Starstruk Logo MarkStarstruk

v0.13.3

opensandbox-group/OpenSandboxv0.13.3Dec 12, 2025by jmartin-tech

AI Summary

This release focuses on new plugins for API key detection and zero-width character injection, adds an AWS Bedrock generator, and improves documentation standards.

Key Highlights

  • New plugin: API key probe + detector
  • New plugin: Zero width bad char injection
  • New generator: AWS Bedrock generator
  • Improved OpenAICompatible classes for one generation at a time

New Features

  • API key probe + detector
  • Zero width bad char injection probe
  • AWS bedrock generator
  • Enable consistent PRNG access in generators
  • Improved probe targets for unreal pkghallu
  • Deferred loading and requirement pruning

Full Release Notes

## What's Changed

### New plugins
* probe: Api key probe + detector by @martinebl in https://github.com/NVIDIA/garak/pull/1406
* probe: zero width bad char injection by @Har1sh-k in https://github.com/NVIDIA/garak/pull/1489
* generator: AWS bedrock generator by @fabriziorocco in https://github.com/NVIDIA/garak/pull/1462

### New features
* enable consistent PRNG access in generators by @jmartin-tech in https://github.com/NVIDIA/garak/pull/1496

### Improved plugins
* probe: Add more unreal pkghallu targets by @leondz in https://github.com/NVIDIA/garak/pull/1480
* feature: `OpenAICompatible` classes do one generation at a time by default by @leondz in https://github.com/NVIDIA/garak/pull/1524

### Documentation
* docs: add test for file extensions in docs dir by @leondz in https://github.com/NVIDIA/garak/pull/1474
* docs: describe probe module doc standard; implement it in all probe modules by @leondz in https://github.com/NVIDIA/garak/pull/1473
* docs(fix): Format list in RST by @mikemckiernan in https://github.com/NVIDIA/garak/pull/1491
* docs: add projects file for tracking garak ecosystem by @leondz in https://github.com/NVIDIA/garak/pull/1493
* doc: rm links to doc source; show links to github code source by @leondz in https://github.com/NVIDIA/garak/pull/1506
* docs: check for markdown in plugin docs, check for plugin module docstrings by @leondz in https://github.com/NVIDIA/garak/pull/1505
* docs: refine markdown checks by @leondz in https://github.com/NVIDIA/garak/pull/1510

### Tuning & fixes
* tests: detector cardinality test tweaks by @leondz in https://github.com/NVIDIA/garak/pull/1476
* tool: add script for rebuilding plugin cache by @leondz in https://github.com/NVIDIA/garak/pull/1478
* allow for `apikey` case where `group=None` by @boltzmann-brain in https://github.com/NVIDIA/garak/pull/1497
* fix: metadata and vuln_id handling in AVID report export by @saichandrapandraju in https://github.com/NVIDIA/garak/pull/1495
* test: add tests for `apikey` detector `None`-group handling by @leondz in https://github.com/NVIDIA/garak/pull/1501
* bugfix: `TreeSearchProbe` should handle `None`s  by @leondz in https://github.com/NVIDIA/garak/pull/1509
* housekeeping: add code of conduct by @leondz in https://github.com/NVIDIA/garak/pull/1517
* arch: rm support for init'ing `attempt.prompt` with `str`, rm support for `attempt.lang` value by @leondz in https://github.com/NVIDIA/garak/pull/1361
* fix: encoding probes storing translated text in `pre_translation_prompt` by @paulinek13 in https://github.com/NVIDIA/garak/pull/1483
* feature: deferred loading and requirement pruning by @leondz in https://github.com/NVIDIA/garak/pull/1199

## New Contributors
* @boltzmann-brain made their first contribution in https://github.com/NVIDIA/garak/pull/1497
* @fabriziorocco made their first contribution in https://github.com/NVIDIA/garak/pull/1462
* @saichandrapandraju made their first contribution in https://github.com/NVIDIA/garak/pull/1495
* @Har1sh-k made their first contribution in https://github.com/NVIDIA/garak/pull/1489

**Full Changelog**: https://github.com/NVIDIA/garak/compare/v0.13.2...v0.13.3