@contextfort-ai/openclaw-secure 0.1.5 → 0.1.7

package/bin/openclaw-secure.js

@@ -37,6 +37,7 @@ if (args[0] === 'set-key') {
   fs.mkdirSync(CONFIG_DIR, { recursive: true });
   fs.writeFileSync(CONFIG_FILE, key + '\n', { mode: 0o600 });
   console.log('API key saved to ~/.contextfort/config');
+  console.log('\nNext step: run `openclaw-secure enable` to activate the guard.');
   process.exit(0);
 }
 

package/monitor/prompt_injection_guard/index.js

@@ -87,15 +87,22 @@ module.exports = function createPromptInjectionGuard({ httpsRequest, anthropicKe
     return scanPatterns.some(p => lower.includes(p.toLowerCase()));
   }
 
+  function getMatchedPattern(cmd) {
+    if (!cmd || typeof cmd !== 'string') return null;
+    const lower = cmd.toLowerCase();
+    return scanPatterns.find(p => lower.includes(p.toLowerCase())) || null;
+  }
+
   function scanOutput(command, stdout, stderr) {
     if (!shouldScanCommand(command)) return;
+    const matchedPattern = getMatchedPattern(command);
     const output = (stdout || '') + (stderr || '');
     if (output.length < 20) return; // too short to contain injection
 
     const scanId = `scan_${++scanCounter}`;
     if (pendingScans.size > 10) return; // don't pile up
     pendingScans.add(scanId);
-    track('output_scan_started', { scan_id: scanId });
+    track('output_scan_started', { scan_id: scanId, matched_pattern: matchedPattern });
 
     // Cap output to 50k chars
     const truncated = output.length > 50000 ? output.slice(0, 50000) + '\n[TRUNCATED]' : output;
@@ -150,7 +157,7 @@ Respond with ONLY a JSON object, no markdown, no explanation:
               // Strip markdown code fences if present
               text = text.replace(/^```(?:json)?\s*/i, '').replace(/\s*```$/i, '').trim();
               const parsed = JSON.parse(text);
-              track('output_scan_result', { scan_id: scanId, suspicious: !!parsed.suspicious });
+              track('output_scan_result', { scan_id: scanId, suspicious: !!parsed.suspicious, matched_pattern: matchedPattern });
               if (parsed.suspicious) {
                 flaggedOutput.set(scanId, {
                   suspicious: true,

package/monitor/skills_guard/index.js

@@ -19,6 +19,9 @@ module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDi
     };
   }
 
+  let PACKAGE_VERSION;
+  try { PACKAGE_VERSION = require(path.join(baseDir, 'package.json')).version; } catch { PACKAGE_VERSION = 'unknown'; }
+
   const track = analytics ? analytics.track.bind(analytics) : () => {};
   const SKILL_CACHE_FILE = path.join(baseDir, 'monitor', '.skill_scan_cache.json');
   const INSTALL_ID_FILE = path.join(baseDir, 'monitor', '.install_id');
@@ -133,7 +136,8 @@ module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDi
   function loadScanCache() {
     try {
       const data = JSON.parse(readFileSync(SKILL_CACHE_FILE, 'utf8'));
-      if (data.hashes) {
+      const versionChanged = data.version !== PACKAGE_VERSION;
+      if (data.hashes && !versionChanged) {
         for (const [k, v] of Object.entries(data.hashes)) {
           skillContentHashes.set(k, v);
         }
@@ -151,6 +155,7 @@ module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDi
   function saveScanCache() {
     try {
       const data = {
+        version: PACKAGE_VERSION,
         hashes: Object.fromEntries(skillContentHashes),
         flagged: Object.fromEntries(flaggedSkills),
         updated: new Date().toISOString()
@@ -222,6 +227,37 @@ module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDi
     }
   }
 
+  function logSkillRemoved(skillPath, installId) {
+    track('skill_removed', { skill_name: path.basename(skillPath) });
+    const payload = JSON.stringify({
+      install_id: installId,
+      skill_path: skillPath,
+      skill_name: path.basename(skillPath),
+      files: [],
+      removed: true,
+    });
+
+    const url = new URL(SKILL_SCAN_API);
+    const headers = {
+      'Content-Type': 'application/json',
+      'Content-Length': Buffer.byteLength(payload),
+    };
+    if (apiKey) headers['Authorization'] = `Bearer ${apiKey}`;
+    try {
+      const req = httpsRequest({
+        hostname: url.hostname,
+        port: url.port || 443,
+        path: url.pathname,
+        method: 'POST',
+        headers,
+        timeout: 15000,
+      }, () => {});
+      req.on('error', () => {});
+      req.write(payload);
+      req.end();
+    } catch {}
+  }
+
   function scanSkillIfChanged(skillPath) {
     const { files, binaryFiles } = readSkillFiles(skillPath);
     if (files.length === 0 && binaryFiles.length === 0) {
@@ -261,9 +297,20 @@ module.exports = function createSkillsGuard({ readFileSync, httpsRequest, baseDi
           debounceTimers.delete(skillDir);
           // Re-discover skills and scan changed ones
           const skills = collectSkillEntries(dir);
+          const currentPaths = new Set(skills.map(s => s.skillPath));
           for (const { skillPath } of skills) {
             scanSkillIfChanged(skillPath);
           }
+          // Detect deleted skills: any known skill in this dir that no longer exists
+          for (const knownPath of skillContentHashes.keys()) {
+            if (knownPath.startsWith(dir) && !currentPaths.has(knownPath)) {
+              flaggedSkills.delete(knownPath);
+              skillContentHashes.delete(knownPath);
+              const installId = getInstallId();
+              logSkillRemoved(knownPath, installId);
+              saveScanCache();
+            }
+          }
         }, 500));
       });
       activeWatchers.push(watcher);

package/openclaw-secure.js

@@ -129,7 +129,7 @@ function shouldBlockCommand(cmd) {
   }
   const result = checkCommandWithMonitor(cmd);
   if (result?.blocked) {
-    analytics.track('command_blocked', { blocker: 'tirith' });
+    analytics.track('command_blocked', { blocker: 'tirith', reason: result.reason });
     return result;
   }
   return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contextfort-ai/openclaw-secure",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Runtime security guard for OpenClaw — blocks malicious commands before they execute",
   "bin": {
     "openclaw-secure": "./bin/openclaw-secure.js"