@skillsmith/core 0.12.2 → 0.12.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (132) hide show
  1. package/CHANGELOG.md +9 -0
  2. package/README.md +2 -2
  3. package/dist/.tsbuildinfo +1 -1
  4. package/dist/src/index.d.ts +2 -1
  5. package/dist/src/index.d.ts.map +1 -1
  6. package/dist/src/index.js +3 -1
  7. package/dist/src/index.js.map +1 -1
  8. package/dist/src/scripts/__tests__/scan-imported-skills.test.js +9 -1
  9. package/dist/src/scripts/__tests__/scan-imported-skills.test.js.map +1 -1
  10. package/dist/src/scripts/scan-imported-skills.d.ts +7 -1
  11. package/dist/src/scripts/scan-imported-skills.d.ts.map +1 -1
  12. package/dist/src/scripts/scan-imported-skills.js +15 -2
  13. package/dist/src/scripts/scan-imported-skills.js.map +1 -1
  14. package/dist/src/scripts/skill-scanner/allowlist.d.ts +10 -0
  15. package/dist/src/scripts/skill-scanner/allowlist.d.ts.map +1 -1
  16. package/dist/src/scripts/skill-scanner/allowlist.js +10 -0
  17. package/dist/src/scripts/skill-scanner/allowlist.js.map +1 -1
  18. package/dist/src/scripts/skill-scanner/index.d.ts +8 -0
  19. package/dist/src/scripts/skill-scanner/index.d.ts.map +1 -1
  20. package/dist/src/scripts/skill-scanner/index.js +13 -5
  21. package/dist/src/scripts/skill-scanner/index.js.map +1 -1
  22. package/dist/src/scripts/skill-scanner/trust-scorer.d.ts.map +1 -1
  23. package/dist/src/scripts/skill-scanner/trust-scorer.js +6 -0
  24. package/dist/src/scripts/skill-scanner/trust-scorer.js.map +1 -1
  25. package/dist/src/security/scanner/SecurityScanner.action-context.d.ts +15 -0
  26. package/dist/src/security/scanner/SecurityScanner.action-context.d.ts.map +1 -0
  27. package/dist/src/security/scanner/SecurityScanner.action-context.js +209 -0
  28. package/dist/src/security/scanner/SecurityScanner.action-context.js.map +1 -0
  29. package/dist/src/security/scanner/SecurityScanner.d.ts +25 -0
  30. package/dist/src/security/scanner/SecurityScanner.d.ts.map +1 -1
  31. package/dist/src/security/scanner/SecurityScanner.helpers.d.ts +40 -1
  32. package/dist/src/security/scanner/SecurityScanner.helpers.d.ts.map +1 -1
  33. package/dist/src/security/scanner/SecurityScanner.helpers.js +88 -51
  34. package/dist/src/security/scanner/SecurityScanner.helpers.js.map +1 -1
  35. package/dist/src/security/scanner/SecurityScanner.js +39 -6
  36. package/dist/src/security/scanner/SecurityScanner.js.map +1 -1
  37. package/dist/src/security/scanner/SecurityScanner.pii.d.ts +30 -0
  38. package/dist/src/security/scanner/SecurityScanner.pii.d.ts.map +1 -1
  39. package/dist/src/security/scanner/SecurityScanner.pii.js +8 -1
  40. package/dist/src/security/scanner/SecurityScanner.pii.js.map +1 -1
  41. package/dist/src/security/scanner/SecurityScanner.prose-lexicon.d.ts +60 -0
  42. package/dist/src/security/scanner/SecurityScanner.prose-lexicon.d.ts.map +1 -0
  43. package/dist/src/security/scanner/SecurityScanner.prose-lexicon.js +228 -0
  44. package/dist/src/security/scanner/SecurityScanner.prose-lexicon.js.map +1 -0
  45. package/dist/src/security/scanner/SecurityScanner.scanners.d.ts.map +1 -1
  46. package/dist/src/security/scanner/SecurityScanner.scanners.js +35 -5
  47. package/dist/src/security/scanner/SecurityScanner.scanners.js.map +1 -1
  48. package/dist/src/security/scanner/SecurityScanner.value-gate.d.ts +49 -0
  49. package/dist/src/security/scanner/SecurityScanner.value-gate.d.ts.map +1 -0
  50. package/dist/src/security/scanner/SecurityScanner.value-gate.js +134 -0
  51. package/dist/src/security/scanner/SecurityScanner.value-gate.js.map +1 -0
  52. package/dist/src/security/scanner/SecurityScanner.weak-passwords.d.ts +55 -0
  53. package/dist/src/security/scanner/SecurityScanner.weak-passwords.d.ts.map +1 -0
  54. package/dist/src/security/scanner/SecurityScanner.weak-passwords.js +313 -0
  55. package/dist/src/security/scanner/SecurityScanner.weak-passwords.js.map +1 -0
  56. package/dist/src/security/scanner/patterns.d.ts +16 -6
  57. package/dist/src/security/scanner/patterns.d.ts.map +1 -1
  58. package/dist/src/security/scanner/patterns.js +25 -61
  59. package/dist/src/security/scanner/patterns.js.map +1 -1
  60. package/dist/src/security/scanner/patterns.sensitive-path.d.ts +45 -0
  61. package/dist/src/security/scanner/patterns.sensitive-path.d.ts.map +1 -0
  62. package/dist/src/security/scanner/patterns.sensitive-path.js +137 -0
  63. package/dist/src/security/scanner/patterns.sensitive-path.js.map +1 -0
  64. package/dist/src/security/scanner/regex-utils.d.ts +31 -17
  65. package/dist/src/security/scanner/regex-utils.d.ts.map +1 -1
  66. package/dist/src/security/scanner/regex-utils.js +31 -17
  67. package/dist/src/security/scanner/regex-utils.js.map +1 -1
  68. package/dist/src/security/scanner/types.d.ts +9 -0
  69. package/dist/src/security/scanner/types.d.ts.map +1 -1
  70. package/dist/src/utils/index.d.ts +1 -0
  71. package/dist/src/utils/index.d.ts.map +1 -1
  72. package/dist/src/utils/index.js +2 -0
  73. package/dist/src/utils/index.js.map +1 -1
  74. package/dist/src/utils/skill-name.d.ts +19 -0
  75. package/dist/src/utils/skill-name.d.ts.map +1 -0
  76. package/dist/src/utils/skill-name.js +26 -0
  77. package/dist/src/utils/skill-name.js.map +1 -0
  78. package/dist/src/utils/skill-name.test.d.ts +2 -0
  79. package/dist/src/utils/skill-name.test.d.ts.map +1 -0
  80. package/dist/src/utils/skill-name.test.js +34 -0
  81. package/dist/src/utils/skill-name.test.js.map +1 -0
  82. package/dist/tests/security/ContinuousSecurity.performance.test.js +12 -7
  83. package/dist/tests/security/ContinuousSecurity.performance.test.js.map +1 -1
  84. package/dist/tests/security/ContinuousSecurity.test.js +14 -2
  85. package/dist/tests/security/ContinuousSecurity.test.js.map +1 -1
  86. package/dist/tests/security/ai-defence-multiline-promotion.test.d.ts +10 -12
  87. package/dist/tests/security/ai-defence-multiline-promotion.test.d.ts.map +1 -1
  88. package/dist/tests/security/ai-defence-multiline-promotion.test.js +26 -33
  89. package/dist/tests/security/ai-defence-multiline-promotion.test.js.map +1 -1
  90. package/dist/tests/security/nested-instruction-long-attribute.test.js +20 -10
  91. package/dist/tests/security/nested-instruction-long-attribute.test.js.map +1 -1
  92. package/dist/tests/security/scanner-evidence-tiers.test.js +15 -0
  93. package/dist/tests/security/scanner-evidence-tiers.test.js.map +1 -1
  94. package/dist/tests/security/scanner-multiline-cap.test.d.ts +21 -0
  95. package/dist/tests/security/scanner-multiline-cap.test.d.ts.map +1 -0
  96. package/dist/tests/security/scanner-multiline-cap.test.js +152 -0
  97. package/dist/tests/security/scanner-multiline-cap.test.js.map +1 -0
  98. package/dist/tests/security/scanner-regression-guard.test.js +37 -0
  99. package/dist/tests/security/scanner-regression-guard.test.js.map +1 -1
  100. package/dist/tests/security/scanner-witness-sw1.test.d.ts +32 -0
  101. package/dist/tests/security/scanner-witness-sw1.test.d.ts.map +1 -0
  102. package/dist/tests/security/scanner-witness-sw1.test.js +255 -0
  103. package/dist/tests/security/scanner-witness-sw1.test.js.map +1 -0
  104. package/dist/tests/security/sensitive-path-adversarial-review.test.d.ts +2 -0
  105. package/dist/tests/security/sensitive-path-adversarial-review.test.d.ts.map +1 -0
  106. package/dist/tests/security/sensitive-path-adversarial-review.test.js +193 -0
  107. package/dist/tests/security/sensitive-path-adversarial-review.test.js.map +1 -0
  108. package/dist/tests/security/sensitive-path-fp.test.js +248 -0
  109. package/dist/tests/security/sensitive-path-fp.test.js.map +1 -1
  110. package/dist/tests/security/smi5879-corroboration.core.test.js +44 -0
  111. package/dist/tests/security/smi5879-corroboration.core.test.js.map +1 -1
  112. package/dist/tests/security/weak-password-lexicon.test.d.ts +18 -0
  113. package/dist/tests/security/weak-password-lexicon.test.d.ts.map +1 -0
  114. package/dist/tests/security/weak-password-lexicon.test.js +122 -0
  115. package/dist/tests/security/weak-password-lexicon.test.js.map +1 -0
  116. package/dist/tests/skill-scanner/allowlist.test.js +58 -4
  117. package/dist/tests/skill-scanner/allowlist.test.js.map +1 -1
  118. package/dist/tests/skill-scanner/categorizer.test.d.ts +2 -0
  119. package/dist/tests/skill-scanner/categorizer.test.d.ts.map +1 -0
  120. package/dist/tests/skill-scanner/categorizer.test.js +71 -0
  121. package/dist/tests/skill-scanner/categorizer.test.js.map +1 -0
  122. package/dist/tests/skill-scanner/cli-guard.test.d.ts +23 -0
  123. package/dist/tests/skill-scanner/cli-guard.test.d.ts.map +1 -0
  124. package/dist/tests/skill-scanner/cli-guard.test.js +71 -0
  125. package/dist/tests/skill-scanner/cli-guard.test.js.map +1 -0
  126. package/dist/tests/unit/services/skill-installation.content.test.js +36 -0
  127. package/dist/tests/unit/services/skill-installation.content.test.js.map +1 -1
  128. package/dist/tests/unit/services/skill-installation.service.sensitive-path-fp.test.d.ts +29 -0
  129. package/dist/tests/unit/services/skill-installation.service.sensitive-path-fp.test.d.ts.map +1 -0
  130. package/dist/tests/unit/services/skill-installation.service.sensitive-path-fp.test.js +200 -0
  131. package/dist/tests/unit/services/skill-installation.service.sensitive-path-fp.test.js.map +1 -0
  132. package/package.json +6 -1
@@ -1 +1 @@
1
- {"version":3,"file":"SecurityScanner.scanners.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.scanners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEhE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAA;AAEjC;;;;;;GAMG;AACH,MAAM,iBAAiB,GACrB,8HAA8H,CAAA;AAEhI;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,+DAA+D,CAAA;AAE7F,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,SAAQ;YAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,CAAA;YACrF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;YAE9E,+EAA+E;YAC/E,kFAAkF;YAClF,6EAA6E;YAC7E,IAAI,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAA;gBACzD,IAAI,CAAC,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAQ;YAChE,CAAC;YAED,gFAAgF;YAChF,qEAAqE;YACrE,IAAI,QAAqC,CAAA;YACzC,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,GAAG,QAAQ,CAAA;YACrB,CAAC;iBAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACxC,QAAQ,GAAG,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;YACxE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,CAAA;YACnB,CAAC;YACD,MAAM,UAAU,GAAsB,YAAY;gBAChD,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,QAAQ,KAAK,MAAM;oBACnB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,QAAQ,CAAA;YAEd,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ;gBACR,OAAO,EAAE,4CAA4C,OAAO,CAAC,MAAM,EAAE;gBACrE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;gBACrB,sBAAsB,EAAE,YAAY;gBACpC,UAAU;aACX,CAAC,CAAA;YACF,MAAK;QACP,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;gBAEjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ;oBACR,OAAO,EAAE,yCAAyC,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,oBAAoB;oBAC9B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;gBAEnD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,QAAQ;oBACR,OAAO,EAAE,qCAAqC,KAAK,CAAC,CAAC,CAAC,GAAG;oBACzD,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,gBAAgB;oBAC1B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;gBAEjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,QAAQ;oBACR,OAAO,EAAE,yCAAyC,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,mBAAmB;oBAC7B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,6BAA6B,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,0EAA0E;gBAC1E,yEAAyE;gBACzE,sEAAsE;gBACtE,oEAAoE;gBACpE,uEAAuE;gBACvE,yEAAyE;gBACzE,wEAAwE;gBACxE,MAAM,wBAAwB,GAAG,gCAAgC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACnF,MAAM,UAAU,GAAsB,wBAAwB;oBAC5D,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,YAAY;wBACZ,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,MAAM,CAAA;gBACZ,MAAM,QAAQ,GAAG,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;gBAEzF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ;oBACR,OAAO,EAAE,2CAA2C,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC/D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,sBAAsB;oBAChC,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,sEAAsE;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,eAAe,EAAE,CAAA"}
1
+ {"version":3,"file":"SecurityScanner.scanners.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.scanners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,4BAA4B,EAC5B,kBAAkB,EAClB,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEhE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAA;AACjC,2EAA2E;AAC3E,6EAA6E;AAC7E,gEAAgE;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAExE;;;;;;GAMG;AACH,MAAM,iBAAiB,GACrB,8HAA8H,CAAA;AAEhI;;;;;;;;GAQG;AACH,MAAM,qBAAqB,GAAG,+DAA+D,CAAA;AAE7F,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,SAAQ;YAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,CAAA;YACrF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;YAE9E,+EAA+E;YAC/E,kFAAkF;YAClF,6EAA6E;YAC7E,IAAI,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAA;gBACzD,IAAI,CAAC,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAQ;YAChE,CAAC;YAED,gFAAgF;YAChF,8EAA8E;YAC9E,iFAAiF;YACjF,2BAA2B;YAC3B,kFAAkF;YAClF,iFAAiF;YACjF,qCAAqC;YACrC,qEAAqE;YACrE,IAAI,QAAqC,CAAA;YACzC,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,GAAG,QAAQ,CAAA,CAAC,YAAY;YAClC,CAAC;iBAAM,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACxC,QAAQ,GAAG,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAC,kBAAkB;YAC3F,CAAC;iBAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAC,OAAO;YAC3E,CAAC;iBAAM,IAAI,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAC,OAAO;YAC7E,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,CAAA,CAAC,mEAAmE;YACvF,CAAC;YACD,MAAM,UAAU,GAAsB,YAAY;gBAChD,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,QAAQ,KAAK,MAAM;oBACnB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,QAAQ,CAAA;YAEd,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ;gBACR,2EAA2E;gBAC3E,qEAAqE;gBACrE,gEAAgE;gBAChE,wEAAwE;gBACxE,mEAAmE;gBACnE,2EAA2E;gBAC3E,oEAAoE;gBACpE,wEAAwE;gBACxE,uEAAuE;gBACvE,wEAAwE;gBACxE,yEAAyE;gBACzE,2EAA2E;gBAC3E,uEAAuE;gBACvE,OAAO,EAAE,6CAA6C,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG;gBAC3G,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;gBACrB,sBAAsB,EAAE,YAAY;gBACpC,UAAU;aACX,CAAC,CAAA;YACF,MAAK;QACP,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;gBAEjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ;oBACR,OAAO,EAAE,yCAAyC,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,oBAAoB;oBAC9B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;gBAEnD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,QAAQ;oBACR,OAAO,EAAE,qCAAqC,KAAK,CAAC,CAAC,CAAC,GAAG;oBACzD,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,gBAAgB;oBAC1B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;gBAEjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,QAAQ;oBACR,OAAO,EAAE,yCAAyC,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,mBAAmB;oBAC7B,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,6BAA6B,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,0EAA0E;gBAC1E,yEAAyE;gBACzE,sEAAsE;gBACtE,oEAAoE;gBACpE,uEAAuE;gBACvE,yEAAyE;gBACzE,wEAAwE;gBACxE,MAAM,wBAAwB,GAAG,gCAAgC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACnF,MAAM,UAAU,GAAsB,wBAAwB;oBAC5D,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,YAAY;wBACZ,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,MAAM,CAAA;gBACZ,MAAM,QAAQ,GAAG,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;gBAEzF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ;oBACR,OAAO,EAAE,2CAA2C,KAAK,CAAC,CAAC,CAAC,GAAG;oBAC/D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,sBAAsB;oBAChC,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,sEAAsE;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,eAAe,EAAE,CAAA"}
@@ -0,0 +1,49 @@
1
+ /**
2
+ * Security Scanner — MF-4 assignment-value gate (SMI-5207)
3
+ * @module @skillsmith/core/security/scanner/SecurityScanner.value-gate
4
+ *
5
+ * The `sensitive_path` MF-4 gate: given a line that matched one of the three
6
+ * VALUE_GATED_ASSIGNMENT_PATTERNS, decide whether it assigns a REAL credential
7
+ * (→ HIGH) or only prose (→ MEDIUM). HIGH is the default; a downgrade requires
8
+ * positive prose evidence, and since HIGH is the pre-SMI-5207 unconditional
9
+ * behaviour that default can never regress detection.
10
+ *
11
+ * Split out of SecurityScanner.scanners.ts for the 500-line pre-commit gate
12
+ * once round 8's segmentation logic landed (that file is at 4xx with the MF-3
13
+ * gate and six per-category scanners already in it). Cohesive unit — every
14
+ * symbol here serves the single question "is this assignment's value real?".
15
+ */
16
+ /**
17
+ * MF-4 value classification, SEGMENTED PER ASSIGNMENT (SMI-5207 adversarial
18
+ * review, round 8). Each assignment key on the line owns exactly the text
19
+ * between its own `:`/`=` and the NEXT key (or EOL); the finding stays HIGH if
20
+ * ANY of those values is a real credential, and downgrades only when EVERY one
21
+ * of them positively reads as prose.
22
+ *
23
+ * The plan's single-whole-line-span shape (`SPAN.exec(line)[1]`) leaks across
24
+ * assignments in THREE directions on a line carrying two keys. All three are
25
+ * false-negative REGRESSIONS (unconditionally HIGH pre-SMI-5207) and none is
26
+ * residual R-3, which is a stopword inside the assignment's OWN value — here
27
+ * the prose bleeds in from a DIFFERENT assignment entirely:
28
+ *
29
+ * 1. LEFT — `SPAN` is unanchored, so it captures from the LEFTMOST key, not
30
+ * necessarily the one that produced the finding (scanSensitivePaths emits
31
+ * for the first entry matching in ARRAY order, and CREDENTIALS(2)/
32
+ * SECRETS(3) precede PASSWORD(8)). `password: this credentials:
33
+ * Tr0ub4dor&3` → captured `this credentials: Tr0ub4dor&3` → `this` →
34
+ * MEDIUM. This is the reviewer's reported counter-example.
35
+ * 2. RIGHT — `(\S.*)$` runs to EOL and swallows the next assignment's prose:
36
+ * `credentials: Tr0ub4dor&3 password: this` → trailing `this` → MEDIUM.
37
+ * 3. Anchoring at the finding's own match (the narrow fix) closes 1, not 2,
38
+ * and opens a mirror of 1: only ONE finding is emitted per line (the
39
+ * scanner loop `break`s), so on `password: Tr0ub4dor&3 credentials: this`
40
+ * the emitted finding sits RIGHT of the real credential, which a
41
+ * match-anchored scan never sees → MEDIUM.
42
+ *
43
+ * Segmenting closes all three. It is also the correct granularity: severity
44
+ * attaches to the LINE (the finding's `location` is the whole trimmed line), so
45
+ * a line holding any real credential is HIGH. Monotonicity holds — this returns
46
+ * true at least as often as the per-span reading, and true is the status quo.
47
+ */
48
+ export declare function assignmentHasRealValue(lines: string[], index: number): boolean;
49
+ //# sourceMappingURL=SecurityScanner.value-gate.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SecurityScanner.value-gate.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.value-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2DH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA0B9E"}
@@ -0,0 +1,134 @@
1
+ /**
2
+ * Security Scanner — MF-4 assignment-value gate (SMI-5207)
3
+ * @module @skillsmith/core/security/scanner/SecurityScanner.value-gate
4
+ *
5
+ * The `sensitive_path` MF-4 gate: given a line that matched one of the three
6
+ * VALUE_GATED_ASSIGNMENT_PATTERNS, decide whether it assigns a REAL credential
7
+ * (→ HIGH) or only prose (→ MEDIUM). HIGH is the default; a downgrade requires
8
+ * positive prose evidence, and since HIGH is the pre-SMI-5207 unconditional
9
+ * behaviour that default can never regress detection.
10
+ *
11
+ * Split out of SecurityScanner.scanners.ts for the 500-line pre-commit gate
12
+ * once round 8's segmentation logic landed (that file is at 4xx with the MF-3
13
+ * gate and six per-category scanners already in it). Cohesive unit — every
14
+ * symbol here serves the single question "is this assignment's value real?".
15
+ */
16
+ import { PLACEHOLDER_SECRET_RE } from './SecurityScanner.pii.js';
17
+ import { PROSE_STOPWORDS } from './SecurityScanner.prose-lexicon.js';
18
+ import { MAX_LINE_LENGTH_FOR_REGEX } from './regex-utils.js';
19
+ /** A value that REFERENCES a secret rather than containing one. */
20
+ const TEMPLATE_REFERENCE = /^\$|^\{\{|\$\{|^%[A-Za-z_]|^<%/;
21
+ /**
22
+ * Max token count for an all-lowercase span to read as a doc LABEL rather
23
+ * than a passphrase. 2 dictionary words carry ~26 bits (2 x ~12.9 diceware),
24
+ * below any credible credential strength; 3 words (~39 bits) is defensibly a
25
+ * real passphrase. This is the narrowest value that closes `credentials:
26
+ * rotation policy` (2 words) without also swallowing a genuine 3-word
27
+ * passphrase — verified at both 2 and 3 against the full fixture set; 2 wins
28
+ * because it errs toward RETAINING detection on the ambiguous 3-token case.
29
+ */
30
+ const MAX_LABEL_TOKENS = 2;
31
+ /**
32
+ * The assignment KEY — the exact union of the three
33
+ * VALUE_GATED_ASSIGNMENT_PATTERNS it gates, `\b` included (only the secrets
34
+ * entry carries one), so every line reaching assignmentHasRealValue() through
35
+ * those patterns is covered. `g` is required by matchAll, which clones the
36
+ * regex, so there is no shared `lastIndex` state.
37
+ *
38
+ * DERIVATION NOTE — the plan's item-3 block sketches CREDENTIAL_ASSIGN_SPAN /
39
+ * BARE_ASSIGNMENT_EOL, a single-whole-line-span shape. Round 8 confirmed
40
+ * (two adversarial review rounds, six hand-traced counter-examples) that
41
+ * shape leaks across assignments in THREE directions on a line carrying two
42
+ * keys — see assignmentHasRealValue below — so this reconstruction segments
43
+ * the line by key instead of using one span regex.
44
+ */
45
+ const ASSIGNMENT_HEAD = /(?:credentials|\bsecrets?|password)\s*[:=]\s*/gi;
46
+ /**
47
+ * Positive prose evidence. Absence of evidence leaves the finding at HIGH.
48
+ * PROSE_STOPWORDS lives in SecurityScanner.prose-lexicon.ts — English function
49
+ * words: a passphrase is nouns, an explanatory sentence is not.
50
+ */
51
+ function isProseValue(span) {
52
+ const v = span.replace(/^['"]|['"]$/g, '').trim();
53
+ if (v.length === 0)
54
+ return true;
55
+ if (TEMPLATE_REFERENCE.test(v))
56
+ return true; // $VAR, ${{ secrets.X }}
57
+ if (PLACEHOLDER_SECRET_RE.test(v))
58
+ return true; // <YOUR_PASSWORD>, changeme
59
+ if (/^(.)\1+$/.test(v))
60
+ return true; // xxxxxxxx
61
+ const tokens = v.split(/\s+/);
62
+ if (tokens.some((t) => PROSE_STOPWORDS.has(t.toLowerCase().replace(/[^a-z']/g, ''))))
63
+ return true; // sentence
64
+ if (tokens.length > 12)
65
+ return true; // long sentence
66
+ if (tokens.length > 1 &&
67
+ tokens.length <= MAX_LABEL_TOKENS &&
68
+ tokens.every((t) => /^[a-z]{1,19}$/.test(t)))
69
+ return true; // 2-word doc label
70
+ return false; // DEFAULT: stays HIGH
71
+ }
72
+ /**
73
+ * MF-4 value classification, SEGMENTED PER ASSIGNMENT (SMI-5207 adversarial
74
+ * review, round 8). Each assignment key on the line owns exactly the text
75
+ * between its own `:`/`=` and the NEXT key (or EOL); the finding stays HIGH if
76
+ * ANY of those values is a real credential, and downgrades only when EVERY one
77
+ * of them positively reads as prose.
78
+ *
79
+ * The plan's single-whole-line-span shape (`SPAN.exec(line)[1]`) leaks across
80
+ * assignments in THREE directions on a line carrying two keys. All three are
81
+ * false-negative REGRESSIONS (unconditionally HIGH pre-SMI-5207) and none is
82
+ * residual R-3, which is a stopword inside the assignment's OWN value — here
83
+ * the prose bleeds in from a DIFFERENT assignment entirely:
84
+ *
85
+ * 1. LEFT — `SPAN` is unanchored, so it captures from the LEFTMOST key, not
86
+ * necessarily the one that produced the finding (scanSensitivePaths emits
87
+ * for the first entry matching in ARRAY order, and CREDENTIALS(2)/
88
+ * SECRETS(3) precede PASSWORD(8)). `password: this credentials:
89
+ * Tr0ub4dor&3` → captured `this credentials: Tr0ub4dor&3` → `this` →
90
+ * MEDIUM. This is the reviewer's reported counter-example.
91
+ * 2. RIGHT — `(\S.*)$` runs to EOL and swallows the next assignment's prose:
92
+ * `credentials: Tr0ub4dor&3 password: this` → trailing `this` → MEDIUM.
93
+ * 3. Anchoring at the finding's own match (the narrow fix) closes 1, not 2,
94
+ * and opens a mirror of 1: only ONE finding is emitted per line (the
95
+ * scanner loop `break`s), so on `password: Tr0ub4dor&3 credentials: this`
96
+ * the emitted finding sits RIGHT of the real credential, which a
97
+ * match-anchored scan never sees → MEDIUM.
98
+ *
99
+ * Segmenting closes all three. It is also the correct granularity: severity
100
+ * attaches to the LINE (the finding's `location` is the whole trimmed line), so
101
+ * a line holding any real credential is HIGH. Monotonicity holds — this returns
102
+ * true at least as often as the per-span reading, and true is the status quo.
103
+ */
104
+ export function assignmentHasRealValue(lines, index) {
105
+ // Same ReDoS input cap the safeRegex* helpers apply; matchAll has no
106
+ // equivalent wrapper, so the truncation is explicit here.
107
+ const line = lines[index].slice(0, MAX_LINE_LENGTH_FOR_REGEX);
108
+ const heads = [...line.matchAll(ASSIGNMENT_HEAD)];
109
+ if (heads.length === 0)
110
+ return false;
111
+ let trailingKeyIsBare = false;
112
+ for (let i = 0; i < heads.length; i++) {
113
+ const from = (heads[i].index ?? 0) + heads[i][0].length;
114
+ const to = i + 1 < heads.length ? (heads[i + 1].index ?? line.length) : line.length;
115
+ const value = line.slice(from, to);
116
+ if (value.trim().length === 0) {
117
+ // A key with nothing after it. Only the LAST one can take its value from
118
+ // the next line (YAML block form).
119
+ trailingKeyIsBare = i === heads.length - 1;
120
+ continue;
121
+ }
122
+ trailingKeyIsBare = false;
123
+ if (!isProseValue(value))
124
+ return true;
125
+ }
126
+ if (!trailingKeyIsBare)
127
+ return false;
128
+ // `| undefined` annotated (not in the plan's block) so the plan's own
129
+ // `next !== undefined` guard type-checks — `lines[index + 1]` is `string`
130
+ // here (no noUncheckedIndexedAccess), making the compare a TS2367 error.
131
+ const next = lines[index + 1];
132
+ return next !== undefined && !isProseValue(next.trim());
133
+ }
134
+ //# sourceMappingURL=SecurityScanner.value-gate.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SecurityScanner.value-gate.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.value-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAE5D,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,gCAAgC,CAAA;AAE3D;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAAG,iDAAiD,CAAA;AAEzE;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA,CAAC,yBAAyB;IACrE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA,CAAC,4BAA4B;IAC3E,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA,CAAC,WAAW;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA,CAAC,WAAW;IAC7G,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,gBAAgB;IACpD,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,IAAI,gBAAgB;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5C,OAAO,IAAI,CAAA,CAAC,mBAAmB;IACjC,OAAO,KAAK,CAAA,CAAC,sBAAsB;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAe,EAAE,KAAa;IACnE,qEAAqE;IACrE,0DAA0D;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACvD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,yEAAyE;YACzE,mCAAmC;YACnC,iBAAiB,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,iBAAiB,GAAG,KAAK,CAAA;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACvC,CAAC;IACD,IAAI,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAA;IACpC,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,IAAI,GAAuB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACjD,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;AACzD,CAAC"}
@@ -0,0 +1,55 @@
1
+ /**
2
+ * SMI-6441: generated common-password lexicon for the `sensitive_path`
3
+ * MF-4b veto (Wave 2). Vetoes MF-4's 2-token documentation-label
4
+ * carve-out when one of the tokens is a known common password.
5
+ * @module @skillsmith/core/security/scanner/SecurityScanner.weak-passwords
6
+ * @generated DO NOT EDIT — produced by scripts/gen-weak-password-lexicon.mjs
7
+ * from data/wordlists/{seclists-xato-top-10000.txt,doc-vocab-keeplist.txt}.
8
+ * Regenerate with `npm run lexicon:weak-passwords`; verify freshness with
9
+ * `npm run lexicon:weak-passwords:check`. A hand edit here is overwritten
10
+ * on the next --write and is caught by the L3 --check gate before merge.
11
+ *
12
+ * SECURITY-RELEVANT DUPLICATION (ADR-137 Decision point 4): this file is
13
+ * one of three byte-identical-modulo-@module copies of the same
14
+ * generated payload —
15
+ * packages/core/src/security/scanner/SecurityScanner.weak-passwords.ts
16
+ * scripts/indexer/_shared/security-scanner-edge.weak-passwords.ts
17
+ * supabase/functions/_shared/security-scanner-edge.weak-passwords.ts
18
+ * A silent divergence between these three is a SECURITY GAP, not a
19
+ * cosmetic inconsistency: this data decides whether a `sensitive_path`
20
+ * finding is HIGH or MEDIUM (quarantine vs. pass on the weekly scan
21
+ * surface; blocked vs. permitted install). Enforced by three parity
22
+ * layers: L1 Deno<->Node byte identity
23
+ * (scripts/tests/indexer/security-scanner-edge.test.ts's
24
+ * PATHS_FAMILY_TWINS), L2 three-way literal payload identity
25
+ * (scripts/tests/indexer/parity-utils.ts's extractGeneratedPayload),
26
+ * and L3 freshness/anti-hand-edit (`npm run lexicon:weak-passwords:check`,
27
+ * wired into scripts/audit-standards.mjs).
28
+ *
29
+ * Source: SecLists (MIT license) — see data/wordlists/LICENSE-SecLists
30
+ * and WEAK_PASSWORD_LEXICON_SOURCE below for exact provenance.
31
+ *
32
+ * Full design: docs/internal/implementation/smi-6441-weak-password-veto.md
33
+ * See also: docs/internal/adr/149-generated-scanner-data-veto-severity-model.md
34
+ * and docs/internal/adr/137-cross-runtime-duplication-of-security-logic.md
35
+ */
36
+ /** Provenance of the vendored upstream snapshot this file was generated from. */
37
+ export declare const WEAK_PASSWORD_LEXICON_SOURCE: {
38
+ readonly upstream: "https://github.com/danielmiessler/SecLists";
39
+ readonly path: "Passwords/Common-Credentials/xato-net-10-million-passwords-10000.txt";
40
+ readonly license: "MIT";
41
+ readonly commit: "c205c36a445bff37f8e58a9ec829105cd4975c58";
42
+ readonly sha256: "c63d5e4ccc31344d662583cc39ca4bd5bd20517ff1d24501f0c4e0c22d9b722a";
43
+ readonly sourceRankLimit: 5000;
44
+ readonly entries: 4079;
45
+ };
46
+ /** Bumped whenever the emitted entry set changes. Deterministic, no timestamp. */
47
+ export declare const WEAK_PASSWORD_LEXICON_VERSION: "2026-09-08.1";
48
+ /**
49
+ * Lowercase-alphabetic common-password tokens, 3-19 chars, sorted, with the
50
+ * documentation vocabulary subtracted at generation time. Exact membership
51
+ * by design (see the ADR): the veto's failure direction is a false positive
52
+ * on ordinary documentation, so an approximate structure is not acceptable here.
53
+ */
54
+ export declare const COMMON_WEAK_PASSWORDS: ReadonlySet<string>;
55
+ //# sourceMappingURL=SecurityScanner.weak-passwords.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SecurityScanner.weak-passwords.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.weak-passwords.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,iFAAiF;AACjF,eAAO,MAAM,4BAA4B;;;;;;;;CAQ/B,CAAA;AAEV,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,EAAG,cAAuB,CAAA;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAoQrD,CAAA"}
@@ -0,0 +1,313 @@
1
+ /**
2
+ * SMI-6441: generated common-password lexicon for the `sensitive_path`
3
+ * MF-4b veto (Wave 2). Vetoes MF-4's 2-token documentation-label
4
+ * carve-out when one of the tokens is a known common password.
5
+ * @module @skillsmith/core/security/scanner/SecurityScanner.weak-passwords
6
+ * @generated DO NOT EDIT — produced by scripts/gen-weak-password-lexicon.mjs
7
+ * from data/wordlists/{seclists-xato-top-10000.txt,doc-vocab-keeplist.txt}.
8
+ * Regenerate with `npm run lexicon:weak-passwords`; verify freshness with
9
+ * `npm run lexicon:weak-passwords:check`. A hand edit here is overwritten
10
+ * on the next --write and is caught by the L3 --check gate before merge.
11
+ *
12
+ * SECURITY-RELEVANT DUPLICATION (ADR-137 Decision point 4): this file is
13
+ * one of three byte-identical-modulo-@module copies of the same
14
+ * generated payload —
15
+ * packages/core/src/security/scanner/SecurityScanner.weak-passwords.ts
16
+ * scripts/indexer/_shared/security-scanner-edge.weak-passwords.ts
17
+ * supabase/functions/_shared/security-scanner-edge.weak-passwords.ts
18
+ * A silent divergence between these three is a SECURITY GAP, not a
19
+ * cosmetic inconsistency: this data decides whether a `sensitive_path`
20
+ * finding is HIGH or MEDIUM (quarantine vs. pass on the weekly scan
21
+ * surface; blocked vs. permitted install). Enforced by three parity
22
+ * layers: L1 Deno<->Node byte identity
23
+ * (scripts/tests/indexer/security-scanner-edge.test.ts's
24
+ * PATHS_FAMILY_TWINS), L2 three-way literal payload identity
25
+ * (scripts/tests/indexer/parity-utils.ts's extractGeneratedPayload),
26
+ * and L3 freshness/anti-hand-edit (`npm run lexicon:weak-passwords:check`,
27
+ * wired into scripts/audit-standards.mjs).
28
+ *
29
+ * Source: SecLists (MIT license) — see data/wordlists/LICENSE-SecLists
30
+ * and WEAK_PASSWORD_LEXICON_SOURCE below for exact provenance.
31
+ *
32
+ * Full design: docs/internal/implementation/smi-6441-weak-password-veto.md
33
+ * See also: docs/internal/adr/149-generated-scanner-data-veto-severity-model.md
34
+ * and docs/internal/adr/137-cross-runtime-duplication-of-security-logic.md
35
+ */
36
+ /** Provenance of the vendored upstream snapshot this file was generated from. */
37
+ export const WEAK_PASSWORD_LEXICON_SOURCE = {
38
+ upstream: 'https://github.com/danielmiessler/SecLists',
39
+ path: 'Passwords/Common-Credentials/xato-net-10-million-passwords-10000.txt',
40
+ license: 'MIT',
41
+ commit: 'c205c36a445bff37f8e58a9ec829105cd4975c58',
42
+ sha256: 'c63d5e4ccc31344d662583cc39ca4bd5bd20517ff1d24501f0c4e0c22d9b722a',
43
+ sourceRankLimit: 5000,
44
+ entries: 4079,
45
+ };
46
+ /** Bumped whenever the emitted entry set changes. Deterministic, no timestamp. */
47
+ export const WEAK_PASSWORD_LEXICON_VERSION = '2026-09-08.1';
48
+ /**
49
+ * Lowercase-alphabetic common-password tokens, 3-19 chars, sorted, with the
50
+ * documentation vocabulary subtracted at generation time. Exact membership
51
+ * by design (see the ADR): the veto's failure direction is a false positive
52
+ * on ordinary documentation, so an approximate structure is not acceptable here.
53
+ */
54
+ export const COMMON_WEAK_PASSWORDS = new Set(`aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaliyah aardvark aaron abby abcd abcde abcdef abcdefg abcdefgh aberdeen abgrtyu
55
+ abigail abraham absolut accord achilles action active adam adams adgjmptw adidas admiral adonis adrian adriana adrienne
56
+ adult adults aezakmi africa aggies aikido airborne airbus airforce airplane alabama alan alaska albatros albert alberto
57
+ albina albion alejandr aleksandr aleksandra aleksey alenka alex alexalex alexande alexander alexandr alexandra alexis
58
+ alfa alfred alibaba alice alicia alien aliens alina alison allen alliance allison allmine allsop allstar alpha alphabet
59
+ alpine alucard always alyssa amadeus amanda amateur amazing amazon amber amelia america american amsterda amsterdam
60
+ anaconda anakin anal analsex anarchy anastasia anders anderson andre andrea andreas andrei andres andrew andrey
61
+ andromeda andy anfield angel angela angelica angelina angelo angels angie angus anhyeuem animal animals anime anna
62
+ annette annie answer anthony antoine anton antoni antonio anubis anything apache apollo apple applepie apples april
63
+ aquarius aragorn archer archie ariana arizona arjay armagedon armani army arnold arsenal artemis arthur artist artur
64
+ asasas asdasd asdasdasd asdf asdfasdf asdfg asdfgh asdfghj asdfghjk asdfghjkl asdfjkl asdzxc ashlee ashley ashton asia
65
+ asian aspire aspirine assass assassin assfuck asshole assholes assman assword asterix astrid astros athena athens
66
+ atlanta atlantic atlantis atomic attack attitude auburn audrey august aurora aussie austin australi australia autumn
67
+ avalanch avalon avatar avenger awesome azamat azerty azsxdc azsxdcfv babe babes babies baby babybaby babyblue babyboy
68
+ babydoll babyface babygirl babylon bacardi back backdoor bacon badass badboy baddog badger badgirl baggins bagira bailey
69
+ ball baller balloon balloons balls bambam banana bananas banane bandit bang bangbang bangkok banker banshee barbara
70
+ barber barbie barcelon barcelona barefoot barkley barney barrett barry barsik bart bartman baseball basket basketba
71
+ basketball bass bassman bastard batman battle baxter bayern bbbb bbbbb bbbbbb bbbbbbbb bcfields beach beaches beagle
72
+ beamer bean beaner beanie bear bearbear bears beast beastie beatles beatrice beautifu beautiful beauty beaver beavis
73
+ because beckham becky beefcake beer beerbeer beetle believe belinda bell bella belle bender benfica bengals benjamin
74
+ bennett benny benson bentley beowulf beretta berlin bermuda bernard bernie bert bertha bertie bethany better betty
75
+ beverly bianca bicycle bigass bigballs bigbear bigbird bigboobs bigboy bigbutt bigcock bigdaddy bigdick bigdog bigfoot
76
+ bigger biggie biggles bigguy bigmac bigman bigmike bigmoney bigone bigred bigsexy bigtime bigtits bike bikini bill
77
+ billie billy billybob billyboy bimmer bing bingo bird birdie birdman birthday biscuit bishop bitch bitchass bitches
78
+ biteme bizkit blabla blablabla black blackbir blackcat blackdog blackhaw blackie blackjac blackjack blackman blacks
79
+ blacky blade blades blahblah blake blaster blazer blessed blessing blizzard blonde blondes blondie blood bloody blossom
80
+ blow blowjob blowme blue bluebird blueblue blueboy bluedog blueeyes bluemoon blues bluesky boat bobafett bobbie bobbob
81
+ bobby bobcat bobo bobobo boeing bogart bogdan bogey bohica bollocks bollox bomber bonbon bond bondage bone bonehead
82
+ boner bones bonita bonjour bonkers bonnie bonsai boob boobie boobies booboo boobs booger boogie booker bookworm boomboom
83
+ boomer bootie boots booty boricua boris bosco boss bossman boston bottle bottom bounce bowler bowling bowser boxing
84
+ boxster boys brad bradford bradley brandi brando brandon brandy brasil braves bravo brazil breast breeze brenda brendan
85
+ brent brewer brewster brian briana brianna bridge bridget bright brighton bristol britney brittany broadway broken
86
+ bronco broncos brooke brooklyn brooks brother brothers brown brownie browns bruce brucelee bruins bruno brutus bryan
87
+ bryant bubba bubbas bubble bubbles buck bucket buckeye buckeyes buckshot buddah buddha buddie buddy budlight budman
88
+ budweise buffalo buffett buffy bugger builder bull bulldog bulldogs bullet bullseye bullshit bunghole bunny burger
89
+ burton bush business busted buster butch butler butt butter butterfl butterfly butthead butthole buttman button buttons
90
+ butts buzz buzzard byteme cabbage cactus cadillac caesar caitlin calico caliente californ california callaway callie
91
+ calvin camaro cambiami camel camelot camels cameltoe camera cameron camilla camille campbell camper canada canadian
92
+ cancel cancer cancun candice candle candy candyman cannabis cannon canon cantona capital capone captain caramel caravan
93
+ carbon cardinal carina carl carla carlo carlos carlton carmel carmen carol carole carolina caroline carolyn carpet
94
+ carrera carrie carrot carson carter cartman cartoon casanova caserta casey cash casino casper cassidy cassie castle
95
+ catalina catcat catdog catfish catherin catherine catman cats cavalier caveman ccbill cccccc cdtnkfyf cecilia cedric
96
+ celeron celeste celica celine celtic celtics ceng center central century cerberus cessna cfitymrf cgfhnfr chacha chad
97
+ chai chainsaw chair champ champion champs chance chandler chanel chang change changed changeme chao chaos charger
98
+ chargers charity charlene charles charley charli charlie charlott charlotte charlton charly charmed chase chaser cheater
99
+ check checkers cheeks cheers cheese cheetah chelsea chemical cheng cherokee cherry cheryl chester chevelle chevrole
100
+ chevy chewie cheyenne chicago chichi chicken chickens chicks chico chief chiefs children china chinook chip chipper
101
+ chivas chloe chocolat chocolate chong chopper chou chris chrisbln chrissy christ christia christian christie christin
102
+ christina christine christmas christop christopher christy chronic chrono chuai chuang chubby chuck chuckles chucky chun
103
+ chunky chuo church cicero cigars cinder cindy cinema cinnamon circle circus city cjkysirj cjkywt claire clancy clapton
104
+ clarence clarinet clark classic claude claudia claudio claymore clayton clemson clevelan clifford clinton clipper
105
+ clitoris cloud clouds clover clown cobra cocacola cocaine cock cocks coco coconut cody coffee cohiba coke coleman
106
+ colleen college collin collins colombia colorado colors coltrane columbia columbus combat comet comics command commando
107
+ compaq compute computer concrete condom condor confused cong connect conner connie connor conrad consumer contact
108
+ content cookie cookies cool cooldude cooler coolguy coolio coolman cooper cooter copper cornell corona corrado corvette
109
+ cosmo cosmos cosworth cotton coucou cougar country courage courtney cowboy cowboys coyote cracker craig crash crawford
110
+ crazy crazybab cream creampie creamy creative credit cricket crimson cristina critter crjhgbjy crow cruise cruiser
111
+ crunch crusader crysis crystal cthulhu cthutq cubbies cubswin cuddles cumming cumshot cunt cunts cupcake curious curtis
112
+ custom cutlass cutter cxfcnmt cyber cyclone cyclops cynthia cypress dada dadada daddy daewoo dagger daisy dakota dale
113
+ dalejr dallas dalton damage damian damien dammit damnit dana dance dancer dang danger danie daniel daniela danielle
114
+ daniil danila danni danny dannyboy dante danzig daphne dark darkman darkness darkside darkstar darling darren darwin
115
+ dave david davids davidson davis dawg dawn dawson daytona dbrnjh dbrnjhbz dddd ddddd dddddd ddddddd dddddddd deacon dead
116
+ deadhead deadman dean deanna death debbie deborah december deedee deejay deepthroat deeznuts deeznutz defender defiant
117
+ deftones delete delphi delta deluxe demon demons denali deng denis denise deniska dennis denver depeche derek derrick
118
+ desert design designer desire deskjet destiny destroy detroit devil devildog devils dexter dfkthbz dfkthf dfktynbyf
119
+ dfvgbh dharma diablo diamond diamonds dian diana diao dick dickhead dicks diehard diesel dietcoke digger diggler digital
120
+ dilbert dildo dilligaf dillon dima dinamo ding dingdong dino dinosaur direct director dirty discover disney divine dixie
121
+ dkflbckfd dkflbvbh doberman doctor dodge dodger dodgeram dodgers dogdog dogfood dogg doggie doggy doghouse dogman dogs
122
+ dollar dollars dolphin dolphins dominic domino donald dong donkey donna donnie donuts doobie doodle doodoo doogie dookie
123
+ dorian dorothy double doudou doug doughboy douglas downtown dracula drago dragon dragonball dragons dragoon drake dream
124
+ dreamer dreams drew driver drizzt droopy drowssap drpepper drummer dthjybrf dublin ducati duchess duck dude dudley duke
125
+ dumbass duncan durango duster dustin dusty dutch dutchess dylan eagle eagles eastside easy eatme eatpussy eatshit
126
+ eclipse eddie eduard eduardo edward edwards eeeeee eeyore eileen einstein ekaterina elaine eleanor electric element
127
+ elena elephant eleven elijah elizabet elizabeth elliot elliott elvira elvis elwood emerald emerson emily eminem emma
128
+ emmanuel emmitt empire energy engage engine engineer england english enigma enjoy enter enterpri enterprise eraser eric
129
+ erica ericsson erik ernest erotic erotica escape escort esther eternal eternity eugene eureka europa europe evelyn
130
+ everest everton excalibu exigen exigent exodus explorer express extreme fabian face facial faggot faith falcon falcons
131
+ fallen fallout family famous fang fantasy farmer farside fart fashion fast faster fatass fatboy fatcat father fatima
132
+ fatman feather february federico feet felicia felipe felix fender feng fernand fernando ferrari ferret ferris fester
133
+ fetish fffff ffffff fghtkm ficken fiesta figaro fighter filter filthy finger fingers finish fire fireball firebird
134
+ firefly firefox fireman first fish fisher fishes fishing fisting fitness five fktrcfylh fktrcfylhf fktrctq flames
135
+ flamingo flash flatron fletch fletcher flexible flight flipper floppy florence florian florida flounder flower flowers
136
+ floyd fluffy flyboy flyers flying focus foobar footbal football ford forest forever forfun forget forgot formula forrest
137
+ fortuna fortune fossil foster fowler foxtrot france frances francesc francis franco francois frank frankie franklin
138
+ franky freak freaks freaky freckles fred freddie freddy frederic fredfred free freedom freeman freepass freeporn
139
+ freeuser freeze french fresh friday friend friends fright frisco frisky fritz frodo frog frogger froggy frontier frosty
140
+ frozen fubar fuck fucked fucker fuckers fuckface fuckfuck fuckher fuckin fucking fuckit fuckme fuckoff fuckthis fucku
141
+ fuckyou fugazi function funfun funny funtime fusion futbol future fuzzy fyfcnfcbz fylhtq fytxrf gabrie gabriel galaxy
142
+ galina galore gambit gamecube gameover games gandalf gang gangbang gangsta gangster garage garbage garcia garden
143
+ garfield gargoyle garrett gary gaston gator gators gawker gbpltw gegcbr geheim gemini general genesis genius george
144
+ georgia gerald gerard german germany geronimo gesperrt getmoney getsome gfhjkm gggg gggggg gggggggg ghbdtn ghbdtnbr
145
+ ghblehjr ghetto ghjcnj ghjcnjnfr ghost ghostrider giant giants gibson gilbert gillian ginger giorgi giovanni girl girls
146
+ giuseppe gizmo gizmodo gjkbyf gladiator global gloria glory gmoney goalie goaway goblin goblue gobucks goddess godfather
147
+ godsmack godzilla gofish goforit gogo gogogo goku gold goldberg golden goldfish goldie goldstar goldwing golf golfball
148
+ golfer golfgolf golfing goliath gollum gonavy gong gonzo goober good goodboy goodbye goodluck goodman goodtime goofy
149
+ google goose gopher gordon gorilla gotcha gothic gotohell govols grace gracie graham grandma granny grant grapes
150
+ grateful great greatone greece green greenbay greenday greene greens greg gregory gremlin grendel gretchen gretzky
151
+ griffey griffin gringo grizzly gromit groove groovy groucho grover grumpy guai guardian guest guiness guinness guitar
152
+ gundam gunnar gunner gunners gustav hacked hacker haha hahaha hahahaha hailey hairy halflife hallo hambone hamburg
153
+ hamilton hamlet hammer hammers hampton hamster handsome handyman hang hank hanna hannah hannibal hansen hansolo happy
154
+ happyday hard hardcock hardcore harder hardon hardrock harley harmony harold harper harris harrison harry harvey
155
+ hastings havefun hawaii hawk hawkeye hawkeyes hayabusa hayden hayley head health heart hearts heather heaven heckfy
156
+ hector hedgehog hehehe heidi helen helena hell hellfire hello helloo hellyeah helmet help helpme hendrix henry hentai
157
+ herbert herbie hercules herman hermes hershey hesoyam heyhey hhhhhh hidden higgins highland hihihi hill hilton hiphop
158
+ hippie history hithere hitler hitman hjvfirf hobbes hobbit hockey hohoho hokies holden holiday holland holly hollywoo
159
+ hollywood holmes holyshit home homer homers homerun honda honey hong hongkong hooker hoosier hoosiers hooter hooters
160
+ hoover hope hopper horizon horndog hornet horney horny horse horses hotbox hotboy hotdog hotpussy hotred hotrod hotsex
161
+ hotshot hotstuff hottie house houses houston howard huai hudson hummer hungry hunter hunting hurley hurrican husker
162
+ huskers huskies hustler hyperion ibanez icecream iceman idiot idontkno idontknow iforgot igor iguana ihateyou illini
163
+ illinois illusion ilovesex iloveu iloveyo iloveyou imagine immortal impala imperial incubus india indian indiana indians
164
+ indigo infantry inferno infiniti infinity ingrid insane insert inside integra intel internet intrepid intruder inuyasha
165
+ ireland irina irish ironman isabel isabella isabelle isaiah island israel italia italian ivan ivanov ivanova iverson
166
+ iwantu jabroni jack jackal jackass jackie jackoff jackson jacob jade jagger jaguar jake jamaica james jamesbon jamesbond
167
+ jamie jammer jammin jane janet janice janine january japan japanese jarhead jasmin jasmine jason jasper java javier
168
+ jaybird jayden jayhawk jayjay jazz jazzman jean jeanette jeanne jedi jeep jeff jeffrey jenn jenna jennie jennifer jenny
169
+ jensen jeremiah jeremy jericho jerkoff jerome jerry jersey jess jesse jessic jessica jessie jester jesus jethro jewels
170
+ jiang jill jillian jimbo jimbob jimmy jing jiong jjjj jjjjjj jjjjjjjj jktymrf joanna joanne jockey joejoe joey johanna
171
+ johannes john johnboy johnjohn johnny johnson jojo jojojo joker jokers jonathan jones jonjon jordan jose joseph josh
172
+ joshua journey joyjoy jrcfyf juan judith juggalo juice julia julian julie juliet juliette julius jumper junebug jungle
173
+ junior jupiter justdoit justice justin justine justme juventus kahuna kaiser kaktus kamikaze kang kangaroo kansas karate
174
+ karen karina karma karolina kashmir kasper katana katerina kathleen kathryn kathy katie katrin katrina kawasaki kaylee
175
+ keegan keeper keith kelley kelly kelsey kendall kennedy kenneth kenny kenshin kentucky kenwood kenworth kermit kevin
176
+ keyboard keystone keywest kickass kicker kids kiki kill killbill killer killers killme kimber kimberly king kingdom
177
+ kingfish kingkong kingpin kingston kipper kirill kirsten kiss kisses kissing kissme kitkat kitten kitty kittycat
178
+ kittykat kkkkkk klaster klingon knickers knicks knight knights knopka kodiak kolobok kong kool korn koshka kosmos kostya
179
+ kotenok kramer krishna krista kristen kristi kristin kristina kristine kristy krystal ktyjxrf kume kungfu kyle labrador
180
+ labtec lacrosse ladies lady ladybug laguna lakers lalala lambert lamont lance lancelot lancer lang lansing laptop larisa
181
+ larry laser lasvegas latin latino laura laurel lauren laurie lawrence lawyer leader leanne leather leavemealone ledzep
182
+ leelee legacy legend legion legolas lemons leng lennon leonard leonardo leonid leopard lesbian lesbians leslie lespaul
183
+ lestat lester letmein letsgo lewis lexmark lexus liberty library lick licker lickit lickme life lifehack lifetime light
184
+ lighter lightnin lightning lights lillian lilly lincoln linda lindsay lindsey ling lion lionel lionking lions lipstick
185
+ liquid lisa lisalisa little liverpoo liverpool lizard lizzie lkjhgf lkjhgfdsa llllll loaded lobster loco logan logitech
186
+ lokomotiv lola lolipop lolita lollipop lollol lolo lololo london lonely lonestar lonewolf long longhorn look looker
187
+ looking looney looser lord lorenzo lori lorraine loser losers louis louise loulou love loveit lovelove lovely loveme
188
+ lover loverboy lovers lovesex loveyou loving lowrider luan lucas lucifer lucky luckydog lucy ludwig luis luke lust
189
+ luther lvbnhbq lynn macdaddy machine macross madden maddie maddog madeline madina madison madman madmax madness madonna
190
+ madrid maestro maggie maggot magic magick magicman magnolia magnum magnus magpie maiden mailman majestic makaveli maksim
191
+ malaka malcolm malibu malina mallard mama mamama mamapapa manchest manchester mandingo mandy mango maniac manson manuel
192
+ manutd maradona marathon marc marcel marcia marco marcos marcus margaret margarita maria mariah marian marianne marie
193
+ marika marilyn marin marina marine mariners marines marino mario marion marisa marissa marius mark market markus
194
+ marlboro marlene marley marlin marshall martha martin martina martinez martini marvel marvin mary maryann maryjane
195
+ maryland mason massage massimo massive maste masters matador mathew matilda matrix matt matthew mattie mature maureen
196
+ maurice maverick maxell maxim maxima maximum maximus maxine maxmax maxwell maxx mayday mayhem maynard mazafaka meatball
197
+ meathead meatloaf mechanic medical medicine medusa megadeth megaman megan megapass megatron meghan meister melanie
198
+ melinda melissa mellon mellow melody melvin member mememe memorex memory memphis menace meng meowmeow mercedes mercury
199
+ meredith meridian merlin mermaid mersedes metal metallic metallica method mexico miami mian miao michae michael michaela
200
+ micheal michel michele michell michelle michigan mickey microlab micron microsof microsoft midget midnight midway mighty
201
+ miguel mike mikemike mikey milana milano milena miles military milkman miller millie million milton mimi mine minecraft
202
+ ming minime minnie miracle mirage miranda miriam mirror misery misfit misha mishka mission missy mister mistress misty
203
+ mitch mitchell mittens mmmm mmmmm mmmmmm mmmmmmmm mnbvcx mnbvcxz mobile models modena mohamed mohammed mojo mollie molly
204
+ mollydog moloko molson mommy momomo momoney monaco monalisa monday mondeo money moneyman moneys mongoose monica monika
205
+ monique monke monkey monkeys monopoly monroe monster montana monte montreal monty moocow mookie moomoo moon moonlight
206
+ moose more morgan morning morpheus morris morrison mortgage mortimer moscow mother motherfucker motherlode motley
207
+ motorola mountain mouse movie movies mozart muffin mulder multiplelo munchkin muppet murder murphy murray muscle
208
+ mushroom music musica musicman mustafa mustang mustangs mustard mybaby mylife mylove mypass myself mystery mystic nadine
209
+ naked nancy napass napoleon napster naruto nascar nasty nastya natali natalia natalie natasha nathalie nathan national
210
+ natural nature naughty nebraska nellie nelson nemesis neng neptune nevada newbie newcastl newlife newman newpass newport
211
+ newton newyork nfnmzyf nguyen niao nice nicholas nick nickel nicola nicolas nicole nigger night nike nikita nikki nikola
212
+ nikolay nimbus nimrod nina niners ninja ninjas nintendo nipper nipple nipples nirvana nissan nitram nnnnnn nobody nofear
213
+ nokia nolimit none nong nonono noodle noodles nookie nopass norman norton norway nothing nova novell november nude
214
+ nudist nugget number nuts nuttertools nyjets nylons nymets oakland oakley oasis obiwan oblivion ocean october odessa
215
+ office ohyeah oilers oklahoma okokok oksana oldman oleg olga oliver olivia olivier omega onelove onetime online onlyme
216
+ oooooo open openup operator optimus oracle orange oranges orchid oregon orgasm original orioles orion orlando oscar
217
+ osiris outkast outlaw overkill overlord oxford pacers pacific packard packer packers pacman padres paint paintbal
218
+ paintball painter pakistan palace paladin palmer pamela panama panasoni panasonic pancho panda pandora pantera panther
219
+ panthers panties pants pantyhos panzer papa paper paradise paradox paris parker parola parrot party pascal pass passat
220
+ passion passme passpass passport passwd passwor passwort patches patricia patrick patriot patriots patton patty paul
221
+ paula pauline pavilion payton peace peach peaches peacock peanut peanuts pearl pearljam pebbles pedro peekaboo peewee
222
+ pegasus pencil penelope peng penguin penguins penis penny pentium people pepe pepper pepsi perfect person personal
223
+ pervert pete peter peterpan peters peterson petra peugeot peyton phantom phil philip philippe philips phillies phillip
224
+ phillips philly phish phoebe phoenix phone photo photos phpbb pianoman piao picard picasso piccolo pickle pickles pics
225
+ picture pierre piglet pikachu pillow pilot pimp pimpin pineappl ping pingpong pinhead pink pinkfloy pinky pioneer piper
226
+ pippen pippin pirate pirates pisces pissing pissoff pistol pitbull pizza pizzas planet plastic platinum play playboy
227
+ player playing playstation playtime pleasure plumber plymouth pobeda poetry poison poiuyt poiuytrewq pokemon poker
228
+ polaris police polina polo polska pompey poncho pontiac pony poochie poodle pooh poohbear pookie pool poontang poop
229
+ pooper poopie poopoo pooppoop pooter popcorn popeye popopo poppop poppy porkchop porn porno pornos pornstar porsche
230
+ porter portland portugal poseidon positive possum postal potato pothead potter powder powell power powers pppppp
231
+ pppppppp precious predator prelude premier presario presto preston pretty primus prince princes princess printer prissy
232
+ privet prodigy profit prophet psycho puddin pudding pumpkin punisher punkin punkrock puppies puppy pupsik purdue purple
233
+ pussey pussie pussies pussy pussycat pussys putter pyramid python qawsed qawsedrf qazqaz qazwsx qazwsxed qazwsxedc
234
+ qazwsxedcrfv qazxsw qazxswedc qazzaq qiao qing qiong qqqq qqqqq qqqqqq qqqqqqq qqqqqqqq quality quan quantum quartz
235
+ quattro queen queens quincy qwaszx qweasd qweasdzxc qweqwe qweqweqwe qwer qwerasdf qwerqwer qwert qwerty qwertyqwerty
236
+ qwertyu qwertyui qwertyuio qwertyuiop qwertz qwqwqw rabbit rabota racecar racer racerx rachael rachel racing radio
237
+ rafael ragnarok raider raiders railroad rain rainbow rainman raistlin ralph rambler rambo rammstein ramona ramses rancid
238
+ randall random randy ranger rangers raptor rascal rasputin rasta rastaman raven ravens raymond rayray razz rbhbkk rctybz
239
+ reader reading ready reagan reality really realmadrid reaper rebecca rebel rebels recovery redalert redbull reddog
240
+ redfish redhead redhot redline redman redneck redred redrum redskins redsox redwing redwings redwood reebok reefer
241
+ reggie regina remember renault renee renegade reng rereirf rescue research resident respect retard retired revenge
242
+ review rfhbyf rfnthbyf rfrfirf rfrnec rhbcnbyf rhfcjnrf rhiannon rhonda rhtdtlrj ricardo rich richard richards richie
243
+ richmond rick ricky rightnow riley ripken ripley ripper ripple river rivers rjirfrgbde rjntyjr rjycnfynby roadkill
244
+ roadking roadrunn robbie robert roberta roberto roberts robin robinson robotech rock rocker rocket rockets rockford
245
+ rockhard rockon rocks rockstar rocky rodman rodney roger rogers roland roller rolling rolltide roman romance romashka
246
+ romeo rommel ronald ronaldo ronnie rookie rooney rooster rootbeer roscoe rose rosebud rosemary rosie rotten rover rovers
247
+ roxanne royals rrrrrr rtyuehe ruan rubber ruby rugby rules rulez runescape runner running rupert rush ruslan russell
248
+ russia russian rustam rusty ryan sabbath sabina sabine sabres sabrina sacred sadie safari safety sailboat sailing sailor
249
+ saint saints sakura salamander saleen sally salmon salomon salvador samantha samara samiam sammie sammy sampson samsam
250
+ samson samsung samuel samurai sanchez sancho sander sanders sandiego sandman sandra sandro sandy sang santana santiago
251
+ santos sapper sapphire sara sarah saratoga sasasa sascha sasha sassy sasuke satan satana saturday saturn saun sauron
252
+ sausage savage savannah sayang scania scanner scarface scarlet scarlett school science scooby scoobydo scooter scorpio
253
+ scorpion scotch scotland scott scottie scotty scout scrappy scratch scream scruffy scuba scully seahawks seamus sean
254
+ searay search seattle sebastia sebastian second secure security seeker seinfeld select selena seminole semperfi seng
255
+ senior sentinel septembe september serega serena serenity sergei sergey sergio sersolution sesame seven sex sexsex
256
+ sexsexsex sexual sexx sexxxx sexy sexygirl sexyman shado shadow shaggy shai shalom shaman shamrock shane shang shania
257
+ shannon shaolin shark sharks sharky sharon shasta shaved shawn shazam shearer sheena shei sheila shelby shell shelley
258
+ shelly shemale sherlock sherman sherry sherwood shiloh shirley shit shithead shitty shogun shooter shopping short shorty
259
+ shotgun shou showme showtime shun sidney siemens sierra silence silver silvia simba simon simona simone simple simpson
260
+ simpsons sims sinatra sinbad sinclair singer single sinister sinner sirius sister site sithlord sixers skate skater
261
+ skeeter skidoo skiing skinny skipper skippy skittles skorpion skydive skyline skywalke skywalker slacker slappy slapshot
262
+ slave slayer sleepy slick slider slinky slipknot slut sluts slutty small smeghead smegma smelly smile smiles smiley
263
+ smith smiths smitty smoke smoker smokes smokey smokin smoking smooth smudge smut snake snakes snapon snapper snapple
264
+ snatch sneakers snickers sniper snoop snoopdog snoopy snow snowball snowboar snowman snuggles sobaka soccer socrates
265
+ softball software soldier soleil solnce solomon solution somethin something sommer song sonic sonics sony sooner sooners
266
+ sophia sophie sound southern southpar southpark space spaceman spank spanking spankme spanky sparkle sparks sparky
267
+ sparrow sparta spartak spartan spartans spawn speaker spears special spectrum speed speedy spencer spider spiderma
268
+ spiderman spidey spike spirit spitfire splash splinter sponge spongebob spooky sport sporting sports spring springer
269
+ sprint sprite spunky spurs sputnik spyder squall squash squirrel squirt srinivas ssss sssss ssssss ssssssss stacey stacy
270
+ stalin stalker stallion standard stanford stanley staples star starbuck starcraf starcraft stardust starfire starfish
271
+ stargate starman stars starship start starter startrek starwars static station stealth steam steel steele steeler
272
+ steelers stefan stefano stella steph stephani stephanie stephen stereo sterlin sterling steve steven stevie stewart
273
+ stick sticks sticky stimpy sting stinger stingray stinky stocking stocks stolen stone stonecol stoned stoner stones
274
+ stoney stories storm stormy strange stranger street strength strider strike striker strip stripper stroke strong stuart
275
+ stud student studio studly stuff stumpy stunner stupid subaru sublime subway success suck sucker suckit suckme sucks
276
+ sugar sullivan sultan summer summit sundance sunday sunflowe sunny sunnyday sunrise sunset sunshin sunshine super
277
+ superfly superman supersta superstar support supreme surf surfer surfing susan susanne suzanne suzuki sveta svetik
278
+ svetlana svoboda swallow sweden sweet sweetie sweetpea sweets sweety swimmer swimming swinger swingers sword swordfis
279
+ swordfish swords sydney sylvia syncmaster syracuse tabitha tacobell tacoma talisman tamara tammy tang tango tanker
280
+ tanner tanya tara tardis target tarheel tarheels tarzan tasha tatiana tattoo tatyana taurus taylor tazman tazmania
281
+ tdutybq teacher team technics techno teddy teddybea teen teens tekken telefon temp tempest templar temple teng tennis
282
+ tequila teresa terminal terminator terrapin terror terry tester testtest texas thailand thanatos thanks thankyou theboss
283
+ thecat thedog thedoors thedude theend thegame thegreat thekid theking theman theodore theone theresa therock thesims
284
+ thirteen thomas thompson thongs thor throat thuglife thumbs thumper thunder thursday tian tickle tiffany tiger tigers
285
+ tigger tight tights timber time timmy timothy tina ting tinker tinkerbell tinman tintin titanic titanium titans titleist
286
+ tits titties titty tobias toby today together toledo tolkien tomato tomcat tommy tommyboy tomorrow tomtom tong tongue
287
+ tony tool toon tootsie topcat topdog topgun topher topper tornado toronto torres toshiba toto tottenha toyota tracey
288
+ tracker tractor tracy trader traffic train trains trance transam translator trapper travel traveler travis treasure
289
+ trebor tree trevor trfnthbyf trial triangle tricky trident trigger trinidad trinity trisha tristan triton triumph trixie
290
+ trojan trojans trombone trooper trouble trout truck trucker trucks truelove truman trumpet trunks tsunami tttttt
291
+ tttttttt tuan tucker tuesday tunafish tundra turbo turkey turner turtle tweety twilight twinkle twins twisted twister
292
+ tyler typhoon tyrone tyson ufkbyf ultima ultimate umbrella underdog undertaker unicorn unique united universe unknown
293
+ unreal usarmy usmc usnavy utopia vacation vader vagina valencia valentin valentina valera valeri valeria valerie
294
+ valhalla valkyrie valley vampire vanessa vanhalen vanilla vector vectra vedder vegas vegeta velvet venera venice venus
295
+ verbatim veritas vermont vernon verona veronica veronika vertigo vette vfczyz vfhbyf vfhecz vfhufhbnf vfksirf vfrcbv
296
+ vfrcbvrf vfvekz vfvfgfgf vfvjxrf viagra victor victoria victory video vietnam viewsonic viking vikings viktor viktoria
297
+ village vincent vinnie violet viper vipers virgin virginia vision vitalik vivian vkontakte vladik vladimir vladislav
298
+ volley volume volvo voodoo vortex voyager voyeur vulcan vvvvvv wagner walker wallace walleye wally walmart walnut walrus
299
+ walter wang wanker warcraft wareagle warhammer warlock warlord warren warrior warriors warthog wasser wassup watcher
300
+ water waterloo waters watson wayne weasel weather weaver webmaster webster wedding weed weezer welcome welder wendy
301
+ werewolf werner wesley west western westham westside westwood wetpussy whatever whatsup wheels whiskers whiskey whisky
302
+ whisper white whitesox whitey whitney whocares whore whynot wibble wicked wilbur wild wildcat wildcats wildfire wildman
303
+ willia william williams willie willis willow willy wilson window windows windsor winner winnie winston winter wisdom
304
+ wizard wolf wolfgang wolfie wolfman wolfpack wolverin wolverine wolves woman wombat women wonder wood woody woofwoof
305
+ woohoo wookie wordpass work working world wrangler wrestle wrestlin wrestling wright writer wutang wwwwww xanadu xander
306
+ xavier xfiles xiang xiao xiong xtreme xuan xxxpass xxxx xxxxx xxxxxx xxxxxxx xxxxxxxx yamaha yang yankee yankees ybrbnf
307
+ ybrjkfq yellow yesyes yfnfif ying yoda yomama yosemite young yourmom yousuck yoyo yoyoyo ytrewq yumyum yvonne yzerman
308
+ zachary zaphod zaqwsx zaqxsw zenith zeppelin zero zerocool zeus zhai zhei zheng zhong zhou zhuai zhuang zhun zidane
309
+ ziggy zigzag zipper zippy zombie zorro zvezda zxcasd zxcasdqwe zxcv zxcvb zxcvbn zxcvbnm zxczxc zxzxzx zzzz zzzzz zzzzzz
310
+ zzzzzzzz`
311
+ .split(/\s+/)
312
+ .filter(Boolean));
313
+ //# sourceMappingURL=SecurityScanner.weak-passwords.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SecurityScanner.weak-passwords.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.weak-passwords.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,4CAA4C;IACtD,IAAI,EAAE,sEAAsE;IAC5E,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,0CAA0C;IAClD,MAAM,EAAE,kEAAkE;IAC1E,eAAe,EAAE,IAAI;IACrB,OAAO,EAAE,IAAI;CACL,CAAA;AAEV,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAuB,CAAA;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAgQO;KACJ,KAAK,CAAC,KAAK,CAAC;KACZ,MAAM,CAAC,OAAO,CAAC,CACnB,CAAA"}