@bryan-thompson/inspector-assessment-client 1.25.4 → 1.25.5

package/lib/services/assessment/modules/securityTests/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Security Assessment Module
+ * Exports all security-related components
+ */
+export { SecurityResponseAnalyzer, type ConfidenceResult, type AnalysisResult, type ErrorClassification, } from "./SecurityResponseAnalyzer.js";
+export { SecurityPayloadTester, type TestProgressCallback, type PayloadTestConfig, type TestLogger, } from "./SecurityPayloadTester.js";
+export { SecurityPayloadGenerator } from "./SecurityPayloadGenerator.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/assessment/modules/securityTests/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/services/assessment/modules/securityTests/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC"}

package/lib/services/assessment/modules/securityTests/index.js

@@ -0,0 +1,7 @@
+/**
+ * Security Assessment Module
+ * Exports all security-related components
+ */
+export { SecurityResponseAnalyzer, } from "./SecurityResponseAnalyzer.js";
+export { SecurityPayloadTester, } from "./SecurityPayloadTester.js";
+export { SecurityPayloadGenerator } from "./SecurityPayloadGenerator.js";

package/lib/services/assessment/tool-classifier-patterns.d.ts

@@ -35,6 +35,7 @@ export declare enum ToolCategory {
     SEARCH_RETRIEVAL = "search_retrieval",
     CRUD_CREATION = "crud_creation",
     READ_ONLY_INFO = "read_only_info",
+    DATA_FETCHER = "data_fetcher",
     GENERIC = "generic"
 }
 /**

package/lib/services/assessment/tool-classifier-patterns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-classifier-patterns.d.ts","sourceRoot":"","sources":["../../../src/services/assessment/tool-classifier-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,oBAAY,YAAY;IAEtB,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,WAAW,YAAY;IAGvB,iBAAiB,YAAY;IAC7B,WAAW,WAAW;IACtB,iBAAiB,cAAc;IAC/B,QAAQ,aAAa;IAGrB,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAGjC,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAyR3D,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;CACjB,CAIS,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,OAAO,CACjD,YAAY,EACZ,YAAY,CAAC,OAAO,CACrB,EAoBS,CAAC"}
+{"version":3,"file":"tool-classifier-patterns.d.ts","sourceRoot":"","sources":["../../../src/services/assessment/tool-classifier-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,oBAAY,YAAY;IAEtB,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,WAAW,YAAY;IAGvB,iBAAiB,YAAY;IAC7B,WAAW,WAAW;IACtB,iBAAiB,cAAc;IAC/B,QAAQ,aAAa;IAGrB,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAG7B,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CA0S3D,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;CACjB,CAIS,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,OAAO,CACjD,YAAY,EACZ,YAAY,CAAC,OAAO,CACrB,EAqBS,CAAC"}

package/lib/services/assessment/tool-classifier-patterns.js

@@ -39,6 +39,7 @@ export var ToolCategory;
     ToolCategory["SEARCH_RETRIEVAL"] = "search_retrieval";
     ToolCategory["CRUD_CREATION"] = "crud_creation";
     ToolCategory["READ_ONLY_INFO"] = "read_only_info";
+    ToolCategory["DATA_FETCHER"] = "data_fetcher";
     // DEFAULT
     ToolCategory["GENERIC"] = "generic";
 })(ToolCategory || (ToolCategory = {}));
@@ -298,6 +299,21 @@ export const CATEGORY_PATTERNS = {
         reasoning: "Read-only info pattern detected (intended data exposure, not vulnerability)",
         risk: "LOW",
     },
+    [ToolCategory.DATA_FETCHER]: {
+        patterns: [
+            /get_.*_data/i, // get_company_data, get_user_data
+            /fetch_.*_info/i, // fetch_user_info
+            /list_.*records/i, // list_all_records
+            /retrieve_.*details/i, // retrieve_order_details
+            /read_.*entries/i, // read_log_entries
+            /\bget_\w+$/i, // get_users, get_orders (simple get_ prefix)
+            /\blist_\w+$/i, // list_items, list_records
+            /\bfetch_\w+$/i, // fetch_data, fetch_info
+        ],
+        confidence: 88,
+        reasoning: "Read-only data fetcher pattern detected (returns external data, unlikely to compute)",
+        risk: "LOW",
+    },
     [ToolCategory.SAFE_STORAGE]: {
         patterns: [
             /safe.*storage/i,
@@ -344,5 +360,6 @@ export const CATEGORY_CHECK_ORDER = [
     ToolCategory.SEARCH_RETRIEVAL,
     ToolCategory.CRUD_CREATION,
     ToolCategory.READ_ONLY_INFO,
+    ToolCategory.DATA_FETCHER,
     ToolCategory.SAFE_STORAGE,
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bryan-thompson/inspector-assessment-client",
-  "version": "1.25.4",
+  "version": "1.25.5",
   "description": "Client-side application for the Enhanced MCP Inspector with assessment capabilities",
   "license": "MIT",
   "author": "Bryan Thompson <bryan@triepod.ai>",