This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryScanner upgraded to "诊断 + 处方", providing domestic compliance model alternatives and seamless migration guidance.
Full changelog
扫描器从「诊断」升级为「诊断 + 处方」。
新增
- 境内合规替代建议:扫到境外大模型(端点 / SDK 依赖)时,自动给出境内已备案模型替代方案——通义千问 / DeepSeek / Kimi / 智谱 GLM / 豆包 / 文心,附 OpenAI 兼容
base_url与迁移难度 - 杀手锏:使用
openaiSDK 的项目通常只需改base_url+key、代码零改动即可迁移到合规模型 /compliance、MCPcompliance_check、npx shellward scan三处均含处方段
体验
```bash
npx shellward scan # 含境外依赖的项目会看到「境内合规替代建议」
```
全套 242 测试通过。
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
Related context
Related tools
Beta — feedback welcome: [email protected]