@guava-parity/guard-scanner 16.0.2 → 17.0.0

package/dist/openclaw-plugin.cjs

@@ -987,7 +987,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -1005,7 +1005,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1792,13 +1810,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1873,6 +1891,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4299,8 +4318,8 @@ var import_os2 = __toESM(require("os"), 1);
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4413,53 +4432,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],

package/dist/openclaw-plugin.mjs

@@ -964,7 +964,7 @@ var CATEGORY_LAYER = {
 };
 var CATEGORY_OWASP_ASI = {
   "prompt-injection": ["ASI01"],
-  "malicious-code": ["ASI02"],
+  "malicious-code": ["ASI02", "ASI05"],
   "suspicious-download": ["ASI02", "ASI04"],
   "credential-handling": ["ASI02", "ASI07"],
   "secret-detection": ["ASI02", "ASI07"],
@@ -982,7 +982,25 @@ var CATEGORY_OWASP_ASI = {
   "config-impact": ["ASI10"],
   "trust-boundary": ["ASI01", "ASI07"],
   "runtime-policy": ["ASI07"],
-  "pii-exposure": ["ASI02", "ASI06"]
+  "pii-exposure": ["ASI02", "ASI06"],
+  // ── v17: OWASP Agentic Top 10 2026 完全カバレッジ ──
+  "autonomous-risk": ["ASI03", "ASI08", "ASI10"],
+  "sandbox-escape": ["ASI05"],
+  "supply-chain-v2": ["ASI04"],
+  "model-poisoning": ["ASI06"],
+  "inference-manipulation": ["ASI01", "ASI09"],
+  "api-abuse": ["ASI02", "ASI03"],
+  "safeguard-bypass": ["ASI01", "ASI09"],
+  "prompt-worm": ["ASI07", "ASI08"],
+  "leaky-skills": ["ASI02", "ASI06"],
+  "obfuscation": ["ASI01"],
+  "advanced-exfil": ["ASI02", "ASI06"],
+  "vdb-injection": ["ASI06"],
+  "data-exposure": ["ASI02", "ASI06"],
+  "canvas-injection": ["ASI05"],
+  "context-crush": ["ASI08"],
+  "solana-identity-bypass": ["ASI03", "ASI10"],
+  "cve-patterns": ["ASI04", "ASI05"]
 };
 function unique(values) {
   return [...new Set((values || []).filter(Boolean))];
@@ -1769,13 +1787,13 @@ function analyzeMetaGuard(input = {}) {
 // package.json
 var package_default = {
   name: "@guava-parity/guard-scanner",
-  version: "16.0.2",
+  version: "17.0.0",
   type: "module",
   publishConfig: {
     access: "public",
     registry: "https://registry.npmjs.org/"
   },
-  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  description: "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 \u2014 OWASP Agentic Top 10 2026 Full Coverage)",
   openclaw: {
     extensions: [
       "./dist/openclaw-plugin.mjs"
@@ -1850,6 +1868,7 @@ var package_default = {
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"
@@ -4276,8 +4295,8 @@ import os2 from "os";
 
 // docs/spec/capabilities.json
 var capabilities_default = {
-  package_version: "16.0.2",
-  plugin_version: "16.0.2",
+  package_version: "17.0.0",
+  plugin_version: "17.0.0",
   static_pattern_count: 364,
   threat_category_count: 35,
   runtime_check_count: 27,
@@ -4390,53 +4409,115 @@ var capabilities_default = {
   owasp_asi_coverage: [
     {
       id: "ASI01",
-      count: 11,
+      count: 46,
       categories: [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       id: "ASI02",
-      count: 28,
+      count: 85,
       categories: [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      id: "ASI03",
+      count: 21,
+      categories: [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       id: "ASI04",
-      count: 8,
+      count: 69,
       categories: [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       id: "ASI05",
-      count: 2,
+      count: 78,
       categories: [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       id: "ASI06",
-      count: 10,
+      count: 65,
       categories: [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       id: "ASI07",
-      count: 9,
+      count: 76,
       categories: [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      id: "ASI08",
+      count: 31,
+      categories: [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      id: "ASI09",
+      count: 23,
+      categories: [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      id: "ASI10",
+      count: 46,
+      categories: [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],

package/docs/data/benchmark-ledger.json

@@ -1,7 +1,7 @@
 {
   "benchmark_version": "2026-03-15.quality-v17",
   "contract_version": "2026-03-15.quality-v17",
-  "generatedAt": "2026-03-17T09:32:42.809Z",
+  "generatedAt": "2026-03-18T01:38:50.162Z",
   "layers": [
     {
       "layer": "layer_a",

package/docs/data/fp-ledger.json

@@ -1,6 +1,6 @@
 {
   "benchmark_version": "2026-03-15.quality-v17",
-  "generatedAt": "2026-03-17T09:32:42.809Z",
+  "generatedAt": "2026-03-18T01:38:50.162Z",
   "entries": [
     {
       "layer": "layer_b",

package/docs/spec/capabilities.json

@@ -1,6 +1,6 @@
 {
-  "package_version": "16.0.2",
-  "plugin_version": "16.0.2",
+  "package_version": "17.0.0",
+  "plugin_version": "17.0.0",
   "static_pattern_count": 364,
   "threat_category_count": 35,
   "runtime_check_count": 27,
@@ -113,53 +113,115 @@
   "owasp_asi_coverage": [
     {
       "id": "ASI01",
-      "count": 11,
+      "count": 46,
       "categories": [
-        "prompt-injection"
+        "inference-manipulation",
+        "obfuscation",
+        "prompt-injection",
+        "safeguard-bypass",
+        "trust-boundary"
       ]
     },
     {
       "id": "ASI02",
-      "count": 28,
+      "count": 85,
       "categories": [
+        "advanced-exfil",
+        "api-abuse",
         "credential-handling",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "malicious-code",
         "pii-exposure",
         "secret-detection",
         "suspicious-download"
       ]
     },
+    {
+      "id": "ASI03",
+      "count": 21,
+      "categories": [
+        "api-abuse",
+        "autonomous-risk",
+        "solana-identity-bypass"
+      ]
+    },
     {
       "id": "ASI04",
-      "count": 8,
+      "count": 69,
       "categories": [
+        "cve-patterns",
+        "supply-chain-v2",
         "suspicious-download",
         "unverifiable-deps"
       ]
     },
     {
       "id": "ASI05",
-      "count": 2,
+      "count": 78,
       "categories": [
-        "financial-access"
+        "canvas-injection",
+        "cve-patterns",
+        "financial-access",
+        "malicious-code",
+        "sandbox-escape"
       ]
     },
     {
       "id": "ASI06",
-      "count": 10,
+      "count": 65,
       "categories": [
+        "advanced-exfil",
+        "data-exposure",
         "exfiltration",
+        "leaky-skills",
         "memory-poisoning",
-        "pii-exposure"
+        "model-poisoning",
+        "pii-exposure",
+        "vdb-injection"
       ]
     },
     {
       "id": "ASI07",
-      "count": 9,
+      "count": 76,
       "categories": [
+        "a2a-contagion",
+        "agent-protocol",
         "credential-handling",
-        "secret-detection"
+        "mcp-security",
+        "prompt-worm",
+        "secret-detection",
+        "trust-boundary"
+      ]
+    },
+    {
+      "id": "ASI08",
+      "count": 31,
+      "categories": [
+        "autonomous-risk",
+        "context-crush",
+        "persistence",
+        "prompt-worm"
+      ]
+    },
+    {
+      "id": "ASI09",
+      "count": 23,
+      "categories": [
+        "inference-manipulation",
+        "safeguard-bypass",
+        "trust-exploitation"
+      ]
+    },
+    {
+      "id": "ASI10",
+      "count": 46,
+      "categories": [
+        "autonomous-risk",
+        "config-impact",
+        "identity-hijack",
+        "solana-identity-bypass"
       ]
     }
   ],

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "guard-scanner",
   "name": "guard-scanner",
   "description": "Runtime guard plugin for OpenClaw before_tool_call enforcement with capability-scoped policy rationale.",
-  "version": "16.0.2",
+  "version": "17.0.0",
   "configSchema": {
     "type": "object",
     "properties": {

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@guava-parity/guard-scanner",
-  "version": "16.0.2",
+  "version": "17.0.0",
   "type": "module",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "description": "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v16)",
+  "description": "Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 — OWASP Agentic Top 10 2026 Full Coverage)",
   "openclaw": {
     "extensions": [
       "./dist/openclaw-plugin.mjs"
@@ -81,6 +81,7 @@
     "compaction-persistence",
     "threat-signatures",
     "owasp",
+    "owasp-agentic-top-10",
     "discovery",
     "daemon",
     "typescript"