@skillctl/security 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 skillctl contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { runAudit, auditExitCode } from './runner.js';
+export type { AuditReport, AuditFinding, AuditSeverity } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { runAudit, auditExitCode } from './runner.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/rules/integrity-drift.d.ts

@@ -0,0 +1,4 @@
+import type { SkillLockfile } from '@skillctl/core';
+import type { AuditFinding } from '../types.js';
+export declare function checkIntegrityDrift(lock: SkillLockfile): Promise<AuditFinding[]>;
+//# sourceMappingURL=integrity-drift.d.ts.map

package/dist/rules/integrity-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-drift.d.ts","sourceRoot":"","sources":["../../src/rules/integrity-drift.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0BtF"}

package/dist/rules/integrity-drift.js

@@ -0,0 +1,31 @@
+import { stat } from 'node:fs/promises';
+import { computeDirIntegrity } from '@skillctl/core';
+export async function checkIntegrityDrift(lock) {
+    const findings = [];
+    for (const [name, entry] of Object.entries(lock.skills)) {
+        try {
+            await stat(entry.canonicalPath);
+            const integrity = await computeDirIntegrity(entry.canonicalPath);
+            if (integrity !== entry.integrity) {
+                findings.push({
+                    rule: 'integrity-drift',
+                    severity: 'error',
+                    skill: name,
+                    message: `Canonical integrity mismatch (lock: ${entry.integrity.slice(0, 24)}...)`,
+                    path: entry.canonicalPath,
+                });
+            }
+        }
+        catch {
+            findings.push({
+                rule: 'integrity-drift',
+                severity: 'error',
+                skill: name,
+                message: 'Canonical path missing',
+                path: entry.canonicalPath,
+            });
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=integrity-drift.js.map

package/dist/rules/integrity-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-drift.js","sourceRoot":"","sources":["../../src/rules/integrity-drift.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAmB;IAC3D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,uCAAuC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBAClF,IAAI,EAAE,KAAK,CAAC,aAAa;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,wBAAwB;gBACjC,IAAI,EAAE,KAAK,CAAC,aAAa;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules/name-dir-match.d.ts

@@ -0,0 +1,3 @@
+import type { AuditFinding } from '../types.js';
+export declare function checkNameDirMatch(skillName: string, canonicalPath: string): Promise<AuditFinding[]>;
+//# sourceMappingURL=name-dir-match.d.ts.map

package/dist/rules/name-dir-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-dir-match.d.ts","sourceRoot":"","sources":["../../src/rules/name-dir-match.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAyBzG"}

package/dist/rules/name-dir-match.js

@@ -0,0 +1,31 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { canonicalizeName } from '@skillctl/core';
+export async function checkNameDirMatch(skillName, canonicalPath) {
+    const findings = [];
+    for (const f of ['SKILL.md', 'skill.md']) {
+        try {
+            const content = await readFile(join(canonicalPath, f), 'utf8');
+            const match = content.match(/(?:^|\n)\s*name:\s*["']?([^"'\n#]+)["']?/i);
+            if (match) {
+                const fmName = canonicalizeName(match[1].trim());
+                const dirName = canonicalizeName(skillName);
+                if (fmName !== dirName) {
+                    findings.push({
+                        rule: 'name-dir-match',
+                        severity: 'warning',
+                        skill: skillName,
+                        message: `SKILL.md name "${fmName}" does not match lock name "${dirName}"`,
+                        path: join(canonicalPath, f),
+                    });
+                }
+            }
+            break;
+        }
+        catch {
+            // try next
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=name-dir-match.js.map

package/dist/rules/name-dir-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-dir-match.js","sourceRoot":"","sources":["../../src/rules/name-dir-match.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,aAAqB;IAC9E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACzE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC5C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,SAAS;wBACnB,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,kBAAkB,MAAM,+BAA+B,OAAO,GAAG;wBAC1E,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules/path-traversal.d.ts

@@ -0,0 +1,3 @@
+import type { AuditFinding } from '../types.js';
+export declare function checkPathTraversal(skillName: string, canonicalPath: string): Promise<AuditFinding[]>;
+//# sourceMappingURL=path-traversal.d.ts.map

package/dist/rules/path-traversal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.d.ts","sourceRoot":"","sources":["../../src/rules/path-traversal.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAehD,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAsB1G"}

package/dist/rules/path-traversal.js

@@ -0,0 +1,41 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+async function walkAll(dir, out) {
+    try {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const e of entries) {
+            const p = join(dir, e.name);
+            if (e.isDirectory() && !e.name.startsWith('.'))
+                await walkAll(p, out);
+            else if (e.isFile() && /\.(md|txt|sh|py|js|ts|json)$/i.test(e.name))
+                out.push(p);
+        }
+    }
+    catch {
+        // ignore
+    }
+}
+export async function checkPathTraversal(skillName, canonicalPath) {
+    const findings = [];
+    const files = [];
+    await walkAll(canonicalPath, files);
+    for (const file of files) {
+        try {
+            const content = await readFile(file, 'utf8');
+            if (/\.\.\//.test(content) || /\/etc\/passwd/.test(content)) {
+                findings.push({
+                    rule: 'path-traversal',
+                    severity: 'warning',
+                    skill: skillName,
+                    message: 'Possible path traversal reference in file content',
+                    path: file,
+                });
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=path-traversal.js.map

package/dist/rules/path-traversal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.js","sourceRoot":"","sources":["../../src/rules/path-traversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,GAAa;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBACjE,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,aAAqB;IAC/E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,mDAAmD;oBAC5D,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules/script-heuristics.d.ts

@@ -0,0 +1,3 @@
+import type { AuditFinding } from '../types.js';
+export declare function checkScriptHeuristics(skillName: string, canonicalPath: string): Promise<AuditFinding[]>;
+//# sourceMappingURL=script-heuristics.d.ts.map

package/dist/rules/script-heuristics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-heuristics.d.ts","sourceRoot":"","sources":["../../src/rules/script-heuristics.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwBhD,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAyB7G"}

package/dist/rules/script-heuristics.js

@@ -0,0 +1,52 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+const SUSPICIOUS = [
+    /\brm\s+-rf\s+\//,
+    /\bcurl\b.*\|\s*(ba)?sh/,
+    /\bwget\b/,
+    /\beval\s*\(/,
+    /\bexec\s*\(/,
+    /child_process/,
+];
+async function walkScripts(dir, out) {
+    try {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const e of entries) {
+            const p = join(dir, e.name);
+            if (e.isDirectory() && !e.name.startsWith('.'))
+                await walkScripts(p, out);
+            else if (e.isFile() && /\.(sh|bash|py|js|ts|mjs)$/i.test(e.name))
+                out.push(p);
+        }
+    }
+    catch {
+        // ignore
+    }
+}
+export async function checkScriptHeuristics(skillName, canonicalPath) {
+    const findings = [];
+    const scriptsDir = join(canonicalPath, 'scripts');
+    const files = [];
+    await walkScripts(scriptsDir, files);
+    for (const file of files) {
+        try {
+            const content = await readFile(file, 'utf8');
+            for (const pattern of SUSPICIOUS) {
+                if (pattern.test(content)) {
+                    findings.push({
+                        rule: 'script-heuristics',
+                        severity: 'warning',
+                        skill: skillName,
+                        message: `Suspicious pattern in script: ${pattern.source}`,
+                        path: file,
+                    });
+                }
+            }
+        }
+        catch {
+            // unreadable
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=script-heuristics.js.map

package/dist/rules/script-heuristics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-heuristics.js","sourceRoot":"","sources":["../../src/rules/script-heuristics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,GAAG;IACjB,iBAAiB;IACjB,wBAAwB;IACxB,UAAU;IACV,aAAa;IACb,aAAa;IACb,eAAe;CAChB,CAAC;AAEF,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,GAAa;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBACrE,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,aAAqB;IAClF,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,mBAAmB;wBACzB,QAAQ,EAAE,SAAS;wBACnB,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,iCAAiC,OAAO,CAAC,MAAM,EAAE;wBAC1D,IAAI,EAAE,IAAI;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rules/size-limits.d.ts

@@ -0,0 +1,3 @@
+import type { AuditFinding } from '../types.js';
+export declare function checkSizeLimits(skillName: string, canonicalPath: string): Promise<AuditFinding[]>;
+//# sourceMappingURL=size-limits.d.ts.map

package/dist/rules/size-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"size-limits.d.ts","sourceRoot":"","sources":["../../src/rules/size-limits.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA2CvG"}

package/dist/rules/size-limits.js

@@ -0,0 +1,49 @@
+import { readFile, readdir, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+const MAX_SKILL_MD_LINES = 10_000;
+const MAX_FILE_BYTES = 5 * 1024 * 1024;
+export async function checkSizeLimits(skillName, canonicalPath) {
+    const findings = [];
+    for (const f of ['SKILL.md', 'skill.md']) {
+        try {
+            const content = await readFile(join(canonicalPath, f), 'utf8');
+            const lines = content.split('\n').length;
+            if (lines > MAX_SKILL_MD_LINES) {
+                findings.push({
+                    rule: 'size-limits',
+                    severity: 'warning',
+                    skill: skillName,
+                    message: `SKILL.md has ${lines} lines (>${MAX_SKILL_MD_LINES})`,
+                    path: join(canonicalPath, f),
+                });
+            }
+            break;
+        }
+        catch {
+            // continue
+        }
+    }
+    async function walk(dir) {
+        const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+        for (const e of entries) {
+            const p = join(dir, e.name);
+            if (e.isDirectory())
+                await walk(p);
+            else if (e.isFile()) {
+                const st = await stat(p);
+                if (st.size > MAX_FILE_BYTES) {
+                    findings.push({
+                        rule: 'size-limits',
+                        severity: 'warning',
+                        skill: skillName,
+                        message: `Large file ${(st.size / 1024 / 1024).toFixed(1)}MB`,
+                        path: p,
+                    });
+                }
+            }
+        }
+    }
+    await walk(canonicalPath);
+    return findings;
+}
+//# sourceMappingURL=size-limits.js.map

package/dist/rules/size-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"size-limits.js","sourceRoot":"","sources":["../../src/rules/size-limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,aAAqB;IAC5E,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,gBAAgB,KAAK,YAAY,kBAAkB,GAAG;oBAC/D,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,IAAI,EAAE,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,SAAS;wBACnB,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;wBAC7D,IAAI,EAAE,CAAC;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,4 @@
+import type { AuditReport } from './types.js';
+export declare function runAudit(cwd?: string): Promise<AuditReport>;
+export declare function auditExitCode(report: AuditReport, strict?: boolean): number;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAO5D,wBAAsB,QAAQ,CAAC,GAAG,SAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwBxE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,UAAQ,GAAG,MAAM,CAKzE"}

package/dist/runner.js

@@ -0,0 +1,37 @@
+import { loadLockfile } from '@skillctl/lockfile';
+import { checkIntegrityDrift } from './rules/integrity-drift.js';
+import { checkScriptHeuristics } from './rules/script-heuristics.js';
+import { checkNameDirMatch } from './rules/name-dir-match.js';
+import { checkPathTraversal } from './rules/path-traversal.js';
+import { checkSizeLimits } from './rules/size-limits.js';
+export async function runAudit(cwd = process.cwd()) {
+    const lock = await loadLockfile(cwd);
+    if (!lock || Object.keys(lock.skills).length === 0) {
+        return { status: 'ok', findings: [], scanned: 0 };
+    }
+    const findings = [];
+    findings.push(...(await checkIntegrityDrift(lock)));
+    for (const [name, entry] of Object.entries(lock.skills)) {
+        findings.push(...(await checkNameDirMatch(name, entry.canonicalPath)));
+        findings.push(...(await checkScriptHeuristics(name, entry.canonicalPath)));
+        findings.push(...(await checkPathTraversal(name, entry.canonicalPath)));
+        findings.push(...(await checkSizeLimits(name, entry.canonicalPath)));
+    }
+    const hasError = findings.some((f) => f.severity === 'error');
+    const hasWarning = findings.some((f) => f.severity === 'warning');
+    return {
+        status: hasError ? 'errors' : hasWarning ? 'warnings' : 'ok',
+        findings,
+        scanned: Object.keys(lock.skills).length,
+    };
+}
+export function auditExitCode(report, strict = false) {
+    if (report.status === 'errors')
+        return 2;
+    if (strict && report.status === 'warnings')
+        return 2;
+    if (report.status === 'warnings')
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAChD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAElE,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC5D,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,MAAM,GAAG,KAAK;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,14 @@
+export type AuditSeverity = 'info' | 'warning' | 'error';
+export interface AuditFinding {
+    rule: string;
+    severity: AuditSeverity;
+    skill: string;
+    message: string;
+    path?: string;
+}
+export interface AuditReport {
+    status: 'ok' | 'warnings' | 'errors';
+    findings: AuditFinding[];
+    scanned: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@skillctl/security",
+  "version": "0.2.0",
+  "description": "Security scanner and audit for skillctl skills",
+  "license": "MIT",
+  "author": "skillctl contributors",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@skillctl/core": "0.2.0",
+    "@skillctl/lockfile": "0.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "rimraf": "^5.0.7",
+    "typescript": "^5.6.3"
+  },
+  "engines": {
+    "node": ">=22.13"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/xFurti/skillctl.git",
+    "directory": "packages/security"
+  },
+  "keywords": [
+    "security",
+    "audit",
+    "agent-skills",
+    "scanner"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "rimraf dist",
+    "lint": "tsc --noEmit",
+    "test": "node --test ./dist/test/*.test.js 2>&1 || echo 'run after build'"
+  }
+}