@knowttl/artium-axi 0.0.30 → 0.0.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +9 -3
  2. package/bin/artium-axi.mjs +44263 -20121
  3. package/package.json +1 -1
  4. package/skill/artium-axi/SKILL.md +8 -2
package/README.md CHANGED
@@ -70,24 +70,30 @@ Ordinary discovery and tool calls never install or repair agent settings.
70
70
 
71
71
  ## What it covers
72
72
 
73
- All twelve managed tools start disabled; role grants, enabled tools and upstream permissions determine access.
73
+ Managed tools start disabled; role grants, enabled tools and upstream permissions determine access.
74
74
  Write capabilities below require administrator opt-in.
75
75
 
76
76
  | Group | Purpose | Access | Reference |
77
77
  | --- | --- | --- | --- |
78
78
  | BeyondTrust PM Cloud | Endpoint Privilege Management reads, selected writes, deletes and four downloads | Managed credentials; exact operation grants; separate delete toggle | [Credentials](docs/tool-credentials.md#beyondtrust-pm-cloud) |
79
79
  | Discovery and sessions | Identity, login, tools, doctor, update and setup | Client/session operations | [Commands](docs/commands.md) |
80
- | Falcon | Endpoint investigations, guarded RTR and MalQuery | Reads; selected execution/search | [Capabilities](docs/safety.md#write-gates-by-tool) |
80
+ | Falcon | Endpoint investigations, search lifecycle, MalQuery and restricted RTR | Exact administrator grants; native RTR profile opt-in and confirmation | [Capabilities](docs/safety.md#write-gates-by-tool) |
81
+ | Kubernetes | Cluster resources, logs and passive authorization reviews | Bounded reads, native prepare/preview/confirm mutations, caller-owned workspaces, explicitly granted byte sessions and port forwarding, protected service-account token delivery | [Capabilities](docs/safety.md#kubernetes-reads) |
82
+ | SSH | Granted hosts, authentication checks, confirmed commands and reusable transports | Dedicated host bindings and caller grants; writes default off | [Capabilities](docs/safety.md#ssh-reads) |
81
83
  | Vectra | Hosts, detections and response workflows | Reads; selected writes | [Credentials](docs/tool-credentials.md#vectra) |
82
84
  | Azure | Subscriptions, resources and queries | Reads; reviewed writes | [Credentials](docs/tool-credentials.md#azure) |
83
85
  | Microsoft Graph | Entra, optional mail and hunting packs | Reads; selected writes | [Capabilities](docs/safety.md#microsoft-graph) |
84
86
  | LDAP | Directory investigation over verified TLS | Read-only | [Credentials](docs/tool-credentials.md#ldap) |
85
87
  | Azure DevOps | Organization and project workflows | Reads; gated work-item, PR, pipeline, repository, policy and ref writes; API writes on server-listed paths (TD-067) | [Credentials](docs/tool-credentials.md#azure-devops) |
86
88
  | GitHub | Repository investigation and collaboration | Reads; selected writes | [Credentials](docs/tool-credentials.md#github) |
87
- | AWX | Jobs, workflows, operational actions and ordinary resource configuration | Reads; separate operational and configuration write controls | [Credentials](docs/tool-credentials.md#awx) |
89
+ | AWX | Jobs, workflows, configuration, deletion and security administration | Reads; one tenant write switch, default off | [Credentials](docs/tool-credentials.md#awx) |
88
90
  | Tenable One | Exposure investigation and export jobs | Reads; selected writes | [Credentials](docs/tool-credentials.md#tenable-one) |
89
91
  | Hybrid Analysis | Sandbox investigations, YARA and archives | Reads; selected writes/saves | [Credentials](docs/tool-credentials.md#hybrid-analysis) |
90
92
  | Check Point Email Security | Email investigation and response | Reads; selected writes/saves | [Credentials](docs/tool-credentials.md#check-point-email-security) |
93
+ | UniFi | Network application, inventory and policy investigation | Managed reads and administrator-selected native writes | [Capabilities](docs/safety.md#network-appliance-reads) |
94
+ | Proxmox | Cluster and virtual machine investigation | Managed reads and byte streams; administrator-selected native writes and private results | [Capabilities](docs/safety.md#network-appliance-reads) |
95
+ | Technitium DNS | DNS investigation and exports | Managed authenticated reads with protected result retrieval | [Capabilities](docs/safety.md#technitium-dns) |
96
+ | Gitea | Repository, issue and pull request investigation and updates | Managed token, exact write grants and native preview/confirmation | [Capabilities](docs/safety.md#gitea-reads) |
91
97
 
92
98
  [Reviewed inventories](tools/inventories) own the pinned command boundary.
93
99
  The [client reference](docs/client-reference.md#command-surface-and-subcommands) covers forwarding and inputs; [commands](docs/commands.md) lists client operations.