[v4.6.6] - 2026-10-15
Added
- Agent-Scan: Add Atlas Cloud provider preset (PR #706, 6a14a56)
- Agent-Scan: Add API Route provider preset (PR #697, c752770)
- Agent-Scan: Add memory/RAG poisoning detection skill (PR #429, a25426c)
- CLI: Add JSON scan output (PR #682, 3eb7b46)
- Dashboard: Edit extra_headers / extra_body in the model dialog (PR #690, 57fad50)
- Eval: Add BadPhoneAgent bilingual benchmark (PR #698, 0586cb9)
Fixed
- Agent-Scan: Stream SSE responses and stop at [DONE] instead of waiting for connection close (PR #708, 1e2c69d)
- Models: Surface terminal ChatStream errors to callers and scan status (PR #702, 1fa464c)
- Models: Abort instead of retrying after ChatStream emitted partial output (PR #695, 5c3b6a5)
- Models: Do not panic when a provider returns no choices (PR #692, 6380426)
- Skill-Scan: Recover missing tool-call args during discovery (PR #648, f74c6d7)
- Runner: Classify severity with the vocabulary the data validator accepts (PR #694, 41bd132)
- Dashboard: Keep stored extra_headers / extra_body when the update sends the mask back (PR #689, 9f3e846)
Changed
- Prompt-Security: Drop LLM translation of report case fields (PR #703, 4ea6465)
- CI: Add contributors-readme-action to auto-update contributors list (PR #696, 22b0d38)
- Test (Agent-Scan): Mock the streaming interface in the Atlas Cloud test (3879c19)
Contributors
aigsec, nb213, wjl8636, li872, Devam Shah, helo060228, Truman, Yusheng, boyhack, ymsun2020, drow, DennyHo0917