@skillsmith/core 0.11.6 → 0.12.0

package/dist/src/scripts/__tests__/scan-imported-skills.test.js

@@ -76,6 +76,11 @@ describe('SMI-864: Scan Imported Skills', () => {
                     codeExecution: 0, // SMI-5359 Wave 4.2
                     obfuscatedDirective: 0, // SMI-5359 Wave 4.2
                     typosquat: 0, // SMI-595
+                    gatekeeperBypass: 0, // SMI-6033 Wave 2
+                    archiveEvasion: 0, // SMI-6033 Wave 2
+                    pasteHostFetch: 0, // SMI-6033 Wave 2
+                    encodedPayload: 0, // SMI-6033 Wave 2
+                    decoyMisdirection: 0, // SMI-6033 Wave 4
                 },
             };
             expect(shouldQuarantine(report)).toBe(false);
@@ -128,6 +133,11 @@ describe('SMI-864: Scan Imported Skills', () => {
                     codeExecution: 0, // SMI-5359 Wave 4.2
                     obfuscatedDirective: 0, // SMI-5359 Wave 4.2
                     typosquat: 0, // SMI-595
+                    gatekeeperBypass: 0, // SMI-6033 Wave 2
+                    archiveEvasion: 0, // SMI-6033 Wave 2
+                    pasteHostFetch: 0, // SMI-6033 Wave 2
+                    encodedPayload: 0, // SMI-6033 Wave 2
+                    decoyMisdirection: 0, // SMI-6033 Wave 4
                 },
             };
             expect(shouldQuarantine(report, { quarantineThreshold: 40 })).toBe(true);
@@ -155,6 +165,11 @@ describe('SMI-864: Scan Imported Skills', () => {
                     codeExecution: 0, // SMI-5359 Wave 4.2
                     obfuscatedDirective: 0, // SMI-5359 Wave 4.2
                     typosquat: 0, // SMI-595
+                    gatekeeperBypass: 0, // SMI-6033 Wave 2
+                    archiveEvasion: 0, // SMI-6033 Wave 2
+                    pasteHostFetch: 0, // SMI-6033 Wave 2
+                    encodedPayload: 0, // SMI-6033 Wave 2
+                    decoyMisdirection: 0, // SMI-6033 Wave 4
                 },
             };
             expect(shouldQuarantine(report)).toBe(true);
@@ -182,6 +197,11 @@ describe('SMI-864: Scan Imported Skills', () => {
                     codeExecution: 0, // SMI-5359 Wave 4.2
                     obfuscatedDirective: 0, // SMI-5359 Wave 4.2
                     typosquat: 0, // SMI-595
+                    gatekeeperBypass: 0, // SMI-6033 Wave 2
+                    archiveEvasion: 0, // SMI-6033 Wave 2
+                    pasteHostFetch: 0, // SMI-6033 Wave 2
+                    encodedPayload: 0, // SMI-6033 Wave 2
+                    decoyMisdirection: 0, // SMI-6033 Wave 4
                 },
             };
             expect(shouldQuarantine(report)).toBe(true);
@@ -209,6 +229,11 @@ describe('SMI-864: Scan Imported Skills', () => {
                     codeExecution: 0, // SMI-5359 Wave 4.2
                     obfuscatedDirective: 0, // SMI-5359 Wave 4.2
                     typosquat: 0, // SMI-595
+                    gatekeeperBypass: 0, // SMI-6033 Wave 2
+                    archiveEvasion: 0, // SMI-6033 Wave 2
+                    pasteHostFetch: 0, // SMI-6033 Wave 2
+                    encodedPayload: 0, // SMI-6033 Wave 2
+                    decoyMisdirection: 0, // SMI-6033 Wave 4
                 },
             };
             expect(shouldQuarantine(report)).toBe(false);

package/dist/src/scripts/__tests__/scan-imported-skills.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"scan-imported-skills.test.js","sourceRoot":"","sources":["../../../../src/scripts/__tests__/scan-imported-skills.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAClD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGzD,mDAAmD;AACnD,OAAO,EAAE,yBAAyB,EAAyB,MAAM,iCAAiC,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAG7D,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACzE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;aAC7D,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE;gBACvE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;aAC7D,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;YACnF,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;gBAC5D,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;aACpE,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;aACpE,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,wJAAwJ,EAAE,GAAG,EAAE;YAChK,8EAA8E;YAC9E,iFAAiF;YACjF,8EAA8E;YAC9E,4EAA4E;YAC5E,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,CAAC;gBACZ,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;iBACzB;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;YAC1G,mFAAmF;YACnF,wFAAwF;YACxF,qFAAqF;YACrF,uFAAuF;YACvF,2CAA2C;YAC3C,MAAM,GAAG,GAAG,CAAC,IAA6B,EAAE,OAAe,EAAmB,EAAE,CAAC,CAAC;gBAChF,IAAI;gBACJ,QAAQ,EAAE,QAAQ;gBAClB,OAAO;gBACP,UAAU,EAAE,MAAM;aACnB,CAAC,CAAA;YACF,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE;oBACR,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;iBACjC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,CAAC,EAAE,yDAAyD;gBACvE,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;iBACzB;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAC7E,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,GAAG;oBACd,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;iBACzB;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;gBACnF,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,EAAE;oBAClB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;iBACzB;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;gBACxE,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;iBACzB;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,mBAAmB;gBAC5B,YAAY,EAAE,kBAAkB;gBAChC,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;YACrD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;YAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;YAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;YAChD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,SAAS;aAChB,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;aAC9C,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACpC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,gBAAgB,GAAG;;;;;CAK9B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;YAE1D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,cAAc,GAAG;;;;CAI5B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;YAEvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,eAAe,GAAG;;;;CAI7B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAEzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,YAAY,GAAG;;;;;;;;;;CAU1B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;YAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;YACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,MAAM,OAAO,GAAG,2BAA2B,CAAA;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAExD,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,UAAU,GAAoB;gBAClC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,yBAAyB;oBACtC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,oBAAoB;oBACjC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,yBAAyB;iBACnC;gBACD;oBACE,EAAE,EAAE,qBAAqB;oBACzB,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,WAAW;oBACxB,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,yDAAyD;iBACnE;gBACD;oBACE,EAAE,EAAE,iBAAiB;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,aAAa;oBAC1B,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,gEAAgE;iBAC1E;aACF,CAAA;YAED,mBAAmB;YACnB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;YAEzD,kBAAkB;YAClB,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1D,MAAM,OAAO,GAIR,EAAE,CAAA;YAEP,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;gBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;gBAC9C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAC3D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAE5C,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,aAAa,EAAE,WAAW;oBAC1B,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;YAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;YAEhE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExC,uCAAuC;YACvC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpD,CAAC;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAA;YAC1E,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,EAAE;IACF,oFAAoF;IACpF,kFAAkF;IAClF,8EAA8E;IAC9E,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6BAA6B;IAC7B,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAC1E,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;YACrG,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,kCAAkC;gBACtC,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EACT,kJAAkJ;aACrJ,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAC9C,uEAAuE;YACvE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAE7C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAE9C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAA;YACrF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAChC,SAAS,EACT,oDAAoD,CACrD,CAAA;YACD,MAAM,SAAS,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;YAE9C,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"scan-imported-skills.test.js","sourceRoot":"","sources":["../../../../src/scripts/__tests__/scan-imported-skills.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAClD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGzD,mDAAmD;AACnD,OAAO,EAAE,yBAAyB,EAAyB,MAAM,iCAAiC,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAG7D,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACzE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;aAC7D,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE;gBACvE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;aAC7D,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;YACnF,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;gBAC5D,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;aACpE,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,QAAQ,GAAsB;gBAClC,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;aACpE,CAAA;YAED,MAAM,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,wJAAwJ,EAAE,GAAG,EAAE;YAChK,8EAA8E;YAC9E,iFAAiF;YACjF,8EAA8E;YAC9E,4EAA4E;YAC5E,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,CAAC;gBACZ,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;oBACxB,gBAAgB,EAAE,CAAC,EAAE,kBAAkB;oBACvC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,iBAAiB,EAAE,CAAC,EAAE,kBAAkB;iBACzC;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;YAC1G,mFAAmF;YACnF,wFAAwF;YACxF,qFAAqF;YACrF,uFAAuF;YACvF,2CAA2C;YAC3C,MAAM,GAAG,GAAG,CAAC,IAA6B,EAAE,OAAe,EAAmB,EAAE,CAAC,CAAC;gBAChF,IAAI;gBACJ,QAAQ,EAAE,QAAQ;gBAClB,OAAO;gBACP,UAAU,EAAE,MAAM;aACnB,CAAC,CAAA;YACF,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE;oBACR,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;oBAC/B,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;oBACxC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAChC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC;iBACjC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,CAAC,EAAE,yDAAyD;gBACvE,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;oBACxB,gBAAgB,EAAE,CAAC,EAAE,kBAAkB;oBACvC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,iBAAiB,EAAE,CAAC,EAAE,kBAAkB;iBACzC;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAC7E,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,GAAG;oBACd,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;oBACxB,gBAAgB,EAAE,CAAC,EAAE,kBAAkB;oBACvC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,iBAAiB,EAAE,CAAC,EAAE,kBAAkB;iBACzC;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;gBACnF,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,EAAE;oBAClB,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;oBACxB,gBAAgB,EAAE,CAAC,EAAE,kBAAkB;oBACvC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,iBAAiB,EAAE,CAAC,EAAE,kBAAkB;iBACzC;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;gBACxE,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,EAAE;gBAClB,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE;oBACb,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,aAAa,EAAE,CAAC;oBAChB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,CAAC;oBACtB,cAAc,EAAE,CAAC;oBACjB,cAAc,EAAE,CAAC;oBACjB,YAAY,EAAE,EAAE;oBAChB,SAAS,EAAE,CAAC,EAAE,WAAW;oBACzB,IAAI,EAAE,CAAC,EAAE,WAAW;oBACpB,GAAG,EAAE,CAAC,EAAE,WAAW;oBACnB,aAAa,EAAE,CAAC,EAAE,oBAAoB;oBACtC,mBAAmB,EAAE,CAAC,EAAE,oBAAoB;oBAC5C,SAAS,EAAE,CAAC,EAAE,UAAU;oBACxB,gBAAgB,EAAE,CAAC,EAAE,kBAAkB;oBACvC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,cAAc,EAAE,CAAC,EAAE,kBAAkB;oBACrC,iBAAiB,EAAE,CAAC,EAAE,kBAAkB;iBACzC;aACF,CAAA;YAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,mBAAmB;gBAC5B,YAAY,EAAE,kBAAkB;gBAChC,OAAO,EAAE,qBAAqB;gBAC9B,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAA;YACrD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;YAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;YAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;YAChD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,SAAS;aAChB,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;aAC9C,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAE9C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACpC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,gBAAgB,GAAG;;;;;CAK9B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;YAE1D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,cAAc,GAAG;;;;CAI5B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;YAEvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,eAAe,GAAG;;;;CAI7B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAEzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,YAAY,GAAG;;;;;;;;;;CAU1B,CAAA;YAEK,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;YAEtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;YACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,MAAM,OAAO,GAAG,2BAA2B,CAAA;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAExD,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,UAAU,GAAoB;gBAClC;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,yBAAyB;oBACtC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD;oBACE,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,oBAAoB;oBACjC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,yBAAyB;iBACnC;gBACD;oBACE,EAAE,EAAE,qBAAqB;oBACzB,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,WAAW;oBACxB,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,yDAAyD;iBACnE;gBACD;oBACE,EAAE,EAAE,iBAAiB;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,aAAa;oBAC1B,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,gEAAgE;iBAC1E;aACF,CAAA;YAED,mBAAmB;YACnB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;YAEzD,kBAAkB;YAClB,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAA;YAC1D,MAAM,OAAO,GAIR,EAAE,CAAA;YAEP,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;gBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;gBAC9C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAC3D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBAE5C,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,aAAa,EAAE,WAAW;oBAC1B,QAAQ;iBACT,CAAC,CAAA;YACJ,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;YAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;YAEhE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExC,uCAAuC;YACvC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpD,CAAC;YAED,4DAA4D;YAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAA;YAC1E,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,EAAE;IACF,oFAAoF;IACpF,kFAAkF;IAClF,8EAA8E;IAC9E,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,6BAA6B;IAC7B,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAC1E,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;YACrG,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,kCAAkC;gBACtC,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EACT,kJAAkJ;aACrJ,CAAA;YAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;YAC9C,uEAAuE;YACvE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAE7C,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YAE9C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAA;YACrF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAE3C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAChC,SAAS,EACT,oDAAoD,CACrD,CAAA;YACD,MAAM,SAAS,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;YAE9C,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/scripts/skill-scanner/trust-scorer.js

@@ -4,7 +4,7 @@
  *
  * Trust score calculation and quarantine decision logic.
  */
-import { calculateRiskScore } from '../../security/scanner/SecurityScanner.helpers.js';
+import { calculateRiskScore } from '../../security/scanner/SecurityScanner.risk-score.js';
 /** Default trust scorer configuration */
 export const DEFAULT_TRUST_CONFIG = {
     quarantineThreshold: 40,

package/dist/src/scripts/skill-scanner/trust-scorer.js.map

@@ -1 +1 @@
-{"version":3,"file":"trust-scorer.js","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/trust-scorer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAA;AAWtF,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,mBAAmB,EAAE,EAAE;CACxB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,SAA4B,oBAAoB,EAChD,SAA4B;IAE5B,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA;IAEnB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAA;IACjE,OAAO,aAAa,IAAI,MAAM,CAAC,mBAAmB,CAAA;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA0C;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAA;IAC5B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACvE,OAAO,GAAG,GAAG,KAAK,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA0C;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0C;IAIzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAA;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAA;IAEjE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AAChC,CAAC"}
+{"version":3,"file":"trust-scorer.js","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/trust-scorer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sDAAsD,CAAA;AAWzF,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,mBAAmB,EAAE,EAAE;CACxB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,SAA4B,oBAAoB,EAChD,SAA4B;IAE5B,MAAM,iBAAiB,GAAG,SAAS;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA;IAEnB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAA;IACjE,OAAO,aAAa,IAAI,MAAM,CAAC,mBAAmB,CAAA;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA0C;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAA;IAC5B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACvE,OAAO,GAAG,GAAG,KAAK,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA0C;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0C;IAIzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAA;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAA;IAEjE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AAChC,CAAC"}

package/dist/src/security/scanner/SecurityScanner.archive.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Security Scanner — password-protected archive evasion detector
+ * @module @skillsmith/core/security/scanner/SecurityScanner.archive
+ *
+ * SMI-6033 Wave 2 (Gap 3): zero zip/archive/password logic existed anywhere
+ * in the scanner before this file. Two sub-signals, single finding type
+ * (`archive_evasion`), two-tier severity within that one type:
+ *
+ * - CLI invocation syntax (`unzip -P`, `unrar x -p<pw>`, `7z x -p<pw>`,
+ *   `zip -P <pw> ... -e`) — precise, low-FP.
+ * - Prose co-occurrence (an archive noun + a password noun within a bounded
+ *   ±2-line window) — the FP-prone fuzzy case, kept as a SEPARATE code path
+ *   from the CLI-syntax case so its confidence/severity can stay capped
+ *   independently.
+ *
+ * Per the plan's §9 provenance-conditioned quarantine policy: a signal may
+ * quarantine alone only when a provenance condition specific to THIS skill's
+ * own content removes the legitimate interpretations. For archive passwords
+ * that condition is "inline literal password AND correlated with a fetch
+ * destination in the same content" — every legitimate counter-example
+ * (licensed SDK, commercial font/media pack, encrypted export, vendor
+ * support bundle) delivers the password out-of-band; shipping it inline next
+ * to the fetched archive nullifies the encryption's only non-evasion
+ * purpose. Every other shape (out-of-band `$VAR`/placeholder password,
+ * uncorrelated CLI usage, or prose-only mention) stays medium (advisory,
+ * co-signal-eligible) — never split into a second finding type, per the
+ * plan's explicit instruction; severity alone carries the two-tier design,
+ * mirroring how scanChmodFetchCompound's own compound signal uses ONE type
+ * (privilege_escalation) with severity (not weight) doing the tiering.
+ */
+import type { SecurityFinding } from './types.js';
+import type { LineContext } from './SecurityScanner.helpers.js';
+export declare function scanArchiveEvasion(content: string, lineContexts?: LineContext[]): SecurityFinding[];
+//# sourceMappingURL=SecurityScanner.archive.d.ts.map

package/dist/src/security/scanner/SecurityScanner.archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.archive.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AA2J/D,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAyDnB"}

package/dist/src/security/scanner/SecurityScanner.archive.js

@@ -0,0 +1,218 @@
+/**
+ * Security Scanner — password-protected archive evasion detector
+ * @module @skillsmith/core/security/scanner/SecurityScanner.archive
+ *
+ * SMI-6033 Wave 2 (Gap 3): zero zip/archive/password logic existed anywhere
+ * in the scanner before this file. Two sub-signals, single finding type
+ * (`archive_evasion`), two-tier severity within that one type:
+ *
+ * - CLI invocation syntax (`unzip -P`, `unrar x -p<pw>`, `7z x -p<pw>`,
+ *   `zip -P <pw> ... -e`) — precise, low-FP.
+ * - Prose co-occurrence (an archive noun + a password noun within a bounded
+ *   ±2-line window) — the FP-prone fuzzy case, kept as a SEPARATE code path
+ *   from the CLI-syntax case so its confidence/severity can stay capped
+ *   independently.
+ *
+ * Per the plan's §9 provenance-conditioned quarantine policy: a signal may
+ * quarantine alone only when a provenance condition specific to THIS skill's
+ * own content removes the legitimate interpretations. For archive passwords
+ * that condition is "inline literal password AND correlated with a fetch
+ * destination in the same content" — every legitimate counter-example
+ * (licensed SDK, commercial font/media pack, encrypted export, vendor
+ * support bundle) delivers the password out-of-band; shipping it inline next
+ * to the fetched archive nullifies the encryption's only non-evasion
+ * purpose. Every other shape (out-of-band `$VAR`/placeholder password,
+ * uncorrelated CLI usage, or prose-only mention) stays medium (advisory,
+ * co-signal-eligible) — never split into a second finding type, per the
+ * plan's explicit instruction; severity alone carries the two-tier design,
+ * mirroring how scanChmodFetchCompound's own compound signal uses ONE type
+ * (privilege_escalation) with severity (not weight) doing the tiering.
+ */
+import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, } from './SecurityScanner.helpers.js';
+import { safeRegexTest, safeRegexCheck } from './regex-utils.js';
+import { looksLikePlaceholderSecret } from './SecurityScanner.pii.js';
+import { FETCH_COMMAND_PATTERN, correlationTargetBasename, isCorrelatedWithFetchDestination, } from './SecurityScanner.fetch-correlation.js';
+// ============================================================================
+// Sub-signal A: CLI invocation syntax
+// ============================================================================
+/**
+ * Bounded per-tool invocation captures (mirrors CHMOD_TARGET's
+ * capture-then-inspect style rather than one large combined alternation —
+ * simpler to reason about and to keep ReDoS-safe). The password itself is
+ * extracted from the captured (bounded-length) segment via a lightweight
+ * follow-up regex, per tool syntax:
+ *   - unzip: `-P <password>` (space-separated; real unzip CLI syntax).
+ *   - unrar/7z: `-p<password>` (ATTACHED, no space — real unrar/7z CLI
+ *     syntax; a bare `-p` with nothing attached means "prompt
+ *     interactively," i.e. no inline password at all, so it is correctly
+ *     NOT matched by the one-or-more `\S+` capture below).
+ *   - zip: `-P <password>` (space-separated) AND the `-e` encrypt flag
+ *     present somewhere on the same bounded segment (zip's `-P` only makes
+ *     sense alongside `-e`).
+ */
+const UNZIP_INVOCATION = /\bunzip\b[^\n]{0,200}/i;
+const UNRAR_INVOCATION = /\bunrar\s+x\b[^\n]{0,200}/i;
+const SEVENZIP_INVOCATION = /\b7z\s+x\b[^\n]{0,200}/i;
+const ZIP_INVOCATION = /\bzip\b[^\n]{0,200}/i;
+const UNZIP_PASSWORD_ARG = /-P\s+(\S{1,200})/;
+const UNRAR_SEVENZIP_PASSWORD_ARG = /-p(\S{1,200})/i;
+const ZIP_PASSWORD_ARG = /-P\s+(\S{1,200})/;
+const ZIP_ENCRYPT_FLAG = /(?:^|\s)-e(?:\s|$)/;
+/** First archive-extension-bearing token on the line — the CLI's target file. */
+const ARCHIVE_FILENAME = /(\S+\.(?:zip|rar|7z|tar\.gz|tgz))\b/i;
+function findArchiveCliPassword(line) {
+    const unzip = safeRegexTest(UNZIP_INVOCATION, line);
+    if (unzip) {
+        const pw = safeRegexTest(UNZIP_PASSWORD_ARG, unzip[0]);
+        if (pw)
+            return { tool: 'unzip', password: pw[1], index: unzip.index ?? 0 };
+    }
+    const unrar = safeRegexTest(UNRAR_INVOCATION, line);
+    if (unrar) {
+        const pw = safeRegexTest(UNRAR_SEVENZIP_PASSWORD_ARG, unrar[0]);
+        if (pw)
+            return { tool: 'unrar', password: pw[1], index: unrar.index ?? 0 };
+    }
+    const sevenZip = safeRegexTest(SEVENZIP_INVOCATION, line);
+    if (sevenZip) {
+        const pw = safeRegexTest(UNRAR_SEVENZIP_PASSWORD_ARG, sevenZip[0]);
+        if (pw)
+            return { tool: '7z', password: pw[1], index: sevenZip.index ?? 0 };
+    }
+    const zip = safeRegexTest(ZIP_INVOCATION, line);
+    if (zip) {
+        const pw = safeRegexTest(ZIP_PASSWORD_ARG, zip[0]);
+        if (pw && safeRegexCheck(ZIP_ENCRYPT_FLAG, zip[0])) {
+            return { tool: 'zip', password: pw[1], index: zip.index ?? 0 };
+        }
+    }
+    return null;
+}
+/**
+ * SMI-6033 Wave 3: returns the FULL captured path (quotes stripped), not a
+ * bare basename — the shared correlation utility is now directory-aware and
+ * must not be handed a path-stripped target.
+ */
+function extractArchiveTargetPath(line) {
+    const m = safeRegexTest(ARCHIVE_FILENAME, line);
+    if (!m)
+        return '';
+    return m[1].replace(/['"]/g, '');
+}
+/** `$VAR` / `${VAR}` bare shell-variable reference — an out-of-band password. */
+const SHELL_VAR_REF = /^\$\{?[A-Za-z_][A-Za-z0-9_]*\}?$/;
+/**
+ * Is `password` an inline LITERAL secret (not a shell-variable reference,
+ * not a placeholder/low-entropy example value)? Reuses the same
+ * looksLikePlaceholderSecret gate the sensitive_path/PII detectors use — the
+ * value has no `key:`/`key=` prefix to strip here (it's a bare CLI
+ * argument), which looksLikePlaceholderSecret's internal extraction already
+ * tolerates (no `:`/`=` present means the whole string passes through
+ * unchanged).
+ *
+ * SMI-6033 Wave 4 bugfix (found during Wave 4's own verification, fixed here
+ * since PR #2371/Wave 3 — the file this bug shipped in — was still open):
+ * `\S{1,200}` in UNZIP_PASSWORD_ARG/ZIP_PASSWORD_ARG/UNRAR_SEVENZIP_PASSWORD_ARG
+ * captures the CLI argument RAW, quotes included, so a perfectly ordinary,
+ * shell-safe out-of-band reference like `unzip -P "$TOOLKIT_PASSWORD" x.zip`
+ * arrived here as `"$TOOLKIT_PASSWORD"` (with literal quote characters) —
+ * `SHELL_VAR_REF` never matched (it anchors on a bare `$`, not a leading
+ * quote), so this fell through to `looksLikePlaceholderSecret`, which also
+ * doesn't recognize it, and the whole thing was misclassified as an inline
+ * LITERAL secret. Combined with a correlated fetch target, that reached
+ * standalone-`critical` on a completely benign shell idiom — a real
+ * quarantine-level false positive, confirmed empirically. Strip surrounding
+ * quotes first (mirrors `extractArchiveTargetPath`'s own
+ * `.replace(/['"]/g, '')` treatment of the same class of CLI capture) so
+ * `SHELL_VAR_REF` sees the actual `$VAR` shape underneath.
+ */
+function isInlineLiteralPassword(password) {
+    if (!password)
+        return false;
+    const unquoted = password.replace(/^['"]|['"]$/g, '');
+    if (safeRegexCheck(SHELL_VAR_REF, unquoted))
+        return false;
+    return !looksLikePlaceholderSecret(unquoted);
+}
+// ============================================================================
+// Sub-signal B: prose co-occurrence (fuzzy, medium-only)
+// ============================================================================
+const ARCHIVE_NOUN = /\b(?:zip|rar|7z|tar\.gz|tgz|archive)\b/i;
+const PASSWORD_NOUN = /\bpassword\b|\bpasscode\b|\bpassphrase\b/i;
+/**
+ * Line numbers (1-indexed) where an archive noun co-occurs with a password
+ * noun within a bounded ±2-line window (same line or 2 lines either side).
+ */
+function findArchivePasswordProseLines(lines) {
+    const flagged = new Set();
+    lines.forEach((line, index) => {
+        if (!safeRegexCheck(ARCHIVE_NOUN, line))
+            return;
+        const start = Math.max(0, index - 2);
+        const end = Math.min(lines.length - 1, index + 2);
+        for (let i = start; i <= end; i++) {
+            if (safeRegexCheck(PASSWORD_NOUN, lines[i])) {
+                flagged.add(index + 1);
+                break;
+            }
+        }
+    });
+    return Array.from(flagged);
+}
+// ============================================================================
+// Detector
+// ============================================================================
+export function scanArchiveEvasion(content, lineContexts) {
+    const findings = [];
+    const lines = content.split('\n');
+    const contexts = lineContexts ?? analyzeMarkdownContext(content);
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
+    const emittedLines = new Set();
+    // Sub-signal A: CLI invocation syntax.
+    lines.forEach((line, index) => {
+        const lineNumber = index + 1;
+        const cli = findArchiveCliPassword(line);
+        if (!cli)
+            return;
+        const ctx = contexts[index];
+        const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(line, cli.index);
+        const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+        const inlineLiteral = isInlineLiteralPassword(cli.password);
+        const targetPath = extractArchiveTargetPath(line);
+        const correlated = correlationTargetBasename(targetPath).length >= 3 &&
+            isCorrelatedWithFetchDestination(targetPath, fetchLines);
+        const critical = !inDocContext && inlineLiteral && correlated;
+        findings.push({
+            type: 'archive_evasion',
+            severity: inDocContext ? 'low' : critical ? 'critical' : 'medium',
+            message: `Password-protected archive CLI usage (${cli.tool}): "${line.trim().slice(0, 100)}"`,
+            location: line.trim().slice(0, 100),
+            lineNumber,
+            category: 'archive_evasion',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'high',
+        });
+        emittedLines.add(lineNumber);
+    });
+    // Sub-signal B: prose co-occurrence — the fuzzy, FP-prone case. NEVER
+    // critical (no provenance condition can apply to a bare noun pairing), and
+    // capped at 'medium' confidence to reflect the heuristic's own uncertainty.
+    for (const lineNumber of findArchivePasswordProseLines(lines)) {
+        if (emittedLines.has(lineNumber))
+            continue; // CLI-syntax already emitted for this line
+        const ctx = contexts[lineNumber - 1];
+        const inDocContext = ctx ? isDocumentationContext(ctx) : false;
+        findings.push({
+            type: 'archive_evasion',
+            severity: inDocContext ? 'low' : 'medium',
+            message: `Archive and password mentioned in close proximity: "${lines[lineNumber - 1].trim().slice(0, 100)}"`,
+            location: lines[lineNumber - 1].trim().slice(0, 100),
+            lineNumber,
+            category: 'archive_evasion',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'medium',
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=SecurityScanner.archive.js.map

package/dist/src/security/scanner/SecurityScanner.archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.archive.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,wCAAwC,CAAA;AAE/C,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAA;AACjD,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AACrD,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AACrD,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAE7C,MAAM,kBAAkB,GAAG,kBAAkB,CAAA;AAC7C,MAAM,2BAA2B,GAAG,gBAAgB,CAAA;AACpD,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAC3C,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAE7C,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,sCAAsC,CAAA;AAQ/D,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,aAAa,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/D,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,aAAa,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAClE,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClD,IAAI,EAAE,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAClC,CAAC;AAED,iFAAiF;AACjF,MAAM,aAAa,GAAG,kCAAkC,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACrD,IAAI,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IACzD,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAA;AAC9C,CAAC;AAED,+EAA+E;AAC/E,yDAAyD;AACzD,+EAA+E;AAE/E,MAAM,YAAY,GAAG,yCAAyC,CAAA;AAC9D,MAAM,aAAa,GAAG,2CAA2C,CAAA;AAEjE;;;GAGG;AACH,SAAS,6BAA6B,CAAC,KAAe;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC;YAAE,OAAM;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACjD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACtB,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC5B,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IACxF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtC,uCAAuC;IACvC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,GAAG;YAAE,OAAM;QAEhB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;QAE9E,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3D,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,UAAU,GACd,yBAAyB,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC;YACjD,gCAAgC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,CAAC,YAAY,IAAI,aAAa,IAAI,UAAU,CAAA;QAE7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACjE,OAAO,EAAE,yCAAyC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;YAC7F,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,UAAU;YACV,QAAQ,EAAE,iBAAiB;YAC3B,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAA;QACF,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,KAAK,MAAM,UAAU,IAAI,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAQ,CAAC,2CAA2C;QACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;QACpC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAC9D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACzC,OAAO,EAAE,uDAAuD,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;YAC7G,QAAQ,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpD,UAAU;YACV,QAAQ,EAAE,iBAAiB;YAC3B,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;SAC5C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/src/security/scanner/SecurityScanner.compound.d.ts

@@ -10,4 +10,5 @@
 import type { SecurityFinding } from './types.js';
 import type { LineContext } from './SecurityScanner.helpers.js';
 export declare function scanChmodFetchCompound(content: string, alreadyFlaggedLines: ReadonlySet<number>, lineContexts?: LineContext[]): SecurityFinding[];
+export declare function scanGatekeeperBypass(content: string, lineContexts?: LineContext[], isHighTrustAuthor?: boolean): SecurityFinding[];
 //# sourceMappingURL=SecurityScanner.compound.d.ts.map

package/dist/src/security/scanner/SecurityScanner.compound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityScanner.compound.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAiE/D,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAyDnB"}
+{"version":3,"file":"SecurityScanner.compound.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AA4C/D,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAwDnB;AA8ED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,WAAW,EAAE,EAC5B,iBAAiB,UAAQ,GACxB,eAAe,EAAE,CAwCnB"}

package/dist/src/security/scanner/SecurityScanner.compound.js

@@ -10,6 +10,7 @@
  */
 import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, } from './SecurityScanner.helpers.js';
 import { safeRegexTest } from './regex-utils.js';
+import { FETCH_COMMAND_PATTERN, correlationTargetBasename, isCorrelatedWithFetchDestination, } from './SecurityScanner.fetch-correlation.js';
 /**
  * SMI-5424 PR2: owner-permission chmod is a COMPOUND signal, not standalone —
  * `chmod 755 ./bin/cli` / `chmod +x build.sh` previously false-fired
@@ -34,49 +35,19 @@ import { safeRegexTest } from './regex-utils.js';
 // that bare `chmod +x foo` (no u/g/o/a prefix — the most common make-executable form
 // in install scripts and malicious droppers) still matches.
 const OWNER_PERM_CHMOD = /\bchmod\s+(?:-[A-Za-z]+\s+)?(?:[0-7]{3,4}|[ugoa]*(?:[+\-=][rwxXstugo]+(?:,[ugoa]*[+\-=][rwxXstugo]*)*)+)/i;
-// FIX-1: actual fetch COMMANDS only — bare prose tokens (`# downloaded`, `See https://…`,
-// `npx tool init`) false-fired next to a chmod. curl/wget/git-clone, and npx only with a URL.
-const CHMOD_FETCH_CONTEXT = /\b(?:curl|wget)\b|\bgit\s+clone\b|\bnpx\b[^\n]{0,80}https?:\/\//i;
 // FIX-2: capture the chmod target path so a fetch command anywhere correlates by basename.
 // SMI-5433: prefix widened to match the same extended forms as OWNER_PERM_CHMOD; capture
 // group (\S+) (the target path) is unchanged.
 const CHMOD_TARGET = /\bchmod\s+(?:-[A-Za-z]+\s+)?(?:[0-7]{3,4}|[ugoa]*(?:[+\-=][rwxXstugo]+(?:,[ugoa]*[+\-=][rwxXstugo]*)*)+)\s+(\S+)/i;
-function escapeRegExp(s) {
-    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-// SMI-5431: the IMPLICIT download destination of a fetch command — the file written with
-// NO explicit -o/-O/--output<space>/> redirect: `wget <url>` (no -O/-o) → URL last segment;
-// `git clone <url>` → repo dir (minus `.git`); `curl --output=<file>` (equals form, missed by
-// the explicit regex). A bare `curl <url>` GET writes to STDOUT → '' (never correlates). ReDoS-safe.
-function implicitDownloadBasename(line) {
-    const lastSegment = (urlAfterScheme) => {
-        const noFrag = urlAfterScheme.split(/[?#]/)[0];
-        const slash = noFrag.indexOf('/'); // first slash = end of host
-        if (slash < 0)
-            return ''; // host only -> wget writes index.html
-        const path = noFrag.slice(slash + 1).replace(/\/+$/, '');
-        return path === '' ? '' : (path.split('/').pop() ?? '');
-    };
-    const wget = line.match(/\bwget\b(?![^\n]{0,200}\s-[oO]\b)[^\n]{0,200}?https?:\/\/(\S{1,400})/i);
-    if (wget)
-        return lastSegment(wget[1]);
-    const clone = line.match(/\bgit\s+clone\b[^\n]{0,200}?https?:\/\/(\S{1,400})/i);
-    if (clone)
-        return lastSegment(clone[1]).replace(/\.git$/i, '');
-    const curlEq = line.match(/\bcurl\b[^\n]{0,200}?--output=['"]?(\S{1,400})/i);
-    if (curlEq)
-        return curlEq[1].replace(/['"]/g, '').split('/').pop() ?? '';
-    return '';
-}
 export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContexts) {
     const findings = [];
     const lines = content.split('\n');
     const contexts = lineContexts ?? analyzeMarkdownContext(content);
     // FIX-2: lines carrying a fetch command, for distance-independent correlation.
     // H-6 (SMI-5433): route through safeRegexTest so the 10,000-char cap applies uniformly
-    // to the per-line filter too (CHMOD_FETCH_CONTEXT is provably linear, so this is
+    // to the per-line filter too (FETCH_COMMAND_PATTERN is provably linear, so this is
     // defense-in-depth consistency, not a ReDoS fix).
-    const fetchLines = lines.filter((l) => safeRegexTest(CHMOD_FETCH_CONTEXT, l) !== null);
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
     lines.forEach((line, index) => {
         const lineNumber = index + 1;
         // World-writable / setuid already emitted critical for this line — skip.
@@ -88,20 +59,21 @@ export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContext
         // Bounded ±1-line window for the download-then-chmod adjacency.
         const window = [lines[index - 1] ?? '', line, lines[index + 1] ?? ''].join('\n');
         // H-6 (SMI-5433): route through safeRegexTest for the 10,000-char cap.
-        const adjacentFetch = safeRegexTest(CHMOD_FETCH_CONTEXT, window) !== null;
-        // FIX-2 + SMI-5431: correlate the chmod target basename (≥3 chars) against a fetch
+        const adjacentFetch = safeRegexTest(FETCH_COMMAND_PATTERN, window) !== null;
+        // FIX-2 + SMI-5431: correlate the chmod target (final segment ≥3 chars) against a fetch
         // command's DOWNLOAD DESTINATION anywhere — explicit (-o/-O/--output<space>/>, with an
         // optional leading path) via regex, OR implicit (wget/git-clone/curl --output=) via
         // exact-token equality. Anchored on the destination, NOT basename-anywhere, so a URL
         // path / query / header value (governance FP class) and a bare curl GET do not correlate.
+        // SMI-6033 Wave 3: the FULL captured path is handed to the shared utility (it used to be
+        // reduced to a bare basename here, discarding the directory the utility now compares).
         let correlated = false;
         // H-6 (SMI-5433): route through safeRegexTest for the 10,000-char cap.
         const tm = safeRegexTest(CHMOD_TARGET, line);
         if (tm) {
-            const base = tm[1].replace(/['"]/g, '').split('/').pop() ?? '';
-            if (base.length >= 3) {
-                const re = new RegExp(`(?:-o|-O|--output|>>?)\\s*['"]?(?:[^\\s'"]*/)?${escapeRegExp(base)}(?:[\\s'"?]|$)`);
-                correlated = fetchLines.some((l) => re.test(l) || implicitDownloadBasename(l) === base);
+            const targetPath = tm[1].replace(/['"]/g, '');
+            if (correlationTargetBasename(targetPath).length >= 3) {
+                correlated = isCorrelatedWithFetchDestination(targetPath, fetchLines);
             }
         }
         if (!adjacentFetch && !correlated)
@@ -124,4 +96,111 @@ export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContext
     });
     return findings;
 }
+/**
+ * SMI-6033 Wave 2/3 (Gap 5, tiered per the plan's "Product decision:
+ * Gatekeeper-bypass carve-out", resolved 2026-08-14): xattr Gatekeeper-bypass
+ * detector.
+ *
+ * `xattr -c <file>` (clear ALL extended attributes) or
+ * `xattr -d com.apple.quarantine <file>` (delete just the quarantine
+ * attribute — with or without a combined `-r` recursive flag) strips
+ * macOS's "downloaded from the internet" Gatekeeper warning from an
+ * unsigned binary.
+ *
+ * NOT unconditionally standalone-critical: `critical` requires the xattr
+ * target's path to be correlated with a fetch destination elsewhere in
+ * the content (the shared `isCorrelatedWithFetchDestination` utility, same
+ * as `scanChmodFetchCompound` above and `scanArchiveEvasion`'s inline-literal
+ * form) — the "download a payload, strip its quarantine bit" attack shape.
+ * Uncorrelated usage (e.g. a general macOS-troubleshooting doc mentioning
+ * `xattr -c` with no fetched file in scope) stays `medium`, regardless of
+ * `isHighTrustAuthor`.
+ *
+ * `isHighTrustAuthor` (default `false`) is the trust-tier carve-out: when the
+ * correlated (would-be-critical) form fires AND the caller has verified the
+ * skill's author is high-trust, severity downgrades to `medium` instead of
+ * `critical` — a downgrade, not a full exemption, since even a high-trust
+ * account can be compromised (a `medium` finding still counts toward the
+ * two-distinct-medium-signal escalation rule). This parameter must be sourced
+ * from a VERIFIED author signal — the indexer's own resolved GitHub repo
+ * owner, never a self-declared `SKILL.md` frontmatter field, which is
+ * trivially spoofable. `skill_validate`'s offline call site has no such
+ * verified signal (a network call to check it would break the tool's
+ * deliberately-offline design, per Gap 7) and so must never pass this
+ * parameter — it stays defaulted `false`, keeping correlated xattr
+ * always-critical there, full stop. Checksum/signature-verification prose
+ * near the command does NOT downgrade a non-high-trust correlated form: it's
+ * attacker-authored text and proves nothing about the artifact's safety, so
+ * no such logic exists here.
+ *
+ * Two bounded, ReDoS-safe TRIGGER patterns rather than one combined
+ * alternation (mirrors CHMOD_TARGET's capture-then-inspect style):
+ * XATTR_CLEAR_ALL matches any `-c`-bearing flag cluster within 40 chars of
+ * `xattr` (`-c`, `-cr`, `-rc`, ...); XATTR_DELETE_QUARANTINE matches a
+ * `-d`-bearing flag cluster immediately followed by the literal
+ * `com.apple.quarantine` attribute name (covers both a combined `-dr`/`-rd`
+ * cluster and two separate `-r -d com.apple.quarantine` tokens, since the
+ * attribute name always immediately follows whichever token carries `-d`).
+ * Reading or writing a DIFFERENT attribute (`-l`, `-p <name>`, `-w <name>
+ * <value>`) is not a bypass and does not match either pattern. A second,
+ * TARGET-capturing sibling of each pattern (below) exists ONLY to extract the
+ * xattr'd file's basename for the correlation check — it never changes
+ * whether a line trips the detector.
+ */
+const XATTR_CLEAR_ALL = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*c[a-zA-Z]*\b/i;
+const XATTR_DELETE_QUARANTINE = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*d[a-zA-Z]*\s+['"]?com\.apple\.quarantine\b/i;
+const XATTR_CLEAR_ALL_TARGET = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*c[a-zA-Z]*\b\s+['"]?(\S+)/i;
+const XATTR_DELETE_QUARANTINE_TARGET = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*d[a-zA-Z]*\s+['"]?com\.apple\.quarantine\b['"]?\s+['"]?(\S+)/i;
+/**
+ * The FILE target of an xattr Gatekeeper-bypass command (real xattr CLI
+ * syntax is `xattr [-flags] [attr_name] target...`, so the target always
+ * comes right after whichever trigger variant matched) — used only for the
+ * fetch-correlation trust-tier check. Extraction failure (no trailing token)
+ * simply yields '' (never correlates); it does not affect whether the line
+ * trips the underlying detector. SMI-6033 Wave 3: returns the FULL path
+ * (quotes stripped), not a bare basename — the shared correlation utility is
+ * now directory-aware and must not be handed a path-stripped target.
+ */
+function extractXattrTargetPath(line) {
+    const m = safeRegexTest(XATTR_CLEAR_ALL_TARGET, line) ??
+        safeRegexTest(XATTR_DELETE_QUARANTINE_TARGET, line);
+    if (!m)
+        return '';
+    return m[1].replace(/['"]/g, '');
+}
+export function scanGatekeeperBypass(content, lineContexts, isHighTrustAuthor = false) {
+    const findings = [];
+    const lines = content.split('\n');
+    const contexts = lineContexts ?? analyzeMarkdownContext(content);
+    // Fetch-carrying lines, for the correlation precondition (mirrors
+    // scanChmodFetchCompound/scanArchiveEvasion's own fetchLines computation).
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
+    lines.forEach((line, index) => {
+        const match = safeRegexTest(XATTR_CLEAR_ALL, line) ?? safeRegexTest(XATTR_DELETE_QUARANTINE, line);
+        if (!match)
+            return;
+        const ctx = contexts[index];
+        const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(line, match.index ?? 0);
+        const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+        const targetPath = extractXattrTargetPath(line);
+        const correlated = correlationTargetBasename(targetPath).length >= 3 &&
+            isCorrelatedWithFetchDestination(targetPath, fetchLines);
+        // Product decision (2026-08-14): correlated form is standalone-critical
+        // UNLESS the caller has verified the author is high-trust (indexer path
+        // only — see this function's header). Uncorrelated usage never reaches
+        // 'critical' regardless of trust tier.
+        const critical = !inDocContext && correlated && !isHighTrustAuthor;
+        findings.push({
+            type: 'gatekeeper_bypass',
+            severity: inDocContext ? 'low' : critical ? 'critical' : 'medium',
+            message: `xattr command strips the macOS Gatekeeper quarantine attribute: "${match[0].trim().slice(0, 100)}"`,
+            location: line.trim().slice(0, 100),
+            lineNumber: index + 1,
+            category: 'gatekeeper_bypass',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'high',
+        });
+    });
+    return findings;
+}
 //# sourceMappingURL=SecurityScanner.compound.js.map