@guava-parity/guard-scanner 16.0.0 → 16.0.1

package/README.md

@@ -29,7 +29,7 @@ Traditional security tools catch malware. **guard-scanner** catches what they mi
 ```
 $ npx @guava-parity/guard-scanner ./skills/ --strict --soul-lock --compliance owasp-asi
 
-  guard-scanner v16.0.0
+  guard-scanner v16.0.1
 
   ⚠  CRITICAL  identity-hijack   SOUL_OVERWRITE_ATTEMPT
      skills/imported-tool/SKILL.md:47
@@ -63,6 +63,13 @@ npx -y @guava-parity/guard-scanner ./my-skills/ --strict
 npx -y @guava-parity/guard-scanner ./my-skills/ --compliance owasp-asi
 ```
 
+**Installed CLI**:
+
+```bash
+npm install -g @guava-parity/guard-scanner
+guard-scanner ./my-skills/ --strict
+```
+
 **Start as MCP server** — works with Cursor, Windsurf, Claude Code, OpenClaw:
 
 ```bash
@@ -93,6 +100,12 @@ guard-scanner watch ./skills/ --strict --soul-lock
 guard-scanner ./skills/ --compliance owasp-asi --format json
 ```
 
+**`npm exec` compatibility path**:
+
+```bash
+npm exec --yes --package=@guava-parity/guard-scanner -- guard-scanner ./skills/ --strict
+```
+
 ---
 
 ## What It Detects

package/README_ja.md

@@ -33,7 +33,7 @@
 ```
 $ npx @guava-parity/guard-scanner ./skills/ --strict --soul-lock --compliance owasp-asi
 
-  guard-scanner v16.0.0
+  guard-scanner v16.0.1
 
   ⚠  CRITICAL  identity-hijack   SOUL_OVERWRITE_ATTEMPT
      skills/imported-tool/SKILL.md:47
@@ -67,6 +67,13 @@ npx -y @guava-parity/guard-scanner ./my-skills/ --strict
 npx -y @guava-parity/guard-scanner ./my-skills/ --compliance owasp-asi
 ```
 
+**インストール済み CLI**:
+
+```bash
+npm install -g @guava-parity/guard-scanner
+guard-scanner ./my-skills/ --strict
+```
+
 **MCPサーバーとして起動** — Cursor, Windsurf, Claude Code, OpenClaw対応：
 
 ```bash
@@ -97,6 +104,12 @@ guard-scanner watch ./skills/ --strict --soul-lock
 guard-scanner ./skills/ --compliance owasp-asi --format json
 ```
 
+**`npm exec` 互換パス**:
+
+```bash
+npm exec --yes --package=@guava-parity/guard-scanner -- guard-scanner ./skills/ --strict
+```
+
 ---
 
 ## 検出対象

package/SKILL.md

@@ -20,6 +20,12 @@ npx -y @guava-parity/guard-scanner ./skills/ --soul-lock --strict
 
 # Filter to OWASP ASI mapped findings only
 npx -y @guava-parity/guard-scanner ./skills/ --compliance owasp-asi --format json
+
+# Installed CLI
+guard-scanner ./skills/ --strict
+
+# npm exec compatibility
+npm exec --yes --package=@guava-parity/guard-scanner -- guard-scanner ./skills/ --strict
 ```
 
 ## Core Commands

package/dist/cli.cjs

@@ -1671,7 +1671,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1716,7 +1716,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1762,13 +1762,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -4337,8 +4338,8 @@ var require_ci_reporter = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports2, module2) {
     module2.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/cli.mjs

@@ -1677,7 +1677,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1722,7 +1722,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1768,13 +1768,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -4343,8 +4344,8 @@ var require_ci_reporter = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports, module) {
     module.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/index.cjs

@@ -1686,7 +1686,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1731,7 +1731,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1777,13 +1777,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3907,8 +3908,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports2, module2) {
     module2.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/index.mjs

@@ -1676,7 +1676,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1721,7 +1721,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1767,13 +1767,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3897,8 +3898,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports, module) {
     module.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/mcp-server.cjs

@@ -1671,7 +1671,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1716,7 +1716,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1762,13 +1762,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3892,8 +3893,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports2, module2) {
     module2.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/mcp-server.mjs

@@ -1677,7 +1677,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1722,7 +1722,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1768,13 +1768,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3898,8 +3899,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports, module) {
     module.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/openclaw-plugin.cjs

@@ -1686,7 +1686,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1731,7 +1731,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1777,13 +1777,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3907,8 +3908,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports2, module2) {
     module2.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/dist/openclaw-plugin.mjs

@@ -1681,7 +1681,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.0",
+      version: "16.0.1",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
@@ -1726,7 +1726,7 @@ var require_package = __commonJS({
         "./dist/openclaw-plugin.cjs"
       ],
       bin: {
-        "guard-scanner": "dist/cli.cjs"
+        "guard-scanner": "guard-scanner"
       },
       scripts: {
         build: "tsup --config tsup.config.ts",
@@ -1772,13 +1772,14 @@ var require_package = __commonJS({
       },
       repository: {
         type: "git",
-        url: "https://github.com/koatora20/guard-scanner.git"
+        url: "git+https://github.com/koatora20/guard-scanner.git"
       },
       homepage: "https://github.com/koatora20/guard-scanner",
       files: [
         "dist/",
         "hooks/",
         "docs/",
+        "guard-scanner",
         "openclaw-plugin.mts",
         "openclaw.plugin.json",
         "SKILL.md",
@@ -3902,8 +3903,8 @@ var require_asset_auditor = __commonJS({
 var require_capabilities = __commonJS({
   "docs/spec/capabilities.json"(exports, module) {
     module.exports = {
-      package_version: "16.0.0",
-      plugin_version: "16.0.0",
+      package_version: "16.0.1",
+      plugin_version: "16.0.1",
       static_pattern_count: 358,
       threat_category_count: 35,
       runtime_check_count: 27,

package/docs/data/benchmark-ledger.json

@@ -1,7 +1,7 @@
 {
   "benchmark_version": "2026-03-13.quality-v1",
   "contract_version": "2026-03-13.quality-v1",
-  "generatedAt": "2026-03-14T05:45:37.147Z",
+  "generatedAt": "2026-03-14T06:54:57.152Z",
   "layers": [
     {
       "layer": "layer_a",

package/docs/data/fp-ledger.json

@@ -1,6 +1,6 @@
 {
   "benchmark_version": "2026-03-13.quality-v1",
-  "generatedAt": "2026-03-14T05:45:37.147Z",
+  "generatedAt": "2026-03-14T06:54:57.152Z",
   "entries": [
     {
       "layer": "layer_b",

package/docs/spec/capabilities.json

@@ -1,6 +1,6 @@
 {
-  "package_version": "16.0.0",
-  "plugin_version": "16.0.0",
+  "package_version": "16.0.1",
+  "plugin_version": "16.0.1",
   "static_pattern_count": 358,
   "threat_category_count": 35,
   "runtime_check_count": 27,

package/guard-scanner

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+"use strict";
+
+require("./dist/cli.cjs");

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "guard-scanner",
   "name": "guard-scanner",
   "description": "Runtime guard plugin for OpenClaw before_tool_call enforcement with capability-scoped policy rationale.",
-  "version": "16.0.0",
+  "version": "16.0.1",
   "configSchema": {
     "type": "object",
     "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guava-parity/guard-scanner",
-  "version": "16.0.0",
+  "version": "16.0.1",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
@@ -45,7 +45,7 @@
     "./dist/openclaw-plugin.cjs"
   ],
   "bin": {
-    "guard-scanner": "dist/cli.cjs"
+    "guard-scanner": "guard-scanner"
   },
   "scripts": {
     "build": "tsup --config tsup.config.ts",
@@ -91,13 +91,14 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/koatora20/guard-scanner.git"
+    "url": "git+https://github.com/koatora20/guard-scanner.git"
   },
   "homepage": "https://github.com/koatora20/guard-scanner",
   "files": [
     "dist/",
     "hooks/",
     "docs/",
+    "guard-scanner",
     "openclaw-plugin.mts",
     "openclaw.plugin.json",
     "SKILL.md",