@claude-flow/cli 3.7.0-alpha.11 → 3.7.0-alpha.12

package/.claude/skills/aidefence-scan.md

@@ -1,151 +0,0 @@
----
-name: aidefence-scan
-version: 1.0.0
-description: Scan inputs for AI manipulation attempts using AIMDS threat detection
-author: rUv
-tags: [security, threat-detection, prompt-injection, aidefence]
-
-# Skill metadata
-invocation:
-  - /aidefence
-  - /defend
-  - /threat-scan
-
-# Dependencies
-requires:
-  - "@claude-flow/aidefence"
----
-
-# AIDefence Scan Skill
-
-Scan user inputs, agent outputs, and code for AI manipulation attempts including prompt injection, jailbreak attempts, and PII exposure.
-
-## Commands
-
-### `/aidefence scan <text>`
-Scan text for threats.
-
-### `/aidefence analyze <file>`
-Analyze a file for security issues.
-
-### `/aidefence status`
-Show detection statistics and learned patterns.
-
----
-
-## Execution Instructions
-
-When this skill is invoked, execute the following:
-
-### Step 1: Initialize AIDefence
-
-```typescript
-import { createAIDefence } from '@claude-flow/aidefence';
-
-const aidefence = createAIDefence({ enableLearning: true });
-```
-
-### Step 2: Based on Command
-
-**For `/aidefence scan <text>` or `/defend <text>`:**
-
-1. Extract the text to scan from the user's message
-2. Run threat detection:
-
-```typescript
-const result = await aidefence.detect(userInput);
-
-if (!result.safe) {
-  // Report threats found
-  console.log(`⚠️ ${result.threats.length} threat(s) detected:`);
-  for (const threat of result.threats) {
-    console.log(`  - [${threat.severity.toUpperCase()}] ${threat.type}: ${threat.description}`);
-    console.log(`    Confidence: ${(threat.confidence * 100).toFixed(1)}%`);
-  }
-} else {
-  console.log('✅ No threats detected');
-}
-
-if (result.piiFound) {
-  console.log('⚠️ PII detected in input (emails, SSNs, API keys, etc.)');
-}
-
-console.log(`Detection time: ${result.detectionTimeMs.toFixed(2)}ms`);
-```
-
-3. If threats are critical, suggest mitigations:
-
-```typescript
-for (const threat of result.threats.filter(t => t.severity === 'critical')) {
-  const mitigation = await aidefence.getBestMitigation(threat.type);
-  if (mitigation) {
-    console.log(`Recommended mitigation for ${threat.type}: ${mitigation.strategy}`);
-    console.log(`  Effectiveness: ${(mitigation.effectiveness * 100).toFixed(1)}%`);
-  }
-}
-```
-
-**For `/aidefence analyze <file>`:**
-
-1. Read the file content using the Read tool
-2. Scan the content for threats
-3. Report findings with line numbers if possible
-
-**For `/aidefence status`:**
-
-```typescript
-const stats = await aidefence.getStats();
-console.log('📊 AIDefence Statistics:');
-console.log(`  Detections: ${stats.detectionCount}`);
-console.log(`  Avg detection time: ${stats.avgDetectionTimeMs.toFixed(2)}ms`);
-console.log(`  Learned patterns: ${stats.learnedPatterns}`);
-console.log(`  Mitigation strategies: ${stats.mitigationStrategies}`);
-console.log(`  Avg mitigation effectiveness: ${(stats.avgMitigationEffectiveness * 100).toFixed(1)}%`);
-```
-
-### Step 3: Learn from Feedback
-
-If the user provides feedback on detection accuracy:
-
-```typescript
-await aidefence.learnFromDetection(input, result, {
-  wasAccurate: userSaysAccurate,
-  userVerdict: userFeedback
-});
-```
-
-## Example Outputs
-
-### Threat Detected
-```
-⚠️ 2 threat(s) detected:
-  - [CRITICAL] jailbreak: DAN jailbreak attempt
-    Confidence: 98.0%
-  - [HIGH] role_switching: Attempt to change AI identity
-    Confidence: 85.0%
-
-Recommended mitigation for jailbreak: block
-  Effectiveness: 95.2%
-
-Detection time: 0.08ms
-```
-
-### Safe Input
-```
-✅ No threats detected
-Detection time: 0.05ms
-```
-
-### PII Warning
-```
-✅ No manipulation threats detected
-⚠️ PII detected in input (emails, SSNs, API keys, etc.)
-Detection time: 0.06ms
-```
-
-## Integration Notes
-
-- This skill uses the embedded `@claude-flow/aidefence` package
-- No external server required
-- Learning is enabled by default for pattern improvement
-- Detection targets: <10ms (actual: ~0.06ms)

package/.claude/skills/aidefence.yaml

@@ -1,297 +0,0 @@
----
-name: aidefence
-version: 1.0.0
-description: |
-  AI Manipulation Defense System (AIMDS) integration for Claude Flow V3.
-  Provides real-time threat detection, behavioral analysis, and adaptive
-  mitigation with 25-level meta-learning capabilities.
-
-author: rUv
-license: MIT
-homepage: https://ruv.io/aimds
-repository: https://github.com/ruvnet/midstream/tree/main/AIMDS
-
-# Package reference
-package: aidefence@^2.1.1
-
-# Capabilities provided by this skill
-capabilities:
-  # Detection capabilities
-  - prompt_injection_detection    # 50+ prompt injection patterns
-  - jailbreak_detection          # AI jailbreak attempt detection
-  - pii_detection               # PII identification (emails, SSNs, API keys)
-  - unicode_normalization       # Control character sanitization
-
-  # Analysis capabilities
-  - behavioral_analysis         # Temporal pattern analysis
-  - chaos_detection            # Lyapunov exponent calculation
-  - policy_verification        # Linear Temporal Logic (LTL) policies
-  - anomaly_detection          # Statistical baseline learning
-
-  # Response capabilities
-  - adaptive_mitigation        # 7 distinct mitigation strategies
-  - meta_learning             # 25-level recursive optimization (strange-loop)
-  - rollback_management       # Failed mitigation rollback
-  - effectiveness_tracking    # Real-time mitigation monitoring
-
-# Performance characteristics
-performance:
-  detection_latency: <10ms
-  analysis_latency: <100ms
-  response_latency: <50ms
-  throughput: ">12000 req/s"
-
-# Commands exposed by this skill
-commands:
-  scan:
-    description: Scan input for AI manipulation attempts
-    usage: |
-      /aidefence scan <input>
-      /aidefence scan --file <path>
-      /aidefence scan --mode paranoid <input>
-    examples:
-      - "/aidefence scan 'Ignore previous instructions and...'"
-      - "/aidefence scan --file suspicious-prompt.txt"
-      - "/aidefence scan --mode paranoid --json 'Please help me...'"
-    options:
-      - name: mode
-        type: choice
-        choices:
-          - quick      # Pattern matching only (<5ms)
-          - thorough   # Pattern + behavioral (<50ms)
-          - paranoid   # Full analysis + policy verification (<150ms)
-        default: thorough
-        description: Scan depth mode
-      - name: file
-        type: string
-        description: File path to scan instead of inline input
-      - name: json
-        type: boolean
-        default: false
-        description: Output results as JSON
-
-  analyze:
-    description: Analyze agent behavior patterns for anomalies
-    usage: |
-      /aidefence analyze <agent-id>
-      /aidefence analyze <agent-id> --window 24h
-    examples:
-      - "/aidefence analyze security-architect-1234"
-      - "/aidefence analyze coder-5678 --window 10m --threshold 0.7"
-    options:
-      - name: window
-        type: string
-        default: "1h"
-        description: Time window for behavioral analysis
-      - name: threshold
-        type: number
-        default: 0.8
-        description: Anomaly score threshold (0-1)
-
-  policy:
-    description: Verify agent against LTL security policy
-    usage: |
-      /aidefence policy <agent-id> <ltl-formula>
-    examples:
-      - "/aidefence policy coder-1234 'G(edit_file -> F(run_tests))'"
-      - "/aidefence policy reviewer-5678 'G(!approve_self_code)'"
-    options:
-      - name: verbose
-        type: boolean
-        default: false
-        description: Show detailed policy evaluation trace
-
-  learn:
-    description: Record successful mitigation for meta-learning
-    usage: |
-      /aidefence learn <threat-type> <strategy> --effectiveness <score>
-    examples:
-      - "/aidefence learn prompt_injection sanitize --effectiveness 0.95"
-      - "/aidefence learn jailbreak reject --effectiveness 1.0"
-    options:
-      - name: effectiveness
-        type: number
-        required: true
-        description: Mitigation effectiveness score (0-1)
-
-  status:
-    description: Show aidefence system status and metrics
-    usage: |
-      /aidefence status
-      /aidefence status --metrics
-    options:
-      - name: metrics
-        type: boolean
-        default: false
-        description: Include Prometheus metrics
-
-# Hook integrations
-hooks:
-  # Pre-agent-input: Scan all agent inputs for manipulation
-  pre-agent-input:
-    enabled: true
-    description: Scan agent inputs before processing
-    config:
-      block_critical: true       # Block inputs with critical threats
-      block_high: false          # Allow high severity with logging
-      log_all: true             # Log all threat detections
-      mode: thorough            # Default scan mode
-
-  # Post-agent-action: Learn from agent behaviors
-  post-agent-action:
-    enabled: true
-    description: Record agent actions for behavioral modeling
-    config:
-      sampling_rate: 0.1        # Sample 10% of actions for analysis
-      anomaly_threshold: 0.8    # Alert threshold for anomaly score
-      store_embeddings: true    # Store action embeddings in AgentDB
-
-  # Pre-swarm-init: Verify swarm security policies
-  pre-swarm-init:
-    enabled: true
-    description: Verify swarm topology against security policies
-    config:
-      require_security_agent: true  # Require security-architect in swarm
-      validate_topology: true       # Validate topology security
-
-# Integration with claude-flow systems
-integration:
-  # AgentDB integration for shared threat patterns
-  agentdb:
-    enabled: true
-    namespace: security_threats
-    hnsw_enabled: true
-    config:
-      vector_dimension: 384
-      m: 16
-      ef_construction: 200
-      ef_search: 100
-
-  # ReasoningBank integration for pattern learning
-  reasoningbank:
-    enabled: true
-    store_patterns: true
-    learn_mitigations: true
-    config:
-      min_effectiveness: 0.8    # Only store high-effectiveness patterns
-      consolidation_interval: 1h
-
-  # Prometheus metrics
-  prometheus:
-    enabled: true
-    metrics:
-      - aidefence_threats_detected_total
-      - aidefence_detection_latency_ms
-      - aidefence_analysis_latency_ms
-      - aidefence_anomaly_score
-      - aidefence_mitigations_applied_total
-      - aidefence_meta_learning_depth
-
-# MCP tool registrations
-mcp_tools:
-  - name: aidefence_scan
-    description: Scan input for AI manipulation attempts
-    input_schema:
-      type: object
-      properties:
-        input:
-          type: string
-          description: Input text to scan
-        mode:
-          type: string
-          enum: [quick, thorough, paranoid]
-          default: thorough
-      required: [input]
-
-  - name: aidefence_analyze_behavior
-    description: Analyze agent behavioral patterns for anomalies
-    input_schema:
-      type: object
-      properties:
-        agentId:
-          type: string
-          description: Agent ID to analyze
-        timeWindow:
-          type: string
-          default: "1h"
-          description: Time window for analysis
-      required: [agentId]
-
-  - name: aidefence_verify_policy
-    description: Verify agent behavior against LTL security policies
-    input_schema:
-      type: object
-      properties:
-        agentId:
-          type: string
-        policy:
-          type: string
-          description: LTL policy formula
-      required: [agentId, policy]
-
-  - name: aidefence_learn_pattern
-    description: Store successful threat pattern for meta-learning
-    input_schema:
-      type: object
-      properties:
-        threatType:
-          type: string
-        mitigation:
-          type: string
-        effectiveness:
-          type: number
-          minimum: 0
-          maximum: 1
-      required: [threatType, mitigation, effectiveness]
-
-# Threat detection patterns (reference)
-threat_patterns:
-  prompt_injection:
-    count: 50+
-    categories:
-      - instruction_override    # "Ignore previous instructions"
-      - role_switching         # "You are now DAN"
-      - context_manipulation   # Fake system messages
-      - delimiter_abuse        # Using special tokens
-
-  jailbreak:
-    categories:
-      - dan_variants           # Do Anything Now variants
-      - hypothetical          # "Hypothetically, if..."
-      - roleplay              # Character-based bypasses
-      - encoding              # Base64/ROT13 encoded prompts
-
-  pii:
-    types:
-      - email_addresses
-      - social_security_numbers
-      - credit_card_numbers
-      - api_keys
-      - passwords
-
-# Behavioral analysis configuration
-behavioral_analysis:
-  temporal:
-    window_sizes: [1m, 10m, 1h, 24h]
-    attractor_types:
-      - point     # Stable single point
-      - cycle     # Periodic behavior
-      - torus     # Quasi-periodic
-      - strange   # Chaotic (suspicious)
-
-  lyapunov:
-    threshold: 0.1  # Positive = chaotic behavior
-    embedding_dimension: 3
-    time_delay: 1
-
-  baseline:
-    learning_period: 24h
-    update_frequency: 1h
-    deviation_threshold: 3.0  # Standard deviations
-
-# Documentation links
-documentation:
-  readme: https://github.com/ruvnet/midstream/blob/main/AIMDS/README.md
-  api: https://ruv.io/aimds/api
-  patterns: https://ruv.io/aimds/patterns
-  integration: /v3/implementation/adrs/ADR-022-aidefence-integration.md

package/.claude/skills/browser/SKILL.md

@@ -1,204 +0,0 @@
----
-name: browser
-description: Web browser automation with AI-optimized snapshots for claude-flow agents
-version: 1.0.0
-triggers:
-  - /browser
-  - browse
-  - web automation
-  - scrape
-  - navigate
-  - screenshot
-tools:
-  - browser/open
-  - browser/snapshot
-  - browser/click
-  - browser/fill
-  - browser/screenshot
-  - browser/close
----
-
-# Browser Automation Skill
-
-Web browser automation using agent-browser with AI-optimized snapshots. Reduces context by 93% using element refs (@e1, @e2) instead of full DOM.
-
-## Core Workflow
-
-```bash
-# 1. Navigate to page
-agent-browser open <url>
-
-# 2. Get accessibility tree with element refs
-agent-browser snapshot -i    # -i = interactive elements only
-
-# 3. Interact using refs from snapshot
-agent-browser click @e2
-agent-browser fill @e3 "text"
-
-# 4. Re-snapshot after page changes
-agent-browser snapshot -i
-```
-
-## Quick Reference
-
-### Navigation
-| Command | Description |
-|---------|-------------|
-| `open <url>` | Navigate to URL |
-| `back` | Go back |
-| `forward` | Go forward |
-| `reload` | Reload page |
-| `close` | Close browser |
-
-### Snapshots (AI-Optimized)
-| Command | Description |
-|---------|-------------|
-| `snapshot` | Full accessibility tree |
-| `snapshot -i` | Interactive elements only (buttons, links, inputs) |
-| `snapshot -c` | Compact (remove empty elements) |
-| `snapshot -d 3` | Limit depth to 3 levels |
-| `screenshot [path]` | Capture screenshot (base64 if no path) |
-
-### Interaction
-| Command | Description |
-|---------|-------------|
-| `click <sel>` | Click element |
-| `fill <sel> <text>` | Clear and fill input |
-| `type <sel> <text>` | Type with key events |
-| `press <key>` | Press key (Enter, Tab, etc.) |
-| `hover <sel>` | Hover element |
-| `select <sel> <val>` | Select dropdown option |
-| `check/uncheck <sel>` | Toggle checkbox |
-| `scroll <dir> [px]` | Scroll page |
-
-### Get Info
-| Command | Description |
-|---------|-------------|
-| `get text <sel>` | Get text content |
-| `get html <sel>` | Get innerHTML |
-| `get value <sel>` | Get input value |
-| `get attr <sel> <attr>` | Get attribute |
-| `get title` | Get page title |
-| `get url` | Get current URL |
-
-### Wait
-| Command | Description |
-|---------|-------------|
-| `wait <selector>` | Wait for element |
-| `wait <ms>` | Wait milliseconds |
-| `wait --text "text"` | Wait for text |
-| `wait --url "pattern"` | Wait for URL |
-| `wait --load networkidle` | Wait for load state |
-
-### Sessions
-| Command | Description |
-|---------|-------------|
-| `--session <name>` | Use isolated session |
-| `session list` | List active sessions |
-
-## Selectors
-
-### Element Refs (Recommended)
-```bash
-# Get refs from snapshot
-agent-browser snapshot -i
-# Output: button "Submit" [ref=e2]
-
-# Use ref to interact
-agent-browser click @e2
-```
-
-### CSS Selectors
-```bash
-agent-browser click "#submit"
-agent-browser fill ".email-input" "test@test.com"
-```
-
-### Semantic Locators
-```bash
-agent-browser find role button click --name "Submit"
-agent-browser find label "Email" fill "test@test.com"
-agent-browser find testid "login-btn" click
-```
-
-## Examples
-
-### Login Flow
-```bash
-agent-browser open https://example.com/login
-agent-browser snapshot -i
-agent-browser fill @e2 "user@example.com"
-agent-browser fill @e3 "password123"
-agent-browser click @e4
-agent-browser wait --url "**/dashboard"
-```
-
-### Form Submission
-```bash
-agent-browser open https://example.com/contact
-agent-browser snapshot -i
-agent-browser fill @e1 "John Doe"
-agent-browser fill @e2 "john@example.com"
-agent-browser fill @e3 "Hello, this is my message"
-agent-browser click @e4
-agent-browser wait --text "Thank you"
-```
-
-### Data Extraction
-```bash
-agent-browser open https://example.com/products
-agent-browser snapshot -i
-# Iterate through product refs
-agent-browser get text @e1  # Product name
-agent-browser get text @e2  # Price
-agent-browser get attr @e3 href  # Link
-```
-
-### Multi-Session (Swarm)
-```bash
-# Session 1: Navigator
-agent-browser --session nav open https://example.com
-agent-browser --session nav state save auth.json
-
-# Session 2: Scraper (uses same auth)
-agent-browser --session scrape state load auth.json
-agent-browser --session scrape open https://example.com/data
-agent-browser --session scrape snapshot -i
-```
-
-## Integration with Claude Flow
-
-### MCP Tools
-All browser operations are available as MCP tools with `browser/` prefix:
-- `browser/open`
-- `browser/snapshot`
-- `browser/click`
-- `browser/fill`
-- `browser/screenshot`
-- etc.
-
-### Memory Integration
-```bash
-# Store successful patterns
-npx @claude-flow/cli memory store --namespace browser-patterns --key "login-flow" --value "snapshot->fill->click->wait"
-
-# Retrieve before similar task
-npx @claude-flow/cli memory search --query "login automation"
-```
-
-### Hooks
-```bash
-# Pre-browse hook (get context)
-npx @claude-flow/cli hooks pre-edit --file "browser-task.ts"
-
-# Post-browse hook (record success)
-npx @claude-flow/cli hooks post-task --task-id "browse-1" --success true
-```
-
-## Tips
-
-1. **Always use snapshots** - They're optimized for AI with refs
-2. **Prefer `-i` flag** - Gets only interactive elements, smaller output
-3. **Use refs, not selectors** - More reliable, deterministic
-4. **Re-snapshot after navigation** - Page state changes
-5. **Use sessions for parallel work** - Each session is isolated