@guava-parity/guard-scanner 16.0.2 → 17.0.0

package/README.md

@@ -29,7 +29,7 @@ Traditional security tools catch malware. **guard-scanner** catches what they mi
 ```
 $ npx @guava-parity/guard-scanner ./skills/ --strict --soul-lock --compliance owasp-asi
 
-  guard-scanner v16.0.1
+  guard-scanner v16.0.2
 
   ⚠  CRITICAL  identity-hijack   SOUL_OVERWRITE_ATTEMPT
      skills/imported-tool/SKILL.md:47
@@ -219,6 +219,10 @@ When running as an MCP server, guard-scanner exposes:
 | `check_tool_call` | Runtime validation of a single tool invocation |
 | `audit_assets` | Audit npm/GitHub/ClawHub for credential exposure |
 | `get_stats` | Return scanner capabilities, 5-layer summary, and ASI coverage |
+| `experimental.run_async` | Start a long-running async scan task |
+| `experimental.task_status` | Check the status of an async task |
+| `experimental.task_result` | Retrieve the result of a completed async task |
+| `experimental.task_cancel` | Cancel a running async task |
 
 ---
 
@@ -228,7 +232,7 @@ guard-scanner ships a measured quality contract, not a vague strength claim.
 
 | Metric | Contract |
 |--------|----------|
-| Benchmark corpus | `2026-03-13.quality-v1` |
+| Benchmark corpus | `2026-03-15.quality-v17` |
 | Precision target | `>= 0.90` |
 | Recall target | `>= 0.90` |
 | False Positive Rate budget | `<= 0.10` |

package/README_ja.md

@@ -33,7 +33,7 @@
 ```
 $ npx @guava-parity/guard-scanner ./skills/ --strict --soul-lock --compliance owasp-asi
 
-  guard-scanner v16.0.1
+  guard-scanner v16.0.2
 
   ⚠  CRITICAL  identity-hijack   SOUL_OVERWRITE_ATTEMPT
      skills/imported-tool/SKILL.md:47
@@ -223,6 +223,10 @@ MCPサーバーとして実行時に公開されるツール：
 | `check_tool_call` | 単一ツール呼び出しのランタイム検証 |
 | `audit_assets` | npm/GitHub/ClawHubの認証情報露出監査 |
 | `get_stats` | スキャナー能力、5-layer 概要、ASI カバレッジの取得 |
+| `experimental.run_async` | 非同期スキャンタスクの開始 |
+| `experimental.task_status` | 非同期タスクの状態確認 |
+| `experimental.task_result` | 完了した非同期タスクの結果取得 |
+| `experimental.task_cancel` | 実行中の非同期タスクのキャンセル |
 
 ---
 

package/dist/cli.cjs

@@ -1074,7 +1074,7 @@ var init_v16_taxonomy = __esm({
     };
     CATEGORY_OWASP_ASI = {
       "prompt-injection": ["ASI01"],
-      "malicious-code": ["ASI02"],
+      "malicious-code": ["ASI02", "ASI05"],
       "suspicious-download": ["ASI02", "ASI04"],
       "credential-handling": ["ASI02", "ASI07"],
       "secret-detection": ["ASI02", "ASI07"],
@@ -1092,7 +1092,25 @@ var init_v16_taxonomy = __esm({
       "config-impact": ["ASI10"],
       "trust-boundary": ["ASI01", "ASI07"],
       "runtime-policy": ["ASI07"],
-      "pii-exposure": ["ASI02", "ASI06"]
+      "pii-exposure": ["ASI02", "ASI06"],
+      // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+      "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+      "sandbox-escape": ["ASI05"],
+      "supply-chain-v2": ["ASI04"],
+      "model-poisoning": ["ASI06"],
+      "inference-manipulation": ["ASI01", "ASI09"],
+      "api-abuse": ["ASI02", "ASI03"],
+      "safeguard-bypass": ["ASI01", "ASI09"],
+      "prompt-worm": ["ASI07", "ASI08"],
+      "leaky-skills": ["ASI02", "ASI06"],
+      "obfuscation": ["ASI01"],
+      "advanced-exfil": ["ASI02", "ASI06"],
+      "vdb-injection": ["ASI06"],
+      "data-exposure": ["ASI02", "ASI06"],
+      "canvas-injection": ["ASI05"],
+      "context-crush": ["ASI08"],
+      "solana-identity-bypass": ["ASI03", "ASI10"],
+      "cve-patterns": ["ASI04", "ASI05"]
     };
   }
 });
@@ -1859,13 +1877,13 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.2",
+      version: "17.0.0",
       type: "module",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
       },
-      description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+      description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
       openclaw: {
         extensions: [
           "./dist/openclaw-plugin.mjs"
@@ -1940,6 +1958,7 @@ var init_package = __esm({
         "compaction-persistence",
         "threat-signatures",
         "owasp",
+        "owasp-agentic-top-10",
         "discovery",
         "daemon",
         "typescript"
@@ -4407,8 +4426,8 @@ var capabilities_default;
 var init_capabilities = __esm({
   "docs/spec/capabilities.json"() {
     capabilities_default = {
-      package_version: "16.0.2",
-      plugin_version: "16.0.2",
+      package_version: "17.0.0",
+      plugin_version: "17.0.0",
       static_pattern_count: 364,
       threat_category_count: 35,
       runtime_check_count: 27,
@@ -4521,53 +4540,115 @@ var init_capabilities = __esm({
       owasp_asi_coverage: [
         {
           id: "ASI01",
-          count: 11,
+          count: 46,
           categories: [
-            "prompt-injection"
+            "inference-manipulation",
+            "obfuscation",
+            "prompt-injection",
+            "safeguard-bypass",
+            "trust-boundary"
           ]
         },
         {
           id: "ASI02",
-          count: 28,
+          count: 85,
           categories: [
+            "advanced-exfil",
+            "api-abuse",
             "credential-handling",
+            "data-exposure",
             "exfiltration",
+            "leaky-skills",
             "malicious-code",
             "pii-exposure",
             "secret-detection",
             "suspicious-download"
           ]
         },
+        {
+          id: "ASI03",
+          count: 21,
+          categories: [
+            "api-abuse",
+            "autonomous-risk",
+            "solana-identity-bypass"
+          ]
+        },
         {
           id: "ASI04",
-          count: 8,
+          count: 69,
           categories: [
+            "cve-patterns",
+            "supply-chain-v2",
             "suspicious-download",
             "unverifiable-deps"
           ]
         },
         {
           id: "ASI05",
-          count: 2,
+          count: 78,
           categories: [
-            "financial-access"
+            "canvas-injection",
+            "cve-patterns",
+            "financial-access",
+            "malicious-code",
+            "sandbox-escape"
           ]
         },
         {
           id: "ASI06",
-          count: 10,
+          count: 65,
           categories: [
+            "advanced-exfil",
+            "data-exposure",
             "exfiltration",
+            "leaky-skills",
             "memory-poisoning",
-            "pii-exposure"
+            "model-poisoning",
+            "pii-exposure",
+            "vdb-injection"
           ]
         },
         {
           id: "ASI07",
-          count: 9,
+          count: 76,
           categories: [
+            "a2a-contagion",
+            "agent-protocol",
             "credential-handling",
-            "secret-detection"
+            "mcp-security",
+            "prompt-worm",
+            "secret-detection",
+            "trust-boundary"
+          ]
+        },
+        {
+          id: "ASI08",
+          count: 31,
+          categories: [
+            "autonomous-risk",
+            "context-crush",
+            "persistence",
+            "prompt-worm"
+          ]
+        },
+        {
+          id: "ASI09",
+          count: 23,
+          categories: [
+            "inference-manipulation",
+            "safeguard-bypass",
+            "trust-exploitation"
+          ]
+        },
+        {
+          id: "ASI10",
+          count: 46,
+          categories: [
+            "autonomous-risk",
+            "config-impact",
+            "identity-hijack",
+            "solana-identity-bypass"
           ]
         }
       ],

package/dist/cli.mjs

@@ -1059,7 +1059,7 @@ var init_v16_taxonomy = __esm({
     };
     CATEGORY_OWASP_ASI = {
       "prompt-injection": ["ASI01"],
-      "malicious-code": ["ASI02"],
+      "malicious-code": ["ASI02", "ASI05"],
       "suspicious-download": ["ASI02", "ASI04"],
       "credential-handling": ["ASI02", "ASI07"],
       "secret-detection": ["ASI02", "ASI07"],
@@ -1077,7 +1077,25 @@ var init_v16_taxonomy = __esm({
       "config-impact": ["ASI10"],
       "trust-boundary": ["ASI01", "ASI07"],
       "runtime-policy": ["ASI07"],
-      "pii-exposure": ["ASI02", "ASI06"]
+      "pii-exposure": ["ASI02", "ASI06"],
+      // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+      "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+      "sandbox-escape": ["ASI05"],
+      "supply-chain-v2": ["ASI04"],
+      "model-poisoning": ["ASI06"],
+      "inference-manipulation": ["ASI01", "ASI09"],
+      "api-abuse": ["ASI02", "ASI03"],
+      "safeguard-bypass": ["ASI01", "ASI09"],
+      "prompt-worm": ["ASI07", "ASI08"],
+      "leaky-skills": ["ASI02", "ASI06"],
+      "obfuscation": ["ASI01"],
+      "advanced-exfil": ["ASI02", "ASI06"],
+      "vdb-injection": ["ASI06"],
+      "data-exposure": ["ASI02", "ASI06"],
+      "canvas-injection": ["ASI05"],
+      "context-crush": ["ASI08"],
+      "solana-identity-bypass": ["ASI03", "ASI10"],
+      "cve-patterns": ["ASI04", "ASI05"]
     };
   }
 });
@@ -1842,13 +1860,13 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@guava-parity/guard-scanner",
-      version: "16.0.2",
+      version: "17.0.0",
       type: "module",
       publishConfig: {
         access: "public",
         registry: "https://registry.npmjs.org/"
       },
-      description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+      description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
       openclaw: {
         extensions: [
           "./dist/openclaw-plugin.mjs"
@@ -1923,6 +1941,7 @@ var init_package = __esm({
         "compaction-persistence",
         "threat-signatures",
         "owasp",
+        "owasp-agentic-top-10",
         "discovery",
         "daemon",
         "typescript"
@@ -4390,8 +4409,8 @@ var capabilities_default;
 var init_capabilities = __esm({
   "docs/spec/capabilities.json"() {
     capabilities_default = {
-      package_version: "16.0.2",
-      plugin_version: "16.0.2",
+      package_version: "17.0.0",
+      plugin_version: "17.0.0",
       static_pattern_count: 364,
       threat_category_count: 35,
       runtime_check_count: 27,
@@ -4504,53 +4523,115 @@ var init_capabilities = __esm({
       owasp_asi_coverage: [
         {
           id: "ASI01",
-          count: 11,
+          count: 46,
           categories: [
-            "prompt-injection"
+            "inference-manipulation",
+            "obfuscation",
+            "prompt-injection",
+            "safeguard-bypass",
+            "trust-boundary"
           ]
         },
         {
           id: "ASI02",
-          count: 28,
+          count: 85,
           categories: [
+            "advanced-exfil",
+            "api-abuse",
             "credential-handling",
+            "data-exposure",
             "exfiltration",
+            "leaky-skills",
             "malicious-code",
             "pii-exposure",
             "secret-detection",
             "suspicious-download"
           ]
         },
+        {
+          id: "ASI03",
+          count: 21,
+          categories: [
+            "api-abuse",
+            "autonomous-risk",
+            "solana-identity-bypass"
+          ]
+        },
         {
           id: "ASI04",
-          count: 8,
+          count: 69,
           categories: [
+            "cve-patterns",
+            "supply-chain-v2",
             "suspicious-download",
             "unverifiable-deps"
           ]
         },
         {
           id: "ASI05",
-          count: 2,
+          count: 78,
           categories: [
-            "financial-access"
+            "canvas-injection",
+            "cve-patterns",
+            "financial-access",
+            "malicious-code",
+            "sandbox-escape"
           ]
         },
         {
           id: "ASI06",
-          count: 10,
+          count: 65,
           categories: [
+            "advanced-exfil",
+            "data-exposure",
             "exfiltration",
+            "leaky-skills",
             "memory-poisoning",
-            "pii-exposure"
+            "model-poisoning",
+            "pii-exposure",
+            "vdb-injection"
           ]
         },
         {
           id: "ASI07",
-          count: 9,
+          count: 76,
           categories: [
+            "a2a-contagion",
+            "agent-protocol",
             "credential-handling",
-            "secret-detection"
+            "mcp-security",
+            "prompt-worm",
+            "secret-detection",
+            "trust-boundary"
+          ]
+        },
+        {
+          id: "ASI08",
+          count: 31,
+          categories: [
+            "autonomous-risk",
+            "context-crush",
+            "persistence",
+            "prompt-worm"
+          ]
+        },
+        {
+          id: "ASI09",
+          count: 23,
+          categories: [
+            "inference-manipulation",
+            "safeguard-bypass",
+            "trust-exploitation"
+          ]
+        },
+        {
+          id: "ASI10",
+          count: 46,
+          categories: [
+            "autonomous-risk",
+            "config-impact",
+            "identity-hijack",
+            "solana-identity-bypass"
           ]
         }
       ],

package/dist/index.cjs

@@ -981,7 +981,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -999,7 +999,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1786,13 +1804,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1867,6 +1885,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4293,8 +4312,8 @@ var import_os2 = __toESM(require("os"), 1);
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4407,53 +4426,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],