gstack/browse
Garry Tan 6d6aa3be3c
test(security): mock-claude scenario for tool-result injection path
Adds MOCK_CLAUDE_SCENARIO=tool_result_injection. Emits a Bash tool_use
followed by a user-role tool_result whose content is a classic
DAN-style prompt-injection string. The warm TestSavantAI classifier
trips at 0.9999 on this text, reliably firing the tool-output BLOCK +
review flow for the full-stack E2E.

Stays alive up to 120s so a test has time to propagate the user's
review decision via /security-decision + the on-disk decision file.
SIGTERM exits 143 on user-confirmed block.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 20:55:25 +08:00
..
bin feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226) 2026-03-19 18:20:50 -07:00
scripts fix: ngrok Windows build + close CI error-swallowing gap (v0.18.0.1) (#1024) 2026-04-16 13:49:04 -07:00
src feat(security): wait-for-decision instead of hard-kill on tool-output BLOCK 2026-04-20 20:25:20 +08:00
test test(security): mock-claude scenario for tool-result injection path 2026-04-20 20:55:25 +08:00
PLAN-snapshot-dropdown-interactive.md fix: snapshot -i auto-detects dropdown/popover interactive elements (#845) 2026-04-05 22:57:45 -07:00
SKILL.md feat(v1.4.0.0): /make-pdf — markdown to publication-quality PDFs (#1086) 2026-04-20 13:20:30 +08:00
SKILL.md.tmpl feat(browse): Puppeteer parity — load-html, screenshot --selector, viewport --scale, file:// (v1.1.0.0) (#1062) 2026-04-18 23:25:33 +08:00