@guava-parity/guard-scanner 16.0.2 → 17.0.0

package/dist/index.mjs

@@ -942,7 +942,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -960,7 +960,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1747,13 +1765,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1828,6 +1846,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4254,8 +4273,8 @@ import os2 from "os";
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4368,53 +4387,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],

package/dist/mcp-server.cjs

@@ -972,7 +972,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -990,7 +990,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1777,13 +1795,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1858,6 +1876,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4284,8 +4303,8 @@ var import_os2 = __toESM(require("os"), 1);
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4398,53 +4417,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],

package/dist/mcp-server.mjs

@@ -942,7 +942,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -960,7 +960,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1747,13 +1765,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1828,6 +1846,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4254,8 +4273,8 @@ import os2 from "os";
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4368,53 +4387,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],