@clear-capabilities/agentic-security-scanner 0.76.1 → 0.77.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (68) hide show
  1. package/dist/agentic-security.mjs +8 -8
  2. package/dist/agentic-security.mjs.sha256 +1 -1
  3. package/package.json +5 -5
  4. package/bin/.agentic-security/findings.json +0 -1596
  5. package/bin/.agentic-security/last-scan.json +0 -1596
  6. package/bin/.agentic-security/last-scan.json.sig +0 -1
  7. package/bin/.agentic-security/scan-history.json +0 -475
  8. package/bin/.agentic-security/streak.json +0 -25
  9. package/dist/218.index.js +0 -793
  10. package/dist/601.index.js +0 -1038
  11. package/dist/634.index.js +0 -1892
  12. package/src/.agentic-security/findings.json +0 -80844
  13. package/src/.agentic-security/last-scan.json +0 -80844
  14. package/src/.agentic-security/last-scan.json.sig +0 -1
  15. package/src/.agentic-security/scan-history.json +0 -8408
  16. package/src/.agentic-security/streak.json +0 -26
  17. package/src/dataflow/.agentic-security/findings.json +0 -3487
  18. package/src/dataflow/.agentic-security/last-scan.json +0 -3487
  19. package/src/dataflow/.agentic-security/last-scan.json.sig +0 -1
  20. package/src/dataflow/.agentic-security/scan-history.json +0 -735
  21. package/src/dataflow/.agentic-security/streak.json +0 -24
  22. package/src/integrations/.agentic-security/findings.json +0 -1504
  23. package/src/integrations/.agentic-security/last-scan.json +0 -1504
  24. package/src/integrations/.agentic-security/scan-history.json +0 -40
  25. package/src/integrations/.agentic-security/streak.json +0 -21
  26. package/src/ir/.agentic-security/findings.json +0 -3036
  27. package/src/ir/.agentic-security/last-scan.json +0 -3036
  28. package/src/ir/.agentic-security/last-scan.json.sig +0 -1
  29. package/src/ir/.agentic-security/scan-history.json +0 -364
  30. package/src/ir/.agentic-security/streak.json +0 -23
  31. package/src/llm-validator/.agentic-security/findings.json +0 -1891
  32. package/src/llm-validator/.agentic-security/last-scan.json +0 -1891
  33. package/src/llm-validator/.agentic-security/last-scan.json.sig +0 -1
  34. package/src/llm-validator/.agentic-security/scan-history.json +0 -168
  35. package/src/llm-validator/.agentic-security/streak.json +0 -20
  36. package/src/lsp/.agentic-security/findings.json +0 -28
  37. package/src/lsp/.agentic-security/last-scan.json +0 -28
  38. package/src/lsp/.agentic-security/scan-history.json +0 -79
  39. package/src/lsp/.agentic-security/streak.json +0 -22
  40. package/src/mcp/.agentic-security/findings.json +0 -8403
  41. package/src/mcp/.agentic-security/last-scan.json +0 -8403
  42. package/src/mcp/.agentic-security/last-scan.json.sig +0 -1
  43. package/src/mcp/.agentic-security/scan-history.json +0 -1182
  44. package/src/mcp/.agentic-security/streak.json +0 -22
  45. package/src/posture/.agentic-security/findings.json +0 -51239
  46. package/src/posture/.agentic-security/last-scan.json +0 -51239
  47. package/src/posture/.agentic-security/last-scan.json.sig +0 -1
  48. package/src/posture/.agentic-security/scan-history.json +0 -5557
  49. package/src/posture/.agentic-security/streak.json +0 -24
  50. package/src/report/.agentic-security/findings.json +0 -79
  51. package/src/report/.agentic-security/last-scan.json +0 -79
  52. package/src/report/.agentic-security/last-scan.json.sig +0 -1
  53. package/src/report/.agentic-security/scan-history.json +0 -332
  54. package/src/report/.agentic-security/streak.json +0 -23
  55. package/src/sast/.agentic-security/findings.json +0 -5051
  56. package/src/sast/.agentic-security/last-scan.json +0 -5051
  57. package/src/sast/.agentic-security/last-scan.json.sig +0 -1
  58. package/src/sast/.agentic-security/scan-history.json +0 -788
  59. package/src/sast/.agentic-security/streak.json +0 -23
  60. package/src/sast/bench-shape/.agentic-security/findings.json +0 -28
  61. package/src/sast/bench-shape/.agentic-security/last-scan.json +0 -28
  62. package/src/sast/bench-shape/.agentic-security/scan-history.json +0 -24
  63. package/src/sast/bench-shape/.agentic-security/streak.json +0 -22
  64. package/src/sca/.agentic-security/findings.json +0 -1096
  65. package/src/sca/.agentic-security/last-scan.json +0 -1096
  66. package/src/sca/.agentic-security/last-scan.json.sig +0 -1
  67. package/src/sca/.agentic-security/scan-history.json +0 -18
  68. package/src/sca/.agentic-security/streak.json +0 -21
package/src/llm-validator/.agentic-security/last-scan.json.sig DELETED
@@ -1 +0,0 @@
1
- 4c7773244a54b5c390324ea1d7302921511d2ac2526cebc27cf16deff479564f
package/src/llm-validator/.agentic-security/scan-history.json DELETED
@@ -1,168 +0,0 @@
1
- [
2
- {
3
- "timestamp": "2026-05-18T17:45:05.442Z",
4
- "label": "scan",
5
- "total": 4,
6
- "critical": 0,
7
- "high": 1,
8
- "medium": 3,
9
- "low": 0,
10
- "kev": 0,
11
- "ids": [
12
- "prompt-tpl:index.js:30:Prompt_Template__user_input_interpolated_into_prompt_string_",
13
- "struct:index.js:80:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
14
- "struct:index.js:81:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
- "struct:index.js:87:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
16
- ]
17
- },
18
- {
19
- "timestamp": "2026-05-18T21:57:42.021Z",
20
- "label": "scan",
21
- "total": 4,
22
- "critical": 0,
23
- "high": 1,
24
- "medium": 3,
25
- "low": 0,
26
- "kev": 0,
27
- "ids": [
28
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
29
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
30
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
31
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
32
- ]
33
- },
34
- {
35
- "timestamp": "2026-05-18T22:28:47.440Z",
36
- "label": "scan",
37
- "total": 4,
38
- "critical": 0,
39
- "high": 1,
40
- "medium": 3,
41
- "low": 0,
42
- "kev": 0,
43
- "ids": [
44
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
45
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
48
- ]
49
- },
50
- {
51
- "timestamp": "2026-05-18T22:29:03.014Z",
52
- "label": "scan",
53
- "total": 4,
54
- "critical": 0,
55
- "high": 1,
56
- "medium": 3,
57
- "low": 0,
58
- "kev": 0,
59
- "ids": [
60
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
61
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
62
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
63
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
64
- ]
65
- },
66
- {
67
- "timestamp": "2026-05-18T22:29:18.932Z",
68
- "label": "scan",
69
- "total": 4,
70
- "critical": 0,
71
- "high": 1,
72
- "medium": 3,
73
- "low": 0,
74
- "kev": 0,
75
- "ids": [
76
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
77
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
78
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
79
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
80
- ]
81
- },
82
- {
83
- "timestamp": "2026-05-18T23:16:38.135Z",
84
- "label": "scan",
85
- "total": 4,
86
- "critical": 0,
87
- "high": 1,
88
- "medium": 3,
89
- "low": 0,
90
- "kev": 0,
91
- "ids": [
92
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
93
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
96
- ]
97
- },
98
- {
99
- "timestamp": "2026-05-18T23:16:47.744Z",
100
- "label": "scan",
101
- "total": 4,
102
- "critical": 0,
103
- "high": 1,
104
- "medium": 3,
105
- "low": 0,
106
- "kev": 0,
107
- "ids": [
108
- "prompt-tpl:index.js:55:Prompt_Template__user_input_interpolated_into_prompt_string_",
109
- "struct:index.js:114:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
110
- "struct:index.js:115:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
111
- "struct:index.js:121:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
112
- ]
113
- },
114
- {
115
- "timestamp": "2026-05-19T00:12:15.461Z",
116
- "label": "scan",
117
- "total": 4,
118
- "critical": 0,
119
- "high": 1,
120
- "medium": 3,
121
- "low": 0,
122
- "kev": 0,
123
- "ids": [
124
- "prompt-tpl:index.js:57:Prompt_Template__user_input_interpolated_into_prompt_string_",
125
- "struct:index.js:116:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
126
- "struct:index.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
127
- "struct:index.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)"
128
- ]
129
- },
130
- {
131
- "timestamp": "2026-05-19T22:20:17.395Z",
132
- "label": "scan",
133
- "total": 7,
134
- "critical": 0,
135
- "high": 1,
136
- "medium": 6,
137
- "low": 0,
138
- "kev": 0,
139
- "ids": [
140
- "prompt-tpl:index.js:57:Prompt_Template__user_input_interpolated_into_prompt_string_",
141
- "struct:consistency.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
142
- "struct:consistency.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
143
- "struct:index.js:116:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
144
- "struct:index.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
145
- "struct:index.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
146
- "toctou-fs:index.js:116"
147
- ]
148
- },
149
- {
150
- "timestamp": "2026-05-20T12:29:43.775Z",
151
- "label": "scan",
152
- "total": 7,
153
- "critical": 0,
154
- "high": 1,
155
- "medium": 6,
156
- "low": 0,
157
- "kev": 0,
158
- "ids": [
159
- "prompt-tpl:index.js:57:Prompt_Template__user_input_interpolated_into_prompt_string_",
160
- "struct:consistency.js:66:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
161
- "struct:consistency.js:67:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
162
- "struct:index.js:116:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
163
- "struct:index.js:117:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
164
- "struct:index.js:123:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
- "toctou-fs:index.js:116"
166
- ]
167
- }
168
- ]
package/src/llm-validator/.agentic-security/streak.json DELETED
@@ -1,20 +0,0 @@
1
- {
2
- "firstScanDate": "2026-05-18T17:45:05.477Z",
3
- "lastScanDate": "2026-05-20T12:29:43.794Z",
4
- "totalScans": 10,
5
- "daysCleanCritical": 3,
6
- "lastCleanDate": "2026-05-20",
7
- "lastCriticalDate": null,
8
- "hasEverHadCritical": false,
9
- "bestDaysCleanCritical": 3,
10
- "totalFindingsAtFirstScan": 6,
11
- "totalFindingsAtLastScan": 9,
12
- "totalFixesInferred": 0,
13
- "lastGrade": "A-",
14
- "bestGrade": "A-",
15
- "launchCheckPassedAt": null,
16
- "achievements": [
17
- "first-scan"
18
- ],
19
- "previousGrade": "A-"
20
- }
package/src/lsp/.agentic-security/findings.json DELETED
@@ -1,28 +0,0 @@
1
- {
2
- "scanId": "a086129d-1915-4e73-ad43-27444fe98585",
3
- "startedAt": "2026-05-19T00:13:29.781Z",
4
- "durationMs": 88,
5
- "scanned": {
6
- "files": 1,
7
- "lines": 0
8
- },
9
- "findings": [],
10
- "bundles": [],
11
- "routes": [],
12
- "components": [],
13
- "suppressedCount": 5,
14
- "blastRadiusSignals": {
15
- "industry": "generic",
16
- "industryConfidence": "low",
17
- "jurisdictions": [],
18
- "controls": [],
19
- "estimatedUsers": 50,
20
- "revenueIndicator": "pre-revenue",
21
- "hasStripe": false,
22
- "hasAuth": false,
23
- "hasUserTable": false,
24
- "hasPII": false,
25
- "hasPHI": false,
26
- "hasS3": false
27
- }
28
- }
package/src/lsp/.agentic-security/last-scan.json DELETED
@@ -1,28 +0,0 @@
1
- {
2
- "scanId": "a086129d-1915-4e73-ad43-27444fe98585",
3
- "startedAt": "2026-05-19T00:13:29.781Z",
4
- "durationMs": 88,
5
- "scanned": {
6
- "files": 1,
7
- "lines": 0
8
- },
9
- "findings": [],
10
- "bundles": [],
11
- "routes": [],
12
- "components": [],
13
- "suppressedCount": 5,
14
- "blastRadiusSignals": {
15
- "industry": "generic",
16
- "industryConfidence": "low",
17
- "jurisdictions": [],
18
- "controls": [],
19
- "estimatedUsers": 50,
20
- "revenueIndicator": "pre-revenue",
21
- "hasStripe": false,
22
- "hasAuth": false,
23
- "hasUserTable": false,
24
- "hasPII": false,
25
- "hasPHI": false,
26
- "hasS3": false
27
- }
28
- }
package/src/lsp/.agentic-security/scan-history.json DELETED
@@ -1,79 +0,0 @@
1
- [
2
- {
3
- "timestamp": "2026-05-18T21:27:21.719Z",
4
- "label": "scan",
5
- "total": 0,
6
- "critical": 0,
7
- "high": 0,
8
- "medium": 0,
9
- "low": 0,
10
- "kev": 0,
11
- "ids": []
12
- },
13
- {
14
- "timestamp": "2026-05-18T22:04:44.971Z",
15
- "label": "scan",
16
- "total": 0,
17
- "critical": 0,
18
- "high": 0,
19
- "medium": 0,
20
- "low": 0,
21
- "kev": 0,
22
- "ids": []
23
- },
24
- {
25
- "timestamp": "2026-05-18T22:34:17.177Z",
26
- "label": "scan",
27
- "total": 0,
28
- "critical": 0,
29
- "high": 0,
30
- "medium": 0,
31
- "low": 0,
32
- "kev": 0,
33
- "ids": []
34
- },
35
- {
36
- "timestamp": "2026-05-18T23:15:27.884Z",
37
- "label": "scan",
38
- "total": 0,
39
- "critical": 0,
40
- "high": 0,
41
- "medium": 0,
42
- "low": 0,
43
- "kev": 0,
44
- "ids": []
45
- },
46
- {
47
- "timestamp": "2026-05-18T23:58:08.356Z",
48
- "label": "scan",
49
- "total": 0,
50
- "critical": 0,
51
- "high": 0,
52
- "medium": 0,
53
- "low": 0,
54
- "kev": 0,
55
- "ids": []
56
- },
57
- {
58
- "timestamp": "2026-05-19T00:13:16.849Z",
59
- "label": "scan",
60
- "total": 0,
61
- "critical": 0,
62
- "high": 0,
63
- "medium": 0,
64
- "low": 0,
65
- "kev": 0,
66
- "ids": []
67
- },
68
- {
69
- "timestamp": "2026-05-19T00:13:29.869Z",
70
- "label": "scan",
71
- "total": 0,
72
- "critical": 0,
73
- "high": 0,
74
- "medium": 0,
75
- "low": 0,
76
- "kev": 0,
77
- "ids": []
78
- }
79
- ]
package/src/lsp/.agentic-security/streak.json DELETED
@@ -1,22 +0,0 @@
1
- {
2
- "firstScanDate": "2026-05-18T21:27:21.727Z",
3
- "lastScanDate": "2026-05-19T00:13:29.875Z",
4
- "totalScans": 7,
5
- "daysCleanCritical": 2,
6
- "lastCleanDate": "2026-05-19",
7
- "lastCriticalDate": null,
8
- "hasEverHadCritical": false,
9
- "bestDaysCleanCritical": 2,
10
- "totalFindingsAtFirstScan": 0,
11
- "totalFindingsAtLastScan": 0,
12
- "totalFixesInferred": 0,
13
- "lastGrade": "A+",
14
- "bestGrade": "A+",
15
- "launchCheckPassedAt": null,
16
- "achievements": [
17
- "first-scan",
18
- "grade-a",
19
- "grade-a-plus"
20
- ],
21
- "previousGrade": "A+"
22
- }