Willem Jiang a814ab50b5 fix(skills): make security scanner JSON parsing robust for LLM output variations (#2987) ...

The moderation model's response was silently falling through to a
  conservative block when LLMs wrapped structured output in markdown
  code fences, added prose around the JSON, returned case-variant
  decisions (e.g. "Allow"), or included nested braces in the reason
  field. The greedy `\{.*\}` regex also over-matched on nested braces.

  - Rewrite _extract_json_object() with markdown fence stripping and
    brace-balanced string-aware extraction
  - Normalize decision field to lowercase for case-insensitive matching
  - Distinguish "model unavailable" from "unparseable output" in fallback
  - Strengthen system prompt to explicitly forbid code fences and prose
  - Add 15 tests covering all reported scenarios

  Fixes #2985

2026-05-17 08:59:42 +08:00

..

storage

fix(harness): resolve runtime paths from project root (#2642)

2026-05-01 22:19:50 +08:00

__init__.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

installer.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

parser.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

security_scanner.py

fix(skills): make security scanner JSON parsing robust for LLM output variations (#2987)

2026-05-17 08:59:42 +08:00

tool_policy.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

types.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

validation.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00