defense-profilerlisted

# Defense Profiler ## v2.88 Key Changes (MODEL-AGNOSTIC) - **Model-agnostic**: Uses model configured in `~/.claude/settings.json` or CLI/env vars - **No flags required**: Works with the configured default model - **Flexible**: Works with GLM-5, Claude, Minimax, or any configured model - **Settings-driven**: Model selection via `ANTHROPIC_DEFAULT_*_MODEL` env vars **Codebase Defense Analysis System** inspired by ZeroLeaks defense profiling. Systematically analyzes code to build a comprehensive profile of security defenses, patterns, and weaknesses. ## Core Concept Before attacking (testing), understand the defenses. Build a mental model of: - What patterns exist - What safeguards are in place - What triggers failures - What areas are weak ## Usage ```bash /defense-profile src/ /defense-profile --focus security src/auth/ /defense-profile --output profile.json src/api/ ``` ## Defense Levels | Level | Description | Characteristics | |-------|-------------|-----------------| | `none` | No apparent protection | Direct vulnerabilities, no validation | | `weak` | Basic protections | Simple validation, incomplete coverage | | `moderate` | Standard defenses | Input validation, error handling | | `strong` | Good security | Multiple layers, proper sanitization | | `hardened` | Defense in depth | Multi-layered, comprehensive coverage | ## Profile Structure ```typescript interface DefenseProfile { // Overall assessment level: DefenseLevel; confidence: number; // 0-1 /