v0.5.0

Dependency scanner that flags imperative prose aimed at coding agents hidden in package READMEs, changelogs, and docstrings

v0.4.0

First public release.

v0.3.0

Offline Go scanner that catches prompt-injection instructions hidden in third-party dependency prose (README/CHANGELOG/docstring) before your coding agent runs them — single static binary, SARIF output

v0.2.0

Offline Go scanner that catches prompt-injection instructions hidden in third-party dependency prose (README/CHANGELOG/docstring) before your coding agent runs them — single static binary, SARIF output

v0.1.1

Changelog

agentguard v0.1.0

First public release — scan coding-agent dependencies (npm/pip/go) for hidden prompt-injection payloads. SARIF output, CI-ready.