npm - @oculum/scanner - Versions diffs - 1.0.14 → 1.0.15 - Mend

@oculum/scanner 1.0.14 → 1.0.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1323) hide show

package/dist/detect/ai-code/index.d.ts +6 -11
package/dist/detect/ai-code/index.d.ts.map +1 -1
package/dist/detect/ai-code/index.js +6 -24
package/dist/detect/ai-code/index.js.map +1 -1
package/dist/detect/ast-rules/agent-tools-ast.d.ts +14 -0
package/dist/detect/ast-rules/agent-tools-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/agent-tools-ast.js +809 -0
package/dist/detect/ast-rules/agent-tools-ast.js.map +1 -0
package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts +14 -0
package/dist/detect/ast-rules/ai-fingerprinting-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/ai-fingerprinting-ast.js +344 -0
package/dist/detect/ast-rules/ai-fingerprinting-ast.js.map +1 -0
package/dist/detect/ast-rules/auth-patterns-ast.d.ts +14 -0
package/dist/detect/ast-rules/auth-patterns-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/auth-patterns-ast.js +280 -0
package/dist/detect/ast-rules/auth-patterns-ast.js.map +1 -0
package/dist/detect/ast-rules/byok-ast.d.ts +13 -0
package/dist/detect/ast-rules/byok-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/byok-ast.js +180 -0
package/dist/detect/ast-rules/byok-ast.js.map +1 -0
package/dist/detect/ast-rules/child-process-ast.d.ts +13 -0
package/dist/detect/ast-rules/child-process-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/child-process-ast.js +252 -0
package/dist/detect/ast-rules/child-process-ast.js.map +1 -0
package/dist/detect/ast-rules/dangerous-eval-ast.d.ts +13 -0
package/dist/detect/ast-rules/dangerous-eval-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/dangerous-eval-ast.js +218 -0
package/dist/detect/ast-rules/dangerous-eval-ast.js.map +1 -0
package/dist/detect/ast-rules/data-exposure-ast.d.ts +13 -0
package/dist/detect/ast-rules/data-exposure-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/data-exposure-ast.js +158 -0
package/dist/detect/ast-rules/data-exposure-ast.js.map +1 -0
package/dist/detect/ast-rules/dom-xss-ast.d.ts +14 -0
package/dist/detect/ast-rules/dom-xss-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/dom-xss-ast.js +217 -0
package/dist/detect/ast-rules/dom-xss-ast.js.map +1 -0
package/dist/detect/ast-rules/endpoint-protection-ast.d.ts +13 -0
package/dist/detect/ast-rules/endpoint-protection-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/endpoint-protection-ast.js +228 -0
package/dist/detect/ast-rules/endpoint-protection-ast.js.map +1 -0
package/dist/detect/ast-rules/entropy-ast.d.ts +17 -0
package/dist/detect/ast-rules/entropy-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/entropy-ast.js +265 -0
package/dist/detect/ast-rules/entropy-ast.js.map +1 -0
package/dist/detect/ast-rules/flask-debug-ast.d.ts +10 -0
package/dist/detect/ast-rules/flask-debug-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/flask-debug-ast.js +125 -0
package/dist/detect/ast-rules/flask-debug-ast.js.map +1 -0
package/dist/detect/ast-rules/framework-checks-ast.d.ts +13 -0
package/dist/detect/ast-rules/framework-checks-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/framework-checks-ast.js +185 -0
package/dist/detect/ast-rules/framework-checks-ast.js.map +1 -0
package/dist/detect/ast-rules/helpers/call-analysis.d.ts +62 -0
package/dist/detect/ast-rules/helpers/call-analysis.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/call-analysis.js +217 -0
package/dist/detect/ast-rules/helpers/call-analysis.js.map +1 -0
package/dist/detect/ast-rules/helpers/context-detection.d.ts +33 -0
package/dist/detect/ast-rules/helpers/context-detection.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/context-detection.js +256 -0
package/dist/detect/ast-rules/helpers/context-detection.js.map +1 -0
package/dist/detect/ast-rules/helpers/control-flow.d.ts +40 -0
package/dist/detect/ast-rules/helpers/control-flow.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/control-flow.js +174 -0
package/dist/detect/ast-rules/helpers/control-flow.js.map +1 -0
package/dist/detect/ast-rules/helpers/import-analysis.d.ts +43 -0
package/dist/detect/ast-rules/helpers/import-analysis.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/import-analysis.js +149 -0
package/dist/detect/ast-rules/helpers/import-analysis.js.map +1 -0
package/dist/detect/ast-rules/helpers/index.d.ts +16 -0
package/dist/detect/ast-rules/helpers/index.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/index.js +112 -0
package/dist/detect/ast-rules/helpers/index.js.map +1 -0
package/dist/detect/ast-rules/helpers/python-helpers.d.ts +215 -0
package/dist/detect/ast-rules/helpers/python-helpers.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/python-helpers.js +935 -0
package/dist/detect/ast-rules/helpers/python-helpers.js.map +1 -0
package/dist/detect/ast-rules/helpers/scope-analysis.d.ts +50 -0
package/dist/detect/ast-rules/helpers/scope-analysis.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/scope-analysis.js +194 -0
package/dist/detect/ast-rules/helpers/scope-analysis.js.map +1 -0
package/dist/detect/ast-rules/helpers/string-analysis.d.ts +57 -0
package/dist/detect/ast-rules/helpers/string-analysis.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/string-analysis.js +184 -0
package/dist/detect/ast-rules/helpers/string-analysis.js.map +1 -0
package/dist/detect/ast-rules/helpers/type-extraction.d.ts +44 -0
package/dist/detect/ast-rules/helpers/type-extraction.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/type-extraction.js +125 -0
package/dist/detect/ast-rules/helpers/type-extraction.js.map +1 -0
package/dist/detect/ast-rules/helpers/user-input.d.ts +35 -0
package/dist/detect/ast-rules/helpers/user-input.d.ts.map +1 -0
package/dist/detect/ast-rules/helpers/user-input.js +243 -0
package/dist/detect/ast-rules/helpers/user-input.js.map +1 -0
package/dist/detect/ast-rules/index.d.ts +112 -0
package/dist/detect/ast-rules/index.d.ts.map +1 -0
package/dist/detect/ast-rules/index.js +232 -0
package/dist/detect/ast-rules/index.js.map +1 -0
package/dist/detect/ast-rules/json-parse-ast.d.ts +13 -0
package/dist/detect/ast-rules/json-parse-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/json-parse-ast.js +143 -0
package/dist/detect/ast-rules/json-parse-ast.js.map +1 -0
package/dist/detect/ast-rules/log-injection-ast.d.ts +14 -0
package/dist/detect/ast-rules/log-injection-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/log-injection-ast.js +235 -0
package/dist/detect/ast-rules/log-injection-ast.js.map +1 -0
package/dist/detect/ast-rules/logic-gates-ast.d.ts +14 -0
package/dist/detect/ast-rules/logic-gates-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/logic-gates-ast.js +312 -0
package/dist/detect/ast-rules/logic-gates-ast.js.map +1 -0
package/dist/detect/ast-rules/mcp-security-ast.d.ts +14 -0
package/dist/detect/ast-rules/mcp-security-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/mcp-security-ast.js +755 -0
package/dist/detect/ast-rules/mcp-security-ast.js.map +1 -0
package/dist/detect/ast-rules/model-supply-chain-ast.d.ts +13 -0
package/dist/detect/ast-rules/model-supply-chain-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/model-supply-chain-ast.js +188 -0
package/dist/detect/ast-rules/model-supply-chain-ast.js.map +1 -0
package/dist/detect/ast-rules/package-hallucination-ast.d.ts +13 -0
package/dist/detect/ast-rules/package-hallucination-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/package-hallucination-ast.js +607 -0
package/dist/detect/ast-rules/package-hallucination-ast.js.map +1 -0
package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts +15 -0
package/dist/detect/ast-rules/prompt-hygiene-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/prompt-hygiene-ast.js +332 -0
package/dist/detect/ast-rules/prompt-hygiene-ast.js.map +1 -0
package/dist/detect/ast-rules/rag-safety-ast.d.ts +18 -0
package/dist/detect/ast-rules/rag-safety-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/rag-safety-ast.js +640 -0
package/dist/detect/ast-rules/rag-safety-ast.js.map +1 -0
package/dist/detect/ast-rules/request-validation-ast.d.ts +13 -0
package/dist/detect/ast-rules/request-validation-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/request-validation-ast.js +116 -0
package/dist/detect/ast-rules/request-validation-ast.js.map +1 -0
package/dist/detect/ast-rules/risky-imports-ast.d.ts +14 -0
package/dist/detect/ast-rules/risky-imports-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/risky-imports-ast.js +114 -0
package/dist/detect/ast-rules/risky-imports-ast.js.map +1 -0
package/dist/detect/ast-rules/schema-validation-ast.d.ts +14 -0
package/dist/detect/ast-rules/schema-validation-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/schema-validation-ast.js +233 -0
package/dist/detect/ast-rules/schema-validation-ast.js.map +1 -0
package/dist/detect/ast-rules/secret-patterns-ast.d.ts +17 -0
package/dist/detect/ast-rules/secret-patterns-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/secret-patterns-ast.js +199 -0
package/dist/detect/ast-rules/secret-patterns-ast.js.map +1 -0
package/dist/detect/ast-rules/security-headers-ast.d.ts +14 -0
package/dist/detect/ast-rules/security-headers-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/security-headers-ast.js +187 -0
package/dist/detect/ast-rules/security-headers-ast.js.map +1 -0
package/dist/detect/ast-rules/sql-injection-ast.d.ts +17 -0
package/dist/detect/ast-rules/sql-injection-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/sql-injection-ast.js +497 -0
package/dist/detect/ast-rules/sql-injection-ast.js.map +1 -0
package/dist/detect/ast-rules/ssrf-ast.d.ts +14 -0
package/dist/detect/ast-rules/ssrf-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/ssrf-ast.js +573 -0
package/dist/detect/ast-rules/ssrf-ast.js.map +1 -0
package/dist/detect/ast-rules/taint-fix-templates.d.ts +18 -0
package/dist/detect/ast-rules/taint-fix-templates.d.ts.map +1 -0
package/dist/detect/ast-rules/taint-fix-templates.js +92 -0
package/dist/detect/ast-rules/taint-fix-templates.js.map +1 -0
package/dist/detect/ast-rules/taint-flow-ast.d.ts +24 -0
package/dist/detect/ast-rules/taint-flow-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/taint-flow-ast.js +340 -0
package/dist/detect/ast-rules/taint-flow-ast.js.map +1 -0
package/dist/detect/ast-rules/variables-ast.d.ts +24 -0
package/dist/detect/ast-rules/variables-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/variables-ast.js +362 -0
package/dist/detect/ast-rules/variables-ast.js.map +1 -0
package/dist/detect/ast-rules/weak-crypto-ast.d.ts +15 -0
package/dist/detect/ast-rules/weak-crypto-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/weak-crypto-ast.js +406 -0
package/dist/detect/ast-rules/weak-crypto-ast.js.map +1 -0
package/dist/detect/ast-rules/xxe-ast.d.ts +13 -0
package/dist/detect/ast-rules/xxe-ast.d.ts.map +1 -0
package/dist/detect/ast-rules/xxe-ast.js +157 -0
package/dist/detect/ast-rules/xxe-ast.js.map +1 -0
package/dist/detect/config/agent-skill-injection.d.ts.map +1 -1
package/dist/detect/config/agent-skill-injection.js +2 -24
package/dist/detect/config/agent-skill-injection.js.map +1 -1
package/dist/detect/config/index.d.ts +1 -0
package/dist/detect/config/index.d.ts.map +1 -1
package/dist/detect/config/index.js +3 -1
package/dist/detect/config/index.js.map +1 -1
package/dist/detect/config/osv-check.d.ts.map +1 -1
package/dist/detect/config/osv-check.js +6 -1
package/dist/detect/config/osv-check.js.map +1 -1
package/dist/detect/config/package-check.d.ts.map +1 -1
package/dist/detect/config/package-check.js +6 -1
package/dist/detect/config/package-check.js.map +1 -1
package/dist/detect/config/rules-file-backdoor.d.ts +36 -0
package/dist/detect/config/rules-file-backdoor.d.ts.map +1 -0
package/dist/detect/config/rules-file-backdoor.js +379 -0
package/dist/detect/config/rules-file-backdoor.js.map +1 -0
package/dist/detect/index.d.ts +43 -6
package/dist/detect/index.d.ts.map +1 -1
package/dist/detect/index.js +70 -7
package/dist/detect/index.js.map +1 -1
package/dist/detect/secrets/config-audit.d.ts.map +1 -1
package/dist/detect/secrets/config-audit.js +36 -3
package/dist/detect/secrets/config-audit.js.map +1 -1
package/dist/detect/secrets/entropy.d.ts.map +1 -1
package/dist/detect/secrets/entropy.js +180 -0
package/dist/detect/secrets/entropy.js.map +1 -1
package/dist/detect/secrets/index.d.ts +0 -2
package/dist/detect/secrets/index.d.ts.map +1 -1
package/dist/detect/secrets/index.js +7 -17
package/dist/detect/secrets/index.js.map +1 -1
package/dist/detect/structural/index.d.ts +15 -28
package/dist/detect/structural/index.d.ts.map +1 -1
package/dist/detect/structural/index.js +20 -497
package/dist/detect/structural/index.js.map +1 -1
package/dist/index.d.ts +3 -0
package/dist/index.d.ts.map +1 -1
package/dist/index.js +9 -1
package/dist/index.js.map +1 -1
package/dist/model/auth-helper-detector.d.ts.map +1 -1
package/dist/model/auth-helper-detector.js +2 -7
package/dist/model/auth-helper-detector.js.map +1 -1
package/dist/model/import-resolver.d.ts.map +1 -1
package/dist/model/import-resolver.js +94 -0
package/dist/model/import-resolver.js.map +1 -1
package/dist/model/imported-auth-detector.js +8 -8
package/dist/model/imported-auth-detector.js.map +1 -1
package/dist/model/index.d.ts +8 -0
package/dist/model/index.d.ts.map +1 -1
package/dist/model/index.js +198 -73
package/dist/model/index.js.map +1 -1
package/dist/model/module-graph.d.ts.map +1 -1
package/dist/model/module-graph.js +22 -9
package/dist/model/module-graph.js.map +1 -1
package/dist/model/project-context.d.ts +1 -1
package/dist/model/project-context.d.ts.map +1 -1
package/dist/model/project-context.js +34 -0
package/dist/model/project-context.js.map +1 -1
package/dist/model/route-auth-resolver.d.ts.map +1 -1
package/dist/model/route-auth-resolver.js +17 -2
package/dist/model/route-auth-resolver.js.map +1 -1
package/dist/model/route-discovery/index.js +1 -1
package/dist/model/route-discovery/index.js.map +1 -1
package/dist/model/route-discovery/nextjs.js +1 -1
package/dist/model/route-discovery/nextjs.js.map +1 -1
package/dist/model/route-discovery/python.d.ts +6 -3
package/dist/model/route-discovery/python.d.ts.map +1 -1
package/dist/model/route-discovery/python.js +132 -9
package/dist/model/route-discovery/python.js.map +1 -1
package/dist/model/route-discovery/types.d.ts +1 -1
package/dist/model/route-discovery/types.d.ts.map +1 -1
package/dist/model/route-discovery/utils.d.ts +8 -0
package/dist/model/route-discovery/utils.d.ts.map +1 -1
package/dist/model/route-discovery/utils.js +70 -0
package/dist/model/route-discovery/utils.js.map +1 -1
package/dist/model/taint-types.d.ts +0 -4
package/dist/model/taint-types.d.ts.map +1 -1
package/dist/parse/ast.d.ts +58 -0
package/dist/parse/ast.d.ts.map +1 -0
package/dist/parse/ast.js +230 -0
package/dist/parse/ast.js.map +1 -0
package/dist/parse/call-graph.d.ts +41 -0
package/dist/parse/call-graph.d.ts.map +1 -0
package/dist/parse/call-graph.js +386 -0
package/dist/parse/call-graph.js.map +1 -0
package/dist/parse/file-classifier.d.ts +11 -0
package/dist/parse/file-classifier.d.ts.map +1 -1
package/dist/parse/file-classifier.js +63 -15
package/dist/parse/file-classifier.js.map +1 -1
package/dist/parse/node-index.d.ts +32 -0
package/dist/parse/node-index.d.ts.map +1 -0
package/dist/parse/node-index.js +103 -0
package/dist/parse/node-index.js.map +1 -0
package/dist/parse/type-extractor.d.ts +50 -0
package/dist/parse/type-extractor.d.ts.map +1 -0
package/dist/parse/type-extractor.js +243 -0
package/dist/parse/type-extractor.js.map +1 -0
package/dist/pipeline/config.d.ts +7 -1
package/dist/pipeline/config.d.ts.map +1 -1
package/dist/pipeline/config.js.map +1 -1
package/dist/pipeline/index.d.ts +3 -3
package/dist/pipeline/index.d.ts.map +1 -1
package/dist/pipeline/index.js +192 -64
package/dist/pipeline/index.js.map +1 -1
package/dist/pipeline/modes/incremental.d.ts.map +1 -1
package/dist/pipeline/modes/incremental.js +2 -7
package/dist/pipeline/modes/incremental.js.map +1 -1
package/dist/postprocess/dedup.d.ts +5 -2
package/dist/postprocess/dedup.d.ts.map +1 -1
package/dist/postprocess/dedup.js +47 -16
package/dist/postprocess/dedup.js.map +1 -1
package/dist/report/build-result.d.ts +9 -4
package/dist/report/build-result.d.ts.map +1 -1
package/dist/report/build-result.js +15 -4
package/dist/report/build-result.js.map +1 -1
package/dist/report/formatters/cli-terminal.d.ts +1 -1
package/dist/report/formatters/cli-terminal.d.ts.map +1 -1
package/dist/report/formatters/cli-terminal.js +434 -231
package/dist/report/formatters/cli-terminal.js.map +1 -1
package/dist/report/sanitize.d.ts +10 -0
package/dist/report/sanitize.d.ts.map +1 -0
package/dist/report/sanitize.js +19 -0
package/dist/report/sanitize.js.map +1 -0
package/dist/score/adjustments.d.ts +20 -2
package/dist/score/adjustments.d.ts.map +1 -1
package/dist/score/adjustments.js +108 -37
package/dist/score/adjustments.js.map +1 -1
package/dist/score/confidence.d.ts +6 -0
package/dist/score/confidence.d.ts.map +1 -1
package/dist/score/confidence.js +10 -4
package/dist/score/confidence.js.map +1 -1
package/dist/score/evidence.d.ts +25 -0
package/dist/score/evidence.d.ts.map +1 -0
package/dist/score/evidence.js +51 -0
package/dist/score/evidence.js.map +1 -0
package/dist/score/index.d.ts +3 -1
package/dist/score/index.d.ts.map +1 -1
package/dist/score/index.js +25 -50
package/dist/score/index.js.map +1 -1
package/dist/score/types.d.ts +5 -1
package/dist/score/types.d.ts.map +1 -1
package/dist/shared/category-filter.d.ts.map +1 -1
package/dist/shared/category-filter.js +12 -0
package/dist/shared/category-filter.js.map +1 -1
package/dist/shared/regex-utils.d.ts +3 -0
package/dist/shared/regex-utils.d.ts.map +1 -0
package/dist/shared/regex-utils.js +8 -0
package/dist/shared/regex-utils.js.map +1 -0
package/dist/shared/registry-clients.d.ts +7 -0
package/dist/shared/registry-clients.d.ts.map +1 -1
package/dist/shared/registry-clients.js +94 -17
package/dist/shared/registry-clients.js.map +1 -1
package/dist/shared/rules/metadata.d.ts.map +1 -1
package/dist/shared/rules/metadata.js +17 -0
package/dist/shared/rules/metadata.js.map +1 -1
package/dist/shared/types.d.ts +59 -15
package/dist/shared/types.d.ts.map +1 -1
package/dist/shared/types.js +38 -21
package/dist/shared/types.js.map +1 -1
package/dist/taint/async-flow.d.ts +44 -0
package/dist/taint/async-flow.d.ts.map +1 -0
package/dist/taint/async-flow.js +271 -0
package/dist/taint/async-flow.js.map +1 -0
package/dist/taint/cfg-builder.d.ts +35 -0
package/dist/taint/cfg-builder.d.ts.map +1 -0
package/dist/taint/cfg-builder.js +980 -0
package/dist/taint/cfg-builder.js.map +1 -0
package/dist/taint/cfg-types.d.ts +76 -0
package/dist/taint/cfg-types.d.ts.map +1 -0
package/dist/taint/cfg-types.js +13 -0
package/dist/taint/cfg-types.js.map +1 -0
package/dist/taint/constant-propagation.d.ts +34 -0
package/dist/taint/constant-propagation.d.ts.map +1 -0
package/dist/taint/constant-propagation.js +164 -0
package/dist/taint/constant-propagation.js.map +1 -0
package/dist/taint/cross-file-analyzer.d.ts +27 -0
package/dist/taint/cross-file-analyzer.d.ts.map +1 -0
package/dist/taint/cross-file-analyzer.js +99 -0
package/dist/taint/cross-file-analyzer.js.map +1 -0
package/dist/taint/cross-file-index.d.ts +59 -0
package/dist/taint/cross-file-index.d.ts.map +1 -0
package/dist/taint/cross-file-index.js +183 -0
package/dist/taint/cross-file-index.js.map +1 -0
package/dist/taint/def-use.d.ts +27 -0
package/dist/taint/def-use.d.ts.map +1 -0
package/dist/taint/def-use.js +519 -0
package/dist/taint/def-use.js.map +1 -0
package/dist/taint/file-analysis-cache.d.ts +47 -0
package/dist/taint/file-analysis-cache.d.ts.map +1 -0
package/dist/taint/file-analysis-cache.js +107 -0
package/dist/taint/file-analysis-cache.js.map +1 -0
package/dist/taint/framework-models.d.ts +77 -0
package/dist/taint/framework-models.d.ts.map +1 -0
package/dist/taint/framework-models.js +258 -0
package/dist/taint/framework-models.js.map +1 -0
package/dist/taint/helpers.d.ts +31 -0
package/dist/taint/helpers.d.ts.map +1 -0
package/dist/taint/helpers.js +130 -0
package/dist/taint/helpers.js.map +1 -0
package/dist/taint/index.d.ts +28 -0
package/dist/taint/index.d.ts.map +1 -0
package/dist/taint/index.js +77 -0
package/dist/taint/index.js.map +1 -0
package/dist/taint/llm-registry.d.ts +47 -0
package/dist/taint/llm-registry.d.ts.map +1 -0
package/dist/taint/llm-registry.js +152 -0
package/dist/taint/llm-registry.js.map +1 -0
package/dist/taint/llm-risk-scoring.d.ts +54 -0
package/dist/taint/llm-risk-scoring.d.ts.map +1 -0
package/dist/taint/llm-risk-scoring.js +376 -0
package/dist/taint/llm-risk-scoring.js.map +1 -0
package/dist/taint/propagation-types.d.ts +104 -0
package/dist/taint/propagation-types.d.ts.map +1 -0
package/dist/taint/propagation-types.js +98 -0
package/dist/taint/propagation-types.js.map +1 -0
package/dist/taint/propagation.d.ts +111 -0
package/dist/taint/propagation.d.ts.map +1 -0
package/dist/taint/propagation.js +1576 -0
package/dist/taint/propagation.js.map +1 -0
package/dist/taint/sanitizer-registry.d.ts +26 -0
package/dist/taint/sanitizer-registry.d.ts.map +1 -0
package/dist/taint/sanitizer-registry.js +422 -0
package/dist/taint/sanitizer-registry.js.map +1 -0
package/dist/taint/sink-classifier.d.ts +27 -0
package/dist/taint/sink-classifier.d.ts.map +1 -0
package/dist/taint/sink-classifier.js +1166 -0
package/dist/taint/sink-classifier.js.map +1 -0
package/dist/taint/source-classifier.d.ts +29 -0
package/dist/taint/source-classifier.d.ts.map +1 -0
package/dist/taint/source-classifier.js +814 -0
package/dist/taint/source-classifier.js.map +1 -0
package/dist/taint/taint-analyzer.d.ts +33 -0
package/dist/taint/taint-analyzer.d.ts.map +1 -0
package/dist/taint/taint-analyzer.js +88 -0
package/dist/taint/taint-analyzer.js.map +1 -0
package/dist/taint/taint-summary.d.ts +37 -0
package/dist/taint/taint-summary.d.ts.map +1 -0
package/dist/taint/taint-summary.js +293 -0
package/dist/taint/taint-summary.js.map +1 -0
package/dist/taint/types.d.ts +47 -0
package/dist/taint/types.d.ts.map +1 -0
package/dist/taint/types.js +19 -0
package/dist/taint/types.js.map +1 -0
package/dist/validate/clients.d.ts +2 -1
package/dist/validate/clients.d.ts.map +1 -1
package/dist/validate/clients.js +3 -2
package/dist/validate/clients.js.map +1 -1
package/dist/validate/index.d.ts +5 -6
package/dist/validate/index.d.ts.map +1 -1
package/dist/validate/index.js +22 -21
package/dist/validate/index.js.map +1 -1
package/dist/validate/prompts/modules/ai-patterns.d.ts +1 -1
package/dist/validate/prompts/modules/ai-patterns.d.ts.map +1 -1
package/dist/validate/prompts/modules/ai-patterns.js +16 -0
package/dist/validate/prompts/modules/ai-patterns.js.map +1 -1
package/dist/validate/prompts/modules/common.d.ts +1 -1
package/dist/validate/prompts/modules/common.d.ts.map +1 -1
package/dist/validate/prompts/modules/common.js +12 -3
package/dist/validate/prompts/modules/common.js.map +1 -1
package/dist/validate/providers/anthropic.d.ts +4 -4
package/dist/validate/providers/anthropic.d.ts.map +1 -1
package/dist/validate/providers/anthropic.js +85 -58
package/dist/validate/providers/anthropic.js.map +1 -1
package/dist/validate/providers/openai.d.ts +4 -4
package/dist/validate/providers/openai.d.ts.map +1 -1
package/dist/validate/providers/openai.js +149 -99
package/dist/validate/providers/openai.js.map +1 -1
package/dist/validate/request-builder.d.ts +2 -8
package/dist/validate/request-builder.d.ts.map +1 -1
package/dist/validate/request-builder.js +4 -34
package/dist/validate/request-builder.js.map +1 -1
package/dist/validate/types.d.ts +9 -0
package/dist/validate/types.d.ts.map +1 -1
package/dist/validate/types.js.map +1 -1
package/dist/validate/utils/path-helpers.js +2 -2
package/dist/validate/utils/path-helpers.js.map +1 -1
package/dist/validate/utils/response-parser.d.ts +10 -0
package/dist/validate/utils/response-parser.d.ts.map +1 -1
package/dist/validate/utils/response-parser.js +21 -2
package/dist/validate/utils/response-parser.js.map +1 -1
package/dist/validate/utils/retry.d.ts.map +1 -1
package/dist/validate/utils/retry.js +19 -4
package/dist/validate/utils/retry.js.map +1 -1
package/package.json +7 -4
package/src/__tests__/benchmark/fixtures/layer2/ai-execution-sinks.ts +1 -1
package/src/__tests__/benchmark/planted-benchmark.test.ts +337 -0
package/src/__tests__/benchmark/utils/test-runner.ts +38 -4
package/src/__tests__/category-filter.test.ts +5 -1
package/src/__tests__/context-engine/route-discovery/python.test.ts +726 -0
package/src/__tests__/detect/ast-rules.test.ts +1043 -0
package/src/__tests__/detect/offline-mode.test.ts +147 -0
package/src/__tests__/detect/python-ast-rules.test.ts +569 -0
package/src/__tests__/detect/python-helpers.test.ts +536 -0
package/src/__tests__/detect/python-sast-rules.test.ts +453 -0
package/src/__tests__/detect/rules-file-backdoor-decoders.test.ts +151 -0
package/src/__tests__/detect/rules-file-backdoor.test.ts +284 -0
package/src/__tests__/detect/taint-fix-templates.test.ts +150 -0
package/src/__tests__/detect/taint-path-serialization.test.ts +170 -0
package/src/__tests__/parse/call-graph.test.ts +300 -0
package/src/__tests__/parse/python-parser.test.ts +274 -0
package/src/__tests__/regression/known-false-positives.test.ts +491 -9
package/src/__tests__/regression/rules-file-backdoor.test.ts +137 -0
package/src/__tests__/score/adjustments.test.ts +34 -16
package/src/__tests__/score/confidence.test.ts +84 -57
package/src/__tests__/score/evidence-scoring.test.ts +249 -0
package/src/__tests__/score/evidence.test.ts +144 -0
package/src/__tests__/score/scoring-integration.test.ts +56 -34
package/src/__tests__/score/taint-adjustments.test.ts +14 -228
package/src/__tests__/snapshots/__snapshots__/scan-depth.test.ts.snap +65 -59
package/src/__tests__/snapshots/scan-depth.test.ts +39 -7
package/src/__tests__/taint/async-flow.test.ts +247 -0
package/src/__tests__/taint/cfg-builder.test.ts +835 -0
package/src/__tests__/taint/constant-propagation.test.ts +302 -0
package/src/__tests__/taint/cross-file-index.test.ts +683 -0
package/src/__tests__/taint/cross-file-integration.test.ts +275 -0
package/src/__tests__/taint/cross-file-propagation.test.ts +910 -0
package/src/__tests__/taint/def-use.test.ts +132 -0
package/src/__tests__/taint/field-sensitive-sinks.test.ts +179 -0
package/src/__tests__/taint/field-sensitivity.test.ts +342 -0
package/src/__tests__/taint/file-analysis-cache.test.ts +290 -0
package/src/__tests__/taint/framework-models.test.ts +227 -0
package/src/__tests__/taint/llm-flow-graph.test.ts +850 -0
package/src/__tests__/taint/llm-risk-scoring.test.ts +439 -0
package/src/__tests__/taint/performance-parity.test.ts +315 -0
package/src/__tests__/taint/propagation.test.ts +621 -0
package/src/__tests__/taint/python-cross-file.test.ts +494 -0
package/src/__tests__/taint/python-taint.test.ts +1344 -0
package/src/__tests__/taint/sanitizer-registry.test.ts +304 -0
package/src/__tests__/taint/sanitizer-regression.test.ts +111 -0
package/src/__tests__/taint/sink-classifier.test.ts +537 -0
package/src/__tests__/taint/source-classifier.test.ts +367 -0
package/src/__tests__/taint/taint-pipeline.test.ts +418 -0
package/src/__tests__/taint/taint-smoke.test.ts +400 -0
package/src/__tests__/taint/taint-summary.test.ts +472 -0
package/src/detect/ai-code/index.ts +6 -11
package/src/detect/ast-rules/agent-tools-ast.ts +861 -0
package/src/detect/ast-rules/ai-fingerprinting-ast.ts +451 -0
package/src/detect/ast-rules/auth-patterns-ast.ts +304 -0
package/src/detect/ast-rules/byok-ast.ts +195 -0
package/src/detect/ast-rules/child-process-ast.ts +276 -0
package/src/detect/ast-rules/dangerous-eval-ast.ts +227 -0
package/src/detect/ast-rules/data-exposure-ast.ts +162 -0
package/src/detect/ast-rules/dom-xss-ast.ts +260 -0
package/src/detect/ast-rules/endpoint-protection-ast.ts +231 -0
package/src/detect/ast-rules/entropy-ast.ts +268 -0
package/src/detect/ast-rules/flask-debug-ast.ts +148 -0
package/src/detect/ast-rules/framework-checks-ast.ts +200 -0
package/src/detect/ast-rules/helpers/call-analysis.ts +256 -0
package/src/detect/ast-rules/helpers/context-detection.ts +277 -0
package/src/detect/ast-rules/helpers/control-flow.ts +179 -0
package/src/detect/ast-rules/helpers/import-analysis.ts +185 -0
package/src/detect/ast-rules/helpers/index.ts +133 -0
package/src/detect/ast-rules/helpers/python-helpers.ts +1054 -0
package/src/detect/ast-rules/helpers/scope-analysis.ts +224 -0
package/src/detect/ast-rules/helpers/string-analysis.ts +215 -0
package/src/detect/ast-rules/helpers/type-extraction.ts +138 -0
package/src/detect/ast-rules/helpers/user-input.ts +256 -0
package/src/detect/ast-rules/index.ts +311 -0
package/src/detect/ast-rules/json-parse-ast.ts +162 -0
package/src/detect/ast-rules/log-injection-ast.ts +243 -0
package/src/detect/ast-rules/logic-gates-ast.ts +343 -0
package/src/detect/ast-rules/mcp-security-ast.ts +808 -0
package/src/detect/ast-rules/model-supply-chain-ast.ts +202 -0
package/src/detect/ast-rules/package-hallucination-ast.ts +664 -0
package/src/detect/ast-rules/prompt-hygiene-ast.ts +329 -0
package/src/detect/ast-rules/rag-safety-ast.ts +689 -0
package/src/detect/ast-rules/request-validation-ast.ts +122 -0
package/src/detect/ast-rules/risky-imports-ast.ts +133 -0
package/src/detect/ast-rules/schema-validation-ast.ts +244 -0
package/src/detect/ast-rules/secret-patterns-ast.ts +223 -0
package/src/detect/ast-rules/security-headers-ast.ts +206 -0
package/src/detect/ast-rules/sql-injection-ast.ts +614 -0
package/src/detect/ast-rules/ssrf-ast.ts +601 -0
package/src/detect/ast-rules/taint-fix-templates.ts +108 -0
package/src/detect/ast-rules/taint-flow-ast.ts +416 -0
package/src/detect/ast-rules/variables-ast.ts +446 -0
package/src/detect/ast-rules/weak-crypto-ast.ts +441 -0
package/src/detect/ast-rules/xxe-ast.ts +184 -0
package/src/detect/config/agent-skill-injection.ts +2 -24
package/src/detect/config/index.ts +1 -0
package/src/detect/config/osv-check.ts +6 -1
package/src/detect/config/package-check.ts +6 -1
package/src/detect/config/rules-file-backdoor.ts +438 -0
package/src/detect/index.ts +146 -52
package/src/detect/secrets/config-audit.ts +37 -3
package/src/detect/secrets/entropy.ts +195 -0
package/src/detect/secrets/index.ts +7 -16
package/src/detect/structural/index.ts +23 -566
package/src/index.ts +7 -0
package/src/model/auth-helper-detector.ts +1 -7
package/src/model/import-resolver.ts +104 -0
package/src/model/imported-auth-detector.ts +1 -1
package/src/model/index.ts +240 -80
package/src/model/module-graph.ts +17 -5
package/src/model/project-context.ts +28 -1
package/src/model/route-auth-resolver.ts +18 -3
package/src/model/route-discovery/index.ts +1 -1
package/src/model/route-discovery/nextjs.ts +1 -1
package/src/model/route-discovery/python.ts +156 -9
package/src/model/route-discovery/types.ts +1 -1
package/src/model/route-discovery/utils.ts +73 -0
package/src/model/taint-types.ts +1 -6
package/src/parse/ast.ts +271 -0
package/src/parse/call-graph.ts +419 -0
package/src/parse/file-classifier.ts +69 -15
package/src/parse/node-index.ts +118 -0
package/src/parse/type-extractor.ts +293 -0
package/src/pipeline/config.ts +7 -0
package/src/pipeline/index.ts +464 -199
package/src/pipeline/modes/incremental.ts +1 -7
package/src/postprocess/dedup.ts +48 -17
package/src/report/build-result.ts +57 -29
package/src/report/formatters/cli-terminal.ts +731 -415
package/src/report/sanitize.ts +27 -0
package/src/score/adjustments.ts +113 -40
package/src/score/confidence.ts +10 -5
package/src/score/evidence.ts +55 -0
package/src/score/index.ts +27 -55
package/src/score/types.ts +4 -0
package/src/shared/category-filter.ts +12 -0
package/src/shared/regex-utils.ts +4 -0
package/src/shared/registry-clients.ts +106 -18
package/src/shared/rules/__tests__/metadata.test.ts +5 -1
package/src/shared/rules/metadata.ts +19 -0
package/src/shared/types.ts +372 -253
package/src/taint/async-flow.ts +301 -0
package/src/taint/cfg-builder.ts +1127 -0
package/src/taint/cfg-types.ts +110 -0
package/src/taint/constant-propagation.ts +170 -0
package/src/taint/cross-file-analyzer.ts +118 -0
package/src/taint/cross-file-index.ts +275 -0
package/src/taint/def-use.ts +556 -0
package/src/taint/file-analysis-cache.ts +145 -0
package/src/taint/framework-models.ts +313 -0
package/src/taint/helpers.ts +138 -0
package/src/taint/index.ts +71 -0
package/src/taint/llm-registry.ts +174 -0
package/src/taint/llm-risk-scoring.ts +412 -0
package/src/taint/propagation-types.ts +188 -0
package/src/taint/propagation.ts +1750 -0
package/src/taint/sanitizer-registry.ts +490 -0
package/src/taint/sink-classifier.ts +1402 -0
package/src/taint/source-classifier.ts +859 -0
package/src/taint/taint-analyzer.ts +112 -0
package/src/taint/taint-summary.ts +341 -0
package/src/taint/types.ts +86 -0
package/src/validate/clients.ts +3 -2
package/src/validate/index.ts +89 -53
package/src/validate/prompts/modules/ai-patterns.ts +16 -0
package/src/validate/prompts/modules/common.ts +12 -3
package/src/validate/providers/anthropic.ts +254 -148
package/src/validate/providers/openai.ts +363 -218
package/src/validate/request-builder.ts +2 -45
package/src/validate/types.ts +9 -0
package/src/validate/utils/path-helpers.ts +2 -2
package/src/validate/utils/response-parser.ts +32 -3
package/src/validate/utils/retry.ts +19 -4
package/dist/ai-context/index.d.ts +0 -6
package/dist/ai-context/index.d.ts.map +0 -1
package/dist/ai-context/index.js +0 -13
package/dist/ai-context/index.js.map +0 -1
package/dist/ai-context/manager.d.ts +0 -67
package/dist/ai-context/manager.d.ts.map +0 -1
package/dist/ai-context/manager.js +0 -104
package/dist/ai-context/manager.js.map +0 -1
package/dist/baseline/diff.d.ts +0 -32
package/dist/baseline/diff.d.ts.map +0 -1
package/dist/baseline/diff.js +0 -119
package/dist/baseline/diff.js.map +0 -1
package/dist/baseline/index.d.ts +0 -9
package/dist/baseline/index.d.ts.map +0 -1
package/dist/baseline/index.js +0 -19
package/dist/baseline/index.js.map +0 -1
package/dist/baseline/manager.d.ts +0 -67
package/dist/baseline/manager.d.ts.map +0 -1
package/dist/baseline/manager.js +0 -180
package/dist/baseline/manager.js.map +0 -1
package/dist/baseline/types.d.ts +0 -91
package/dist/baseline/types.d.ts.map +0 -1
package/dist/baseline/types.js +0 -12
package/dist/baseline/types.js.map +0 -1
package/dist/category-filter.d.ts +0 -125
package/dist/category-filter.d.ts.map +0 -1
package/dist/category-filter.js +0 -360
package/dist/category-filter.js.map +0 -1
package/dist/detect/ai-code/agent-tools.d.ts +0 -22
package/dist/detect/ai-code/agent-tools.d.ts.map +0 -1
package/dist/detect/ai-code/agent-tools.js +0 -1509
package/dist/detect/ai-code/agent-tools.js.map +0 -1
package/dist/detect/ai-code/byok-patterns.d.ts +0 -15
package/dist/detect/ai-code/byok-patterns.d.ts.map +0 -1
package/dist/detect/ai-code/byok-patterns.js +0 -313
package/dist/detect/ai-code/byok-patterns.js.map +0 -1
package/dist/detect/ai-code/endpoint-protection.d.ts +0 -38
package/dist/detect/ai-code/endpoint-protection.d.ts.map +0 -1
package/dist/detect/ai-code/endpoint-protection.js +0 -349
package/dist/detect/ai-code/endpoint-protection.js.map +0 -1
package/dist/detect/ai-code/execution-sinks.d.ts +0 -21
package/dist/detect/ai-code/execution-sinks.d.ts.map +0 -1
package/dist/detect/ai-code/execution-sinks.js +0 -1158
package/dist/detect/ai-code/execution-sinks.js.map +0 -1
package/dist/detect/ai-code/fingerprinting.d.ts +0 -10
package/dist/detect/ai-code/fingerprinting.d.ts.map +0 -1
package/dist/detect/ai-code/fingerprinting.js +0 -665
package/dist/detect/ai-code/fingerprinting.js.map +0 -1
package/dist/detect/ai-code/mcp-security.d.ts +0 -20
package/dist/detect/ai-code/mcp-security.d.ts.map +0 -1
package/dist/detect/ai-code/mcp-security.js +0 -880
package/dist/detect/ai-code/mcp-security.js.map +0 -1
package/dist/detect/ai-code/model-supply-chain.d.ts +0 -23
package/dist/detect/ai-code/model-supply-chain.d.ts.map +0 -1
package/dist/detect/ai-code/model-supply-chain.js +0 -447
package/dist/detect/ai-code/model-supply-chain.js.map +0 -1
package/dist/detect/ai-code/package-hallucination.d.ts +0 -22
package/dist/detect/ai-code/package-hallucination.d.ts.map +0 -1
package/dist/detect/ai-code/package-hallucination.js +0 -841
package/dist/detect/ai-code/package-hallucination.js.map +0 -1
package/dist/detect/ai-code/prompt-hygiene.d.ts +0 -22
package/dist/detect/ai-code/prompt-hygiene.d.ts.map +0 -1
package/dist/detect/ai-code/prompt-hygiene.js +0 -1177
package/dist/detect/ai-code/prompt-hygiene.js.map +0 -1
package/dist/detect/ai-code/rag-safety.d.ts +0 -24
package/dist/detect/ai-code/rag-safety.d.ts.map +0 -1
package/dist/detect/ai-code/rag-safety.js +0 -913
package/dist/detect/ai-code/rag-safety.js.map +0 -1
package/dist/detect/ai-code/schema-validation.d.ts +0 -28
package/dist/detect/ai-code/schema-validation.d.ts.map +0 -1
package/dist/detect/ai-code/schema-validation.js +0 -378
package/dist/detect/ai-code/schema-validation.js.map +0 -1
package/dist/detect/secrets/patterns.d.ts +0 -11
package/dist/detect/secrets/patterns.d.ts.map +0 -1
package/dist/detect/secrets/patterns.js +0 -518
package/dist/detect/secrets/patterns.js.map +0 -1
package/dist/detect/secrets/weak-crypto.d.ts +0 -10
package/dist/detect/secrets/weak-crypto.d.ts.map +0 -1
package/dist/detect/secrets/weak-crypto.js +0 -432
package/dist/detect/secrets/weak-crypto.js.map +0 -1
package/dist/detect/structural/auth-patterns.d.ts +0 -22
package/dist/detect/structural/auth-patterns.d.ts.map +0 -1
package/dist/detect/structural/auth-patterns.js +0 -533
package/dist/detect/structural/auth-patterns.js.map +0 -1
package/dist/detect/structural/dangerous-functions/child-process.d.ts +0 -16
package/dist/detect/structural/dangerous-functions/child-process.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/child-process.js +0 -74
package/dist/detect/structural/dangerous-functions/child-process.js.map +0 -1
package/dist/detect/structural/dangerous-functions/dom-xss.d.ts +0 -34
package/dist/detect/structural/dangerous-functions/dom-xss.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/dom-xss.js +0 -230
package/dist/detect/structural/dangerous-functions/dom-xss.js.map +0 -1
package/dist/detect/structural/dangerous-functions/index.d.ts +0 -16
package/dist/detect/structural/dangerous-functions/index.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/index.js +0 -1193
package/dist/detect/structural/dangerous-functions/index.js.map +0 -1
package/dist/detect/structural/dangerous-functions/json-parse.d.ts +0 -31
package/dist/detect/structural/dangerous-functions/json-parse.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/json-parse.js +0 -326
package/dist/detect/structural/dangerous-functions/json-parse.js.map +0 -1
package/dist/detect/structural/dangerous-functions/math-random.d.ts +0 -111
package/dist/detect/structural/dangerous-functions/math-random.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/math-random.js +0 -684
package/dist/detect/structural/dangerous-functions/math-random.js.map +0 -1
package/dist/detect/structural/dangerous-functions/patterns.d.ts +0 -21
package/dist/detect/structural/dangerous-functions/patterns.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/patterns.js +0 -163
package/dist/detect/structural/dangerous-functions/patterns.js.map +0 -1
package/dist/detect/structural/dangerous-functions/request-validation.d.ts +0 -13
package/dist/detect/structural/dangerous-functions/request-validation.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/request-validation.js +0 -126
package/dist/detect/structural/dangerous-functions/request-validation.js.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts +0 -24
package/dist/detect/structural/dangerous-functions/utils/control-flow.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/control-flow.js +0 -70
package/dist/detect/structural/dangerous-functions/utils/control-flow.js.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts +0 -31
package/dist/detect/structural/dangerous-functions/utils/helpers.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/helpers.js +0 -147
package/dist/detect/structural/dangerous-functions/utils/helpers.js.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/index.d.ts +0 -9
package/dist/detect/structural/dangerous-functions/utils/index.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/index.js +0 -23
package/dist/detect/structural/dangerous-functions/utils/index.js.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts +0 -22
package/dist/detect/structural/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
package/dist/detect/structural/dangerous-functions/utils/schema-validation.js +0 -102
package/dist/detect/structural/dangerous-functions/utils/schema-validation.js.map +0 -1
package/dist/detect/structural/data-exposure.d.ts +0 -19
package/dist/detect/structural/data-exposure.d.ts.map +0 -1
package/dist/detect/structural/data-exposure.js +0 -262
package/dist/detect/structural/data-exposure.js.map +0 -1
package/dist/detect/structural/framework-checks.d.ts +0 -10
package/dist/detect/structural/framework-checks.d.ts.map +0 -1
package/dist/detect/structural/framework-checks.js +0 -389
package/dist/detect/structural/framework-checks.js.map +0 -1
package/dist/detect/structural/log-injection.d.ts +0 -18
package/dist/detect/structural/log-injection.d.ts.map +0 -1
package/dist/detect/structural/log-injection.js +0 -217
package/dist/detect/structural/log-injection.js.map +0 -1
package/dist/detect/structural/logic-gates.d.ts +0 -10
package/dist/detect/structural/logic-gates.d.ts.map +0 -1
package/dist/detect/structural/logic-gates.js +0 -227
package/dist/detect/structural/logic-gates.js.map +0 -1
package/dist/detect/structural/risky-imports.d.ts +0 -10
package/dist/detect/structural/risky-imports.d.ts.map +0 -1
package/dist/detect/structural/risky-imports.js +0 -168
package/dist/detect/structural/risky-imports.js.map +0 -1
package/dist/detect/structural/security-headers.d.ts +0 -18
package/dist/detect/structural/security-headers.d.ts.map +0 -1
package/dist/detect/structural/security-headers.js +0 -196
package/dist/detect/structural/security-headers.js.map +0 -1
package/dist/detect/structural/ssrf-detection.d.ts +0 -18
package/dist/detect/structural/ssrf-detection.d.ts.map +0 -1
package/dist/detect/structural/ssrf-detection.js +0 -263
package/dist/detect/structural/ssrf-detection.js.map +0 -1
package/dist/detect/structural/variables.d.ts +0 -11
package/dist/detect/structural/variables.d.ts.map +0 -1
package/dist/detect/structural/variables.js +0 -159
package/dist/detect/structural/variables.js.map +0 -1
package/dist/detect/structural/xxe-detection.d.ts +0 -18
package/dist/detect/structural/xxe-detection.d.ts.map +0 -1
package/dist/detect/structural/xxe-detection.js +0 -245
package/dist/detect/structural/xxe-detection.js.map +0 -1
package/dist/filtering/context-adjustments.d.ts +0 -23
package/dist/filtering/context-adjustments.d.ts.map +0 -1
package/dist/filtering/context-adjustments.js +0 -100
package/dist/filtering/context-adjustments.js.map +0 -1
package/dist/filtering/index.d.ts +0 -3
package/dist/filtering/index.d.ts.map +0 -1
package/dist/filtering/index.js +0 -8
package/dist/filtering/index.js.map +0 -1
package/dist/filtering/pipeline.d.ts +0 -48
package/dist/filtering/pipeline.d.ts.map +0 -1
package/dist/filtering/pipeline.js +0 -76
package/dist/filtering/pipeline.js.map +0 -1
package/dist/formatters/ai-context.d.ts +0 -23
package/dist/formatters/ai-context.d.ts.map +0 -1
package/dist/formatters/ai-context.js +0 -238
package/dist/formatters/ai-context.js.map +0 -1
package/dist/formatters/cli-terminal.d.ts +0 -65
package/dist/formatters/cli-terminal.d.ts.map +0 -1
package/dist/formatters/cli-terminal.js +0 -735
package/dist/formatters/cli-terminal.js.map +0 -1
package/dist/formatters/github-comment.d.ts +0 -41
package/dist/formatters/github-comment.d.ts.map +0 -1
package/dist/formatters/github-comment.js +0 -370
package/dist/formatters/github-comment.js.map +0 -1
package/dist/formatters/grouping.d.ts +0 -52
package/dist/formatters/grouping.d.ts.map +0 -1
package/dist/formatters/grouping.js +0 -152
package/dist/formatters/grouping.js.map +0 -1
package/dist/formatters/ide/claude-code.d.ts +0 -17
package/dist/formatters/ide/claude-code.d.ts.map +0 -1
package/dist/formatters/ide/claude-code.js +0 -94
package/dist/formatters/ide/claude-code.js.map +0 -1
package/dist/formatters/ide/cursor.d.ts +0 -13
package/dist/formatters/ide/cursor.d.ts.map +0 -1
package/dist/formatters/ide/cursor.js +0 -125
package/dist/formatters/ide/cursor.js.map +0 -1
package/dist/formatters/ide/index.d.ts +0 -62
package/dist/formatters/ide/index.d.ts.map +0 -1
package/dist/formatters/ide/index.js +0 -184
package/dist/formatters/ide/index.js.map +0 -1
package/dist/formatters/ide/windsurf.d.ts +0 -13
package/dist/formatters/ide/windsurf.d.ts.map +0 -1
package/dist/formatters/ide/windsurf.js +0 -117
package/dist/formatters/ide/windsurf.js.map +0 -1
package/dist/formatters/index.d.ts +0 -11
package/dist/formatters/index.d.ts.map +0 -1
package/dist/formatters/index.js +0 -54
package/dist/formatters/index.js.map +0 -1
package/dist/formatters/vscode-diagnostic.d.ts +0 -103
package/dist/formatters/vscode-diagnostic.d.ts.map +0 -1
package/dist/formatters/vscode-diagnostic.js +0 -151
package/dist/formatters/vscode-diagnostic.js.map +0 -1
package/dist/layer1/comments.d.ts +0 -11
package/dist/layer1/comments.d.ts.map +0 -1
package/dist/layer1/comments.js +0 -203
package/dist/layer1/comments.js.map +0 -1
package/dist/layer1/config-audit.d.ts +0 -11
package/dist/layer1/config-audit.d.ts.map +0 -1
package/dist/layer1/config-audit.js +0 -311
package/dist/layer1/config-audit.js.map +0 -1
package/dist/layer1/config-mcp-audit.d.ts +0 -23
package/dist/layer1/config-mcp-audit.d.ts.map +0 -1
package/dist/layer1/config-mcp-audit.js +0 -239
package/dist/layer1/config-mcp-audit.js.map +0 -1
package/dist/layer1/entropy.d.ts +0 -11
package/dist/layer1/entropy.d.ts.map +0 -1
package/dist/layer1/entropy.js +0 -741
package/dist/layer1/entropy.js.map +0 -1
package/dist/layer1/file-flags.d.ts +0 -10
package/dist/layer1/file-flags.d.ts.map +0 -1
package/dist/layer1/file-flags.js +0 -119
package/dist/layer1/file-flags.js.map +0 -1
package/dist/layer1/index.d.ts +0 -38
package/dist/layer1/index.d.ts.map +0 -1
package/dist/layer1/index.js +0 -170
package/dist/layer1/index.js.map +0 -1
package/dist/layer1/patterns.d.ts +0 -11
package/dist/layer1/patterns.d.ts.map +0 -1
package/dist/layer1/patterns.js +0 -512
package/dist/layer1/patterns.js.map +0 -1
package/dist/layer1/urls.d.ts +0 -11
package/dist/layer1/urls.d.ts.map +0 -1
package/dist/layer1/urls.js +0 -444
package/dist/layer1/urls.js.map +0 -1
package/dist/layer1/weak-crypto.d.ts +0 -10
package/dist/layer1/weak-crypto.d.ts.map +0 -1
package/dist/layer1/weak-crypto.js +0 -428
package/dist/layer1/weak-crypto.js.map +0 -1
package/dist/layer2/ai-agent-tools.d.ts +0 -22
package/dist/layer2/ai-agent-tools.d.ts.map +0 -1
package/dist/layer2/ai-agent-tools.js +0 -1490
package/dist/layer2/ai-agent-tools.js.map +0 -1
package/dist/layer2/ai-endpoint-protection.d.ts +0 -38
package/dist/layer2/ai-endpoint-protection.d.ts.map +0 -1
package/dist/layer2/ai-endpoint-protection.js +0 -346
package/dist/layer2/ai-endpoint-protection.js.map +0 -1
package/dist/layer2/ai-execution-sinks.d.ts +0 -21
package/dist/layer2/ai-execution-sinks.d.ts.map +0 -1
package/dist/layer2/ai-execution-sinks.js +0 -1155
package/dist/layer2/ai-execution-sinks.js.map +0 -1
package/dist/layer2/ai-fingerprinting.d.ts +0 -10
package/dist/layer2/ai-fingerprinting.d.ts.map +0 -1
package/dist/layer2/ai-fingerprinting.js +0 -650
package/dist/layer2/ai-fingerprinting.js.map +0 -1
package/dist/layer2/ai-mcp-security.d.ts +0 -20
package/dist/layer2/ai-mcp-security.d.ts.map +0 -1
package/dist/layer2/ai-mcp-security.js +0 -877
package/dist/layer2/ai-mcp-security.js.map +0 -1
package/dist/layer2/ai-package-hallucination.d.ts +0 -22
package/dist/layer2/ai-package-hallucination.d.ts.map +0 -1
package/dist/layer2/ai-package-hallucination.js +0 -828
package/dist/layer2/ai-package-hallucination.js.map +0 -1
package/dist/layer2/ai-prompt-hygiene.d.ts +0 -22
package/dist/layer2/ai-prompt-hygiene.d.ts.map +0 -1
package/dist/layer2/ai-prompt-hygiene.js +0 -1156
package/dist/layer2/ai-prompt-hygiene.js.map +0 -1
package/dist/layer2/ai-rag-safety.d.ts +0 -24
package/dist/layer2/ai-rag-safety.d.ts.map +0 -1
package/dist/layer2/ai-rag-safety.js +0 -910
package/dist/layer2/ai-rag-safety.js.map +0 -1
package/dist/layer2/ai-schema-validation.d.ts +0 -28
package/dist/layer2/ai-schema-validation.d.ts.map +0 -1
package/dist/layer2/ai-schema-validation.js +0 -375
package/dist/layer2/ai-schema-validation.js.map +0 -1
package/dist/layer2/auth-antipatterns.d.ts +0 -22
package/dist/layer2/auth-antipatterns.d.ts.map +0 -1
package/dist/layer2/auth-antipatterns.js +0 -522
package/dist/layer2/auth-antipatterns.js.map +0 -1
package/dist/layer2/byok-patterns.d.ts +0 -15
package/dist/layer2/byok-patterns.d.ts.map +0 -1
package/dist/layer2/byok-patterns.js +0 -302
package/dist/layer2/byok-patterns.js.map +0 -1
package/dist/layer2/dangerous-functions/child-process.d.ts +0 -16
package/dist/layer2/dangerous-functions/child-process.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/child-process.js +0 -74
package/dist/layer2/dangerous-functions/child-process.js.map +0 -1
package/dist/layer2/dangerous-functions/dom-xss.d.ts +0 -34
package/dist/layer2/dangerous-functions/dom-xss.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/dom-xss.js +0 -230
package/dist/layer2/dangerous-functions/dom-xss.js.map +0 -1
package/dist/layer2/dangerous-functions/index.d.ts +0 -16
package/dist/layer2/dangerous-functions/index.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/index.js +0 -1152
package/dist/layer2/dangerous-functions/index.js.map +0 -1
package/dist/layer2/dangerous-functions/json-parse.d.ts +0 -31
package/dist/layer2/dangerous-functions/json-parse.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/json-parse.js +0 -319
package/dist/layer2/dangerous-functions/json-parse.js.map +0 -1
package/dist/layer2/dangerous-functions/math-random.d.ts +0 -111
package/dist/layer2/dangerous-functions/math-random.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/math-random.js +0 -684
package/dist/layer2/dangerous-functions/math-random.js.map +0 -1
package/dist/layer2/dangerous-functions/patterns.d.ts +0 -21
package/dist/layer2/dangerous-functions/patterns.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/patterns.js +0 -163
package/dist/layer2/dangerous-functions/patterns.js.map +0 -1
package/dist/layer2/dangerous-functions/request-validation.d.ts +0 -13
package/dist/layer2/dangerous-functions/request-validation.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/request-validation.js +0 -119
package/dist/layer2/dangerous-functions/request-validation.js.map +0 -1
package/dist/layer2/dangerous-functions/utils/control-flow.d.ts +0 -24
package/dist/layer2/dangerous-functions/utils/control-flow.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/utils/control-flow.js +0 -70
package/dist/layer2/dangerous-functions/utils/control-flow.js.map +0 -1
package/dist/layer2/dangerous-functions/utils/helpers.d.ts +0 -31
package/dist/layer2/dangerous-functions/utils/helpers.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/utils/helpers.js +0 -147
package/dist/layer2/dangerous-functions/utils/helpers.js.map +0 -1
package/dist/layer2/dangerous-functions/utils/index.d.ts +0 -9
package/dist/layer2/dangerous-functions/utils/index.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/utils/index.js +0 -23
package/dist/layer2/dangerous-functions/utils/index.js.map +0 -1
package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts +0 -22
package/dist/layer2/dangerous-functions/utils/schema-validation.d.ts.map +0 -1
package/dist/layer2/dangerous-functions/utils/schema-validation.js +0 -102
package/dist/layer2/dangerous-functions/utils/schema-validation.js.map +0 -1
package/dist/layer2/data-exposure.d.ts +0 -19
package/dist/layer2/data-exposure.d.ts.map +0 -1
package/dist/layer2/data-exposure.js +0 -255
package/dist/layer2/data-exposure.js.map +0 -1
package/dist/layer2/framework-checks.d.ts +0 -10
package/dist/layer2/framework-checks.d.ts.map +0 -1
package/dist/layer2/framework-checks.js +0 -384
package/dist/layer2/framework-checks.js.map +0 -1
package/dist/layer2/index.d.ts +0 -74
package/dist/layer2/index.d.ts.map +0 -1
package/dist/layer2/index.js +0 -544
package/dist/layer2/index.js.map +0 -1
package/dist/layer2/log-injection.d.ts +0 -18
package/dist/layer2/log-injection.d.ts.map +0 -1
package/dist/layer2/log-injection.js +0 -214
package/dist/layer2/log-injection.js.map +0 -1
package/dist/layer2/logic-gates.d.ts +0 -10
package/dist/layer2/logic-gates.d.ts.map +0 -1
package/dist/layer2/logic-gates.js +0 -220
package/dist/layer2/logic-gates.js.map +0 -1
package/dist/layer2/model-supply-chain.d.ts +0 -23
package/dist/layer2/model-supply-chain.d.ts.map +0 -1
package/dist/layer2/model-supply-chain.js +0 -444
package/dist/layer2/model-supply-chain.js.map +0 -1
package/dist/layer2/risky-imports.d.ts +0 -10
package/dist/layer2/risky-imports.d.ts.map +0 -1
package/dist/layer2/risky-imports.js +0 -165
package/dist/layer2/risky-imports.js.map +0 -1
package/dist/layer2/security-headers.d.ts +0 -18
package/dist/layer2/security-headers.d.ts.map +0 -1
package/dist/layer2/security-headers.js +0 -187
package/dist/layer2/security-headers.js.map +0 -1
package/dist/layer2/ssrf-detection.d.ts +0 -18
package/dist/layer2/ssrf-detection.d.ts.map +0 -1
package/dist/layer2/ssrf-detection.js +0 -252
package/dist/layer2/ssrf-detection.js.map +0 -1
package/dist/layer2/variables.d.ts +0 -11
package/dist/layer2/variables.d.ts.map +0 -1
package/dist/layer2/variables.js +0 -156
package/dist/layer2/variables.js.map +0 -1
package/dist/layer2/xxe-detection.d.ts +0 -18
package/dist/layer2/xxe-detection.d.ts.map +0 -1
package/dist/layer2/xxe-detection.js +0 -242
package/dist/layer2/xxe-detection.js.map +0 -1
package/dist/layer3/anthropic/auto-dismiss.d.ts +0 -24
package/dist/layer3/anthropic/auto-dismiss.d.ts.map +0 -1
package/dist/layer3/anthropic/auto-dismiss.js +0 -199
package/dist/layer3/anthropic/auto-dismiss.js.map +0 -1
package/dist/layer3/anthropic/clients.d.ts +0 -44
package/dist/layer3/anthropic/clients.d.ts.map +0 -1
package/dist/layer3/anthropic/clients.js +0 -81
package/dist/layer3/anthropic/clients.js.map +0 -1
package/dist/layer3/anthropic/index.d.ts +0 -41
package/dist/layer3/anthropic/index.d.ts.map +0 -1
package/dist/layer3/anthropic/index.js +0 -141
package/dist/layer3/anthropic/index.js.map +0 -1
package/dist/layer3/anthropic/prompts/index.d.ts +0 -8
package/dist/layer3/anthropic/prompts/index.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/index.js +0 -16
package/dist/layer3/anthropic/prompts/index.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts +0 -19
package/dist/layer3/anthropic/prompts/modules/ai-patterns.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/ai-patterns.js +0 -156
package/dist/layer3/anthropic/prompts/modules/ai-patterns.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts +0 -9
package/dist/layer3/anthropic/prompts/modules/auth-access.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/auth-access.js +0 -25
package/dist/layer3/anthropic/prompts/modules/auth-access.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/common.d.ts +0 -11
package/dist/layer3/anthropic/prompts/modules/common.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/common.js +0 -152
package/dist/layer3/anthropic/prompts/modules/common.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/index.d.ts +0 -54
package/dist/layer3/anthropic/prompts/modules/index.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/index.js +0 -185
package/dist/layer3/anthropic/prompts/modules/index.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts +0 -8
package/dist/layer3/anthropic/prompts/modules/owasp-classic.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/owasp-classic.js +0 -84
package/dist/layer3/anthropic/prompts/modules/owasp-classic.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts +0 -8
package/dist/layer3/anthropic/prompts/modules/secrets-crypto.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js +0 -68
package/dist/layer3/anthropic/prompts/modules/secrets-crypto.js.map +0 -1
package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts +0 -8
package/dist/layer3/anthropic/prompts/modules/xss-prompt.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/modules/xss-prompt.js +0 -22
package/dist/layer3/anthropic/prompts/modules/xss-prompt.js.map +0 -1
package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts +0 -15
package/dist/layer3/anthropic/prompts/semantic-analysis.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/semantic-analysis.js +0 -169
package/dist/layer3/anthropic/prompts/semantic-analysis.js.map +0 -1
package/dist/layer3/anthropic/prompts/validation.d.ts +0 -18
package/dist/layer3/anthropic/prompts/validation.d.ts.map +0 -1
package/dist/layer3/anthropic/prompts/validation.js +0 -25
package/dist/layer3/anthropic/prompts/validation.js.map +0 -1
package/dist/layer3/anthropic/providers/anthropic.d.ts +0 -21
package/dist/layer3/anthropic/providers/anthropic.d.ts.map +0 -1
package/dist/layer3/anthropic/providers/anthropic.js +0 -269
package/dist/layer3/anthropic/providers/anthropic.js.map +0 -1
package/dist/layer3/anthropic/providers/index.d.ts +0 -8
package/dist/layer3/anthropic/providers/index.d.ts.map +0 -1
package/dist/layer3/anthropic/providers/index.js +0 -15
package/dist/layer3/anthropic/providers/index.js.map +0 -1
package/dist/layer3/anthropic/providers/openai.d.ts +0 -18
package/dist/layer3/anthropic/providers/openai.d.ts.map +0 -1
package/dist/layer3/anthropic/providers/openai.js +0 -343
package/dist/layer3/anthropic/providers/openai.js.map +0 -1
package/dist/layer3/anthropic/request-builder.d.ts +0 -27
package/dist/layer3/anthropic/request-builder.d.ts.map +0 -1
package/dist/layer3/anthropic/request-builder.js +0 -150
package/dist/layer3/anthropic/request-builder.js.map +0 -1
package/dist/layer3/anthropic/types.d.ts +0 -88
package/dist/layer3/anthropic/types.d.ts.map +0 -1
package/dist/layer3/anthropic/types.js +0 -38
package/dist/layer3/anthropic/types.js.map +0 -1
package/dist/layer3/anthropic/utils/context-extractor.d.ts +0 -55
package/dist/layer3/anthropic/utils/context-extractor.d.ts.map +0 -1
package/dist/layer3/anthropic/utils/context-extractor.js +0 -161
package/dist/layer3/anthropic/utils/context-extractor.js.map +0 -1
package/dist/layer3/anthropic/utils/index.d.ts +0 -11
package/dist/layer3/anthropic/utils/index.d.ts.map +0 -1
package/dist/layer3/anthropic/utils/index.js +0 -27
package/dist/layer3/anthropic/utils/index.js.map +0 -1
package/dist/layer3/anthropic/utils/path-helpers.d.ts +0 -21
package/dist/layer3/anthropic/utils/path-helpers.d.ts.map +0 -1
package/dist/layer3/anthropic/utils/path-helpers.js +0 -69
package/dist/layer3/anthropic/utils/path-helpers.js.map +0 -1
package/dist/layer3/anthropic/utils/response-parser.d.ts +0 -40
package/dist/layer3/anthropic/utils/response-parser.d.ts.map +0 -1
package/dist/layer3/anthropic/utils/response-parser.js +0 -285
package/dist/layer3/anthropic/utils/response-parser.js.map +0 -1
package/dist/layer3/anthropic/utils/retry.d.ts +0 -15
package/dist/layer3/anthropic/utils/retry.d.ts.map +0 -1
package/dist/layer3/anthropic/utils/retry.js +0 -62
package/dist/layer3/anthropic/utils/retry.js.map +0 -1
package/dist/layer3/index.d.ts +0 -27
package/dist/layer3/index.d.ts.map +0 -1
package/dist/layer3/index.js +0 -150
package/dist/layer3/index.js.map +0 -1
package/dist/layer3/osv-check.d.ts +0 -75
package/dist/layer3/osv-check.d.ts.map +0 -1
package/dist/layer3/osv-check.js +0 -308
package/dist/layer3/osv-check.js.map +0 -1
package/dist/layer3/package-check.d.ts +0 -63
package/dist/layer3/package-check.d.ts.map +0 -1
package/dist/layer3/package-check.js +0 -508
package/dist/layer3/package-check.js.map +0 -1
package/dist/model/cross-file-taint.d.ts +0 -40
package/dist/model/cross-file-taint.d.ts.map +0 -1
package/dist/model/cross-file-taint.js +0 -290
package/dist/model/cross-file-taint.js.map +0 -1
package/dist/model/function-classifier.d.ts +0 -32
package/dist/model/function-classifier.d.ts.map +0 -1
package/dist/model/function-classifier.js +0 -143
package/dist/model/function-classifier.js.map +0 -1
package/dist/model/sanitiser-detection.d.ts +0 -27
package/dist/model/sanitiser-detection.d.ts.map +0 -1
package/dist/model/sanitiser-detection.js +0 -224
package/dist/model/sanitiser-detection.js.map +0 -1
package/dist/model/sink-matcher.d.ts +0 -17
package/dist/model/sink-matcher.d.ts.map +0 -1
package/dist/model/sink-matcher.js +0 -141
package/dist/model/sink-matcher.js.map +0 -1
package/dist/model/sink-patterns.d.ts +0 -19
package/dist/model/sink-patterns.d.ts.map +0 -1
package/dist/model/sink-patterns.js +0 -88
package/dist/model/sink-patterns.js.map +0 -1
package/dist/model/source-discovery.d.ts +0 -15
package/dist/model/source-discovery.d.ts.map +0 -1
package/dist/model/source-discovery.js +0 -170
package/dist/model/source-discovery.js.map +0 -1
package/dist/model/taint-tracker.d.ts +0 -21
package/dist/model/taint-tracker.d.ts.map +0 -1
package/dist/model/taint-tracker.js +0 -281
package/dist/model/taint-tracker.js.map +0 -1
package/dist/modes/incremental.d.ts +0 -66
package/dist/modes/incremental.d.ts.map +0 -1
package/dist/modes/incremental.js +0 -200
package/dist/modes/incremental.js.map +0 -1
package/dist/rules/framework-fixes.d.ts +0 -48
package/dist/rules/framework-fixes.d.ts.map +0 -1
package/dist/rules/framework-fixes.js +0 -439
package/dist/rules/framework-fixes.js.map +0 -1
package/dist/rules/index.d.ts +0 -8
package/dist/rules/index.d.ts.map +0 -1
package/dist/rules/index.js +0 -18
package/dist/rules/index.js.map +0 -1
package/dist/rules/metadata.d.ts +0 -43
package/dist/rules/metadata.d.ts.map +0 -1
package/dist/rules/metadata.js +0 -800
package/dist/rules/metadata.js.map +0 -1
package/dist/score/auto-dismiss.d.ts +0 -28
package/dist/score/auto-dismiss.d.ts.map +0 -1
package/dist/score/auto-dismiss.js +0 -200
package/dist/score/auto-dismiss.js.map +0 -1
package/dist/suppression/config-loader.d.ts +0 -74
package/dist/suppression/config-loader.d.ts.map +0 -1
package/dist/suppression/config-loader.js +0 -424
package/dist/suppression/config-loader.js.map +0 -1
package/dist/suppression/hash.d.ts +0 -48
package/dist/suppression/hash.d.ts.map +0 -1
package/dist/suppression/hash.js +0 -88
package/dist/suppression/hash.js.map +0 -1
package/dist/suppression/index.d.ts +0 -11
package/dist/suppression/index.d.ts.map +0 -1
package/dist/suppression/index.js +0 -39
package/dist/suppression/index.js.map +0 -1
package/dist/suppression/inline-parser.d.ts +0 -39
package/dist/suppression/inline-parser.d.ts.map +0 -1
package/dist/suppression/inline-parser.js +0 -218
package/dist/suppression/inline-parser.js.map +0 -1
package/dist/suppression/manager.d.ts +0 -94
package/dist/suppression/manager.d.ts.map +0 -1
package/dist/suppression/manager.js +0 -292
package/dist/suppression/manager.js.map +0 -1
package/dist/suppression/types.d.ts +0 -151
package/dist/suppression/types.d.ts.map +0 -1
package/dist/suppression/types.js +0 -28
package/dist/suppression/types.js.map +0 -1
package/dist/types.d.ts +0 -331
package/dist/types.d.ts.map +0 -1
package/dist/types.js +0 -124
package/dist/types.js.map +0 -1
package/dist/utils/auth-helper-detector.d.ts +0 -56
package/dist/utils/auth-helper-detector.d.ts.map +0 -1
package/dist/utils/auth-helper-detector.js +0 -360
package/dist/utils/auth-helper-detector.js.map +0 -1
package/dist/utils/code-analysis.d.ts +0 -39
package/dist/utils/code-analysis.d.ts.map +0 -1
package/dist/utils/code-analysis.js +0 -159
package/dist/utils/code-analysis.js.map +0 -1
package/dist/utils/comment-analyzer.d.ts +0 -38
package/dist/utils/comment-analyzer.d.ts.map +0 -1
package/dist/utils/comment-analyzer.js +0 -218
package/dist/utils/comment-analyzer.js.map +0 -1
package/dist/utils/context-helpers.d.ts +0 -219
package/dist/utils/context-helpers.d.ts.map +0 -1
package/dist/utils/context-helpers.js +0 -886
package/dist/utils/context-helpers.js.map +0 -1
package/dist/utils/diff-detector.d.ts +0 -53
package/dist/utils/diff-detector.d.ts.map +0 -1
package/dist/utils/diff-detector.js +0 -104
package/dist/utils/diff-detector.js.map +0 -1
package/dist/utils/diff-parser.d.ts +0 -80
package/dist/utils/diff-parser.d.ts.map +0 -1
package/dist/utils/diff-parser.js +0 -202
package/dist/utils/diff-parser.js.map +0 -1
package/dist/utils/environment-context.d.ts +0 -76
package/dist/utils/environment-context.d.ts.map +0 -1
package/dist/utils/environment-context.js +0 -271
package/dist/utils/environment-context.js.map +0 -1
package/dist/utils/imported-auth-detector.d.ts +0 -37
package/dist/utils/imported-auth-detector.d.ts.map +0 -1
package/dist/utils/imported-auth-detector.js +0 -251
package/dist/utils/imported-auth-detector.js.map +0 -1
package/dist/utils/intent-detector.d.ts +0 -66
package/dist/utils/intent-detector.d.ts.map +0 -1
package/dist/utils/intent-detector.js +0 -282
package/dist/utils/intent-detector.js.map +0 -1
package/dist/utils/middleware-detector.d.ts +0 -55
package/dist/utils/middleware-detector.d.ts.map +0 -1
package/dist/utils/middleware-detector.js +0 -260
package/dist/utils/middleware-detector.js.map +0 -1
package/dist/utils/oauth-flow-detector.d.ts +0 -41
package/dist/utils/oauth-flow-detector.d.ts.map +0 -1
package/dist/utils/oauth-flow-detector.js +0 -202
package/dist/utils/oauth-flow-detector.js.map +0 -1
package/dist/utils/parsed-file.d.ts +0 -51
package/dist/utils/parsed-file.d.ts.map +0 -1
package/dist/utils/parsed-file.js +0 -95
package/dist/utils/parsed-file.js.map +0 -1
package/dist/utils/path-exclusions.d.ts +0 -55
package/dist/utils/path-exclusions.d.ts.map +0 -1
package/dist/utils/path-exclusions.js +0 -224
package/dist/utils/path-exclusions.js.map +0 -1
package/dist/utils/project-context-builder.d.ts +0 -119
package/dist/utils/project-context-builder.d.ts.map +0 -1
package/dist/utils/project-context-builder.js +0 -534
package/dist/utils/project-context-builder.js.map +0 -1
package/dist/utils/registry-clients.d.ts +0 -93
package/dist/utils/registry-clients.d.ts.map +0 -1
package/dist/utils/registry-clients.js +0 -273
package/dist/utils/registry-clients.js.map +0 -1
package/dist/utils/route-hierarchy.d.ts +0 -50
package/dist/utils/route-hierarchy.d.ts.map +0 -1
package/dist/utils/route-hierarchy.js +0 -226
package/dist/utils/route-hierarchy.js.map +0 -1
package/dist/utils/schema-semantics.d.ts +0 -45
package/dist/utils/schema-semantics.d.ts.map +0 -1
package/dist/utils/schema-semantics.js +0 -193
package/dist/utils/schema-semantics.js.map +0 -1
package/dist/utils/trpc-analyzer.d.ts +0 -78
package/dist/utils/trpc-analyzer.d.ts.map +0 -1
package/dist/utils/trpc-analyzer.js +0 -297
package/dist/utils/trpc-analyzer.js.map +0 -1
package/src/__tests__/context-engine/cross-file-taint.test.ts +0 -284
package/src/__tests__/context-engine/function-classifier.test.ts +0 -146
package/src/__tests__/context-engine/integration.test.ts +0 -320
package/src/__tests__/context-engine/sanitiser-detection.test.ts +0 -187
package/src/__tests__/context-engine/sink-matcher.test.ts +0 -251
package/src/__tests__/context-engine/source-discovery.test.ts +0 -186
package/src/__tests__/context-engine/taint-tracker.test.ts +0 -182
package/src/__tests__/snapshots/__snapshots__/anthropic-validation-refactor.test.ts.snap +0 -750
package/src/__tests__/snapshots/__snapshots__/dangerous-functions-refactor.test.ts.snap +0 -555
package/src/__tests__/snapshots/anthropic-validation-refactor.test.ts +0 -321
package/src/__tests__/snapshots/dangerous-functions-refactor.test.ts +0 -439
package/src/detect/ai-code/agent-tools.ts +0 -1662
package/src/detect/ai-code/byok-patterns.ts +0 -354
package/src/detect/ai-code/endpoint-protection.ts +0 -406
package/src/detect/ai-code/execution-sinks.ts +0 -1310
package/src/detect/ai-code/fingerprinting.ts +0 -774
package/src/detect/ai-code/mcp-security.ts +0 -937
package/src/detect/ai-code/model-supply-chain.ts +0 -535
package/src/detect/ai-code/package-hallucination.ts +0 -955
package/src/detect/ai-code/prompt-hygiene.ts +0 -1314
package/src/detect/ai-code/rag-safety.ts +0 -977
package/src/detect/ai-code/schema-validation.ts +0 -427
package/src/detect/secrets/patterns.ts +0 -561
package/src/detect/secrets/weak-crypto.ts +0 -485
package/src/detect/structural/__tests__/math-random-enhanced.test.ts +0 -405
package/src/detect/structural/auth-patterns.ts +0 -621
package/src/detect/structural/dangerous-functions/child-process.ts +0 -98
package/src/detect/structural/dangerous-functions/dom-xss.ts +0 -292
package/src/detect/structural/dangerous-functions/index.ts +0 -1556
package/src/detect/structural/dangerous-functions/json-parse.ts +0 -393
package/src/detect/structural/dangerous-functions/math-random.ts +0 -789
package/src/detect/structural/dangerous-functions/patterns.ts +0 -176
package/src/detect/structural/dangerous-functions/request-validation.ts +0 -153
package/src/detect/structural/dangerous-functions/utils/control-flow.ts +0 -35
package/src/detect/structural/dangerous-functions/utils/helpers.ts +0 -170
package/src/detect/structural/dangerous-functions/utils/index.ts +0 -25
package/src/detect/structural/dangerous-functions/utils/schema-validation.ts +0 -106
package/src/detect/structural/data-exposure.ts +0 -302
package/src/detect/structural/framework-checks.ts +0 -439
package/src/detect/structural/log-injection.ts +0 -254
package/src/detect/structural/logic-gates.ts +0 -256
package/src/detect/structural/risky-imports.ts +0 -197
package/src/detect/structural/security-headers.ts +0 -231
package/src/detect/structural/ssrf-detection.ts +0 -300
package/src/detect/structural/variables.ts +0 -177
package/src/detect/structural/xxe-detection.ts +0 -295
package/src/model/cross-file-taint.ts +0 -374
package/src/model/function-classifier.ts +0 -184
package/src/model/sanitiser-detection.ts +0 -268
package/src/model/sink-matcher.ts +0 -178
package/src/model/sink-patterns.ts +0 -109
package/src/model/source-discovery.ts +0 -209
package/src/model/taint-tracker.ts +0 -333
package/src/score/auto-dismiss.ts +0 -224

package/src/detect/ai-code/execution-sinks.ts DELETED Viewed

@@ -1,1310 +0,0 @@
-/**
- * Layer 2: AI Execution Sink Detection
- * Detects patterns where LLM output is fed into dangerous execution sinks
- *
- * Covers B2: Unsafe execution of model output (LLM02)
- *
- * Sinks include:
- * - Code execution: eval(), Function(), vm.runInContext()
- * - Shell execution: exec(), spawn(), child_process
- * - SQL builders: .query(), .execute(), .raw()
- * - Template rendering: innerHTML, dangerouslySetInnerHTML
- */
-import type { Vulnerability, VulnerabilitySeverity } from '../../shared/types'
-import type { ParsedFile } from '../../shared/parsed-file'
-import {
-  isComment,
-  isTestOrMockFile,
-  isScannerOrFixtureFile,
-  isExampleDirectory,
-  isLibraryCode,
-} from '../../parse/file-classifier'
-import { isLLMContextFile } from './prompt-hygiene'
-const BASE_CONFIDENCE = 0.55
-// ============================================================================
-// LLM Output Variable Detection
-// ============================================================================
-/**
- * Check if line contains LLM API response context
- */
-function hasLLMResponseContext(lineContent: string, surroundingContext: string): boolean {
-  const llmResponsePatterns = [
-    /\.choices\[0\]\.message\.content/i,     // OpenAI response
-    /\.content\[0\]\.text/i,                  // Anthropic response
-    /completion\.text/i,                       // Generic completion
-    /\.data\.choices/i,                        // API response
-    /await\s+\w+\.(?:chat|messages|completions)\.create/i, // API call
-    /response\.text\s*\(/i,                    // Response text method
-  ]
-  const fullContext = lineContent + '\n' + surroundingContext
-  return llmResponsePatterns.some(p => p.test(fullContext))
-}
-// ============================================================================
-// UI Suggestion / Template Pattern Detection (False Positive Filters)
-// ============================================================================
-/**
- * Check if this is a UI suggestion/template pattern rather than execution sink
- * These patterns create display strings for command palettes, autocomplete, etc.
- */
-function isUITemplateSuggestion(lineContent: string, surroundingContext: string): boolean {
-  const fullContext = lineContent + '\n' + surroundingContext
-  // UI suggestion object patterns (command palette, autocomplete suggestions)
-  // Note: Be careful not to match variable declarations like `const completion =`
-  const uiSuggestionPatterns = [
-    // Object property patterns for suggestion items (key: value in objects)
-    /(?:id|key|label|title|name|description|display|text|value|placeholder):\s*`[^`]*\$\{/i,
-    // Common suggestion UI patterns (arrays or objects, not variable declarations)
-    /(?:set)?suggestions\s*[=:]\s*\[/i,  // suggestions: [...] or setSuggestions([])
-    /autocomplete/i,
-    /command\s*palette/i,
-    /fuzzy\s*search/i,
-    /search\s*result/i,
-    // React/UI state patterns
-    /useState.*suggestions|setSuggestions/i,
-    /setItems|setResults/i,
-    // Template ID generation for UI
-    /id:\s*`[a-z]+-\$\{/i,  // id: `delete-${...}`, id: `edit-${...}`
-  ]
-  // These patterns should NOT be considered UI suggestions
-  const notUISuggestionPatterns = [
-    /\.query\s*\(/i,
-    /\.execute\s*\(/i,
-    /\.raw\s*\(/i,
-    /await\s+db\./i,
-    /prisma\./i,
-    /supabase\./i,
-    /knex\./i,
-    /sequelize\./i,
-    /child_process/i,
-    /exec\s*\(/i,
-    /spawn\s*\(/i,
-    /eval\s*\(/i,
-    /fetch\s*\(/i,
-    /axios\./i,
-    /\.redirect\s*\(/i,
-    /\.setHeader\s*\(/i,
-    /\.cookie\s*\(/i,
-    /location\./i,
-  ]
-  // Check if context matches UI pattern but NOT execution pattern
-  const matchesUIPattern = uiSuggestionPatterns.some(p => p.test(fullContext))
-  const matchesExecutionPattern = notUISuggestionPatterns.some(p => p.test(lineContent))
-  return matchesUIPattern && !matchesExecutionPattern
-}
-/**
- * Check if this is a static template string (no actual LLM output interpolation)
- * e.g., `delete ${node.title}` where node is app data, not LLM output
- */
-function isAppDataInterpolation(lineContent: string, surroundingContext: string): boolean {
-  const fullContext = lineContent + '\n' + surroundingContext
-  // Patterns indicating the interpolated variable is app data, not LLM output
-  const appDataPatterns = [
-    // Database result/record properties
-    /\$\{(?:result|item|record|row|entry|node)\.(?:id|title|name|slug|key|label)\}/i,
-    // UI state properties
-    /\$\{(?:selected|current|active|item|node)\.(?:id|title|name|value)\}/i,
-    // Form/input data
-    /\$\{(?:data|values|form|input)\.(?:id|name|value)\}/i,
-    // Array iteration context
-    /\.map\s*\(\s*\(?(?:item|node|row|entry|result)/i,
-    /\.forEach\s*\(\s*\(?(?:item|node|row|entry|result)/i,
-  ]
-  // Patterns that suggest LLM output (should not skip)
-  const llmOutputPatterns = [
-    /\$\{(?:response|completion|generated|output|answer|reply|message)\.?/i,
-    /\$\{(?:ai|llm|gpt|claude|chat)(?:Response|Output|Result)/i,
-    /\.choices\[0\]/i,
-    /\.content\[0\]\.text/i,
-  ]
-  const isAppData = appDataPatterns.some(p => p.test(fullContext))
-  const isLLMOutput = llmOutputPatterns.some(p => p.test(fullContext))
-  return isAppData && !isLLMOutput
-}
-// ============================================================================
-// Sandbox and Validation Detection
-// ============================================================================
-/**
- * Check if execution is sandboxed
- */
-function isSandboxedExecution(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 25)
-  const contextEnd = Math.min(_lines.length, lineNumber + 10)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const sandboxPatterns = [
-    /vm2/i,
-    /isolated-vm/i,
-    /safeeval/i,
-    /safe-eval/i,
-    /sandbox/i,
-    /runInNewContext.*\{.*timeout/i,
-    /runInContext.*\{.*timeout/i,
-    /allowedGlobals/i,
-    /allowedModules/i,
-    /quickjs/i,
-    /webworker/i,
-    /iframe.*sandbox/i,
-  ]
-  return sandboxPatterns.some(p => p.test(context))
-}
-/**
- * Check if output has validation before execution
- */
-function hasOutputValidation(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const validationPatterns = [
-    /validate/i,
-    /sanitize/i,
-    /escape/i,
-    /\.filter\s*\([^)]*(?:allowed|safe|valid)/i,  // .filter(x => allowed.includes(x))
-    /parse.*catch/i,
-    /schema\./i,
-    /\.parse\s*\(/i,
-    /allowlist/i,
-    /whitelist/i,
-    /blocklist/i,
-    /blacklist/i,
-    /allowed(?:Columns|Tables|Hosts|Domains|Extensions|Types|Args|Paths)/i,  // Allowlist variable names
-    /JSON\.parse.*catch/i,
-    /DOMPurify/i,
-    /xss/i,
-    /encodeURIComponent/i,
-    /\.replace\s*\(\s*\/\[.*\]\/[gi]*/i,  // Regex sanitization like .replace(/[^a-z0-9]/gi, '')
-    /textContent\s*=/i,  // Using textContent (safe) instead of innerHTML
-    /ReactMarkdown/i,  // React Markdown sanitizes by default
-    /ast\.literal_eval/i,  // Python safe eval
-    /yaml\.(?:safe_load|SafeLoader)/i,  // Safe YAML parsing
-    /\.startsWith\s*\(\s*['"]\/['"]?\)/i,  // Relative URL check
-    /new\s+URL\s*\(.*\).*origin/i,  // URL origin check
-    /path\.resolve.*startsWith/i,  // Path validation
-  ]
-  return validationPatterns.some(p => p.test(context))
-}
-/**
- * Check if this appears to be display-only usage (not execution)
- */
-function isDisplayOnly(lineContent: string, surroundingContext: string): boolean {
-  const displayPatterns = [
-    /console\.(log|info|debug|warn)/i,
-    /textContent\s*=/i,
-    /innerText\s*=/i,
-    /\.text\s*=/i,
-    /setState.*display/i,
-    /render.*\{/i,
-    /<p>|<div>|<span>/i,
-    /\.send\s*\(/i,
-    /\.json\s*\(/i,
-    /return\s+.*response/i,
-  ]
-  const fullContext = lineContent + '\n' + surroundingContext
-  return displayPatterns.some(p => p.test(fullContext))
-}
-// ============================================================================
-// Pattern Definitions
-// ============================================================================
-type SinkType = 'code_execution' | 'shell_command' | 'sql_builder' | 'template_render'
-interface ExecutionSinkPattern {
-  name: string
-  pattern: RegExp
-  sinkType: SinkType
-  baseSeverity: VulnerabilitySeverity
-  description: string
-  suggestedFix: string
-}
-const EXECUTION_SINK_PATTERNS: ExecutionSinkPattern[] = [
-  // ========== Code Execution Sinks ==========
-  {
-    name: 'LLM output to eval()',
-    pattern: /eval\s*\(\s*(?:response|result|output|completion|message|content|answer|generated|text)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'LLM output is passed directly to eval(). This allows arbitrary code execution if the model is manipulated via prompt injection.',
-    suggestedFix: 'Never eval() LLM output. Use structured output (JSON schema) and validate before processing. Consider using a sandboxed environment like vm2 if code execution is required.',
-  },
-  {
-    name: 'LLM output to Function constructor',
-    pattern: /new\s+Function\s*\([^)]*(?:response|result|output|completion|message|content|answer|generated)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'LLM output is passed to Function constructor, which is equivalent to eval().',
-    suggestedFix: 'Use JSON schemas to define expected output structure. Validate output before any processing.',
-  },
-  {
-    name: 'LLM output to vm.runInContext',
-    pattern: /vm\.run(?:InContext|InNewContext|InThisContext)\s*\(\s*(?:response|result|output|completion|content)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'high',
-    description: 'LLM output executed in Node.js VM context. While isolated, VM can still be escaped in some versions.',
-    suggestedFix: 'Use vm2 or isolated-vm for proper sandboxing. Add timeout and memory limits. Validate output structure before execution.',
-  },
-  // Generic pattern for code from LLM
-  {
-    name: 'Dynamic code execution from AI',
-    pattern: /(?:eval|exec|execute)\s*\(\s*(?:ai|llm|gpt|claude|chat)(?:Response|Output|Result|Code)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated code is being executed dynamically.',
-    suggestedFix: 'Use a sandboxed code execution environment. Validate and restrict the allowed operations.',
-  },
-  // ========== Shell Command Sinks ==========
-  {
-    name: 'LLM output to exec()',
-    pattern: /(?:exec|execSync)\s*\(\s*(?:response|result|output|completion|command|content)(?:\.|\.data\.|\.text)?/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'LLM output is passed to shell exec(). Attackers can execute arbitrary system commands via prompt injection.',
-    suggestedFix: 'Never pass LLM output directly to shell. Use allowlists for permitted commands. Parse structured output and use execFile() with fixed command and arguments.',
-  },
-  {
-    name: 'LLM output to spawn()',
-    pattern: /spawn\s*\(\s*(?:response|result|output|completion|command|content)(?:\.|\.data\.|\.text)?/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'LLM output is passed to spawn(), allowing command execution.',
-    suggestedFix: 'Use a predefined list of allowed commands. Parse LLM output to extract only arguments, not command names.',
-  },
-  {
-    name: 'LLM output in shell template',
-    pattern: /`[^`]*\$\{(?:response|result|output|completion|command|content)[^}]*\}[^`]*`\s*(?:,|\))\s*(?:exec|spawn|child_process)/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'LLM output is interpolated into a shell command template.',
-    suggestedFix: 'Use execFile() with separate command and arguments array. Never interpolate AI output into shell strings.',
-  },
-  {
-    name: 'child_process with AI output',
-    pattern: /child_process\.\w+\s*\([^)]*(?:ai|llm|gpt|claude|chat)(?:Response|Output|Result)/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'AI-generated content passed to child_process module.',
-    suggestedFix: 'Implement strict allowlisting of commands. Parse structured output from LLM.',
-  },
-  // ========== SQL Builder Sinks ==========
-  {
-    name: 'LLM output in raw SQL',
-    pattern: /\.(?:query|execute|raw)\s*\(\s*(?:response|result|output|generated|sql|completion)(?:\.|\.data\.|\.text)?/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'critical',
-    description: 'LLM-generated SQL is executed directly. This enables SQL injection via prompt manipulation.',
-    suggestedFix: 'Use parameterized queries. Have LLM generate query parameters, not raw SQL. Validate generated SQL against an allowlist of patterns.',
-  },
-  {
-    name: 'LLM output in SQL template',
-    pattern: /`(?:SELECT|INSERT|UPDATE|DELETE)[^`]*\$\{(?:response|result|output|generated|completion)/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'critical',
-    description: 'LLM output interpolated into SQL query template.',
-    suggestedFix: 'Use parameterized queries. Have LLM output structured data (table names, conditions) that you validate against allowlists.',
-  },
-  {
-    name: 'Dynamic SQL from AI',
-    pattern: /(?:query|execute|sql)\s*\(\s*(?:ai|llm|gpt|claude)(?:Query|Sql|Response)/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'critical',
-    description: 'AI-generated SQL query being executed.',
-    suggestedFix: 'Validate SQL structure. Use read-only database connections. Implement query allowlisting.',
-  },
-  // ========== Template/DOM Sinks ==========
-  {
-    name: 'LLM output to innerHTML',
-    pattern: /\.innerHTML\s*=\s*(?:response|result|output|completion|message|content|generated)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output assigned to innerHTML. If the model outputs malicious HTML/JS, it will execute (XSS).',
-    suggestedFix: 'Use textContent for plain text. Sanitize HTML with DOMPurify before rendering. Use React/Vue which auto-escape by default.',
-  },
-  {
-    name: 'LLM output to outerHTML',
-    pattern: /\.outerHTML\s*=\s*(?:response|result|output|completion|message|content|generated)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output assigned to outerHTML. This replaces the entire element and allows XSS.',
-    suggestedFix: 'Use textContent for plain text. Sanitize HTML with DOMPurify before rendering.',
-  },
-  {
-    name: 'LLM output to insertAdjacentHTML',
-    pattern: /\.insertAdjacentHTML\s*\([^,]+,\s*(?:response|result|output|completion|message|content|generated)/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to insertAdjacentHTML. This allows XSS via injected HTML/JS.',
-    suggestedFix: 'Use insertAdjacentText for plain text. Sanitize HTML with DOMPurify: el.insertAdjacentHTML("beforeend", DOMPurify.sanitize(content))',
-  },
-  {
-    name: 'LLM output to dangerouslySetInnerHTML',
-    pattern: /dangerouslySetInnerHTML\s*=\s*\{\s*\{\s*__html:\s*(?:response|result|output|completion|message|content)/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output used in React dangerouslySetInnerHTML without sanitization.',
-    suggestedFix: 'Sanitize with DOMPurify: dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(content) }}',
-  },
-  {
-    name: 'LLM output to document.write',
-    pattern: /document\.write\s*\(\s*(?:response|result|output|completion|message|content)/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to document.write, allowing script injection.',
-    suggestedFix: 'Use DOM manipulation methods with proper escaping. Never use document.write with dynamic content.',
-  },
-  // ========== M5: File System Sinks ==========
-  {
-    name: 'LLM output in file path',
-    pattern: /(?:readFile|writeFile|readFileSync|writeFileSync|unlink|unlinkSync|mkdir|mkdirSync|rmdir|rmSync)\s*\(\s*(?:response|result|output|completion|message|content|path)(?:\.|\.data\.|\.path)?/gi,
-    sinkType: 'code_execution', // Path traversal is code-level risk
-    baseSeverity: 'critical',
-    description: 'LLM-generated value used as file path. Path traversal attack possible - model could access or modify arbitrary files.',
-    suggestedFix: 'Validate AI output against allowed paths: if (!allowedPaths.some(p => path.resolve(output).startsWith(p))) throw. Use path.resolve() and check the result is within allowed directory.',
-  },
-  {
-    name: 'LLM output in fs operation',
-    pattern: /fs\.(?:read|write|append|unlink|mkdir|rm|stat|access)\w*\s*\(\s*(?:response|result|output|completion|aiPath|generatedPath)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated path passed to filesystem operation. Model could traverse to sensitive directories.',
-    suggestedFix: 'Create allowlist of permitted paths/directories. Use path.resolve() and validate result is within allowed boundaries.',
-  },
-  {
-    name: 'LLM output in path.join',
-    pattern: /path\.(?:join|resolve)\s*\([^)]*(?:response|result|output|completion|content|aiPath)[^)]*\).*(?:fs\.|readFile|writeFile)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'high',
-    description: 'AI output used in path construction before file operation. Validate the final path.',
-    suggestedFix: 'After path.join/resolve, check result is within allowed directory: const resolved = path.resolve(base, aiPath); if (!resolved.startsWith(allowedRoot)) throw',
-  },
-  // ========== M5: Dynamic Import Sinks ==========
-  {
-    name: 'LLM output in dynamic import',
-    pattern: /import\s*\(\s*(?:response|result|output|completion|message|content|moduleName|aiModule)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated value used in dynamic import(). Arbitrary module loading enables code execution.',
-    suggestedFix: 'Use allowlist for permitted modules: const allowed = ["lodash", "moment"]; if (!allowed.includes(moduleName)) throw. Never dynamically import AI-generated module paths.',
-  },
-  {
-    name: 'LLM output in require()',
-    pattern: /require\s*\(\s*(?:response|result|output|completion|message|content|moduleName|aiModule)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated value used in require(). Can load arbitrary modules including native code.',
-    suggestedFix: 'Use allowlist for permitted modules. Consider using import maps or module aliases instead of dynamic require.',
-  },
-  {
-    name: 'LLM output in module resolution',
-    pattern: /(?:require\.resolve|import\.meta\.resolve)\s*\(\s*(?:response|result|output|completion|moduleName)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'high',
-    description: 'AI output used in module path resolution. Could leak information about file system or enable module confusion attacks.',
-    suggestedFix: 'Validate module name against allowlist before resolution.',
-  },
-  // ========== Phase 2: Network/SSRF Sinks ==========
-  {
-    name: 'LLM output in fetch URL',
-    pattern: /fetch\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl|urlFromAi)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'code_execution', // SSRF is code-level risk
-    baseSeverity: 'critical',
-    description: 'AI-generated URL passed to fetch(). Attackers can manipulate the model to make requests to internal services (SSRF), exfiltrate data, or access localhost services.',
-    suggestedFix: 'Validate URL against allowlist: const allowed = ["api.example.com"]; if (!allowed.includes(new URL(url).host)) throw. Block private IP ranges.',
-  },
-  {
-    name: 'LLM output in axios request',
-    pattern: /axios\.(?:get|post|put|delete|patch|request)\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated URL passed to axios. This enables SSRF attacks where the model is manipulated to make requests to internal services.',
-    suggestedFix: 'Validate URL host against allowlist. Use axios interceptors to block private IPs and internal hosts.',
-  },
-  {
-    name: 'LLM output in axios config',
-    pattern: /axios\s*\(\s*\{[^}]*url:\s*(?:response|result|output|completion|aiUrl|generatedUrl)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated URL passed to axios via config object. SSRF risk.',
-    suggestedFix: 'Validate URL host against allowlist before passing to axios.',
-  },
-  {
-    name: 'LLM output in HTTP client',
-    pattern: /(?:got|request|superagent|ky|undici\.fetch)\s*\(\s*(?:response|result|output|completion|aiUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated URL passed to HTTP client. Server-Side Request Forgery (SSRF) risk.',
-    suggestedFix: 'Validate URLs against allowlist of permitted hosts. Block internal IP ranges (10.x, 172.16-31.x, 192.168.x, 127.x, localhost).',
-  },
-  // ========== Phase 2: Redirect Sinks ==========
-  {
-    name: 'LLM output in server redirect',
-    pattern: /(?:res|response)\.redirect\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render', // Open redirect is similar to XSS
-    baseSeverity: 'high',
-    description: 'AI-generated URL used in HTTP redirect. Attackers can craft prompts to redirect users to phishing sites or malicious pages.',
-    suggestedFix: 'Validate redirect URL against allowlist. Only allow redirects to same-origin or known safe domains. Use relative URLs where possible.',
-  },
-  {
-    name: 'LLM output in client redirect assignment',
-    pattern: /(?:window\.)?location\.href\s*=\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated URL assigned to location.href. Enables open redirect attacks.',
-    suggestedFix: 'Validate URL before assignment. Prefer relative URLs or validate against allowlist: if (!url.startsWith("/") && !allowedHosts.includes(new URL(url).host)) throw',
-  },
-  {
-    name: 'LLM output in location.assign',
-    pattern: /location\.assign\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated URL passed to location.assign(). Enables open redirect attacks.',
-    suggestedFix: 'Validate URL before assignment. Only allow same-origin or allowlisted domains.',
-  },
-  {
-    name: 'LLM output in location.replace',
-    pattern: /location\.replace\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated URL passed to location.replace(). Enables open redirect attacks.',
-    suggestedFix: 'Validate URL before assignment. Only allow same-origin or allowlisted domains.',
-  },
-  {
-    name: 'LLM output in Next.js redirect',
-    pattern: /redirect\s*\(\s*(?:response|result|output|completion|aiUrl|generatedUrl)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated URL passed to Next.js redirect(). Enables open redirect attacks.',
-    suggestedFix: 'Validate URL before redirect. Only allow relative URLs or allowlisted domains.',
-  },
-  {
-    name: 'LLM output in meta refresh',
-    pattern: /<meta[^>]*http-equiv\s*=\s*['"`]refresh['"`][^>]*content\s*=\s*['"`][^'"]*url\s*=\s*(?:\$\{|<%=).*(?:response|output|completion)/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated URL in meta refresh tag. Open redirect vulnerability.',
-    suggestedFix: 'Avoid meta refresh with dynamic URLs. Use server-side redirects with URL validation instead.',
-  },
-  // ========== Phase 2: Header Injection Sinks ==========
-  {
-    name: 'LLM output in response header',
-    pattern: /(?:res|response)\.(?:setHeader|set|header)\s*\(\s*['"][^'"]+['"]\s*,\s*(?:response|result|output|completion|aiValue)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated value used in HTTP response header. Enables header injection attacks (CRLF injection, cache poisoning).',
-    suggestedFix: 'Sanitize header values: remove CR/LF characters. Validate against expected format. Never use AI output directly in security-sensitive headers (Set-Cookie, Authorization).',
-  },
-  {
-    name: 'LLM output in cookie',
-    pattern: /(?:res|response)\.(?:cookie|setCookie)\s*\(\s*['"][^'"]+['"]\s*,\s*(?:response|result|output|completion)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated value set as cookie. Could enable session fixation or cookie injection attacks.',
-    suggestedFix: 'Never use AI output for cookie values. Generate tokens server-side with crypto.randomBytes(). Validate any user-facing values.',
-  },
-  {
-    name: 'LLM output in res.type',
-    pattern: /(?:res|response)\.type\s*\(\s*(?:response|result|output|completion)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'AI-generated value used to set Content-Type. Could enable MIME confusion attacks.',
-    suggestedFix: 'Use allowlist for content types: const allowed = ["json", "html", "text"]; if (!allowed.includes(type)) throw',
-  },
-  // ========== Phase 3: Additional Code Execution Sinks ==========
-  {
-    name: 'LLM output to setTimeout/setInterval string',
-    pattern: /(?:setTimeout|setInterval)\s*\(\s*(?:response|result|output|completion)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'high',
-    description: 'AI-generated string passed to setTimeout/setInterval. When passed a string, these functions act like eval().',
-    suggestedFix: 'Never pass strings to setTimeout/setInterval. Use arrow functions: setTimeout(() => doSomething(), 1000)',
-  },
-  {
-    name: 'LLM output to globalThis.eval',
-    pattern: /(?:globalThis|window)\[?['"]?eval['"]?\]?\s*\(\s*(?:response|result|output|completion)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated code passed to eval via globalThis/window. This is indirect eval() that enables arbitrary code execution.',
-    suggestedFix: 'Never eval() LLM output. Use structured output and validation.',
-  },
-  {
-    name: 'LLM output to execa',
-    pattern: /execa\s*\(\s*(?:response|result|output|completion)(?:\.choices\[0\]\.message\.content|\.content|\.text)?/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'AI-generated command passed to execa. This enables command injection attacks.',
-    suggestedFix: 'Never pass LLM output directly to shell. Use allowlists for permitted commands.',
-  },
-  // ========== Phase 3: Python-Specific Sinks ==========
-  {
-    name: 'LLM output to Python eval',
-    pattern: /eval\s*\(\s*(?:response|result|output|completion|code)(?:\[['"]?choices['"]?\]\[0\]\[['"]?message['"]?\]\[['"]?content['"]?\]|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated code passed to Python eval(). Enables arbitrary code execution.',
-    suggestedFix: 'Never eval() LLM output. Use ast.literal_eval() for safe literal evaluation, or JSON parsing with schema validation.',
-  },
-  {
-    name: 'LLM output to Python exec',
-    pattern: /exec\s*\(\s*(?:response|result|output|completion)(?:\[['"]?choices['"]?\]\[0\]\[['"]?message['"]?\]\[['"]?content['"]?\]|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated code passed to Python exec(). Enables arbitrary code execution.',
-    suggestedFix: 'Never exec() LLM output. Use structured output and validation instead.',
-  },
-  {
-    name: 'LLM output to pickle.loads',
-    pattern: /pickle\.loads?\s*\(\s*(?:response|result|output|completion|serialized)(?:\.encode\(\)|\.content|\.text)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'critical',
-    description: 'AI-generated data passed to pickle.loads(). Pickle deserialization can execute arbitrary code.',
-    suggestedFix: 'Never unpickle untrusted data. Use JSON or other safe serialization formats.',
-  },
-  {
-    name: 'LLM output to subprocess with shell=True',
-    pattern: /subprocess\.(?:run|call|Popen)\s*\(\s*(?:response|result|output|completion|ai_command|generated_cmd)(?:\.content|\.text)?[^)]*shell\s*=\s*True/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'AI-generated command passed to subprocess with shell=True. Enables command injection.',
-    suggestedFix: 'Never use shell=True with user/AI input. Use subprocess.run(["cmd", "arg1", "arg2"]) without shell.',
-  },
-  {
-    name: 'LLM output to os.system',
-    pattern: /os\.system\s*\(\s*(?:response|result|output|completion|generated_cmd|ai_command)(?:\.content|\.text)?/gi,
-    sinkType: 'shell_command',
-    baseSeverity: 'critical',
-    description: 'AI-generated command passed to os.system(). Enables command injection.',
-    suggestedFix: 'Use subprocess.run() with list arguments instead of os.system(). Never pass AI output to shell.',
-  },
-  {
-    name: 'Python SQL f-string injection',
-    pattern: /cursor\.execute\s*\(\s*f["'].*\{.*(?:response|result|output|completion)/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'critical',
-    description: 'AI-generated value interpolated into SQL query via f-string. Enables SQL injection.',
-    suggestedFix: 'Use parameterized queries: cursor.execute("SELECT * FROM users WHERE id = ?", [user_id])',
-  },
-  // ========== Sprint 6: Template Engine Injection Sinks ==========
-  {
-    name: 'LLM output to EJS template',
-    pattern: /\bejs\.(?:render|renderFile|compile)\s*\([^)]*(?:response|result|output|completion|content|message|text|answer)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to EJS template engine. Server-side template injection (SSTI) can lead to remote code execution.',
-    suggestedFix: 'Sanitize LLM output before passing to templates. Use autoescaping and never pass AI output as template source.',
-  },
-  {
-    name: 'LLM output to Handlebars template',
-    pattern: /\b(?:handlebars|hbs)\.(?:compile|render)\s*\([^)]*(?:response|result|output|completion|content)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to Handlebars template. If used with SafeString, SSTI is possible.',
-    suggestedFix: 'Never pass LLM output to Handlebars SafeString. Use default escaping and sanitize AI output.',
-  },
-  {
-    name: 'LLM output to Pug/Jade template',
-    pattern: /\bpug\.(?:render|compile|renderFile)\s*\([^)]*(?:response|result|output|completion|content)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to Pug template engine. Unescaped interpolation (!{}) enables SSTI.',
-    suggestedFix: 'Use escaped interpolation (#{}) and sanitize LLM output before rendering.',
-  },
-  {
-    name: 'LLM output to Nunjucks template',
-    pattern: /\bnunjucks\.(?:render|renderString)\s*\([^)]*(?:response|result|output|completion|content)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output passed to Nunjucks template. SSTI risk if autoescape is disabled.',
-    suggestedFix: 'Enable autoescape and sanitize LLM output before rendering.',
-  },
-  {
-    name: 'LLM output to Jinja2 template (Python)',
-    pattern: /\b(?:jinja2\.)?Template\s*\([^)]*(?:response|result|output|completion|content)(?:\.|\.content|\.text)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'high',
-    description: 'LLM output used as Jinja2 template source. SSTI can lead to RCE in Python.',
-    suggestedFix: 'Never use LLM output as template source. Use it only as template variables with autoescaping enabled.',
-  },
-  {
-    name: 'LLM output in Mustache template',
-    pattern: /\bMustache\.render\s*\([^)]*(?:response|result|output|completion|content)(?:\.|\.data\.|\.text|\.content)?/gi,
-    sinkType: 'template_render',
-    baseSeverity: 'medium',
-    description: 'LLM output passed to Mustache template. While Mustache auto-escapes HTML, triple braces {{{...}}} bypass this.',
-    suggestedFix: 'Ensure LLM output is never used with triple braces. Validate template structure.',
-  },
-  // ========== Sprint 6: NoSQL Injection Sinks ==========
-  {
-    name: 'NoSQL injection via JSON.parse',
-    pattern: /\.(?:find|findOne|findOneAndUpdate|updateOne|updateMany|deleteOne|deleteMany|aggregate)\s*\(\s*JSON\.parse\s*\(\s*(?:response|result|output|completion|content)(?:\.|\.text|\.content)?/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'high',
-    description: 'LLM output parsed as MongoDB query via JSON.parse. NoSQL injection can bypass authentication or leak data.',
-    suggestedFix: 'Use parameterized queries or validate/sanitize LLM output against a schema before using in queries.',
-  },
-  {
-    name: 'MongoDB $where injection',
-    pattern: /\$where\s*:\s*[^}]*(?:response|result|output|completion|content|message)(?:\.|\.text|\.content)?/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'critical',
-    description: 'LLM output in MongoDB $where operator. $where executes JavaScript, enabling arbitrary code execution.',
-    suggestedFix: 'Avoid $where operator entirely. Use standard MongoDB query operators instead.',
-  },
-  {
-    name: 'Dynamic MongoDB query from LLM',
-    pattern: /(?:db|collection|mongoose)\.(?:find|findOne|aggregate)\s*\(\s*(?:response|result|output|completion|aiQuery)(?:\.|\.query|\.filter)?/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'high',
-    description: 'LLM output used directly as MongoDB query. Query operators could be injected.',
-    suggestedFix: 'Validate query structure. Only allow specific operators. Use schema validation before query execution.',
-  },
-  // ========== Sprint 6: GraphQL Injection Sinks ==========
-  {
-    name: 'GraphQL query injection',
-    pattern: /\b(?:gql|graphql)\s*`[^`]*\$\{[^}]*(?:response|result|output|completion|content|message)[^}]*\}/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'high',
-    description: 'LLM output interpolated into GraphQL query string. Can lead to query manipulation or unauthorized data access.',
-    suggestedFix: 'Use GraphQL variables instead of string interpolation for dynamic values.',
-  },
-  {
-    name: 'GraphQL query from LLM output',
-    pattern: /(?:apolloClient|urqlClient|client)\.query\s*\(\s*\{[^}]*query\s*:\s*(?:response|result|output|completion|aiQuery)(?:\.|\.query)?/gi,
-    sinkType: 'sql_builder',
-    baseSeverity: 'high',
-    description: 'LLM output used as GraphQL query. Malicious queries could access unauthorized data or cause DoS.',
-    suggestedFix: 'Use predefined queries with variables. Validate query structure and depth before execution.',
-  },
-  // ========== Sprint 6: ReDoS (Regular Expression DoS) Sinks ==========
-  {
-    name: 'Dynamic regex from LLM output',
-    pattern: /new\s+RegExp\s*\(\s*(?:response|result|output|completion|content|message|answer)(?:\.|\.text|\.content|\.pattern)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'medium',
-    description: 'LLM-generated regex pattern. Malicious patterns can cause catastrophic backtracking (ReDoS), hanging the server.',
-    suggestedFix: 'Validate regex complexity before compilation. Use safe-regex library or set timeout for regex execution.',
-  },
-  {
-    name: 'Python regex from LLM output',
-    pattern: /re\.compile\s*\(\s*(?:response|result|output|completion|content|pattern)(?:\.|\.text|\.content)?/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'medium',
-    description: 'LLM-generated regex compiled in Python. ReDoS attacks can cause denial of service.',
-    suggestedFix: 'Use regex_timeout or validate pattern complexity before compilation.',
-  },
-  {
-    name: 'Dynamic regex replacement',
-    pattern: /\.replace\s*\(\s*new\s+RegExp\s*\(\s*(?:response|result|output|completion|content)/gi,
-    sinkType: 'code_execution',
-    baseSeverity: 'medium',
-    description: 'LLM output used as regex pattern in replace operation. ReDoS risk.',
-    suggestedFix: 'Use string replace or validate regex pattern complexity.',
-  },
-]
-// ============================================================================
-// Phase 2: URL/Network Validation Detection
-// ============================================================================
-/**
- * Check if URL validation is present (returns 'strong', 'weak', or 'none')
- * Strong validation = skip finding entirely
- * Weak validation = downgrade severity
- */
-function getURLValidationLevel(content: string, lineNumber: number, lines?: string[]): 'strong' | 'weak' | 'none' {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  // Strong validation - skip entirely
-  const strongValidationPatterns = [
-    /allowedHosts\.includes\s*\(\s*(?:new\s+URL)?/i,  // Explicit allowlist check
-    /safeDomains\.includes\s*\(/i,  // Safe domain allowlist
-    /allowedDomains\.includes\s*\(/i,  // Allowed domain check
-    /if\s*\(\s*allowedHosts/i,  // Conditional on allowlist
-    /if\s*\(\s*safeDomains/i,  // Conditional on safe domains
-    /url\.origin\s*===\s*(?:window\.)?(?:location\.)?origin/i,  // Same-origin check
-    /\.origin\s*===\s*origin/i,  // Same-origin check
-    /\.startsWith\s*\(\s*['"]\/['"]?\s*\)\s*&&\s*!\s*\w+\.startsWith\s*\(\s*['"]\/\//i,  // Relative URL with protocol-relative check
-    /if\s*\(\s*\w+\.startsWith\s*\(\s*['"]\/['"]?\s*\)\s*&&\s*!/i,  // Relative URL validation
-    /blockedHosts\.includes\s*\(/i,  // Block list check
-    /privateIpPatterns\.some\s*\(/i,  // Private IP blocking
-  ]
-  if (strongValidationPatterns.some(p => p.test(context))) {
-    return 'strong'
-  }
-  // Weak validation - downgrade severity
-  const weakValidationPatterns = [
-    /isValidUrl|validateUrl|isAllowedUrl/i,
-    /new\s+URL\s*\(.*\).*(?:host|hostname|origin)/i,
-    /allowedUrls|allowedHosts|allowedDomains|safeDomains/i,
-    /url\.startsWith\s*\(\s*['"`](?:https?:\/\/|\/[^\/])/i,
-    /sanitizeUrl|encodeURIComponent/i,
-    /blockedHosts|blockedDomains|privateIp/i,
-    /\.includes\s*\(\s*(?:new\s+URL\s*\()?.*\.host/i,
-  ]
-  if (weakValidationPatterns.some(p => p.test(context))) {
-    return 'weak'
-  }
-  return 'none'
-}
-/**
- * Legacy function for backward compatibility
- */
-function hasURLValidation(content: string, lineNumber: number): boolean {
-  return getURLValidationLevel(content, lineNumber) !== 'none'
-}
-/**
- * Check if DOM content is sanitized (e.g., DOMPurify)
- */
-function isDOMSanitized(lineContent: string, surroundingContext: string): boolean {
-  const fullContext = lineContent + '\n' + surroundingContext
-  const sanitizationPatterns = [
-    /DOMPurify\.sanitize\s*\(/i,
-    /sanitizeHtml\s*\(/i,
-    /xss\s*\(/i,
-    /escapeHtml\s*\(/i,
-    /textContent\s*=/i,  // textContent is safe
-    /innerText\s*=/i,    // innerText is safe
-    /ReactMarkdown/i,    // ReactMarkdown sanitizes by default
-    /<ReactMarkdown>/i,  // JSX ReactMarkdown
-  ]
-  return sanitizationPatterns.some(p => p.test(fullContext))
-}
-/**
- * Check if file path is properly validated
- */
-function isPathValidated(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const pathValidationPatterns = [
-    /path\.resolve\s*\([^)]*\).*startsWith/i,  // Resolved path + startsWith check
-    /resolved\.startsWith\s*\(/i,  // Common pattern: resolved.startsWith(baseDir)
-    /!.*startsWith.*throw/i,  // Validation with throw on failure
-    /if\s*\(\s*!?\s*resolved\.startsWith/i,  // Conditional path check
-    /allowedExtensions\.includes\s*\(/i,  // Extension allowlist
-    /allowedPaths/i,  // Path allowlist
-    /SAFE_BASE_DIR/i,  // Common safe directory constant
-    /baseDir|safeDir|allowedDir/i,  // Directory restriction variables
-    /path\.basename\s*\(/i,  // Only using basename (no traversal)
-    /\.replace\s*\(/i,  // Generic replace (likely sanitization)
-  ]
-  return pathValidationPatterns.some(p => p.test(context))
-}
-/**
- * Check if header value is sanitized
- */
-function isHeaderSanitized(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const headerSanitizationPatterns = [
-    /\.replace\s*\(\s*\/\[\\r\\n\]/i,  // CRLF removal
-    /\.replace\s*\(\s*\/\[\\\\r\\\\n\]/i,  // CRLF removal (escaped)
-    /allowedTypes\.includes\s*\(/i,  // Content-type allowlist
-    /allowed(?:Headers|Types|Values)\.includes\s*\(/i,  // Generic allowlist
-    /if\s*\(\s*allowed\w*\.includes\s*\(/i,  // Conditional allowlist
-    /crypto\.random/i,  // Server-generated value (not AI)
-    /randomUUID/i,  // UUID generation
-    /safeValue|sanitized/i,  // Variable indicating sanitization
-    /\/\^?\[a-zA-Z0-9\-_\.\s\]\+\$?\/.*\.test\s*\(/i,  // Regex validation (alphanumeric chars only)
-    /if\s*\(\/\^?\[a-zA-Z0-9/i,  // Conditional with alphanumeric regex
-  ]
-  return headerSanitizationPatterns.some(p => p.test(context))
-}
-/**
- * Check for Python-specific safe patterns
- */
-function isPythonSafe(lineContent: string, surroundingContext: string): boolean {
-  const fullContext = lineContent + '\n' + surroundingContext
-  const pythonSafePatterns = [
-    /ast\.literal_eval\s*\(/i,  // Safe literal evaluation
-    /yaml\.(?:safe_load|SafeLoader)/i,  // Safe YAML
-    /yaml\.load\s*\([^)]*Loader\s*=\s*yaml\.SafeLoader/i,  // Explicit SafeLoader
-    /cursor\.execute\s*\([^,]+,\s*\[/i,  // Parameterized query with list
-    /\?\s*,\s*\[/i,  // SQL placeholder with params
-    /%s.*,\s*\[/i,  // Python %s placeholder with list
-    /subprocess\.run\s*\(\s*\[/i,  // subprocess with list (no shell)
-    /shell\s*=\s*False/i,  // Explicit shell=False
-  ]
-  return pythonSafePatterns.some(p => p.test(fullContext))
-}
-/**
- * Check if SQL is using parameterized queries or ORM
- */
-function isSQLParameterized(lineContent: string, surroundingContext: string): boolean {
-  const fullContext = lineContent + '\n' + surroundingContext
-  const parameterizedPatterns = [
-    /allowedColumns\.filter\s*\(/i,  // Column allowlist
-    /safeColumns/i,  // Safe column variable
-    /allowedColumns\.includes\s*\(/i,  // Column allowlist check
-    /\.filter\s*\(\s*\w+\s*=>\s*allowed\w*\.includes/i,  // Filter with allowlist
-    /schema\.parse\s*\(/i,  // Zod schema validation
-    /z\.enum\s*\(\s*\[/i,  // Zod enum (allowlist)
-    /prisma\.\w+\.(?:findMany|findUnique|create|update)/i,  // Prisma ORM methods (not raw)
-    /\$\{.*\}.*WHERE.*=\s*\$\d/i,  // Dynamic column but parameterized value
-  ]
-  return parameterizedPatterns.some(p => p.test(fullContext))
-}
-/**
- * Check if shell execution uses allowlist
- */
-function isShellAllowlisted(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const shellAllowlistPatterns = [
-    /allowedArgs\.includes\s*\(/i,  // Argument allowlist
-    /if\s*\(\s*allowedArgs\.includes/i,  // Conditional on allowlist
-    /allowedCommands\.includes\s*\(/i,  // Command allowlist
-    /execFile\s*\(\s*['"][^'"]+['"]/i,  // execFile with hardcoded command (safe)
-    /\.replace\s*\(\s*\/\[^a-z0-9\]/gi,  // Strict sanitization
-    /sanitized\s*=/i,  // Sanitization variable
-  ]
-  return shellAllowlistPatterns.some(p => p.test(context))
-}
-/**
- * Check if template engine has autoescape enabled or uses safe rendering
- */
-function isTemplateSafe(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const templateSafePatterns = [
-    /autoescape\s*[=:]\s*true/i,  // Autoescape enabled
-    /autoescaping\s*[=:]\s*true/i,  // Alternative naming
-    /escape\s*[=:]\s*true/i,  // Escape option
-    /\.escapeHtml\s*\(/i,  // Manual escaping
-    /sanitize(?:Html|Output)?\s*\(/i,  // Sanitization function
-    /DOMPurify\.sanitize/i,  // DOMPurify sanitization
-    /#{[^}]+}/i,  // Pug escaped interpolation (safe)
-    /\{\{[^}]+\}\}/i,  // Handlebars/Mustache double-brace (escaped by default)
-  ]
-  // Patterns that indicate unsafe usage
-  const unsafePatterns = [
-    /autoescape\s*[=:]\s*false/i,  // Autoescape disabled
-    /!{[^}]+}/i,  // Pug unescaped interpolation
-    /{{{[^}]+}}}/i,  // Handlebars/Mustache triple-brace (unescaped)
-    /SafeString/i,  // Handlebars SafeString (bypasses escaping)
-    /\|safe\b/i,  // Jinja2/Nunjucks safe filter
-  ]
-  const isSafe = templateSafePatterns.some(p => p.test(context))
-  const isUnsafe = unsafePatterns.some(p => p.test(context))
-  return isSafe && !isUnsafe
-}
-/**
- * Check if NoSQL query uses schema validation or allowlist
- */
-function isNoSQLSafe(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const safePatterns = [
-    /schema\.parse\s*\(/i,  // Zod schema validation
-    /\.validate\s*\(/i,  // Joi/Yup validation
-    /allowedOperators/i,  // Operator allowlist
-    /allowedFields/i,  // Field allowlist
-    /sanitizeQuery/i,  // Query sanitization function
-    /mongo-sanitize/i,  // mongo-sanitize library
-    /mongoose\.(?:Schema|model)/i,  // Using Mongoose models (safer)
-  ]
-  return safePatterns.some(p => p.test(context))
-}
-/**
- * Check if regex has complexity validation or timeout
- */
-function isRegexSafe(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const safePatterns = [
-    /safe-regex/i,  // safe-regex library
-    /recheck/i,  // recheck library
-    /regex-timeout/i,  // Timeout wrapper
-    /RE2/i,  // RE2 library (safe by design)
-    /validateRegex/i,  // Custom validation
-    /maxLength|maxPatternLength/i,  // Length limits
-    /try\s*\{[^}]*new\s+RegExp[^}]*\}\s*catch/i,  // Try-catch around regex
-  ]
-  return safePatterns.some(p => p.test(context))
-}
-/**
- * Check if dynamic import uses allowlist
- */
-function isImportAllowlisted(content: string, lineNumber: number, lines?: string[]): boolean {
-  const _lines = lines ?? content.split('\n')
-  const contextStart = Math.max(0, lineNumber - 15)
-  const contextEnd = Math.min(_lines.length, lineNumber + 5)
-  const context = _lines.slice(contextStart, contextEnd).join('\n')
-  const importAllowlistPatterns = [
-    /ALLOWED_PLUGINS\s*[=:]/i,  // Plugin allowlist
-    /importMap\s*[=:]/i,  // Import map object
-    /allowedModules/i,  // Module allowlist
-    /if\s*\(\s*\w+\s+in\s+importMap\)/i,  // Key in import map
-    /if\s*\(\s*loader\)/i,  // Loader function check (from allowlist)
-    /\[aiModule\]\s*$/i,  // Array access into known object (allowlist lookup)
-  ]
-  return importAllowlistPatterns.some(p => p.test(context))
-}
-// ============================================================================
-// Main Detection Function
-// ============================================================================
-/**
- * Get surrounding context for analysis
- */
-function getSurroundingContext(content: string, lineIndex: number, windowSize: number = 15, lines?: string[]): string {
-  const _lines = lines ?? content.split('\n')
-  const start = Math.max(0, lineIndex - windowSize)
-  const end = Math.min(_lines.length, lineIndex + windowSize)
-  return _lines.slice(start, end).join('\n')
-}
-/**
- * Calculate severity based on sandbox and validation status
- */
-function calculateSeverity(
-  baseSeverity: VulnerabilitySeverity,
-  sinkType: SinkType,
-  isSandboxed: boolean,
-  hasValidation: boolean,
-  isTestFile: boolean,
-  isExample: boolean = false,
-  isLibrary: boolean = false
-): VulnerabilitySeverity {
-  let severity = baseSeverity
-  // Test files get significant downgrade
-  if (isTestFile) {
-    return 'info'
-  }
-  // Example/demo code - not production, for tutorials
-  if (isExample) {
-    return 'info'
-  }
-  // Library code - base utilities, consumers add restrictions
-  if (isLibrary) {
-    return 'info'
-  }
-  // Sandboxing provides major protection for code execution
-  if (isSandboxed) {
-    if (sinkType === 'code_execution') {
-      severity = hasValidation ? 'low' : 'medium'
-    } else {
-      // Sandboxing less relevant for SQL/shell
-      severity = hasValidation ? 'medium' : 'high'
-    }
-  } else if (hasValidation) {
-    // Validation alone helps but doesn't eliminate risk
-    if (baseSeverity === 'critical') {
-      severity = 'high'
-    } else if (baseSeverity === 'high') {
-      severity = 'medium'
-    }
-  }
-  return severity
-}
-/**
- * Main detection function for LLM output execution sinks
- */
-export function detectAIExecutionSinks(
-  content: string,
-  filePath: string,
-  options?: { parsed?: ParsedFile }
-): Vulnerability[] {
-  const vulnerabilities: Vulnerability[] = []
-  // Skip non-applicable files
-  if (isScannerOrFixtureFile(filePath)) return vulnerabilities
-  // Only deeply scan files that appear to be in LLM context
-  // But still do basic scanning on all files for obvious patterns
-  const isLLMFile = isLLMContextFile(filePath, content)
-  const lines = options?.parsed?.lines ?? content.split('\n')
-  const isTestFile = isTestOrMockFile(filePath)
-  const isExample = isExampleDirectory(filePath)
-  const isLibrary = isLibraryCode(filePath)
-  for (const pattern of EXECUTION_SINK_PATTERNS) {
-    const regex = new RegExp(pattern.pattern.source, pattern.pattern.flags)
-    let match
-    while ((match = regex.exec(content)) !== null) {
-      const lineNumber = content.substring(0, match.index).split('\n').length
-      const lineContent = lines[lineNumber - 1]?.trim() || ''
-      // Skip comments
-      if (isComment(lineContent)) continue
-      const surroundingContext = getSurroundingContext(content, lineNumber - 1, 15, lines)
-      // Check if this is actually in an LLM context
-      const hasLLMContext = isLLMFile || hasLLMResponseContext(lineContent, surroundingContext)
-      // ===== FALSE POSITIVE FILTERS =====
-      // Skip UI suggestion/template patterns (command palettes, autocomplete, etc.)
-      // These are display strings, not execution sinks
-      if (isUITemplateSuggestion(lineContent, surroundingContext)) {
-        continue
-      }
-      // Skip app data interpolation (e.g., ${node.title}, ${item.id})
-      // where the interpolated data is from the app, not LLM output
-      if (isAppDataInterpolation(lineContent, surroundingContext)) {
-        continue
-      }
-      // For non-LLM files, require stronger signal
-      if (!hasLLMContext) {
-        // Check if the matched variable looks like LLM output
-        const matchText = match[0]
-        const variableMatch = matchText.match(/(?:response|result|output|completion|message|content|answer|generated|text)/i)
-        if (!variableMatch) continue
-        // Skip if this looks like display-only usage
-        if (isDisplayOnly(lineContent, surroundingContext)) continue
-      }
-      // Check for sandboxing and validation
-      const isSandboxed = isSandboxedExecution(content, lineNumber, lines)
-      const hasValidation = hasOutputValidation(content, lineNumber, lines)
-      // ===== SINK-SPECIFIC VALIDATION CHECKS =====
-      // Phase 2: Check for URL validation on network/redirect sinks (SSRF, Open Redirect)
-      const isNetworkSink = pattern.name.includes('fetch') || pattern.name.includes('axios') ||
-        pattern.name.includes('HTTP') || pattern.name.includes('redirect') ||
-        pattern.name.includes('location') || pattern.name.includes('got')
-      if (isNetworkSink) {
-        const urlValidLevel = getURLValidationLevel(content, lineNumber, lines)
-        if (urlValidLevel === 'strong') {
-          continue  // Skip - strong URL validation present
-        }
-      }
-      // Phase 3: Check for DOM sanitization on template_render sinks
-      const hasDOMSanitization = pattern.sinkType === 'template_render'
-        ? isDOMSanitized(lineContent, surroundingContext)
-        : false
-      // Skip DOM findings if sanitized
-      if (hasDOMSanitization && pattern.sinkType === 'template_render') {
-        continue
-      }
-      // Check for header sanitization
-      const isHeaderSink = pattern.name.includes('header') || pattern.name.includes('cookie') ||
-        pattern.name.includes('res.type')
-      if (isHeaderSink && isHeaderSanitized(content, lineNumber, lines)) {
-        continue  // Skip - header value is sanitized
-      }
-      // Check for path validation on file system sinks
-      const isFileSink = pattern.name.includes('file path') || pattern.name.includes('fs operation') ||
-        pattern.name.includes('path.join')
-      if (isFileSink && isPathValidated(content, lineNumber, lines)) {
-        continue  // Skip - path is validated
-      }
-      // Check for SQL parameterization
-      const isSQLSink = pattern.sinkType === 'sql_builder'
-      if (isSQLSink && isSQLParameterized(lineContent, surroundingContext)) {
-        continue  // Skip - SQL is parameterized or uses allowlist
-      }
-      // Check for shell allowlist
-      const isShellSink = pattern.sinkType === 'shell_command'
-      if (isShellSink && isShellAllowlisted(content, lineNumber, lines)) {
-        continue  // Skip - shell command uses allowlist
-      }
-      // Check for import allowlist
-      const isImportSink = pattern.name.includes('import') || pattern.name.includes('require')
-      if (isImportSink && isImportAllowlisted(content, lineNumber, lines)) {
-        continue  // Skip - import uses allowlist
-      }
-      // Check for template engine safety (autoescape, sanitization)
-      const isTemplateEngineSink = pattern.name.includes('EJS') || pattern.name.includes('Handlebars') ||
-        pattern.name.includes('Pug') || pattern.name.includes('Nunjucks') || pattern.name.includes('Jinja2') ||
-        pattern.name.includes('Mustache')
-      if (isTemplateEngineSink && isTemplateSafe(content, lineNumber, lines)) {
-        continue  // Skip - template engine has safe configuration
-      }
-      // Check for NoSQL query safety
-      const isNoSQLSink = pattern.name.includes('NoSQL') || pattern.name.includes('MongoDB') ||
-        pattern.name.includes('$where')
-      if (isNoSQLSink && isNoSQLSafe(content, lineNumber, lines)) {
-        continue  // Skip - NoSQL query is validated
-      }
-      // Check for regex safety (ReDoS protection)
-      const isRegexSink = pattern.name.includes('regex') || pattern.name.includes('RegExp')
-      if (isRegexSink && isRegexSafe(content, lineNumber, lines)) {
-        continue  // Skip - regex has safety measures
-      }
-      // Check for Python-specific safe patterns
-      const isPythonSink = pattern.name.includes('Python') || pattern.name.includes('pickle') ||
-        pattern.name.includes('subprocess') || pattern.name.includes('os.system')
-      if (isPythonSink && isPythonSafe(lineContent, surroundingContext)) {
-        continue  // Skip - Python code uses safe patterns
-      }
-      // Check for ast.literal_eval (Python safe eval) - this is a safe alternative to eval()
-      // It matches the eval pattern because literal_eval contains "eval("
-      if (pattern.name.includes('eval') && /ast\.literal_eval\s*\(/i.test(lineContent)) {
-        continue  // Skip - ast.literal_eval is safe, only evaluates literals
-      }
-      // Check URL validation level for severity adjustment
-      const hasURLValid = isNetworkSink ? getURLValidationLevel(content, lineNumber, lines) !== 'none' : false
-      // Combine validation checks (URL validation counts as validation for network sinks)
-      const effectiveValidation = hasValidation || hasURLValid
-      // Calculate final severity
-      const severity = calculateSeverity(
-        pattern.baseSeverity,
-        pattern.sinkType,
-        isSandboxed,
-        effectiveValidation,
-        isTestFile,
-        isExample,
-        isLibrary
-      )
-      // Build description with context
-      let description = pattern.description
-      if (isSandboxed) {
-        description += ' (Sandbox detected - risk somewhat mitigated.)'
-      }
-      if (hasValidation) {
-        description += ' (Some validation detected nearby.)'
-      }
-      if (hasURLValid && !hasValidation) {
-        description += ' (URL validation detected nearby.)'
-      }
-      if (isTestFile) {
-        description += ' (In test file.)'
-      } else if (isExample) {
-        description += ' (In example/demo directory - tutorial code.)'
-      } else if (isLibrary) {
-        description += ' (Library code - consumers add restrictions.)'
-      }
-      // Skip info-level in non-LLM files to reduce noise
-      if (severity === 'info' && !isLLMFile) continue
-      vulnerabilities.push({
-        id: `ai-exec-${filePath}-${lineNumber}-${pattern.sinkType}`,
-        filePath,
-        lineNumber,
-        lineContent,
-        severity,
-        category: 'ai_unsafe_execution',
-        title: pattern.name,
-        description,
-        suggestedFix: pattern.suggestedFix,
-        confidence: hasLLMContext ? 'high' : 'medium',
-        layer: 2,
-        source: 'ai_code' as const,
-        requiresAIValidation: severity !== 'info' && severity !== 'low',
-        baseConfidence: BASE_CONFIDENCE,
-      })
-    }
-  }
-  return vulnerabilities
-}