@inkog-io/mcp 1.0.0

package/dist/tools/audit-a2a.js

@@ -0,0 +1,382 @@
+/**
+ * inkog_audit_a2a Tool
+ *
+ * P2 - Agent-to-Agent (A2A) Security Auditing (MULTI-AGENT SECURITY)
+ *
+ * Audits communication patterns in multi-agent systems for:
+ * - Infinite delegation loops
+ * - Privilege escalation via delegation
+ * - Data leakage between agents
+ * - Unauthorized agent handoffs
+ * - Missing permission guards
+ *
+ * Supports: Google A2A protocol, CrewAI, LangGraph, auto-detection
+ *
+ * Aligned with Google Cloud AI Agent Trends 2026:
+ * "Multi-agent orchestration is the future of enterprise AI"
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+import { getRelativePaths, readDirectory } from '../utils/file-reader.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const A2AArgsSchema = z.object({
+    path: z.string().describe('Path to multi-agent system codebase'),
+    protocol: z
+        .enum(['a2a', 'crewai', 'langgraph', 'auto-detect'])
+        .optional()
+        .default('auto-detect')
+        .describe('Multi-agent protocol: a2a (Google), crewai, langgraph, or auto-detect'),
+    check_delegation_chains: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe('Check for infinite delegation loops and unauthorized handoffs'),
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatSeverityIcon(severity) {
+    switch (severity) {
+        case 'CRITICAL':
+            return '🔴';
+        case 'HIGH':
+            return '🟠';
+        case 'MEDIUM':
+            return '🟡';
+        case 'LOW':
+            return '🟢';
+        default:
+            return '⚪';
+    }
+}
+function formatProtocol(protocol) {
+    switch (protocol) {
+        case 'a2a':
+            return 'Google A2A Protocol';
+        case 'crewai':
+            return 'CrewAI';
+        case 'langgraph':
+            return 'LangGraph';
+        case 'auto-detect':
+            return 'Auto-detected';
+        default:
+            return protocol;
+    }
+}
+function formatSecurityScore(score) {
+    if (score >= 90) {
+        return `✅ ${score}/100 (Excellent)`;
+    }
+    else if (score >= 70) {
+        return `🟢 ${score}/100 (Good)`;
+    }
+    else if (score >= 50) {
+        return `🟡 ${score}/100 (Fair)`;
+    }
+    else if (score >= 30) {
+        return `🟠 ${score}/100 (Poor)`;
+    }
+    else {
+        return `🔴 ${score}/100 (Critical)`;
+    }
+}
+function formatAgent(agent) {
+    let output = `🤖 ${agent.name}`;
+    if (agent.role !== undefined) {
+        output += ` (${agent.role})`;
+    }
+    output += '\n';
+    output += `   📍 ${agent.file}:${agent.line}\n`;
+    if (agent.tools.length > 0) {
+        output += `   🔧 Tools: ${agent.tools.join(', ')}\n`;
+    }
+    if (agent.permissions.length > 0) {
+        output += `   🔐 Permissions: ${agent.permissions.join(', ')}\n`;
+    }
+    return output;
+}
+function formatDelegationEdge(edge) {
+    const arrow = edge.type === 'spawn' ? '⟹' : edge.type === 'handoff' ? '→' : '⇢';
+    const guards = edge.hasGuards ? '🛡️' : '⚠️';
+    return `   ${edge.from} ${arrow} ${edge.to} [${edge.type}] ${guards}`;
+}
+function formatIssue(issue) {
+    const icon = formatSeverityIcon(issue.severity);
+    let output = `${icon} [${issue.severity}] ${issue.title}\n`;
+    output += `   Category: ${formatIssueCategory(issue.category)}\n`;
+    output += `   ${issue.description}\n`;
+    output += `   Agents: ${issue.agents.join(', ')}\n`;
+    output += `   📍 ${issue.file}:${issue.line}\n`;
+    output += `   💡 ${issue.recommendation}`;
+    return output;
+}
+function formatIssueCategory(category) {
+    switch (category) {
+        case 'infinite-delegation':
+            return '♾️  Infinite Delegation';
+        case 'privilege-escalation':
+            return '⬆️  Privilege Escalation';
+        case 'data-leakage':
+            return '💧 Data Leakage';
+        case 'unauthorized-handoff':
+            return '🚫 Unauthorized Handoff';
+        case 'missing-guards':
+            return '🛡️  Missing Guards';
+        default:
+            return category;
+    }
+}
+function renderDelegationGraph(agents, edges) {
+    if (agents.length === 0 || edges.length === 0) {
+        return 'No delegation relationships detected.\n';
+    }
+    let output = '\n';
+    // Simple ASCII graph representation
+    const agentMap = new Map(agents.map((a) => [a.id, a.name]));
+    // Group edges by source agent
+    const edgesBySource = new Map();
+    for (const edge of edges) {
+        if (!edgesBySource.has(edge.from)) {
+            edgesBySource.set(edge.from, []);
+        }
+        edgesBySource.get(edge.from).push(edge);
+    }
+    // Render each agent and its outgoing edges
+    for (const agent of agents) {
+        const agentEdges = edgesBySource.get(agent.id) ?? [];
+        const name = agentMap.get(agent.id) ?? agent.id;
+        if (agentEdges.length === 0) {
+            output += `   ┌──────────────┐\n`;
+            output += `   │ ${name.padEnd(12)} │\n`;
+            output += `   └──────────────┘\n`;
+        }
+        else {
+            output += `   ┌──────────────┐\n`;
+            output += `   │ ${name.padEnd(12)} │`;
+            agentEdges.forEach((edge, i) => {
+                const targetName = agentMap.get(edge.to) ?? edge.to;
+                const arrow = edge.hasGuards ? '──🛡️──>' : '──⚠️──>';
+                if (i === 0) {
+                    output += `${arrow} ${targetName}`;
+                }
+                else {
+                    output += `\n   │              │${arrow} ${targetName}`;
+                }
+            });
+            output += `\n   └──────────────┘\n`;
+        }
+    }
+    return output;
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function auditA2AHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = A2AArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Read files from path
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No files found in: ${args.path}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Get relative paths
+        const files = getRelativePaths(readResult.files, args.path);
+        // Call Inkog API
+        const client = getClient();
+        const response = await client.auditA2A(files, {
+            protocol: args.protocol,
+            checkDelegationChains: args.check_delegation_chains,
+        });
+        // Build formatted output
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║        🤖 Agent-to-Agent Security Audit               ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        // Overview
+        output += `📡 Protocol: ${formatProtocol(response.protocol)}\n`;
+        output += `🤖 Agents Detected: ${response.agents.length}\n`;
+        output += `🔗 Delegation Edges: ${response.delegationGraph.length}\n`;
+        output += `📊 Security Score: ${formatSecurityScore(response.securityScore)}\n\n`;
+        // Topology warnings
+        if (response.hasCycles) {
+            output += '⚠️  WARNING: Delegation cycles detected (potential infinite loops)\n';
+        }
+        if (response.maxDelegationDepth > 5) {
+            output += `⚠️  WARNING: Deep delegation chain detected (depth: ${response.maxDelegationDepth})\n`;
+        }
+        output += '\n';
+        // Issues summary
+        const critical = response.issues.filter((i) => i.severity === 'CRITICAL').length;
+        const high = response.issues.filter((i) => i.severity === 'HIGH').length;
+        const medium = response.issues.filter((i) => i.severity === 'MEDIUM').length;
+        const low = response.issues.filter((i) => i.severity === 'LOW').length;
+        if (response.issues.length === 0) {
+            output += '✅ No multi-agent security issues detected!\n\n';
+        }
+        else {
+            output += `📋 Security Issues: ${response.issues.length}\n`;
+            output += `   🔴 Critical: ${critical} | 🟠 High: ${high} | 🟡 Medium: ${medium} | 🟢 Low: ${low}\n\n`;
+        }
+        // Agent inventory
+        if (response.agents.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🤖 AGENT INVENTORY\n\n';
+            for (const agent of response.agents) {
+                output += formatAgent(agent) + '\n';
+            }
+        }
+        // Delegation graph visualization
+        if (response.delegationGraph.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🔗 DELEGATION GRAPH\n';
+            output += renderDelegationGraph(response.agents, response.delegationGraph);
+            output += '\n';
+            output += 'Delegation Edges:\n';
+            for (const edge of response.delegationGraph) {
+                output += formatDelegationEdge(edge) + '\n';
+            }
+            output += '\n';
+            output += 'Legend: 🛡️  = has permission guards, ⚠️  = no guards\n\n';
+        }
+        // Detailed issues
+        if (response.issues.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🔍 SECURITY ISSUES\n\n';
+            // Group by category
+            const infiniteDelegation = response.issues.filter((i) => i.category === 'infinite-delegation');
+            const privilegeEscalation = response.issues.filter((i) => i.category === 'privilege-escalation');
+            const dataLeakage = response.issues.filter((i) => i.category === 'data-leakage');
+            const unauthorizedHandoff = response.issues.filter((i) => i.category === 'unauthorized-handoff');
+            const missingGuards = response.issues.filter((i) => i.category === 'missing-guards');
+            if (infiniteDelegation.length > 0) {
+                output += '♾️  INFINITE DELEGATION RISKS\n\n';
+                for (const issue of infiniteDelegation) {
+                    output += formatIssue(issue) + '\n\n';
+                }
+            }
+            if (privilegeEscalation.length > 0) {
+                output += '⬆️  PRIVILEGE ESCALATION RISKS\n\n';
+                for (const issue of privilegeEscalation) {
+                    output += formatIssue(issue) + '\n\n';
+                }
+            }
+            if (dataLeakage.length > 0) {
+                output += '💧 DATA LEAKAGE RISKS\n\n';
+                for (const issue of dataLeakage) {
+                    output += formatIssue(issue) + '\n\n';
+                }
+            }
+            if (unauthorizedHandoff.length > 0) {
+                output += '🚫 UNAUTHORIZED HANDOFF RISKS\n\n';
+                for (const issue of unauthorizedHandoff) {
+                    output += formatIssue(issue) + '\n\n';
+                }
+            }
+            if (missingGuards.length > 0) {
+                output += '🛡️  MISSING GUARDS\n\n';
+                for (const issue of missingGuards) {
+                    output += formatIssue(issue) + '\n\n';
+                }
+            }
+        }
+        // Recommendations
+        if (response.recommendations.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '💡 RECOMMENDATIONS\n\n';
+            for (let i = 0; i < response.recommendations.length; i++) {
+                output += `${i + 1}. ${response.recommendations[i]}\n`;
+            }
+        }
+        // Footer
+        output += '\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n';
+        output += 'Multi-Agent Security Audit powered by Inkog AI Security Platform\n';
+        output += 'Learn more: https://inkog.io/multi-agent-security\n';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nGet your free key at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const auditA2aTool = {
+    tool: {
+        name: 'inkog_audit_a2a',
+        description: 'Audit Agent-to-Agent (A2A) communications in multi-agent systems. Detects infinite delegation loops, privilege escalation, data leakage between agents, and unauthorized handoffs. Supports Google A2A protocol, CrewAI, and LangGraph.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'Path to multi-agent system codebase',
+                },
+                protocol: {
+                    type: 'string',
+                    enum: ['a2a', 'crewai', 'langgraph', 'auto-detect'],
+                    default: 'auto-detect',
+                    description: 'Multi-agent protocol: a2a (Google), crewai, langgraph, or auto-detect',
+                },
+                check_delegation_chains: {
+                    type: 'boolean',
+                    default: true,
+                    description: 'Check for infinite delegation loops and unauthorized handoffs',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: auditA2AHandler,
+};
+//# sourceMappingURL=audit-a2a.js.map

package/dist/tools/audit-a2a.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-a2a.js","sourceRoot":"","sources":["../../src/tools/audit-a2a.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAOhF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG1E,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChE,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,OAAO,CAAC,aAAa,CAAC;SACtB,QAAQ,CAAC,uEAAuE,CAAC;IACpF,uBAAuB,EAAE,CAAC;SACvB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+DAA+D,CAAC;CAC7E,CAAC,CAAC;AAIH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,qBAAqB,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,aAAa;YAChB,OAAO,eAAe,CAAC;QACzB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,KAAK,KAAK,kBAAkB,CAAC;IACtC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,aAAa,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,KAAK,iBAAiB,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,IAAI,CAAC;IACf,MAAM,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC;IAEhD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACvD,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,sBAAsB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAoB;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,OAAO,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC;IAC5D,MAAM,IAAI,gBAAgB,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClE,MAAM,IAAI,MAAM,KAAK,CAAC,WAAW,IAAI,CAAC;IACtC,MAAM,IAAI,cAAc,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACpD,MAAM,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC;IAChD,MAAM,IAAI,SAAS,KAAK,CAAC,cAAc,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAsC;IACjE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,qBAAqB;YACxB,OAAO,yBAAyB,CAAC;QACnC,KAAK,sBAAsB;YACzB,OAAO,0BAA0B,CAAC;QACpC,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,sBAAsB;YACzB,OAAO,yBAAyB,CAAC;QACnC,KAAK,gBAAgB;YACnB,OAAO,qBAAqB,CAAC;QAC/B;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB,EAAE,KAAuB;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,oCAAoC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5D,8BAA8B;IAC9B,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAEhD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAAC;YAClC,MAAM,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC;YACxC,MAAM,IAAI,uBAAuB,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,uBAAuB,CAAC;YAClC,MAAM,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YAEtC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEtD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,wBAAwB,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,yBAAyB,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,eAAe,CAAC,OAAgC;IAC7D,qBAAqB;IACrB,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAY,WAAW,CAAC,IAAI,CAAC;IAEvC,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE;YAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,qBAAqB,EAAE,IAAI,CAAC,uBAAuB;SACpD,CAAC,CAAC;QAEH,yBAAyB;QACzB,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,6DAA6D,CAAC;QACxE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,WAAW;QACX,MAAM,IAAI,gBAAgB,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChE,MAAM,IAAI,uBAAuB,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC;QAC5D,MAAM,IAAI,wBAAwB,QAAQ,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC;QACtE,MAAM,IAAI,sBAAsB,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;QAElF,oBAAoB;QACpB,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,sEAAsE,CAAC;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,uDAAuD,QAAQ,CAAC,kBAAkB,KAAK,CAAC;QACpG,CAAC;QACD,MAAM,IAAI,IAAI,CAAC;QAEf,iBAAiB;QACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;QAEvE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gDAAgD,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,uBAAuB,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC;YAC5D,MAAM,IAAI,mBAAmB,QAAQ,eAAe,IAAI,iBAAiB,MAAM,cAAc,GAAG,MAAM,CAAC;QACzG,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YACtC,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAAC;YAClC,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC3E,MAAM,IAAI,IAAI,CAAC;YAEf,MAAM,IAAI,qBAAqB,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC5C,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC9C,CAAC;YACD,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,IAAI,2DAA2D,CAAC;QACxE,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC;YAEnC,oBAAoB;YACpB,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,qBAAqB,CAC5C,CAAC;YACF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,sBAAsB,CAC7C,CAAC;YACF,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC;YACjF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,sBAAsB,CAC7C,CAAC;YACF,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC,CAAC;YAErF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,mCAAmC,CAAC;gBAC9C,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;oBACvC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,oCAAoC,CAAC;gBAC/C,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;oBACxC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,2BAA2B,CAAC;gBACtC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;oBAChC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,mCAAmC,CAAC;gBAC9C,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;oBACxC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,yBAAyB,CAAC;gBACpC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;oBAClC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YACzD,CAAC;QACH,CAAC;QAED,SAAS;QACT,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,oEAAoE,CAAC;QAC/E,MAAM,IAAI,qDAAqD,CAAC;QAEhE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kEAAkE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE;QACJ,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,yOAAyO;QAC3O,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qCAAqC;iBACnD;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;oBACnD,OAAO,EAAE,aAAa;oBACtB,WAAW,EAAE,uEAAuE;iBACrF;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,+DAA+D;iBAC7E;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,eAAe;CACzB,CAAC"}

package/dist/tools/audit-mcp.d.ts

@@ -0,0 +1,16 @@
+/**
+ * inkog_audit_mcp_server Tool
+ *
+ * P1 - MCP Server Security Auditing (THE ECOSYSTEM PLAY)
+ *
+ * Security audit any MCP server from the registry or GitHub repository.
+ * Checks for:
+ * - Excessive permissions (file system, network, exec)
+ * - Data exfiltration risks
+ * - Input validation gaps
+ * - Credential handling issues
+ * - Tool permission boundaries
+ */
+import type { ToolDefinition } from './index.js';
+export declare const auditMcpTool: ToolDefinition;
+//# sourceMappingURL=audit-mcp.d.ts.map

package/dist/tools/audit-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-mcp.d.ts","sourceRoot":"","sources":["../../src/tools/audit-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AA6Q7D,eAAO,MAAM,YAAY,EAAE,cAoB1B,CAAC"}