@authora/agent-audit 0.1.0 → 0.1.1

package/dist/scanner.js

@@ -54,18 +54,33 @@ export async function scanDirectory(dir) {
     let hasAuditLog = false;
     let hasApprovals = false;
     const files = walkDir(dir);
-    for (const file of files) {
+    // Skip non-backend files (frontend components, tests, docs, configs)
+    const SKIP_PATTERNS = [
+        /\.(test|spec|stories)\.[tj]sx?$/,
+        /\/__(tests|mocks|fixtures)__\//,
+        /\/(web|ui|frontend|app)\/src\/(components|pages|hooks|stores|lib)\//,
+        /\.d\.ts$/,
+        /\.(md|mdx|txt|svg|css|scss|html)$/,
+        /package\.json$/,
+        /package-lock\.json$/,
+        /tsconfig.*\.json$/,
+    ];
+    const backendFiles = files.filter((f) => {
+        const rel = f.replace(dir + "/", "");
+        return !SKIP_PATTERNS.some((p) => p.test(rel));
+    });
+    for (const file of backendFiles) {
         const content = readFile(file);
         if (!content)
             continue;
         const lower = content.toLowerCase();
         const relPath = file.replace(dir + "/", "");
-        // Detect agents
-        if (/\bagent\b/i.test(content) && (/\bcreate.*agent|agent.*config|new.*agent|agent.*class\b/i.test(content))) {
+        // Detect agents -- only in backend code with real agent patterns
+        if (/\bagent\b/i.test(content) && (/\bcreateAgent|AgentConfig|new.*Agent\(|runAgent|agentWorkflow\b/i.test(content))) {
             agents++;
         }
-        // Detect MCP servers
-        if (/mcp.*server|mcpserver|model.*context.*protocol/i.test(lower)) {
+        // Detect MCP servers -- only files that actually create/configure MCP servers
+        if (/new.*Server|createServer|McpServer|startServer/i.test(content) && /mcp|model.*context.*protocol/i.test(lower)) {
             mcpServers++;
         }
         // Check for identity layer
@@ -120,27 +135,30 @@ export async function scanDirectory(dir) {
             }
         }
         // --- WARNING: MCP server without auth ---
-        if (/mcp.*server|createServer/i.test(content) && !/auth|authentication|authorization|token|apiKey/i.test(content)) {
+        // Only flag files that actually create/start MCP servers, not type defs or configs
+        if (/new.*Server|createServer|McpServer/i.test(content) && /mcp/i.test(lower) && !/auth|authentication|authorization|token|apiKey|signature/i.test(content)) {
             findings.push({
                 severity: "warning",
                 category: "mcp",
-                message: "MCP server detected without visible auth configuration",
+                message: "MCP server created without visible auth configuration",
                 file: relPath,
                 fix: "Add authentication to your MCP server (API key, JWT, or Ed25519 signature verification)",
             });
         }
         // --- WARNING: Broad agent permissions ---
-        if (/\*.*permission|admin.*role|full.*access|sudo|root/i.test(content) && /agent/i.test(content)) {
+        // Only flag if it's clearly giving an agent admin/wildcard access
+        if (/permissions.*\[.*["']\*["']|role.*["']admin["']|full.*access.*agent/i.test(content)) {
             findings.push({
                 severity: "warning",
                 category: "permissions",
-                message: "Agent may have overly broad permissions",
+                message: "Agent configured with overly broad permissions",
                 file: relPath,
                 fix: "Apply least-privilege: give agents only the permissions they need for their specific task",
             });
         }
         // --- WARNING: No error handling on tool calls ---
-        if (/tool.*call|callTool|execute.*tool/i.test(content) && !/try|catch|error/i.test(content)) {
+        // Only flag actual tool execution code, not type definitions or prompts
+        if (/callTool\(|executeTool\(|tool\.execute\(/i.test(content) && !/try\s*\{|\.catch\(/i.test(content)) {
             findings.push({
                 severity: "warning",
                 category: "resilience",
@@ -150,11 +168,12 @@ export async function scanDirectory(dir) {
             });
         }
         // --- INFO: Agent without timeout ---
-        if (/agent/i.test(content) && /async|await|fetch|request/i.test(content) && !/timeout|AbortSignal|signal/i.test(content)) {
+        // Only flag files with actual agent execution logic (not frontend, not configs)
+        if (/runAgent|agentWorkflow|executeAgent|startAgent/i.test(content) && /async|await/i.test(content) && !/timeout|AbortSignal|signal/i.test(content)) {
             findings.push({
                 severity: "info",
                 category: "resilience",
-                message: "Agent operations without timeout -- could run indefinitely",
+                message: "Agent execution without timeout -- could run indefinitely",
                 file: relPath,
                 fix: "Add timeouts to agent operations to prevent runaway processes",
             });
@@ -229,6 +248,6 @@ export async function scanDirectory(dir) {
         hasDelegation,
         hasAuditLog,
         hasApprovals,
-        scannedFiles: files.length,
+        scannedFiles: backendFiles.length,
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authora/agent-audit",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Security scanner for AI agents. Find vulnerabilities in your agent setup in 30 seconds.",
   "bin": {
     "agent-audit": "./dist/cli.js"

package/src/scanner.ts

@@ -79,19 +79,36 @@ export async function scanDirectory(dir: string): Promise<ScanResult> {
 
   const files = walkDir(dir);
 
-  for (const file of files) {
+  // Skip non-backend files (frontend components, tests, docs, configs)
+  const SKIP_PATTERNS = [
+    /\.(test|spec|stories)\.[tj]sx?$/,
+    /\/__(tests|mocks|fixtures)__\//,
+    /\/(web|ui|frontend|app)\/src\/(components|pages|hooks|stores|lib)\//,
+    /\.d\.ts$/,
+    /\.(md|mdx|txt|svg|css|scss|html)$/,
+    /package\.json$/,
+    /package-lock\.json$/,
+    /tsconfig.*\.json$/,
+  ];
+
+  const backendFiles = files.filter((f) => {
+    const rel = f.replace(dir + "/", "");
+    return !SKIP_PATTERNS.some((p) => p.test(rel));
+  });
+
+  for (const file of backendFiles) {
     const content = readFile(file);
     if (!content) continue;
     const lower = content.toLowerCase();
     const relPath = file.replace(dir + "/", "");
 
-    // Detect agents
-    if (/\bagent\b/i.test(content) && (/\bcreate.*agent|agent.*config|new.*agent|agent.*class\b/i.test(content))) {
+    // Detect agents -- only in backend code with real agent patterns
+    if (/\bagent\b/i.test(content) && (/\bcreateAgent|AgentConfig|new.*Agent\(|runAgent|agentWorkflow\b/i.test(content))) {
       agents++;
     }
 
-    // Detect MCP servers
-    if (/mcp.*server|mcpserver|model.*context.*protocol/i.test(lower)) {
+    // Detect MCP servers -- only files that actually create/configure MCP servers
+    if (/new.*Server|createServer|McpServer|startServer/i.test(content) && /mcp|model.*context.*protocol/i.test(lower)) {
       mcpServers++;
     }
 
@@ -153,29 +170,32 @@ export async function scanDirectory(dir: string): Promise<ScanResult> {
     }
 
     // --- WARNING: MCP server without auth ---
-    if (/mcp.*server|createServer/i.test(content) && !/auth|authentication|authorization|token|apiKey/i.test(content)) {
+    // Only flag files that actually create/start MCP servers, not type defs or configs
+    if (/new.*Server|createServer|McpServer/i.test(content) && /mcp/i.test(lower) && !/auth|authentication|authorization|token|apiKey|signature/i.test(content)) {
       findings.push({
         severity: "warning",
         category: "mcp",
-        message: "MCP server detected without visible auth configuration",
+        message: "MCP server created without visible auth configuration",
         file: relPath,
         fix: "Add authentication to your MCP server (API key, JWT, or Ed25519 signature verification)",
       });
     }
 
     // --- WARNING: Broad agent permissions ---
-    if (/\*.*permission|admin.*role|full.*access|sudo|root/i.test(content) && /agent/i.test(content)) {
+    // Only flag if it's clearly giving an agent admin/wildcard access
+    if (/permissions.*\[.*["']\*["']|role.*["']admin["']|full.*access.*agent/i.test(content)) {
       findings.push({
         severity: "warning",
         category: "permissions",
-        message: "Agent may have overly broad permissions",
+        message: "Agent configured with overly broad permissions",
         file: relPath,
         fix: "Apply least-privilege: give agents only the permissions they need for their specific task",
       });
     }
 
     // --- WARNING: No error handling on tool calls ---
-    if (/tool.*call|callTool|execute.*tool/i.test(content) && !/try|catch|error/i.test(content)) {
+    // Only flag actual tool execution code, not type definitions or prompts
+    if (/callTool\(|executeTool\(|tool\.execute\(/i.test(content) && !/try\s*\{|\.catch\(/i.test(content)) {
       findings.push({
         severity: "warning",
         category: "resilience",
@@ -186,11 +206,12 @@ export async function scanDirectory(dir: string): Promise<ScanResult> {
     }
 
     // --- INFO: Agent without timeout ---
-    if (/agent/i.test(content) && /async|await|fetch|request/i.test(content) && !/timeout|AbortSignal|signal/i.test(content)) {
+    // Only flag files with actual agent execution logic (not frontend, not configs)
+    if (/runAgent|agentWorkflow|executeAgent|startAgent/i.test(content) && /async|await/i.test(content) && !/timeout|AbortSignal|signal/i.test(content)) {
       findings.push({
         severity: "info",
         category: "resilience",
-        message: "Agent operations without timeout -- could run indefinitely",
+        message: "Agent execution without timeout -- could run indefinitely",
         file: relPath,
         fix: "Add timeouts to agent operations to prevent runaway processes",
       });
@@ -271,6 +292,6 @@ export async function scanDirectory(dir: string): Promise<ScanResult> {
     hasDelegation,
     hasAuditLog,
     hasApprovals,
-    scannedFiles: files.length,
+    scannedFiles: backendFiles.length,
   };
 }