fully async, Tokio-based client.
> **The `nats` crate (synchronous client) is deprecated.** It receives security fixes only. All new
> work happens in `async-nats`. Do not modify the `nats/` directory
Steady16 mentions in 2 weeks
No other project uses it yet
1.6k3y agoReviewMountCreate a free account to mount
exposes Burp operations to external AI agents over the Model Context Protocol (MCP). Targets security professionals running Burp Community or Professional on macOS / Linux / Windows.
**Core Value:** Bring modern
1.6k7mo agoReviewMountCreate a free account to mount
issue #820): operational exceptions are caught and returned as error strings to the LLM; security exceptions (`PermissionError`, `ToolConfirmationRequired`) propagate.
- Pre-execution checks run on every call (not cached): permission validation
1.5k14mo agoReviewMountCreate a free account to mount
commands from another
working directory, use the [fixed command entry](daymade-skill/skill-creator/references/fixed-command-entry.md).
For security scans, use its [absolute owner-script recipe](daymade-skill/skill-creator/references/publishing-and-packaging.md#step-6-security-review).
Before
1.5k24d agoReviewMountCreate a free account to mount
report
issues use `Refs #N` and stay open until the stable release ships — **except**
security issues, which close once the fix merges to main.
- PR/issue comment style: casual plain prose
1.5k2mo agoReviewMountCreate a free account to mount
symbol — callers, callees, which execution flows it participates in — use `context({name: "symbolName"})`.
- For security review, `explain({target: "fileOrSymbol"})` lists taint findings (source→sink flows; needs `analyze --pdg`).
## Never
1.5k4mo agoReviewMountCreate a free account to mount
public surface: a new or renamed symbol, a new
parameter, a corrected annotation
- `[security]` — security fixes
- `[docs]` — documentation only
- `[ci]` — what a user installs: the wheels, platforms or sdist contents
No other project uses it yet
1.5k39d agoReviewMountCreate a free account to mount
migration inputs.
ai-jail is a developer-friendly accident guard, not a hard-security or malware/invasion boundary. It defends against a trusted-but-fallible agent's mistakes (a mistyped command
1.5k3mo agoReviewMountCreate a free account to mount
DATA_DIR` relocates team/task/inbox state but NOT global config.
## Cross-cutting conventions
### Path discipline (security-critical)
Every user-supplied name (team, agent, user, plan ID, inbox recipient…) must flow through
1.5k7mo agoReviewMountCreate a free account to mount
appropriate HTTP status codes
- Provide meaningful error messages
- Log errors with context using loguru
### Security Best Practices
- Validate all user input
- Use parameterized queries for database operations
- Never log sensitive
1.5k48d agoReviewMountCreate a free account to mount
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
Where does it go?
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
What should it contain?
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
CLAUDE.md or AGENTS.md?
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.