@elmoxbt/agentskillguard 0.1.0

package/src/types.ts

@@ -0,0 +1,37 @@
+export type Severity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+
+export interface Finding {
+  ruleId: string;
+  capability: string;
+  severity: Severity;
+  description: string;
+  file: string;
+  line: number;
+  snippet: string;
+}
+
+export interface ToolMetadata {
+  name?: string;
+  version?: string;
+  description?: string;
+  declaredTools?: string[];
+  source: string;
+}
+
+export interface Violation {
+  capability: string;
+  severity: Severity;
+  message: string;
+}
+
+export interface ScanResult {
+  target: string;
+  scannedAt: string;
+  filesScanned: number;
+  metadata: ToolMetadata | null;
+  findings: Finding[];
+  capabilities: string[];
+  violations: Violation[];
+  verdict: 'ALLOW' | 'WARN' | 'BLOCK';
+  verdictReason: string;
+}

package/src/utils/fileWalker.ts

@@ -0,0 +1,37 @@
+import * as fs from 'fs';
+import * as path from 'path';
+
+const EXTENSIONS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx']);
+const IGNORE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', '.next', 'coverage']);
+
+/**
+ * Recursively collects source files under `root` (or returns `[root]` if
+ * it's already a single file). Skips node_modules/build output/dotfolders
+ * so a scan of a whole agent repo doesn't churn through vendored code.
+ */
+export function walk(root: string): string[] {
+  const stat = fs.statSync(root);
+  if (stat.isFile()) {
+    return [root];
+  }
+
+  const results: string[] = [];
+
+  function recurse(dir: string) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      if (entry.isDirectory()) {
+        if (IGNORE_DIRS.has(entry.name) || entry.name.startsWith('.')) continue;
+        recurse(path.join(dir, entry.name));
+      } else if (entry.isFile()) {
+        const ext = path.extname(entry.name);
+        if (entry.name.endsWith('.d.ts')) continue;
+        if (EXTENSIONS.has(ext)) {
+          results.push(path.join(dir, entry.name));
+        }
+      }
+    }
+  }
+
+  recurse(root);
+  return results;
+}

package/test/scanner.test.ts

@@ -0,0 +1,32 @@
+/**
+ * Minimal assertion-based smoke test — no test framework dependency.
+ * Run with: npm test
+ */
+import * as assert from 'assert';
+import * as path from 'path';
+import { scanTarget } from '../src/scanner';
+import { loadPolicy } from '../src/policy/loader';
+
+function run() {
+  const policy = loadPolicy(path.join(__dirname, '../policies/example-swap-agent.yaml'));
+
+  const malicious = scanTarget(path.join(__dirname, '../examples/malicious-tool'), policy);
+  assert.strictEqual(malicious.verdict, 'BLOCK', `expected malicious-tool to BLOCK, got ${malicious.verdict}`);
+  assert.ok(malicious.findings.some((f) => f.capability === 'wallet.private_key_access'), 'expected private key finding');
+  assert.ok(malicious.findings.some((f) => f.capability === 'system.shell_exec'), 'expected shell-exec finding');
+  assert.ok(malicious.findings.some((f) => f.capability === 'code.dynamic_load'), 'expected dynamic-code-load finding');
+  console.log('\u2713 malicious-tool correctly BLOCKED (%d findings, %d violations)', malicious.findings.length, malicious.violations.length);
+
+  const safe = scanTarget(path.join(__dirname, '../examples/safe-tool'), policy);
+  assert.strictEqual(safe.verdict, 'ALLOW', `expected safe-tool to ALLOW, got ${safe.verdict}`);
+  console.log('\u2713 safe-tool correctly ALLOWED (%d findings, %d violations)', safe.findings.length, safe.violations.length);
+
+  // No policy supplied at all: hard-floor capabilities must still block.
+  const noPolicy = scanTarget(path.join(__dirname, '../examples/malicious-tool'), null);
+  assert.strictEqual(noPolicy.verdict, 'BLOCK', 'expected hard-floor capabilities to BLOCK even with no policy');
+  console.log('\u2713 hard-floor capabilities BLOCK even without a policy manifest');
+
+  console.log('\nAll tests passed.');
+}
+
+run();

package/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "lib": ["ES2020"],
+    "module": "commonjs",
+    "moduleResolution": "node",
+    "outDir": "dist",
+    "rootDir": "src",
+    "declaration": false,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist", "examples", "test"]
+}