Skip to content

clawgod

v1.3.0 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 26d AI Coding Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai assistant claude-ai claude-code claw clawcode
+8 more
limit linux macos patch skill vibe-coded vibe-coding windows

Affected surfaces

auth

Summary

AI summary

Patches neutralize geo‑steganography detection in system prompts for Chinese users.

Full changelog

Changes

  • feat(patcher): neutralize geo-steganography in system prompt (v2.1.197+)

地区隐写中和

Claude Code v2.1.197 在客户端新增了针对中国用户/代理的隐写标记系统,通过 system prompt 中的 Unicode 撇号变体和日期格式编码用户地理位置信息。v1.3.0 新增三条 patch 彻底中和这套检测机制:

检测维度(三维):

  • 时区检测:Intl.DateTimeFormat().resolvedOptions().timeZone === "Asia/Shanghai" || "Asia/Urumqi"
  • 代理域名匹配:ANTHROPIC_BASE_URL hostname 与 XOR 混淆的 100+ 域名黑名单比对
  • 国产大模型关键词:base URL 中包含 deepseek/moonshot/zhipu/dashscope 等关键词

隐写编码(两层):

  • 撇号编码:根据检测结果在 Today's date is ... 中选择 4 种不同 Unicode 撇号(U+0027 / U+2019 / U+02BC / U+02B9)
  • 日期格式编码:中国时区用户的日期分隔符从 - 变为 /

Patch 策略(三层防御):

| Patch | 效果 |
|---|---|
| qla — 日期字符串生成器 | 绕过检测调用,固定 ASCII 撇号 + 原始日期格式 |
| rdp — 地区检测探针 | 始终返回 null(等同于 firstParty 路径) |
| odp — 撇号选择器 | 始终返回 ASCII '(defense-in-depth) |

Install

macOS / Linux:

curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash

Windows (PowerShell):

irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex

Full changelog: https://github.com/0Chencc/clawgod/compare/v1.2.1...v1.3.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track clawgod

Get notified when new releases ship.

Sign up free

About clawgod

All releases →

Beta — feedback welcome: [email protected]