignore
-tests/e2e/attacks/
+tests/e2e/attacks/
+
+.tmp
+
+# pytest-textual-snapshot report artifact
+snapshot_report.html

{hackagent-0.10.1 → hackagent-0.12.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hackagent
-Version: 0.10.1
+Version: 0.12.0
 Summary: HackAgent is an open-source security toolkit to detect vulnerabilities of your AI Agents.
 Author-email: AI Security Lab <ais@ai4i.it>
 License: Apache-2.0
@@ -18,14 +18,16 @@ Requires-Python: >=3.10
 Requires-Dist: click>=8.1.0
 Requires-Dist: datasets>=2.14.0
 Requires-Dist: faiss-cpu>=1.13.2
+Requires-Dist: flask>=3.1.2
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: litellm>=1.69.2
 Requires-Dist: nicegui>=2.0
 Requires-Dist: openai>=1.0.0
+Requires-Dist: pillow>=10.0.0
+Requires-Dist: playwright>=1.40
 Requires-Dist: pydantic[email]>=2.0
 Requires-Dist: python-dateutil>=2.8.0
 Requires-Dist: pyyaml>=6.0.0
-Requires-Dist: requests>=2.31.0
 Requires-Dist: rich>=14.0.0
 Requires-Dist: textual>=1.0.0
 Description-Content-Type: text/markdown
@@ -41,6 +43,10 @@ Description-Content-Type: text/markdown
 
 [App](https://app.hackagent.dev/) -- [Docs](https://docs.hackagent.dev/) -- [API](https://api.hackagent.dev/schema/redoc)
 
+[![Security Policy](https://img.shields.io/badge/security-policy-blue?logo=github)](SECURITY.md)
+
+<br>
+
 <br>
 
 ![Python Version](https://img.shields.io/badge/python-3.10%2B-blue)
@@ -86,6 +92,27 @@ pip install hackagent
 
 No API key required: HackAgent works locally out of the box.
 
+### Standalone binary (no Python required)
+
+Every [GitHub Release](https://github.com/AISecurityLab/hackagent/releases) ships a
+self-contained archive per platform:
+
+| Platform | Asset |
+|----------|-------|
+| Linux x86_64 | `hackagent-<version>-linux-x86_64.tar.gz` |
+| macOS arm64 | `hackagent-<version>-macos-arm64.tar.gz` |
+| macOS x86_64 | `hackagent-<version>-macos-x86_64.tar.gz` |
+| Windows x86_64 | `hackagent-<version>-windows-x86_64.zip` |
+
+Extract the archive and run the `hackagent` launcher inside it — no Python, `pip`
+or `uv` install needed. Keep the extracted folder intact; the launcher loads the
+libraries next to it.
+
+> **Note:** the `WEB` provider drives a real browser through Playwright, whose
+> browser binaries cannot be embedded in the archive (or in the PyPI package).
+> Before using `hackagent web`-based targets, install them once with
+> `playwright install`.
+
 
 Questions? Join [community discussions](https://github.com/AISecurityLab/hackagent/discussions) or email ais@ai4i.it.
 
@@ -95,11 +122,11 @@ HackAgent uses a modular pipeline to test agent robustness end-to-end.
 
 | Component | Description |
 |-----------|-------------|
-| **Attack Engine** | Orchestrates attacks using AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Baseline |
+| **Attack Engine** | Orchestrates attacks using AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Static Template |
 | **Generator** | LLM role that creates adversarial prompts to test the target agent |
 | **Judge** | LLM role that evaluates whether attacks bypass safety measures |
 | **Target Agent** | Your AI agent under test across supported frameworks |
-| **Datasets** | Pre-built benchmark presets plus custom HuggingFace/file datasets |
+| **Datasets** | Pre-built benchmark presets plus custom HuggingFace/file/URL JSON datasets |
 
 ## Supported Frameworks
 

{hackagent-0.10.1 → hackagent-0.12.0}/README.md

@@ -9,6 +9,10 @@
 
 [App](https://app.hackagent.dev/) -- [Docs](https://docs.hackagent.dev/) -- [API](https://api.hackagent.dev/schema/redoc)
 
+[![Security Policy](https://img.shields.io/badge/security-policy-blue?logo=github)](SECURITY.md)
+
+<br>
+
 <br>
 
 ![Python Version](https://img.shields.io/badge/python-3.10%2B-blue)
@@ -54,6 +58,27 @@ pip install hackagent
 
 No API key required: HackAgent works locally out of the box.
 
+### Standalone binary (no Python required)
+
+Every [GitHub Release](https://github.com/AISecurityLab/hackagent/releases) ships a
+self-contained archive per platform:
+
+| Platform | Asset |
+|----------|-------|
+| Linux x86_64 | `hackagent-<version>-linux-x86_64.tar.gz` |
+| macOS arm64 | `hackagent-<version>-macos-arm64.tar.gz` |
+| macOS x86_64 | `hackagent-<version>-macos-x86_64.tar.gz` |
+| Windows x86_64 | `hackagent-<version>-windows-x86_64.zip` |
+
+Extract the archive and run the `hackagent` launcher inside it — no Python, `pip`
+or `uv` install needed. Keep the extracted folder intact; the launcher loads the
+libraries next to it.
+
+> **Note:** the `WEB` provider drives a real browser through Playwright, whose
+> browser binaries cannot be embedded in the archive (or in the PyPI package).
+> Before using `hackagent web`-based targets, install them once with
+> `playwright install`.
+
 
 Questions? Join [community discussions](https://github.com/AISecurityLab/hackagent/discussions) or email ais@ai4i.it.
 
@@ -63,11 +88,11 @@ HackAgent uses a modular pipeline to test agent robustness end-to-end.
 
 | Component | Description |
 |-----------|-------------|
-| **Attack Engine** | Orchestrates attacks using AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Baseline |
+| **Attack Engine** | Orchestrates attacks using AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Static Template |
 | **Generator** | LLM role that creates adversarial prompts to test the target agent |
 | **Judge** | LLM role that evaluates whether attacks bypass safety measures |
 | **Target Agent** | Your AI agent under test across supported frameworks |
-| **Datasets** | Pre-built benchmark presets plus custom HuggingFace/file datasets |
+| **Datasets** | Pre-built benchmark presets plus custom HuggingFace/file/URL JSON datasets |
 
 ## Supported Frameworks
 

hackagent-0.12.0/hackagent/_version.py

@@ -0,0 +1,21 @@
+# Copyright 2026 - AI4I. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+"""Version lookup that also works from a frozen (PyInstaller) binary."""
+
+import os
+from importlib.metadata import PackageNotFoundError, version as _distribution_version
+
+UNKNOWN_VERSION = "unknown"
+
+
+def get_version() -> str:
+    """Return the installed ``hackagent`` version.
+
+    Frozen builds may ship without distribution metadata, so fall back to the
+    ``HACKAGENT_BUILD_VERSION`` value baked in at packaging time.
+    """
+    try:
+        return _distribution_version("hackagent")
+    except PackageNotFoundError:
+        return os.environ.get("HACKAGENT_BUILD_VERSION") or UNKNOWN_VERSION