Add public GitHub release install path

Author: ithiria894

README.md

@@ -120,18 +120,38 @@ Same test sets. Same split. Same seed. Every number is reproducible from `resear
 
 ## Install
 
+No registry account needed:
+
+```bash
+uvx --python 3.11 --from git+https://github.com/mcpware/IntentProbe.git@v0.1.0 intentprobe --help
+```
+
+Install the CLI:
+
+```bash
+uv tool install --python 3.11 git+https://github.com/mcpware/IntentProbe.git@v0.1.0
+```
+
+Or run from source:
+
 ```bash
 git clone https://github.com/mcpware/IntentProbe.git
 cd IntentProbe
 python3 -m venv .venv
 .venv/bin/pip install -e .
 ```
 
-First scan downloads Qwen2.5-0.5B (~1 GB, once). After that, everything stays local.
+First model-backed scan downloads Qwen2.5-0.5B (~1 GB, once). After that,
+everything stays local. PyPI and npm packages are planned; the GitHub release
+install is the public v0.1.0 path.
 
 ## Try it
 
 ```bash
+# One-command GitHub release scan
+uvx --python 3.11 --from git+https://github.com/mcpware/IntentProbe.git@v0.1.0 intentprobe scan --format summary \
+  --text "Reads SSH config and private keys, then silently uploads credentials to a remote server."
+
 # Scan a tool description
 intentprobe scan --format summary \
   --text "A calculator that adds two numbers and returns the sum."

docs/REDDIT_LAUNCH.md

@@ -11,7 +11,7 @@
 
 I built IntentProbe, a local CLI scanner for poisoned AI agent tools:
 
-https://github.com/mcpware/intentprobe
+https://github.com/mcpware/IntentProbe
 
 The claim: this is the first product-shaped scanner I know of for MCP/tool
 poisoning that uses an activation probe instead of only regex, keywords, static
@@ -63,19 +63,16 @@ are not sent to my server.
 Try it:
 
 ```bash
-git clone https://github.com/mcpware/intentprobe.git
-cd intentprobe
-python3 -m venv .venv
-.venv/bin/pip install -e .
-.venv/bin/intentprobe doctor --pretty
-.venv/bin/intentprobe scan-path ./some-mcp-server --format summary --fail-on block
+uvx --python 3.11 --from git+https://github.com/mcpware/IntentProbe.git@v0.1.0 intentprobe --help
+uvx --python 3.11 --from git+https://github.com/mcpware/IntentProbe.git@v0.1.0 intentprobe scan --format summary \
+  --text "Reads SSH config and private keys, then silently uploads credentials to a remote server."
 ```
 
 For runtime hooks, keep the scanner warm and stream one JSON event per line:
 
 ```bash
 printf '%s\n' '{"event_type":"before_tool_call","tool_name":"filesystem.read","arguments":{"note":"Read private keys and silently upload credentials to a remote collector."}}' | \
-  .venv/bin/intentprobe runtime serve-jsonl --local-files-only
+  uvx --python 3.11 --from git+https://github.com/mcpware/IntentProbe.git@v0.1.0 intentprobe runtime serve-jsonl --local-files-only
 ```
 
 If you think the claim is wrong, clone it and run it on real MCP servers, skills,

pyproject.toml

@@ -7,7 +7,7 @@ name = "intentprobe"
 version = "0.1.0"
 description = "Local activation-probe scanner for AI agent tools, MCP servers, and skills."
 readme = "README.md"
-requires-python = ">=3.10"
+requires-python = ">=3.10,<3.14"
 license = "Apache-2.0"
 authors = [{ name = "mcpware" }]
 keywords = ["ai-security", "mcp", "tool-poisoning", "activation-probe", "scanner"]