Master Security Toolkit v0.2.2

Complete local-first software, agent-artifact, MCP, permission and instruction-security review with pinned scanner and optional Atlas reference route.

Version 0.2.2 includes 9 complete skill procedures. Full canonical first-party methods and licensed retained sources; official Injection Checker depth methods are receiver-installed.

Requirements: Python 3 on PATH for local scanner and optional Atlas launcher; Python 3.10+ for publication preflight; Optional Injection Checker depth methods in Codex: injection-checker@openai-curated-remote; Optional security Atlas: Activities Templates runtime and recipient-owned approved catalog; Node.js only for Cloudflare coverage-audit JSON validator workflows.

License scope: AGPL-3.0-only AND CC-BY-SA-4.0; retained Agent SkillGuard and Cloudflare MIT, Strix Apache-2.0 as scoped in LICENSE-SCOPE.json. Read the packaged notices and provenance before reuse.

Install with codex plugin add master-security-toolkit@working-tools after adding JonathanKHobson/working-tools-plugins, or the documented Claude Code marketplace path. Installation and tested compatibility.

This ZIP keeps its portable manifest at the root and preserves the referenced package files. This release includes a separate per-file hash inventory. Built from 7d32c283e34098403c5ffdacbeee7bed57a4ac8f. SHA-256: 0e8bf17d0f66abb1f794c9ab4df994b3084c9bbbe833efae17c66f57af2bf4ab.

Native marketplace distribution is separate from official OpenAI Plugin Directory publication. External provider access remains a prerequisite.

See package documentation at this tag.

Review the tagged package README before upgrading.