@elliotllliu/agent-shield 0.3.1 → 0.4.3

package/dist/rules/cross-file.js

@@ -0,0 +1,234 @@
+/**
+ * Rule: cross-file
+ * Cross-file correlation analysis — detects attack patterns that span multiple files.
+ * This is a capability that single-file scanners (like Snyk Agent Scan) cannot do.
+ *
+ * Checks:
+ * 1. Data flow: File A reads secrets → File B sends HTTP (cross-file exfiltration)
+ * 2. Code injection: File A receives input → File B passes to eval/exec
+ * 3. Capability mismatch: manifest/config declares X, code does Y
+ * 4. Import chain: suspicious module imports across the project
+ */
+// === Data sources (where sensitive data originates) ===
+const SECRET_READ_PATTERNS = [
+    /readFileSync\s*\([^)]*(?:\.ssh|\.env|\.aws|credentials|private.?key|secret)/i,
+    /open\s*\([^)]*(?:\.ssh|\.env|\.aws|credentials|private.?key|secret)/i,
+    /os\.environ\s*\[/,
+    /os\.getenv\s*\(/,
+    /process\.env\s*\./,
+    /process\.env\s*\[/,
+];
+// === Data sinks (where data leaves the system) ===
+const HTTP_SINK_PATTERNS = [
+    /fetch\s*\(\s*["'`]https?:\/\/(?!localhost|127\.0\.0\.1)/,
+    /requests\.(post|put|patch)\s*\(\s*["'`]https?:\/\//,
+    /axios\.(post|put|patch)\s*\(/,
+    /urllib\.request\.urlopen/,
+    /http\.request\s*\(/,
+    /\.post\s*\(\s*["'`]https?:\/\/(?!localhost|127\.0\.0\.1)/,
+];
+// === Code injection sinks ===
+const EXEC_SINK_PATTERNS = [
+    /\beval\s*\(\s*[a-zA-Z_]/,
+    /\bexec\s*\(\s*[a-zA-Z_]/,
+    /new\s+Function\s*\(/,
+    /child_process\.\s*exec\s*\(/,
+    /subprocess\.(?:call|run|Popen)\s*\(/,
+    /os\.system\s*\(/,
+];
+// === User input sources ===
+const INPUT_SOURCE_PATTERNS = [
+    /req\.(?:body|query|params|headers)\s*[\[.]/,
+    /request\.(?:form|args|json|data)\s*[\[.]/,
+    /process\.argv/,
+    /sys\.argv/,
+    // Note: tool_parameters and self.runtime are SDK interfaces, not raw user input
+    // They are handled by the framework and don't represent direct injection vectors
+];
+// === Capability patterns for manifest checking ===
+const CAPABILITY_PATTERNS = {
+    network: [
+        /fetch\s*\(/, /requests\.\w+\s*\(/, /axios/, /urllib/,
+        /http\.request/, /https\.request/, /XMLHttpRequest/,
+    ],
+    filesystem: [
+        /readFile|writeFile|readFileSync|writeFileSync/,
+        /open\s*\(/, /os\.path/, /pathlib/,
+        /fs\.read|fs\.write|fs\.unlink|fs\.mkdir/,
+    ],
+    exec: [
+        /child_process/, /subprocess/, /os\.system/, /os\.popen/,
+        /exec\s*\(/, /eval\s*\(/, /spawn\s*\(/,
+    ],
+    crypto: [
+        /crypto\./, /hashlib\./, /hmac\./, /bcrypt/, /jwt\./,
+    ],
+};
+function analyzeFile(file) {
+    const content = file.content;
+    const sig = {
+        file,
+        hasSecretRead: SECRET_READ_PATTERNS.some(p => p.test(content)),
+        hasHttpSink: HTTP_SINK_PATTERNS.some(p => p.test(content)),
+        hasExecSink: EXEC_SINK_PATTERNS.some(p => p.test(content)),
+        hasInputSource: INPUT_SOURCE_PATTERNS.some(p => p.test(content)),
+        capabilities: new Set(),
+        exportsModules: [],
+        importsModules: [],
+    };
+    // Detect capabilities
+    for (const [cap, patterns] of Object.entries(CAPABILITY_PATTERNS)) {
+        if (patterns.some(p => p.test(content))) {
+            sig.capabilities.add(cap);
+        }
+    }
+    // Detect imports (Python)
+    const pyImports = content.matchAll(/^(?:from|import)\s+([\w.]+)/gm);
+    for (const m of pyImports) {
+        sig.importsModules.push(m[1]);
+    }
+    // Detect imports (JS/TS)
+    const jsImports = content.matchAll(/(?:import|require)\s*\(?["'`]([^"'`]+)["'`]\)?/g);
+    for (const m of jsImports) {
+        sig.importsModules.push(m[1]);
+    }
+    return sig;
+}
+export const crossFileRule = {
+    id: "cross-file",
+    name: "Cross-File Correlation",
+    description: "Detects attack patterns spanning multiple files (data flow, capability mismatch)",
+    run(files) {
+        const findings = [];
+        if (files.length < 2)
+            return findings;
+        const codeFiles = files.filter(f => [".ts", ".js", ".py", ".sh"].includes(f.ext));
+        if (codeFiles.length === 0)
+            return findings;
+        // Analyze all code files
+        const signatures = codeFiles.map(analyzeFile);
+        // === Check 1: Cross-file data exfiltration (needs >= 2 code files) ===
+        if (codeFiles.length >= 2) {
+            // File A reads secrets, File B (different file) sends HTTP to external
+            // Exclude test/debug files — they commonly mock secrets and HTTP
+            const secretReaders = signatures.filter(s => s.hasSecretRead && s.file.context !== "test");
+            const httpSenders = signatures.filter(s => s.hasHttpSink && s.file.context !== "test");
+            for (const reader of secretReaders) {
+                for (const sender of httpSenders) {
+                    if (reader.file.relativePath === sender.file.relativePath)
+                        continue;
+                    // Check if they're connected (same module/package or import relationship)
+                    const readerModule = reader.file.relativePath.replace(/\.[^.]+$/, "").replace(/\//g, ".");
+                    const connected = sender.importsModules.some(m => readerModule.includes(m) || m.includes(readerModule.split("/").pop()));
+                    if (connected) {
+                        findings.push({
+                            rule: "cross-file",
+                            severity: "high",
+                            file: sender.file.relativePath,
+                            message: `Cross-file data flow: ${reader.file.relativePath} reads secrets → ${sender.file.relativePath} sends HTTP externally (connected via imports)`,
+                            confidence: "high",
+                        });
+                    }
+                    else {
+                        // Even without direct import, flag if in same directory
+                        const readerDir = reader.file.relativePath.split("/").slice(0, -1).join("/");
+                        const senderDir = sender.file.relativePath.split("/").slice(0, -1).join("/");
+                        if (readerDir === senderDir && readerDir !== "") {
+                            findings.push({
+                                rule: "cross-file",
+                                severity: "medium",
+                                file: sender.file.relativePath,
+                                message: `Cross-file data flow risk: ${reader.file.relativePath} reads secrets, ${sender.file.relativePath} sends HTTP (same directory: ${readerDir}/)`,
+                                confidence: "medium",
+                            });
+                        }
+                    }
+                }
+            }
+        } // end check 1: codeFiles >= 2
+        // === Check 2: Cross-file code injection ===
+        // File A receives user input, File B passes to eval/exec
+        // Exclude test/debug files as input sources — they simulate input, not receive real user data
+        if (codeFiles.length >= 2) {
+            const inputReceivers = signatures.filter(s => s.hasInputSource && s.file.context !== "test");
+            const execSinks = signatures.filter(s => s.hasExecSink && s.file.context !== "test");
+            for (const receiver of inputReceivers) {
+                for (const executor of execSinks) {
+                    if (receiver.file.relativePath === executor.file.relativePath)
+                        continue;
+                    const receiverModule = receiver.file.relativePath.replace(/\.[^.]+$/, "");
+                    const connected = executor.importsModules.some(m => receiverModule.includes(m) || m.includes(receiverModule.split("/").pop()));
+                    if (connected) {
+                        findings.push({
+                            rule: "cross-file",
+                            severity: "high",
+                            file: executor.file.relativePath,
+                            message: `Cross-file code injection risk: ${receiver.file.relativePath} receives input → ${executor.file.relativePath} passes to eval/exec (connected via imports)`,
+                            confidence: "high",
+                        });
+                    }
+                }
+            }
+        } // end codeFiles >= 2
+        // === Check 3: Capability mismatch ===
+        // manifest.yaml declares limited capabilities, but code uses more
+        const manifestFile = files.find(f => f.relativePath === "manifest.yaml" || f.relativePath === "manifest.yml" ||
+            f.relativePath === "manifest.json");
+        if (manifestFile) {
+            const manifestCaps = new Set();
+            const manifestContent = manifestFile.content.toLowerCase();
+            // Detect what the manifest claims
+            if (/network|http|api|fetch|request/i.test(manifestContent))
+                manifestCaps.add("network");
+            if (/file|read|write|path|directory/i.test(manifestContent))
+                manifestCaps.add("filesystem");
+            if (/exec|command|shell|process/i.test(manifestContent))
+                manifestCaps.add("exec");
+            // Check what code actually does (exclude test files)
+            const allCodeCaps = new Set();
+            for (const sig of signatures) {
+                if (sig.file.context === "test")
+                    continue;
+                for (const cap of sig.capabilities) {
+                    allCodeCaps.add(cap);
+                }
+            }
+            // Find undeclared capabilities
+            for (const cap of allCodeCaps) {
+                if (!manifestCaps.has(cap) && cap === "exec") {
+                    // Exec capability not mentioned in manifest — suspicious
+                    const execFiles = signatures
+                        .filter(s => s.capabilities.has("exec"))
+                        .map(s => s.file.relativePath);
+                    findings.push({
+                        rule: "cross-file",
+                        severity: "medium",
+                        file: manifestFile.relativePath,
+                        message: `Capability mismatch: manifest doesn't declare '${cap}' but code uses it in: ${execFiles.join(", ")}`,
+                        confidence: "medium",
+                    });
+                }
+            }
+        }
+        // === Check 4: Suspicious import chains ===
+        // Detect files that import known-dangerous modules in unusual ways
+        const dangerousModules = new Set([
+            "pickle", "marshal", "shelve", "ctypes",
+            "webbrowser", "ftplib", "telnetlib",
+        ]);
+        for (const sig of signatures) {
+            const dangerousImports = sig.importsModules.filter(m => dangerousModules.has(m) || dangerousModules.has(m.split(".")[0]));
+            if (dangerousImports.length >= 2) {
+                findings.push({
+                    rule: "cross-file",
+                    severity: "medium",
+                    file: sig.file.relativePath,
+                    message: `Multiple dangerous module imports: ${dangerousImports.join(", ")} — review usage carefully`,
+                    confidence: "medium",
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=cross-file.js.map

package/dist/rules/cross-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-file.js","sourceRoot":"","sources":["../../src/rules/cross-file.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,yDAAyD;AACzD,MAAM,oBAAoB,GAAG;IAC3B,8EAA8E;IAC9E,sEAAsE;IACtE,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;CACpB,CAAC;AAEF,oDAAoD;AACpD,MAAM,kBAAkB,GAAG;IACzB,yDAAyD;IACzD,oDAAoD;IACpD,8BAA8B;IAC9B,0BAA0B;IAC1B,oBAAoB;IACpB,0DAA0D;CAC3D,CAAC;AAEF,+BAA+B;AAC/B,MAAM,kBAAkB,GAAG;IACzB,yBAAyB;IACzB,yBAAyB;IACzB,qBAAqB;IACrB,6BAA6B;IAC7B,qCAAqC;IACrC,iBAAiB;CAClB,CAAC;AAEF,6BAA6B;AAC7B,MAAM,qBAAqB,GAAG;IAC5B,4CAA4C;IAC5C,0CAA0C;IAC1C,eAAe;IACf,WAAW;IACX,gFAAgF;IAChF,iFAAiF;CAClF,CAAC;AAEF,oDAAoD;AACpD,MAAM,mBAAmB,GAA6B;IACpD,OAAO,EAAE;QACP,YAAY,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ;QACrD,eAAe,EAAE,gBAAgB,EAAE,gBAAgB;KACpD;IACD,UAAU,EAAE;QACV,+CAA+C;QAC/C,WAAW,EAAE,UAAU,EAAE,SAAS;QAClC,yCAAyC;KAC1C;IACD,IAAI,EAAE;QACJ,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW;QACxD,WAAW,EAAE,WAAW,EAAE,YAAY;KACvC;IACD,MAAM,EAAE;QACN,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;KACrD;CACF,CAAC;AAaF,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,MAAM,GAAG,GAAkB;QACzB,IAAI;QACJ,aAAa,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,cAAc,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,cAAc,EAAE,EAAE;QAClB,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,sBAAsB;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAClE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjC,CAAC;IAED,yBAAyB;IACzB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,kFAAkF;IAE/F,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAEtC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAC7C,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE5C,yBAAyB;QACzB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE9C,wEAAwE;QACxE,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5B,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;YAC3F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;YAEvF,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;oBACjC,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY;wBAAE,SAAS;oBAEpE,0EAA0E;oBAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC/C,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CACvE,CAAC;oBAEF,IAAI,SAAS,EAAE,CAAC;wBACd,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,YAAY;4BAClB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;4BAC9B,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,CAAC,YAAY,oBAAoB,MAAM,CAAC,IAAI,CAAC,YAAY,gDAAgD;4BACtJ,UAAU,EAAE,MAAM;yBACnB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,wDAAwD;wBACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC7E,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;4BAChD,QAAQ,CAAC,IAAI,CAAC;gCACZ,IAAI,EAAE,YAAY;gCAClB,QAAQ,EAAE,QAAQ;gCAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;gCAC9B,OAAO,EAAE,8BAA8B,MAAM,CAAC,IAAI,CAAC,YAAY,mBAAmB,MAAM,CAAC,IAAI,CAAC,YAAY,gCAAgC,SAAS,IAAI;gCACvJ,UAAU,EAAE,QAAQ;6BACrB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACD,CAAC,CAAC,8BAA8B;QAEhC,6CAA6C;QAC7C,yDAAyD;QACzD,8FAA8F;QAC9F,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;YAErF,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY;wBAAE,SAAS;oBAExE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC1E,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjD,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAC3E,CAAC;oBAEF,IAAI,SAAS,EAAE,CAAC;wBACd,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,YAAY;4BAClB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;4BAChC,OAAO,EAAE,mCAAmC,QAAQ,CAAC,IAAI,CAAC,YAAY,qBAAqB,QAAQ,CAAC,IAAI,CAAC,YAAY,8CAA8C;4BACnK,UAAU,EAAE,MAAM;yBACnB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACD,CAAC,CAAC,qBAAqB;QAEvB,uCAAuC;QACvC,kEAAkE;QAClE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC,CAAC,YAAY,KAAK,eAAe,IAAI,CAAC,CAAC,YAAY,KAAK,cAAc;YACvE,CAAC,CAAC,YAAY,KAAK,eAAe,CACnC,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;YACvC,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAE3D,kCAAkC;YAClC,IAAI,iCAAiC,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzF,IAAI,iCAAiC,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5F,IAAI,6BAA6B,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAElF,qDAAqD;YACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;oBAAE,SAAS;gBAC1C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;oBACnC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBAC7C,yDAAyD;oBACzD,MAAM,SAAS,GAAG,UAAU;yBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;yBACvC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAEjC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,YAAY,CAAC,YAAY;wBAC/B,OAAO,EAAE,kDAAkD,GAAG,0BAA0B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC9G,UAAU,EAAE,QAAQ;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,mEAAmE;QACnE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;YAC/B,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;YACvC,YAAY,EAAE,QAAQ,EAAE,WAAW;SACpC,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,gBAAgB,GAAG,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACrD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAClE,CAAC;YAEF,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY;oBAC3B,OAAO,EAAE,sCAAsC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B;oBACrG,UAAU,EAAE,QAAQ;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/crypto-mining.js

@@ -24,7 +24,7 @@ export const cryptoMiningRule = {
                     if (pattern.test(line)) {
                         findings.push({
                             rule: "crypto-mining",
-                            severity: "critical",
+                            severity: "high",
                             file: file.relativePath,
                             line: i + 1,
                             message: desc,

package/dist/rules/crypto-mining.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-mining.js","sourceRoot":"","sources":["../../src/rules/crypto-mining.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,eAAe,GAA6C;IAChE,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACvF,EAAE,OAAO,EAAE,uDAAuD,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAC7G,EAAE,OAAO,EAAE,gDAAgD,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAChG,EAAE,OAAO,EAAE,gDAAgD,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC9F,EAAE,OAAO,EAAE,kEAAkE,EAAE,IAAI,EAAE,+CAA+C,EAAE;CACvI,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,4EAA4E;IAEzF,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAE5B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC;oBAChD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,eAAe;4BACrB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACpC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"crypto-mining.js","sourceRoot":"","sources":["../../src/rules/crypto-mining.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,eAAe,GAA6C;IAChE,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACvF,EAAE,OAAO,EAAE,uDAAuD,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAC7G,EAAE,OAAO,EAAE,gDAAgD,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAChG,EAAE,OAAO,EAAE,gDAAgD,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC9F,EAAE,OAAO,EAAE,kEAAkE,EAAE,IAAI,EAAE,+CAA+C,EAAE;CACvI,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,4EAA4E;IAEzF,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAE5B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC;oBAChD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,eAAe;4BACrB,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACpC,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/data-exfil.js

@@ -2,7 +2,11 @@
  * Rule: data-exfil
  * Detects code that reads sensitive files AND sends HTTP requests — a classic exfiltration pattern.
  */
-const SENSITIVE_READ_RE = /readFile|readFileSync|fs\.read|open\(|\.ssh|\.env|credentials|\.aws|\.kube|\.npmrc|\.gitconfig|\.openclaw/i;
+const SENSITIVE_READ_RE = /readFile|readFileSync|fs\.read|\/\.ssh\/|\/\.aws\/|\/\.kube\/|\/\.npmrc|\/\.gitconfig/i;
+/** Patterns that look like sensitive reads but aren't */
+const SENSITIVE_FALSE_POSITIVE_RE = /SSHException|SSHClient|ssh_exception|load_dotenv|dotenv|\.env\.example|\.env\.template|metadata\.openclaw/i;
+/** Credential access patterns that are NORMAL in plugin/SDK context */
+const SAFE_CREDENTIAL_RE = /self\.runtime\.credentials|this\.credentials|self\.config|tool_parameters|plugin_config|runtime\.credentials|provider_credentials/i;
 const HTTP_SEND_RE = /fetch\s*\(|axios\.|http\.request|https\.request|XMLHttpRequest|\.post\s*\(|\.put\s*\(|urllib|requests\.(post|put|patch)|curl\s/i;
 const DYNAMIC_URL_RE = /fetch\s*\(\s*`[^`]*\$\{|fetch\s*\(\s*[a-zA-Z_]\w*\s*[+,)]/;
 export const dataExfilRule = {
@@ -19,12 +23,15 @@ export const dataExfilRule = {
             const hasHttpSend = HTTP_SEND_RE.test(content);
             // Critical: same file reads sensitive data AND sends it out
             if (hasSensitiveRead && hasHttpSend) {
+                // Check if "sensitive reads" are actually safe credential access (plugin SDK patterns)
+                const hasSafeCredentials = SAFE_CREDENTIAL_RE.test(content);
                 // Find the specific lines
                 const readLines = [];
                 const sendLines = [];
                 for (let i = 0; i < file.lines.length; i++) {
                     const line = file.lines[i];
-                    if (SENSITIVE_READ_RE.test(line))
+                    // Skip lines that are safe credential access or false positive patterns
+                    if (SENSITIVE_READ_RE.test(line) && !SAFE_CREDENTIAL_RE.test(line) && !SENSITIVE_FALSE_POSITIVE_RE.test(line))
                         readLines.push(i + 1);
                     if (HTTP_SEND_RE.test(line))
                         sendLines.push(i + 1);
@@ -32,13 +39,17 @@ export const dataExfilRule = {
                 if (readLines.length > 0 && sendLines.length > 0) {
                     findings.push({
                         rule: "data-exfil",
-                        severity: "critical",
+                        severity: "high",
                         file: file.relativePath,
                         line: sendLines[0],
                         message: `Reads sensitive data (line ${readLines.join(",")}) and sends HTTP request (line ${sendLines.join(",")}) — possible exfiltration`,
                         evidence: file.lines[sendLines[0] - 1]?.trim().slice(0, 120),
                     });
                 }
+                else if (hasSafeCredentials && sendLines.length > 0) {
+                    // Credential access + HTTP is normal for API plugins — skip entirely
+                    // (don't even report as medium — this is expected behavior)
+                }
             }
             // Warning: dynamic URL construction in fetch/request calls
             for (let i = 0; i < file.lines.length; i++) {
@@ -46,7 +57,7 @@ export const dataExfilRule = {
                 if (DYNAMIC_URL_RE.test(line)) {
                     findings.push({
                         rule: "data-exfil",
-                        severity: "warning",
+                        severity: "medium",
                         file: file.relativePath,
                         line: i + 1,
                         message: "Dynamic URL construction in HTTP request — potential SSRF",

package/dist/rules/data-exfil.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-exfil.js","sourceRoot":"","sources":["../../src/rules/data-exfil.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,iBAAiB,GACrB,4GAA4G,CAAC;AAE/G,MAAM,YAAY,GAChB,iIAAiI,CAAC;AAEpI,MAAM,cAAc,GAClB,2DAA2D,CAAC;AAE9D,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,kEAAkE;IAE/E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAEhI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE/C,4DAA4D;YAC5D,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;gBACpC,0BAA0B;gBAC1B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;wBAClB,OAAO,EAAE,8BAA8B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B;wBAC1I,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EAAE,2DAA2D;wBACpE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"data-exfil.js","sourceRoot":"","sources":["../../src/rules/data-exfil.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,iBAAiB,GACrB,wFAAwF,CAAC;AAE3F,yDAAyD;AACzD,MAAM,2BAA2B,GAC/B,4GAA4G,CAAC;AAE/G,uEAAuE;AACvE,MAAM,kBAAkB,GACtB,oIAAoI,CAAC;AAEvI,MAAM,YAAY,GAChB,iIAAiI,CAAC;AAEpI,MAAM,cAAc,GAClB,2DAA2D,CAAC;AAE9D,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,kEAAkE;IAE/E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAEhI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE/C,4DAA4D;YAC5D,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;gBACpC,uFAAuF;gBACvF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE5D,0BAA0B;gBAC1B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,wEAAwE;oBACxE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;wBAClB,OAAO,EAAE,8BAA8B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B;wBAC1I,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,kBAAkB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,qEAAqE;oBACrE,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;gBAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EAAE,2DAA2D;wBACpE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/description-integrity.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const descriptionIntegrityRule: Rule;

package/dist/rules/description-integrity.js

@@ -0,0 +1,204 @@
+// Extract tool declarations from YAML/JSON configs
+function extractToolDeclarations(files) {
+    const tools = [];
+    for (const file of files) {
+        if (![".yaml", ".yml", ".json"].includes(file.ext))
+            continue;
+        // YAML tool definitions (Dify, OpenClaw, MCP)
+        const nameMatch = file.content.match(/(?:^|\n)\s*(?:name|tool_name)\s*:\s*["']?([^"'\n]+)/);
+        const descMatch = file.content.match(/(?:^|\n)\s*(?:description|desc)\s*:\s*["']?([^"'\n]+)/);
+        // Multi-line description
+        const descBlockMatch = file.content.match(/(?:^|\n)\s*description\s*:\s*>\s*\n([\s\S]*?)(?:\n\S|\n$)/);
+        if (nameMatch || descMatch) {
+            tools.push({
+                name: nameMatch?.[1]?.trim() || file.relativePath,
+                description: (descBlockMatch?.[1] || descMatch?.[1] || "").trim().toLowerCase(),
+                file: file.relativePath,
+            });
+        }
+        // JSON tool definitions (MCP)
+        if (file.ext === ".json") {
+            try {
+                const json = JSON.parse(file.content);
+                if (json.tools) {
+                    for (const tool of Object.values(json.tools)) {
+                        if (tool.description) {
+                            tools.push({
+                                name: tool.name || "unknown",
+                                description: (tool.description || "").toLowerCase(),
+                                file: file.relativePath,
+                            });
+                        }
+                    }
+                }
+            }
+            catch { }
+        }
+    }
+    return tools;
+}
+// Analyze code behavior
+function analyzeCodeBehavior(files) {
+    const behaviors = [];
+    for (const file of files) {
+        if (![".py", ".ts", ".js", ".sh"].includes(file.ext))
+            continue;
+        if (file.context === "test")
+            continue;
+        const c = file.content;
+        behaviors.push({
+            file: file.relativePath,
+            hasNetworkAccess: /requests\.\w+\s*\(|fetch\s*\(|urllib|http\.request|axios|httpx/i.test(c),
+            hasFileWrite: /writeFile|writeFileSync|open\s*\([^)]*['"]w|\.write\s*\(|shutil\.copy|shutil\.move/i.test(c),
+            hasFileDelete: /unlink|rmtree|os\.remove|fs\.rm|shutil\.rmtree/i.test(c),
+            hasCodeExec: /\beval\s*\(|\bexec\s*\(|subprocess|os\.system|os\.popen|child_process/i.test(c),
+            hasEnvAccess: /os\.environ|os\.getenv|process\.env|dotenv/i.test(c),
+            hasCryptoOps: /hashlib|hmac|crypto\.|bcrypt|jwt\.|encrypt|decrypt/i.test(c),
+            hasDbAccess: /sqlite|psycopg|mysql|pymongo|redis\.|sqlalchemy|cursor\.execute/i.test(c),
+            sendsEmail: /smtplib|email\.mime|sendmail|send_mail/i.test(c),
+            spawnsProcess: /subprocess\.(?:run|call|Popen)|os\.system|child_process\.exec/i.test(c),
+        });
+    }
+    return behaviors;
+}
+// Keywords that indicate a tool claims to be limited/safe
+const SAFE_CLAIMS = {
+    readOnly: /\bread[\s-]?only\b|only\s+read|does\s+not\s+(?:write|modify|delete)|no\s+(?:write|modify|side\s*effect)/i,
+    localOnly: /\blocal[\s-]?only\b|offline|no\s+(?:network|internet|http|api\s+call)|does\s+not\s+(?:connect|send|request)/i,
+    noExec: /\bsafe\b.*\bno\s+(?:exec|code\s+execution)|does\s+not\s+(?:execute|run)\s+(?:code|commands?)/i,
+    noData: /\bno\s+(?:data|file)\s+(?:access|collection)|does\s+not\s+(?:access|collect|read)\s+(?:data|files?|personal)/i,
+};
+// Keywords that indicate a narrow scope
+const NARROW_SCOPE_KEYWORDS = {
+    calculator: /\b(?:calculator?|math|arithmetic|compute|calculate)\b/i,
+    formatter: /\b(?:format|beautif|prettif|lint|style)\b/i,
+    validator: /\b(?:validat|verify|check|lint)\b/i,
+    converter: /\b(?:convert|transform|translate|encode|decode)\b/i,
+    search: /\b(?:search|find|query|lookup|look\s+up)\b/i,
+};
+export const descriptionIntegrityRule = {
+    id: "description-integrity",
+    name: "Description-Code Integrity",
+    description: "Detects mismatches between tool descriptions and actual code behavior",
+    run(files) {
+        const findings = [];
+        const declarations = extractToolDeclarations(files);
+        const behaviors = analyzeCodeBehavior(files);
+        if (declarations.length === 0 || behaviors.length === 0)
+            return findings;
+        // Aggregate all code behaviors
+        const aggregatedBehavior = {
+            file: ".",
+            hasNetworkAccess: behaviors.some(b => b.hasNetworkAccess),
+            hasFileWrite: behaviors.some(b => b.hasFileWrite),
+            hasFileDelete: behaviors.some(b => b.hasFileDelete),
+            hasCodeExec: behaviors.some(b => b.hasCodeExec),
+            hasEnvAccess: behaviors.some(b => b.hasEnvAccess),
+            hasCryptoOps: behaviors.some(b => b.hasCryptoOps),
+            hasDbAccess: behaviors.some(b => b.hasDbAccess),
+            sendsEmail: behaviors.some(b => b.sendsEmail),
+            spawnsProcess: behaviors.some(b => b.spawnsProcess),
+        };
+        for (const decl of declarations) {
+            const desc = decl.description;
+            // Check 1: Claims read-only but writes/deletes files
+            if (SAFE_CLAIMS.readOnly.test(desc)) {
+                if (aggregatedBehavior.hasFileWrite) {
+                    const writers = behaviors.filter(b => b.hasFileWrite).map(b => b.file);
+                    findings.push({
+                        rule: "description-integrity",
+                        severity: "high",
+                        file: decl.file,
+                        message: `Description claims "read-only" but code writes files in: ${writers.join(", ")}`,
+                        confidence: "high",
+                    });
+                }
+                if (aggregatedBehavior.hasFileDelete) {
+                    const deleters = behaviors.filter(b => b.hasFileDelete).map(b => b.file);
+                    findings.push({
+                        rule: "description-integrity",
+                        severity: "high",
+                        file: decl.file,
+                        message: `Description claims "read-only" but code deletes files in: ${deleters.join(", ")}`,
+                        confidence: "high",
+                    });
+                }
+            }
+            // Check 2: Claims local/offline but makes network requests
+            if (SAFE_CLAIMS.localOnly.test(desc)) {
+                if (aggregatedBehavior.hasNetworkAccess) {
+                    const networkers = behaviors.filter(b => b.hasNetworkAccess).map(b => b.file);
+                    findings.push({
+                        rule: "description-integrity",
+                        severity: "high",
+                        file: decl.file,
+                        message: `Description claims "local only/offline" but code makes network requests in: ${networkers.join(", ")}`,
+                        confidence: "high",
+                    });
+                }
+            }
+            // Check 3: Claims no execution but runs eval/exec
+            if (SAFE_CLAIMS.noExec.test(desc)) {
+                if (aggregatedBehavior.hasCodeExec) {
+                    const executors = behaviors.filter(b => b.hasCodeExec).map(b => b.file);
+                    findings.push({
+                        rule: "description-integrity",
+                        severity: "high",
+                        file: decl.file,
+                        message: `Description claims "no code execution" but code uses eval/exec in: ${executors.join(", ")}`,
+                        confidence: "high",
+                    });
+                }
+            }
+            // Check 4: Claims no data access but reads env/files
+            if (SAFE_CLAIMS.noData.test(desc)) {
+                if (aggregatedBehavior.hasEnvAccess) {
+                    findings.push({
+                        rule: "description-integrity",
+                        severity: "medium",
+                        file: decl.file,
+                        message: `Description claims "no data access" but code reads environment variables`,
+                        confidence: "medium",
+                    });
+                }
+            }
+            // Check 5: Narrow scope tool with undisclosed capabilities
+            for (const [scope, pattern] of Object.entries(NARROW_SCOPE_KEYWORDS)) {
+                if (pattern.test(desc)) {
+                    // Calculator/formatter/validator shouldn't need network or exec
+                    if (aggregatedBehavior.hasNetworkAccess && !desc.includes("api") && !desc.includes("http") && !desc.includes("online")) {
+                        const networkers = behaviors.filter(b => b.hasNetworkAccess).map(b => b.file);
+                        findings.push({
+                            rule: "description-integrity",
+                            severity: "medium",
+                            file: decl.file,
+                            message: `Scope creep: "${scope}" tool makes undisclosed network requests in: ${networkers.join(", ")}`,
+                            confidence: "medium",
+                        });
+                    }
+                    if (aggregatedBehavior.sendsEmail) {
+                        findings.push({
+                            rule: "description-integrity",
+                            severity: "high",
+                            file: decl.file,
+                            message: `Scope creep: "${scope}" tool sends emails — undisclosed and suspicious capability`,
+                            confidence: "high",
+                        });
+                    }
+                    if (aggregatedBehavior.spawnsProcess && scope !== "converter") {
+                        findings.push({
+                            rule: "description-integrity",
+                            severity: "medium",
+                            file: decl.file,
+                            message: `Scope creep: "${scope}" tool spawns processes — undisclosed capability`,
+                            confidence: "medium",
+                        });
+                    }
+                    break; // Only match first scope
+                }
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=description-integrity.js.map

package/dist/rules/description-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"description-integrity.js","sourceRoot":"","sources":["../../src/rules/description-integrity.ts"],"names":[],"mappings":"AAwCA,mDAAmD;AACnD,SAAS,uBAAuB,CAAC,KAAoB;IACnD,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAE7D,8CAA8C;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9F,yBAAyB;QACzB,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAEvG,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,YAAY;gBACjD,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC/E,IAAI,EAAE,IAAI,CAAC,YAAY;aACxB,CAAC,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAU,EAAE,CAAC;wBACtD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;4BACrB,KAAK,CAAC,IAAI,CAAC;gCACT,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;gCAC5B,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gCACnD,IAAI,EAAE,IAAI,CAAC,YAAY;6BACxB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wBAAwB;AACxB,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QAEtC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,IAAI,CAAC,YAAY;YACvB,gBAAgB,EAAE,iEAAiE,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3F,YAAY,EAAE,qFAAqF,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3G,aAAa,EAAE,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,WAAW,EAAE,wEAAwE,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7F,YAAY,EAAE,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,YAAY,EAAE,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,WAAW,EAAE,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,UAAU,EAAE,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,aAAa,EAAE,gEAAgE,CAAC,IAAI,CAAC,CAAC,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0DAA0D;AAC1D,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,0GAA0G;IACpH,SAAS,EAAE,8GAA8G;IACzH,MAAM,EAAE,+FAA+F;IACvG,MAAM,EAAE,+GAA+G;CACxH,CAAC;AAEF,wCAAwC;AACxC,MAAM,qBAAqB,GAAG;IAC5B,UAAU,EAAE,wDAAwD;IACpE,SAAS,EAAE,4CAA4C;IACvD,SAAS,EAAE,oCAAoC;IAC/C,SAAS,EAAE,oDAAoD;IAC/D,MAAM,EAAE,6CAA6C;CACtD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,4BAA4B;IAClC,WAAW,EAAE,uEAAuE;IAEpF,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE7C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAEzE,+BAA+B;QAC/B,MAAM,kBAAkB,GAAiB;YACvC,IAAI,EAAE,GAAG;YACT,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACzD,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACjD,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YACnD,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACjD,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACjD,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YAC7C,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;SACpD,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;YAE9B,qDAAqD;YACrD,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,kBAAkB,CAAC,YAAY,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACvE,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,4DAA4D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACzF,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,kBAAkB,CAAC,aAAa,EAAE,CAAC;oBACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACzE,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,6DAA6D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC3F,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;oBACxC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC9E,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,+EAA+E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/G,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,kDAAkD;YAClD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,IAAI,kBAAkB,CAAC,WAAW,EAAE,CAAC;oBACnC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACxE,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,MAAM;wBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,sEAAsE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACrG,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,qDAAqD;YACrD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,IAAI,kBAAkB,CAAC,YAAY,EAAE,CAAC;oBACpC,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,0EAA0E;wBACnF,UAAU,EAAE,QAAQ;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACrE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,gEAAgE;oBAChE,IAAI,kBAAkB,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACvH,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBAC9E,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,uBAAuB;4BAC7B,QAAQ,EAAE,QAAQ;4BAClB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,OAAO,EAAE,iBAAiB,KAAK,iDAAiD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BACvG,UAAU,EAAE,QAAQ;yBACrB,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,kBAAkB,CAAC,UAAU,EAAE,CAAC;wBAClC,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,uBAAuB;4BAC7B,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,OAAO,EAAE,iBAAiB,KAAK,6DAA6D;4BAC5F,UAAU,EAAE,MAAM;yBACnB,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,kBAAkB,CAAC,aAAa,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC9D,QAAQ,CAAC,IAAI,CAAC;4BACZ,IAAI,EAAE,uBAAuB;4BAC7B,QAAQ,EAAE,QAAQ;4BAClB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,OAAO,EAAE,iBAAiB,KAAK,kDAAkD;4BACjF,UAAU,EAAE,QAAQ;yBACrB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,yBAAyB;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/env-leak.js

@@ -28,7 +28,7 @@ export const envLeakRule = {
                 if (envLines.length > 0 && sendLines.length > 0) {
                     findings.push({
                         rule: "env-leak",
-                        severity: "critical",
+                        severity: "medium",
                         file: file.relativePath,
                         line: sendLines[0],
                         message: `Reads environment variables (line ${envLines.join(",")}) and sends HTTP request (line ${sendLines.join(",")}) — possible env leak`,

package/dist/rules/env-leak.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-leak.js","sourceRoot":"","sources":["../../src/rules/env-leak.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,YAAY,GAAG,gGAAgG,CAAC;AAEtH,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,iEAAiE;IAE9E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAExG,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEpD,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACnD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;wBAClB,OAAO,EAAE,qCAAqC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB;wBAC5I,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"env-leak.js","sourceRoot":"","sources":["../../src/rules/env-leak.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,YAAY,GAAG,gGAAgG,CAAC;AAEtH,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,iEAAiE;IAE9E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,SAAS;YAExG,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEpD,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;gBAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACnD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;wBAClB,OAAO,EAAE,qCAAqC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB;wBAC5I,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/excessive-perms.js

@@ -29,7 +29,7 @@ export const excessivePermsRule = {
             if (DANGEROUS_PERMS.has(perm.toLowerCase())) {
                 findings.push({
                     rule: "excessive-perms",
-                    severity: "warning",
+                    severity: "low",
                     file: skillMd.relativePath,
                     message: `Requests dangerous permission: '${perm}'`,
                 });
@@ -39,7 +39,7 @@ export const excessivePermsRule = {
         if (permissions.length > MAX_REASONABLE_PERMS) {
             findings.push({
                 rule: "excessive-perms",
-                severity: "warning",
+                severity: "low",
                 file: skillMd.relativePath,
                 message: `Requests ${permissions.length} permissions (threshold: ${MAX_REASONABLE_PERMS}) — review if all are necessary`,
             });

package/dist/rules/excessive-perms.js.map

@@ -1 +1 @@
-{"version":3,"file":"excessive-perms.js","sourceRoot":"","sources":["../../src/rules/excessive-perms.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC;;;GAGG;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACzF,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,6DAA6D;IAE1E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC7E,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,OAAO,CAAC,YAAY;oBAC1B,OAAO,EAAE,mCAAmC,IAAI,GAAG;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,WAAW,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,OAAO,CAAC,YAAY;gBAC1B,OAAO,EAAE,YAAY,WAAW,CAAC,MAAM,4BAA4B,oBAAoB,iCAAiC;aACzH,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
+{"version":3,"file":"excessive-perms.js","sourceRoot":"","sources":["../../src/rules/excessive-perms.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC;;;GAGG;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACzF,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,6DAA6D;IAE1E,GAAG,CAAC,KAAoB;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC7E,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,OAAO,CAAC,YAAY;oBAC1B,OAAO,EAAE,mCAAmC,IAAI,GAAG;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,WAAW,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,OAAO,CAAC,YAAY;gBAC1B,OAAO,EAAE,YAAY,WAAW,CAAC,MAAM,4BAA4B,oBAAoB,iCAAiC;aACzH,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/rules/hidden-files.js

@@ -24,7 +24,7 @@ export const hiddenFilesRule = {
                 if (pattern.test(basename)) {
                     findings.push({
                         rule: "hidden-files",
-                        severity: "critical",
+                        severity: "low",
                         file: file.relativePath,
                         message: `${desc} found in repository — should be in .gitignore`,
                     });
@@ -34,7 +34,7 @@ export const hiddenFilesRule = {
                         if (SECRET_IN_ENV_RE.test(line) && !line.trimStart().startsWith("#")) {
                             findings.push({
                                 rule: "hidden-files",
-                                severity: "critical",
+                                severity: "low",
                                 file: file.relativePath,
                                 line: i + 1,
                                 message: "Hardcoded secret in environment file",