@cubis/foundry 0.3.34 → 0.3.36

package/workflows/workflows/agent-environment-setup/platforms/copilot/skills/postman/flutter-security-reviewer/references/vulnerability-patterns.md

@@ -1,189 +0,0 @@
-# Vulnerability Patterns
-
-> Reference for: Security Reviewer
-> Load when: Manual security code review
-
-## SQL/NoSQL Injection
-
-```dart
-// VULNERABLE - String interpolation
-final query = "SELECT * FROM users WHERE id = $userId";
-
-// SECURE - Parameterized queries (Sqflite)
-final result = await db.query(
-  'users',
-  where: 'id = ?',
-  whereArgs: [userId],
-);
-
-// SECURE - ORM (Isar)
-final user = await isar.users.filter().idEqualTo(userId).findFirst();
-```
-
-## Path Traversal
-
-```dart
-// VULNERABLE
-final file = File('$uploadDir/${request.filename}');
-
-// SECURE - Validate and normalize
-final filename = path.basename(request.filename);
-final file = File(path.join(uploadDir, filename));
-
-// Verify path is within allowed directory
-if (!file.path.startsWith(path.canonicalize(uploadDir))) {
-  throw SecurityException('Invalid path');
-}
-```
-
-## Insecure Direct Object Reference (IDOR)
-
-```dart
-// VULNERABLE - No authorization check
-Future<Document> getDocument(String docId) async {
-  return await documentRepository.findById(docId);
-}
-
-// SECURE - Verify ownership
-Future<Document> getDocument(String docId, String userId) async {
-  final doc = await documentRepository.findById(docId);
-  if (doc.ownerId != userId) {
-    throw UnauthorizedException('Access denied');
-  }
-  return doc;
-}
-```
-
-## Sensitive Data Exposure
-
-```dart
-// VULNERABLE - Logging sensitive data
-logger.info('User login: email=$email, password=$password');
-logger.debug('Token: $authToken');
-
-// SECURE - Redact sensitive fields
-logger.info('User login: email=$email');
-logger.debug('Token: [REDACTED]');
-
-// VULNERABLE - Error response exposes internals
-return Response.error(exception.stackTrace.toString());
-
-// SECURE - Generic error
-return Response.error('An error occurred');
-```
-
-## Insecure Storage
-
-```dart
-// VULNERABLE - Plain SharedPreferences for tokens
-final prefs = await SharedPreferences.getInstance();
-await prefs.setString('auth_token', token);
-
-// SECURE - Use flutter_secure_storage
-final storage = FlutterSecureStorage();
-await storage.write(key: 'auth_token', value: token);
-
-// VULNERABLE - Unencrypted Isar for sensitive data
-final isar = await Isar.open([UserSchema]);
-
-// SECURE - Encrypted Isar
-final isar = await Isar.open(
-  [UserSchema],
-  encryptionKey: encryptionKey,
-);
-```
-
-## Authentication Bypass
-
-```dart
-// VULNERABLE - Client-side only check
-if (user.role == 'admin') {
-  showAdminPanel();
-}
-
-// SECURE - Server validates, client just displays
-// Server: verify role in JWT/session before returning admin data
-// Client: display based on server response
-
-// VULNERABLE - Trusting client headers
-final orgId = request.headers['X-Org-Id'];
-
-// SECURE - Derive from authenticated session
-final orgId = authenticatedUser.organizationId;
-```
-
-## Session Management Issues
-
-```dart
-// VULNERABLE - No session timeout
-// Token never expires
-
-// SECURE - Short-lived access tokens + refresh
-final accessToken = jwt.sign(
-  payload,
-  secret,
-  expiresIn: Duration(minutes: 15),
-);
-
-// VULNERABLE - Session not cleared on logout
-Future<void> logout() async {
-  // Just navigate away
-  context.go('/login');
-}
-
-// SECURE - Clear all sensitive data
-Future<void> logout() async {
-  await secureStorage.deleteAll();
-  await isar.writeTxn(() => isar.clear());
-  ref.invalidate(sessionProvider);
-  context.go('/login');
-}
-```
-
-## Deep Link Security
-
-```dart
-// VULNERABLE - No auth check on deep link
-GoRoute(
-  path: '/document/:id',
-  builder: (context, state) => DocumentView(id: state.params['id']!),
-)
-
-// SECURE - Guard protects deep links
-GoRoute(
-  path: '/document/:id',
-  redirect: (context, state) {
-    if (!isAuthenticated) return '/login?redirect=${state.uri}';
-    return null;
-  },
-  builder: (context, state) => DocumentView(id: state.params['id']!),
-)
-```
-
-## Quick Reference
-
-| Vulnerability     | Input Vector    | Prevention                    |
-| ----------------- | --------------- | ----------------------------- |
-| SQL Injection     | Query params    | Parameterized queries         |
-| Path Traversal    | File paths      | path.basename + validation    |
-| IDOR              | Resource IDs    | Authorization checks          |
-| Data Exposure     | Logs, errors    | Redaction, generic errors     |
-| Insecure Storage  | Local storage   | flutter_secure_storage        |
-| Auth Bypass       | Client checks   | Server-side validation        |
-| Session Issues    | Token handling  | Short TTL, proper logout      |
-| Deep Link Bypass  | URL schemes     | Route guards                  |
-
-## OWASP Mobile Top 10 Mapping
-
-| OWASP Mobile              | Vulnerabilities                    |
-| ------------------------- | ---------------------------------- |
-| M1 Improper Platform Use  | Insecure storage, deep link bypass |
-| M2 Insecure Data Storage  | SharedPreferences for tokens       |
-| M3 Insecure Communication | HTTP, no cert pinning              |
-| M4 Insecure Authentication| Weak session, no timeout           |
-| M5 Insufficient Crypto    | Weak encryption, hardcoded keys    |
-| M6 Insecure Authorization | IDOR, client-side checks           |
-| M7 Client Code Quality    | Injection, path traversal          |
-| M8 Code Tampering         | No integrity checks                |
-| M9 Reverse Engineering    | Hardcoded secrets                  |
-| M10 Extraneous Functionality | Debug endpoints, test data      |

package/workflows/workflows/agent-environment-setup/platforms/copilot/skills/postman/flutter-security-reviewer/templates/security_review_response.md

@@ -1,31 +0,0 @@
-# Security Review (OneUp HR)
-
-## Threat summary
-- ...
-
-## Findings
-
-### CRITICAL
-- **...**
-  - Risk:
-  - Evidence:
-  - Fix:
-
-### HIGH
-- ...
-
-### MED
-- ...
-
-### LOW
-- ...
-
-## Concrete mitigations
-1) ...
-2) ...
-
-## Security regression checks
-- [ ] ...
-
-## Logging & privacy audit
-- ...