Skip to content

Releases: jlceaser/context-guard

v0.5.0 — Context Security Layer

Choose a tag to compare

@jlceaser jlceaser released this 12 Mar 14:21

Context Security Layer

Context Guard now protects both your work state (compaction recovery) and your context content (security scanning).

New: 4 Detection Engines (Pure Bash)

Engine What it detects
Injection Scanner Instruction override, identity reassignment, tag injection, jailbreak (15+ patterns)
Leakage Scanner API keys, AWS credentials, private keys, JWT, GitHub/GitLab tokens (13+ patterns)
File Guard Sensitive file reads: .env, .pem, SSH keys, credentials (20+ patterns)
Manipulation Scanner Fake system tags, hidden instructions, zero-width characters

New: Security Hooks

  • PreToolUse — scans tool inputs before execution (can block or warn)
  • PostToolUse — scans tool outputs after execution (warns via systemMessage)

3 Security Modes

Mode Behavior
warn (default) Alerts without blocking — safe for daily use
block Prevents dangerous tool calls
log Silent audit trail

New Components

  • context-security-lib.sh — scanning library (4 engines, ~300 lines)
  • security-pre-tool.sh / security-post-tool.sh — hook entry points
  • config/security-config.sh — feature toggles, mode selection
  • config/allowlist.txt — suppress known-safe patterns
  • /cg-security-status — security dashboard skill
  • /cg-security-config — manage settings skill
  • context-security-rules.md — hookify protection rules

Stats

  • 17 files changed, 1358 insertions
  • 61 tests passing, 0 failures
  • Zero new dependencies — pure bash maintained
  • Architecture expanded from 5 to 6 layers

Install / Update

# Plugin (recommended)
/plugin marketplace add jlceaser/context-guard
/plugin install context-guard@jlceaser

# Manual
git pull origin main
bash install.sh
bash test.sh

Full changelog: https://github.com/jlceaser/context-guard/blob/main/CHANGELOG.md

Context Guard v0.4.1

Choose a tag to compare

@jlceaser jlceaser released this 10 Mar 00:12

Context Guard v0.4.1

Unified versioning to 0.x.x semantic scheme across all components.

Changes

  • All version references unified to 0.4.1 (previously mixed 4.x.x / 0.x.x schemes)
  • marketplace.json, plugin.json, install.sh, README.md, CHANGELOG.md all consistent
  • compact-guard-post.sh now registered as SessionStart hook for automatic recovery injection
  • CLAUDE_AUTOCOMPACT_PCT_OVERRIDE raised to 99% — compaction triggers only at near-full context
  • cg-budget skill version updated to 0.4.1

Installation

git clone https://github.com/jlceaser/context-guard
cd context-guard
bash install.sh

Verify

bash test.sh