@rulemetric/skills-registry 0.7.4 → 0.7.5

package/discovered-sources.json

@@ -174,7 +174,8 @@
   {
     "repo": "headroomlabs-ai/headroom",
     "patterns": [
-      "**/*.md"
+      "agents/**/*.md",
+      "**/AGENTS.md"
     ],
     "defaultTool": "claude_code",
     "defaultCategory": "language",
@@ -491,24 +492,24 @@
     "license": "Apache-2.0"
   },
   {
-    "repo": "cft0808/edict",
+    "repo": "iOfficeAI/OfficeCLI",
     "patterns": [
       "agents/**/*.md",
       "**/AGENTS.md"
     ],
-    "defaultTool": "openclaw",
-    "defaultCategory": "framework",
-    "license": "MIT"
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow",
+    "license": "Apache-2.0"
   },
   {
-    "repo": "iOfficeAI/OfficeCLI",
+    "repo": "cft0808/edict",
     "patterns": [
       "agents/**/*.md",
       "**/AGENTS.md"
     ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "workflow",
-    "license": "Apache-2.0"
+    "defaultTool": "openclaw",
+    "defaultCategory": "framework",
+    "license": "MIT"
   },
   {
     "repo": "MemoriLabs/Memori",
@@ -856,6 +857,14 @@
     "defaultCategory": "workflow",
     "license": "MIT"
   },
+  {
+    "repo": "JuneYaooo/nihaisha-nishi-tcm",
+    "patterns": [
+      "**/*.md"
+    ],
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow"
+  },
   {
     "repo": "specstoryai/getspecstory",
     "patterns": [
@@ -895,14 +904,6 @@
     "defaultCategory": "workflow",
     "license": "MIT"
   },
-  {
-    "repo": "JuneYaooo/nihaisha-nishi-tcm",
-    "patterns": [
-      "**/*.md"
-    ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "workflow"
-  },
   {
     "repo": "caliber-ai-org/ai-setup",
     "patterns": [
@@ -953,21 +954,21 @@
     "license": "MIT"
   },
   {
-    "repo": "JuneYaooo/gpt-image2-ppt-skills",
+    "repo": "aiwithremy/claude-skills-llm-council",
     "patterns": [
       "skills/**/*.md"
     ],
     "defaultTool": "claude_code",
-    "defaultCategory": "workflow",
-    "license": "Apache-2.0"
+    "defaultCategory": "workflow"
   },
   {
-    "repo": "aiwithremy/claude-skills-llm-council",
+    "repo": "JuneYaooo/gpt-image2-ppt-skills",
     "patterns": [
       "skills/**/*.md"
     ],
     "defaultTool": "claude_code",
-    "defaultCategory": "workflow"
+    "defaultCategory": "workflow",
+    "license": "Apache-2.0"
   },
   {
     "repo": "Pantheon-Security/medusa",
@@ -1114,6 +1115,17 @@
     "defaultCategory": "framework",
     "license": "MIT"
   },
+  {
+    "repo": "infragate/capa",
+    "patterns": [
+      "skills/**/*.md",
+      "agents/**/*.md",
+      "**/AGENTS.md",
+      "**/*.md"
+    ],
+    "defaultTool": "cursor",
+    "defaultCategory": "workflow"
+  },
   {
     "repo": "grapeot/context-infrastructure",
     "patterns": [
@@ -1147,15 +1159,13 @@
     "license": "Apache-2.0"
   },
   {
-    "repo": "infragate/capa",
+    "repo": "laolaoshiren/claude-code-skills-zh",
     "patterns": [
-      "skills/**/*.md",
-      "agents/**/*.md",
-      "**/AGENTS.md",
-      "**/*.md"
+      "skills/**/*.md"
     ],
-    "defaultTool": "cursor",
-    "defaultCategory": "workflow"
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow",
+    "license": "MIT"
   },
   {
     "repo": "sno-ai/mda",
@@ -1168,15 +1178,6 @@
     "defaultCategory": "workflow",
     "license": "Apache-2.0"
   },
-  {
-    "repo": "laolaoshiren/claude-code-skills-zh",
-    "patterns": [
-      "skills/**/*.md"
-    ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "workflow",
-    "license": "MIT"
-  },
   {
     "repo": "fjb040911/ai-rules",
     "patterns": [
@@ -1291,22 +1292,22 @@
     "license": "NOASSERTION"
   },
   {
-    "repo": "Jermic/awesome-aiart-pics-prompts",
+    "repo": "WorldFlowAI/everything-claude-code",
     "patterns": [
+      "skills/**/*.md",
+      "agents/**/*.md",
+      "**/AGENTS.md",
       "**/*.md"
     ],
-    "defaultTool": "universal",
+    "defaultTool": "claude_code",
     "defaultCategory": "workflow"
   },
   {
-    "repo": "WorldFlowAI/everything-claude-code",
+    "repo": "Jermic/awesome-aiart-pics-prompts",
     "patterns": [
-      "skills/**/*.md",
-      "agents/**/*.md",
-      "**/AGENTS.md",
       "**/*.md"
     ],
-    "defaultTool": "claude_code",
+    "defaultTool": "universal",
     "defaultCategory": "workflow"
   },
   {
@@ -1474,24 +1475,24 @@
     "license": "MIT"
   },
   {
-    "repo": "huanchong-99/SoloDawn",
+    "repo": "marcusquinn/aidevops",
     "patterns": [
-      "agents/**/*.md",
-      "**/AGENTS.md",
       "**/*.md"
     ],
     "defaultTool": "universal",
-    "defaultCategory": "workflow",
-    "license": "NOASSERTION"
+    "defaultCategory": "security",
+    "license": "MIT"
   },
   {
-    "repo": "marcusquinn/aidevops",
+    "repo": "huanchong-99/SoloDawn",
     "patterns": [
+      "agents/**/*.md",
+      "**/AGENTS.md",
       "**/*.md"
     ],
     "defaultTool": "universal",
-    "defaultCategory": "security",
-    "license": "MIT"
+    "defaultCategory": "workflow",
+    "license": "NOASSERTION"
   },
   {
     "repo": "molyswu/hand_detection",
@@ -1548,13 +1549,16 @@
     "defaultCategory": "workflow"
   },
   {
-    "repo": "wiz-sec-public/secure-rules-files",
+    "repo": "niaka3dayo/agent-skills-vrc-udon",
     "patterns": [
+      "skills/**/*.md",
+      "agents/**/*.md",
+      "**/AGENTS.md",
       "**/*.md"
     ],
-    "defaultTool": "cursor",
-    "defaultCategory": "security",
-    "license": "NOASSERTION"
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow",
+    "license": "MIT"
   },
   {
     "repo": "LessUp/awesome-cursorrules-zh",
@@ -1567,15 +1571,6 @@
     "defaultCategory": "devops",
     "license": "MIT"
   },
-  {
-    "repo": "SebastienDegodez/copilot-instructions",
-    "patterns": [
-      "**/*.md"
-    ],
-    "defaultTool": "copilot",
-    "defaultCategory": "testing",
-    "license": "Apache-2.0"
-  },
   {
     "repo": "yzhao062/anywhere-agents",
     "patterns": [
@@ -1587,6 +1582,15 @@
     "defaultCategory": "workflow",
     "license": "Apache-2.0"
   },
+  {
+    "repo": "SebastienDegodez/copilot-instructions",
+    "patterns": [
+      "**/*.md"
+    ],
+    "defaultTool": "copilot",
+    "defaultCategory": "testing",
+    "license": "Apache-2.0"
+  },
   {
     "repo": "DengShiyingA/harmonyos-ai-skill",
     "patterns": [
@@ -1664,6 +1668,14 @@
     "defaultCategory": "language",
     "license": "Apache-2.0"
   },
+  {
+    "repo": "handsomeZR-netizen/mathmodel-skill",
+    "patterns": [
+      "**/*.md"
+    ],
+    "defaultTool": "claude_code",
+    "defaultCategory": "testing"
+  },
   {
     "repo": "Anbeeld/AGENTS.md",
     "patterns": [
@@ -1675,14 +1687,6 @@
     "defaultCategory": "workflow",
     "license": "MIT"
   },
-  {
-    "repo": "handsomeZR-netizen/mathmodel-skill",
-    "patterns": [
-      "**/*.md"
-    ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "testing"
-  },
   {
     "repo": "Goldziher/ai-rulez",
     "patterns": [
@@ -1837,6 +1841,15 @@
     "defaultCategory": "devops",
     "license": "MIT"
   },
+  {
+    "repo": "smixs/visual-skills",
+    "patterns": [
+      "skills/**/*.md"
+    ],
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow",
+    "license": "MIT"
+  },
   {
     "repo": "ivangrynenko/cursorrules",
     "patterns": [
@@ -1866,15 +1879,6 @@
     "defaultCategory": "workflow",
     "license": "MIT"
   },
-  {
-    "repo": "smixs/visual-skills",
-    "patterns": [
-      "skills/**/*.md"
-    ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "workflow",
-    "license": "MIT"
-  },
   {
     "repo": "jparkerweb/ai-assist-skills",
     "patterns": [
@@ -2042,25 +2046,25 @@
     "license": "MIT"
   },
   {
-    "repo": "escoffier-labs/brigade",
+    "repo": "netresearch/agent-rules-skill",
     "patterns": [
       "agents/**/*.md",
-      "**/AGENTS.md"
+      "**/AGENTS.md",
+      "**/*.md"
     ],
     "defaultTool": "claude_code",
     "defaultCategory": "workflow",
-    "license": "MIT"
+    "license": "NOASSERTION"
   },
   {
-    "repo": "netresearch/agent-rules-skill",
+    "repo": "escoffier-labs/brigade",
     "patterns": [
       "agents/**/*.md",
-      "**/AGENTS.md",
-      "**/*.md"
+      "**/AGENTS.md"
     ],
     "defaultTool": "claude_code",
     "defaultCategory": "workflow",
-    "license": "NOASSERTION"
+    "license": "MIT"
   },
   {
     "repo": "fielding/copilot-instructions",
@@ -2253,19 +2257,19 @@
     "license": "MIT"
   },
   {
-    "repo": "razbakov/ai-secretary",
+    "repo": "nedcodes-ok/cursorrules-collection",
     "patterns": [
+      "**/*.cursorrules",
+      "**/*.mdc",
       "**/*.md"
     ],
     "defaultTool": "cursor",
-    "defaultCategory": "workflow",
+    "defaultCategory": "testing",
     "license": "MIT"
   },
   {
-    "repo": "barisercan/cursorrules",
+    "repo": "razbakov/ai-secretary",
     "patterns": [
-      "**/*.cursorrules",
-      "**/*.mdc",
       "**/*.md"
     ],
     "defaultTool": "cursor",
@@ -2273,14 +2277,14 @@
     "license": "MIT"
   },
   {
-    "repo": "nedcodes-ok/cursorrules-collection",
+    "repo": "barisercan/cursorrules",
     "patterns": [
       "**/*.cursorrules",
       "**/*.mdc",
       "**/*.md"
     ],
     "defaultTool": "cursor",
-    "defaultCategory": "testing",
+    "defaultCategory": "workflow",
     "license": "MIT"
   },
   {
@@ -2411,25 +2415,25 @@
     "defaultCategory": "workflow"
   },
   {
-    "repo": "SixArm/ai-agents-tips",
+    "repo": "ItamarZand88/awesome-agent-conventions",
     "patterns": [
       "agents/**/*.md",
       "**/AGENTS.md",
       "**/*.md"
     ],
-    "defaultTool": "cursor",
-    "defaultCategory": "workflow"
+    "defaultTool": "claude_code",
+    "defaultCategory": "workflow",
+    "license": "MIT"
   },
   {
-    "repo": "ItamarZand88/awesome-agent-conventions",
+    "repo": "SixArm/ai-agents-tips",
     "patterns": [
       "agents/**/*.md",
       "**/AGENTS.md",
       "**/*.md"
     ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "workflow",
-    "license": "MIT"
+    "defaultTool": "cursor",
+    "defaultCategory": "workflow"
   },
   {
     "repo": "tomdwipo/claude-soul",
@@ -2548,6 +2552,17 @@
     "defaultTool": "windsurf",
     "defaultCategory": "workflow"
   },
+  {
+    "repo": "fockus/skill-memory-bank",
+    "patterns": [
+      "agents/**/*.md",
+      "**/AGENTS.md",
+      "**/*.md"
+    ],
+    "defaultTool": "claude_code",
+    "defaultCategory": "testing",
+    "license": "MIT"
+  },
   {
     "repo": "nirholas/auto-kill-terminal",
     "patterns": [
@@ -2557,7 +2572,7 @@
     ],
     "defaultTool": "cursor",
     "defaultCategory": "workflow",
-    "license": "MIT"
+    "license": "NOASSERTION"
   },
   {
     "repo": "tugkanboz/awesome-cursorrules",
@@ -2588,17 +2603,6 @@
     "defaultCategory": "framework",
     "license": "MIT"
   },
-  {
-    "repo": "fockus/skill-memory-bank",
-    "patterns": [
-      "agents/**/*.md",
-      "**/AGENTS.md",
-      "**/*.md"
-    ],
-    "defaultTool": "claude_code",
-    "defaultCategory": "testing",
-    "license": "MIT"
-  },
   {
     "repo": "tiandee/awesome-skills-hub",
     "patterns": [
@@ -3161,20 +3165,20 @@
     "license": "MIT"
   },
   {
-    "repo": "manojmallick/sigmap-vscode",
+    "repo": "Bridgetamana/cool-copilot-instructions",
     "patterns": [
       "**/*.md"
     ],
-    "defaultTool": "cursor",
+    "defaultTool": "copilot",
     "defaultCategory": "workflow",
     "license": "MIT"
   },
   {
-    "repo": "Bridgetamana/cool-copilot-instructions",
+    "repo": "manojmallick/sigmap-vscode",
     "patterns": [
       "**/*.md"
     ],
-    "defaultTool": "copilot",
+    "defaultTool": "cursor",
     "defaultCategory": "workflow",
     "license": "MIT"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/skills-registry",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/security-scanner.d.ts

@@ -1,26 +0,0 @@
-import type { SkillEntry } from './types.js';
-/** Severity levels for security findings. */
-export type Severity = 'critical' | 'high' | 'medium' | 'low';
-/** A single security finding in a skill. */
-export interface SecurityFinding {
-    rule: string;
-    severity: Severity;
-    message: string;
-    /** The matched text (truncated) */
-    match: string;
-    /** Line number (1-indexed) where the match was found */
-    line: number;
-}
-/** Result of scanning a single skill. */
-export interface ScanResult {
-    skillId: string;
-    passed: boolean;
-    findings: SecurityFinding[];
-}
-/** Scan a single skill's content for security issues. */
-export declare function scanSkill(skill: SkillEntry): ScanResult;
-/** Scan all skills in a registry. Returns results sorted by severity. */
-export declare function scanRegistry(skills: SkillEntry[]): ScanResult[];
-/** Format scan results for console output. */
-export declare function formatScanResults(results: ScanResult[]): string;
-//# sourceMappingURL=security-scanner.d.ts.map

package/dist/security-scanner.js

@@ -1,290 +0,0 @@
-const RULES = [
-    // ── Critical: Prompt Injection ──
-    {
-        id: 'prompt-injection-ignore',
-        severity: 'critical',
-        description: 'Prompt injection: instruction to ignore previous instructions',
-        patterns: [
-            /ignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions?|rules?|prompts?|context)/i,
-            /disregard\s+(all\s+)?(previous|prior|above)\s+(instructions?|rules?)/i,
-            /forget\s+(everything|all)\s+(you|that)\s+(were|was|have)/i,
-        ],
-    },
-    {
-        id: 'prompt-injection-roleplay',
-        severity: 'critical',
-        description: 'Prompt injection: role override or jailbreak attempt',
-        patterns: [
-            /you\s+are\s+now\s+(DAN|evil|unrestricted|unfiltered|jailbroken)/i,
-            /entering?\s+(DAN|developer|god)\s+mode/i,
-            /act\s+as\s+(if|though)\s+you\s+(have\s+no|don.?t\s+have)\s+(restrictions|filters|limits)/i,
-            /from\s+now\s+on,?\s+you\s+(will|must|should)\s+(always|never)\s+(obey|follow|listen)/i,
-        ],
-    },
-    {
-        id: 'prompt-injection-system',
-        severity: 'critical',
-        description: 'Prompt injection: fake system message or hidden instruction',
-        patterns: [
-            /<\/?system[-_]?(message|prompt|instruction|reminder)>/i,
-            /\[SYSTEM\]\s*:/i,
-            /\[INST\]|\[\/INST\]/i,
-            /<<\s*SYS\s*>>|<<\s*\/SYS\s*>>/i,
-        ],
-    },
-    // ── High: Dangerous Commands ──
-    {
-        id: 'dangerous-command-rm',
-        severity: 'high',
-        description: 'Dangerous shell command: recursive delete',
-        patterns: [
-            /rm\s+-[a-z]*r[a-z]*f|rm\s+-[a-z]*f[a-z]*r/i,
-            /rm\s+-rf\s+[\/~]/i,
-            /rm\s+-rf\s+\*/i,
-        ],
-    },
-    {
-        id: 'dangerous-command-eval',
-        severity: 'high',
-        description: 'Dangerous command: eval/exec of remote content',
-        patterns: [
-            /curl\s+.*\|\s*(bash|sh|python|node|eval)/i,
-            /wget\s+.*\|\s*(bash|sh|python|node|eval)/i,
-            /\beval\s*\(\s*(fetch|require|import)\b/i,
-        ],
-    },
-    {
-        id: 'dangerous-command-env',
-        severity: 'high',
-        description: 'Command that accesses or exfiltrates environment variables',
-        patterns: [
-            /printenv\s*\|/i,
-            /env\s*\|\s*(curl|wget|nc|ncat)/i,
-            /\$\{?\w*(SECRET|TOKEN|KEY|PASSWORD|CREDENTIAL)\w*\}?\s*.*\b(curl|wget|nc|fetch)\b/i,
-        ],
-    },
-    {
-        id: 'dangerous-command-reverse-shell',
-        severity: 'critical',
-        description: 'Reverse shell or network backdoor pattern',
-        patterns: [
-            /\bnc\s+-[a-z]*e\s/i,
-            /\bncat\b.*\b-e\b/i,
-            /\/dev\/(tcp|udp)\//i,
-            /mkfifo\s+.*\bsh\b/i,
-            /bash\s+-i\s+>&?\s*\/dev\/(tcp|udp)/i,
-        ],
-    },
-    // ── High: Data Exfiltration ──
-    {
-        id: 'exfil-curl-post',
-        severity: 'high',
-        description: 'Potential data exfiltration via HTTP POST',
-        patterns: [
-            /curl\s+.*-X\s*POST\s+https?:\/\/(?!localhost|127\.0\.0\.1)/i,
-            /curl\s+.*--data.*https?:\/\/(?!localhost|127\.0\.0\.1)/i,
-            /fetch\s*\(\s*['"]https?:\/\/(?!localhost).*['"].*method:\s*['"]POST['"]/i,
-        ],
-    },
-    {
-        id: 'exfil-webhook',
-        severity: 'high',
-        description: 'Webhook or external callback URL',
-        patterns: [
-            /https?:\/\/[^\s]*webhook[^\s]*/i,
-            /https?:\/\/[^\s]*\.ngrok\.[^\s]*/i,
-            /https?:\/\/[^\s]*requestbin[^\s]*/i,
-            /https?:\/\/[^\s]*pipedream[^\s]*/i,
-            /https?:\/\/[^\s]*burpcollaborator[^\s]*/i,
-        ],
-    },
-    // ── Medium: Suspicious Patterns ──
-    {
-        id: 'base64-blob',
-        severity: 'medium',
-        description: 'Large base64-encoded blob (potential obfuscated payload)',
-        patterns: [
-            /[A-Za-z0-9+/]{100,}={0,2}/,
-        ],
-    },
-    {
-        id: 'obfuscated-code',
-        severity: 'medium',
-        description: 'Obfuscated or encoded script content',
-        patterns: [
-            /\\x[0-9a-f]{2}(\\x[0-9a-f]{2}){10,}/i,
-            /\\u[0-9a-f]{4}(\\u[0-9a-f]{4}){10,}/i,
-            /String\.fromCharCode\s*\(/i,
-            /atob\s*\(\s*['"][A-Za-z0-9+/]/i,
-        ],
-    },
-    {
-        id: 'hidden-text',
-        severity: 'medium',
-        description: 'Hidden content via HTML comments, zero-width chars, or invisible unicode',
-        patterns: [
-            /<!--[\s\S]{50,}?-->/,
-            /[\u200B\u200C\u200D\uFEFF]{3,}/,
-            /\u2060{3,}/,
-        ],
-        multiline: true,
-    },
-    {
-        id: 'suspicious-url',
-        severity: 'medium',
-        description: 'URL pointing to non-standard domain (potential phishing or C2)',
-        patterns: [
-            /https?:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/,
-            /https?:\/\/[^\s]*\.(tk|ml|ga|cf|gq|top|xyz|pw|cc)\b/i,
-        ],
-    },
-    // ── Medium: Privilege Escalation ──
-    {
-        id: 'privilege-escalation',
-        severity: 'medium',
-        description: 'Instructions to bypass safety, skip verification, or escalate permissions',
-        patterns: [
-            /--no-verify/i,
-            /--force\s+(push|delete|remove)/i,
-            /chmod\s+777/i,
-            /sudo\s+/i,
-            /disable\s+(security|auth|verification|checking|linting)/i,
-        ],
-    },
-    // ── Low: Suspicious Instructions ──
-    {
-        id: 'credential-request',
-        severity: 'low',
-        description: 'Instruction requesting or handling credentials',
-        patterns: [
-            /\b(paste|enter|provide|share)\s+(your\s+)?(api[- ]?key|token|password|secret|credential)/i,
-            /hardcode\s+(the\s+)?(api[- ]?key|token|password|secret)/i,
-        ],
-    },
-    {
-        id: 'file-system-access',
-        severity: 'low',
-        description: 'Access to sensitive system paths',
-        patterns: [
-            /\/etc\/(passwd|shadow|hosts)/,
-            /~\/\.(ssh|gnupg|aws|config)/,
-            /\$HOME\/\.(ssh|gnupg|aws)/,
-        ],
-    },
-];
-// ── Allowlist ────────────────────────────────────────────────────────────────
-/** Patterns that are false positives in legitimate skill content. */
-const ALLOWLIST = [
-    // Security review checklists naturally mention these concepts
-    { rule: 'credential-request', pattern: /checklist|review|verify|never\s+hardcode/i },
-    // Git convention skills mention --no-verify in a "don't do this" context
-    { rule: 'privilege-escalation', pattern: /never|don.?t|avoid|anti.?pattern/i },
-];
-// ── Scanner ──────────────────────────────────────────────────────────────────
-/** Scan a single skill's content for security issues. */
-export function scanSkill(skill) {
-    const findings = [];
-    const content = skill.content;
-    const lines = content.split('\n');
-    for (const rule of RULES) {
-        if (rule.multiline) {
-            // Match against full content
-            for (const pattern of rule.patterns) {
-                const match = content.match(pattern);
-                if (match) {
-                    // Check allowlist
-                    const lineIdx = content.substring(0, match.index ?? 0).split('\n').length;
-                    const lineText = lines[lineIdx - 1] ?? '';
-                    if (isAllowlisted(rule.id, lineText))
-                        continue;
-                    findings.push({
-                        rule: rule.id,
-                        severity: rule.severity,
-                        message: rule.description,
-                        match: match[0].slice(0, 100),
-                        line: lineIdx,
-                    });
-                }
-            }
-        }
-        else {
-            // Match per-line
-            for (let i = 0; i < lines.length; i++) {
-                const line = lines[i];
-                // Skip content inside code blocks that are clearly examples
-                // (but still flag dangerous commands even in code blocks)
-                for (const pattern of rule.patterns) {
-                    const match = line.match(pattern);
-                    if (match) {
-                        if (isAllowlisted(rule.id, line))
-                            continue;
-                        findings.push({
-                            rule: rule.id,
-                            severity: rule.severity,
-                            message: rule.description,
-                            match: match[0].slice(0, 100),
-                            line: i + 1,
-                        });
-                        break; // One finding per rule per line
-                    }
-                }
-            }
-        }
-    }
-    // Dedupe findings by rule+line
-    const seen = new Set();
-    const deduped = findings.filter(f => {
-        const key = `${f.rule}:${f.line}`;
-        if (seen.has(key))
-            return false;
-        seen.add(key);
-        return true;
-    });
-    const hasCritical = deduped.some(f => f.severity === 'critical');
-    const hasHigh = deduped.some(f => f.severity === 'high');
-    return {
-        skillId: skill.id,
-        passed: !hasCritical && !hasHigh,
-        findings: deduped,
-    };
-}
-function isAllowlisted(ruleId, lineText) {
-    return ALLOWLIST.some(a => a.rule === ruleId && a.pattern.test(lineText));
-}
-/** Scan all skills in a registry. Returns results sorted by severity. */
-export function scanRegistry(skills) {
-    const results = skills.map(scanSkill);
-    // Sort: failed first, then by finding count
-    results.sort((a, b) => {
-        if (a.passed !== b.passed)
-            return a.passed ? 1 : -1;
-        return b.findings.length - a.findings.length;
-    });
-    return results;
-}
-/** Format scan results for console output. */
-export function formatScanResults(results) {
-    const lines = [];
-    const passed = results.filter(r => r.passed).length;
-    const failed = results.filter(r => !r.passed).length;
-    const total = results.length;
-    lines.push(`\nSecurity Scan: ${total} skills scanned`);
-    lines.push(`  ${passed} passed, ${failed} failed\n`);
-    for (const result of results) {
-        if (result.findings.length === 0)
-            continue;
-        const icon = result.passed ? '⚠' : '✗';
-        lines.push(`${icon} ${result.skillId}:`);
-        for (const f of result.findings) {
-            const sevLabel = f.severity.toUpperCase().padEnd(8);
-            lines.push(`  [${sevLabel}] L${f.line}: ${f.message}`);
-            lines.push(`             match: "${f.match}"`);
-        }
-        lines.push('');
-    }
-    if (failed > 0) {
-        lines.push(`BLOCKED: ${failed} skill(s) have critical/high findings and will not be included.`);
-    }
-    return lines.join('\n');
-}
-//# sourceMappingURL=security-scanner.js.map