@softspark/ai-toolkit 1.5.0 → 1.5.1

package/CHANGELOG.md

@@ -7,6 +7,15 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v1.5.1 — Security Hardening: Script Injection, XSS, Private Data Leak (2026-04-10)
+
+### Fixed
+- **`action.yml` script injection** — replaced `${{ inputs.command }}` direct interpolation with `env:` variable to prevent GitHub Actions script injection (OWASP A03)
+- **`visual-server.cjs` stored XSS** — extracted inline script to `poll.js`, added `Content-Security-Policy: script-src 'self'` header to block injected scripts in PRD visual preview
+- **`strip_private.py` regex** — changed `[^<]*` to `.*?` with `re.DOTALL` flag to correctly handle multi-line `<private>` blocks and inner angle brackets (was leaking private data in edge cases)
+
+---
+
 ## v1.5.0 — HIPAA Scanner: Deterministic Script, CI Integration, Self-Exclusion (2026-04-10)
 
 ### Added

package/action.yml

@@ -39,8 +39,9 @@ runs:
     - name: Run ai-toolkit
       id: run-toolkit
       shell: bash
+      env:
+        COMMAND: ${{ inputs.command }}
       run: |
-        COMMAND="${{ inputs.command }}"
         case "$COMMAND" in
           validate|doctor) ;;
           *) echo "Error: invalid command '$COMMAND' (allowed: validate, doctor)"; exit 1 ;;

package/app/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-toolkit",
   "description": "Professional-grade Claude Code toolkit with persona presets, skill security auditor, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"

package/app/plugins/memory-pack/scripts/strip_private.py

@@ -14,7 +14,7 @@ import sys
 
 def main() -> None:
     content = sys.stdin.read()
-    cleaned = re.sub(r"<private>[^<]*</private>", "", content)
+    cleaned = re.sub(r"<private>.*?</private>", "", content, flags=re.DOTALL)
     sys.stdout.write(cleaned)
 
 

package/app/skills/write-a-prd/scripts/frame-template.html

@@ -82,30 +82,6 @@
     </div>
   </main>
   <div class="status"><span class="dot"></span>Connected</div>
-  <script>
-    (function () {
-      var contentEl = document.getElementById("content");
-      var lastHtml = "";
-
-      function poll() {
-        fetch("/content")
-          .then(function (res) { return res.json(); })
-          .then(function (data) {
-            if (data.html && data.html !== lastHtml) {
-              lastHtml = data.html;
-              contentEl.style.opacity = "0";
-              setTimeout(function () {
-                contentEl.innerHTML = data.html;
-                contentEl.style.opacity = "1";
-              }, 80);
-            }
-          })
-          .catch(function () {});
-      }
-
-      setInterval(poll, 2000);
-      poll();
-    })();
-  </script>
+  <script src="/poll.js"></script>
 </body>
 </html>

package/app/skills/write-a-prd/scripts/poll.js

@@ -0,0 +1,23 @@
+(function () {
+  var contentEl = document.getElementById("content");
+  var lastHtml = "";
+
+  function poll() {
+    fetch("/content")
+      .then(function (res) { return res.json(); })
+      .then(function (data) {
+        if (data.html && data.html !== lastHtml) {
+          lastHtml = data.html;
+          contentEl.style.opacity = "0";
+          setTimeout(function () {
+            contentEl.innerHTML = data.html;
+            contentEl.style.opacity = "1";
+          }, 80);
+        }
+      })
+      .catch(function () {});
+  }
+
+  setInterval(poll, 2000);
+  poll();
+})();

package/app/skills/write-a-prd/scripts/visual-server.cjs

@@ -20,16 +20,26 @@ function resetIdleTimer() {
 
 const templatePath = path.join(__dirname, "frame-template.html");
 const templateHtml = fs.readFileSync(templatePath, "utf-8");
+const pollJs = fs.readFileSync(path.join(__dirname, "poll.js"), "utf-8");
 
 const server = http.createServer((req, res) => {
   resetIdleTimer();
 
   if (req.method === "GET" && (req.url === "/" || req.url === "/index.html")) {
-    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+    res.writeHead(200, {
+      "Content-Type": "text/html; charset=utf-8",
+      "Content-Security-Policy": "script-src 'self'",
+    });
     res.end(templateHtml);
     return;
   }
 
+  if (req.method === "GET" && req.url === "/poll.js") {
+    res.writeHead(200, { "Content-Type": "application/javascript; charset=utf-8" });
+    res.end(pollJs);
+    return;
+  }
+
   if (req.method === "GET" && req.url === "/content") {
     res.writeHead(200, { "Content-Type": "application/json" });
     res.end(JSON.stringify({ html: currentContent }));

package/llms-full.txt

@@ -15,6 +15,7 @@
 - [No Hardcoded Counts in Secondary Docs](kb/best-practices/no-hardcoded-counts.md)
 - [How-To Guides](kb/howto/README.md)
 - [SOP: Claude Toolkit Maintenance](kb/procedures/maintenance-sop.md)
+- [SOP: Release Preparation](kb/procedures/release-preparation-sop.md)
 - [SOP: Release Verification](kb/procedures/release-verification-sop.md)
 - [Agents Catalog](kb/reference/agents-catalog.md)
 - [Anti-Pattern Registry Format](kb/reference/anti-pattern-registry-format.md)
@@ -601,6 +602,288 @@ What `uninstall` does:
 
 ---
 
+## kb/procedures/release-preparation-sop.md
+
+---
+title: "SOP: Release Preparation"
+category: procedures
+service: ai-toolkit
+tags: [sop, release, version, publish, changelog, semver]
+version: "1.5.0"
+created: "2026-04-10"
+last_updated: "2026-04-10"
+description: "Step-by-step checklist for preparing a new ai-toolkit release — version sync, changelog, artifact regeneration, validation, and tagging. Run BEFORE every git tag."
+---
+
+# SOP: Release Preparation
+
+Complete checklist for preparing a new `@softspark/ai-toolkit` release.
+Run this **before** tagging. After tagging and publishing, run the
+[Release Verification SOP](release-verification-sop.md) to smoke-test.
+
+**Pipeline:**
+```
+Release Preparation (this SOP) → git tag → CI publish → Release Verification SOP
+```
+
+**Time:** 5-10 minutes
+
+---
+
+## Quick Checklist (TL;DR)
+
+```bash
+# 1. Decide version bump
+#    patch (1.4.2 → 1.4.3): bugfix, typo, doc fix
+#    minor (1.4.2 → 1.5.0): new feature, new skill, new flag
+#    major (1.4.2 → 2.0.0): breaking change
+
+# 2. Sync version across all files
+python3 scripts/sync_version.py X.Y.Z          # if script exists, else manual
+
+# 3. Write CHANGELOG.md entry
+# 4. Regenerate artifacts
+python3 scripts/generate_agents_md.py > AGENTS.md
+python3 scripts/generate_llms_txt.py > llms.txt
+python3 scripts/generate_llms_txt.py --full > llms-full.txt
+
+# 5. Validate + audit + test
+python3 scripts/validate.py --strict && python3 scripts/audit_skills.py --ci && npm test
+
+# 6. Commit + tag + push
+git add -A && git commit -m "chore: release vX.Y.Z"
+git tag vX.Y.Z
+git push origin main --tags
+```
+
+---
+
+## Phase 1: Determine Version Bump
+
+Follow [Semantic Versioning](https://semver.org/):
+
+| Change Type | Bump | Examples |
+|-------------|------|---------|
+| Bugfix, typo, doc-only | **patch** | Fix install flag, correct description |
+| New feature, skill, agent, flag | **minor** | Add `/hipaa-validate`, add `--output json` |
+| Breaking CLI change, removed skill, config format change | **major** | Rename `install` to `setup`, remove skill |
+
+**Rule:** When in doubt, bump minor.
+
+---
+
+## Phase 2: Sync Version in All Files
+
+The canonical version lives in `package.json`. These files **must** match:
+
+### Mandatory sync (every release)
+
+| File | Field | How to update |
+|------|-------|---------------|
+| `package.json` | `"version": "X.Y.Z"` | Edit directly |
+| `manifest.json` | `"version": "X.Y.Z"` | Edit directly |
+| `app/.claude-plugin/plugin.json` | `"version": "X.Y.Z"` | Edit directly |
+
+### Auto-synced (no manual action)
+
+| File | Mechanism |
+|------|-----------|
+| `package-lock.json` | Regenerated by `npm install --package-lock-only` |
+
+### Conditional sync (only if the doc was modified in this release)
+
+| File | Field | When to update |
+|------|-------|---------------|
+| `kb/procedures/maintenance-sop.md` | frontmatter `version:` | If SOP content changed |
+| `kb/reference/skills-catalog.md` | frontmatter `version:` | If skills added/removed |
+| `kb/reference/agents-catalog.md` | frontmatter `version:` | If agents added/removed |
+| `kb/reference/hooks-catalog.md` | frontmatter `version:` | If hooks changed |
+| `kb/reference/architecture-overview.md` | frontmatter `version:` | If architecture changed |
+| `kb/reference/distribution-model.md` | frontmatter `version:` | If install model changed |
+| `kb/reference/global-install-model.md` | frontmatter `version:` | If install model changed |
+
+> **Note:** KB `version:` fields track the **document version**, not the toolkit version.
+> Only bump them when the document content actually changes in this release.
+
+### Count sync (if skills/agents/hooks changed)
+
+| File | What to check |
+|------|---------------|
+| `package.json` | `"description"` — skill/agent count |
+| `README.md` | Badge counts, "What You Get" table |
+| `app/ARCHITECTURE.md` | Section headings with counts |
+
+> **Tip:** `validate.py --strict` and `npm test` (metadata contract tests) catch
+> count drift automatically. If tests pass, counts are correct.
+
+### Verification command
+
+After syncing, verify all mandatory files match:
+
+```bash
+VERSION=$(python3 -c "import json; print(json.load(open('package.json'))['version'])")
+echo "Target: $VERSION"
+echo "manifest.json:     $(python3 -c "import json; print(json.load(open('manifest.json'))['version'])")"
+echo "plugin.json:       $(python3 -c "import json; print(json.load(open('app/.claude-plugin/plugin.json'))['version'])")"
+echo "package-lock.json: $(python3 -c "import json; print(json.load(open('package-lock.json'))['version'])")"
+```
+
+All four must print the same version. If not, fix before proceeding.
+
+---
+
+## Phase 3: Write CHANGELOG Entry
+
+Add entry at the top of `CHANGELOG.md` (after the header, before previous release):
+
+```markdown
+## vX.Y.Z — Short Title (YYYY-MM-DD)
+
+### Added
+- **Feature name** — description
+
+### Changed
+- **What changed** — old behavior → new behavior
+
+### Fixed
+- **Bug description** — what was broken and how it's fixed
+
+### Removed
+- **What was removed** — migration path if any
+```
+
+**Rules:**
+- Use **bold** for feature names
+- Start descriptions with a verb (Added, Changed, Fixed, Removed)
+- Reference skill names with backticks and slash: `/hipaa-validate`
+- Include script names: `scripts/hipaa_scan.py`
+- Include count changes: `Skill count: 91 → 92`
+- Date format: `YYYY-MM-DD`
+- Title: short, descriptive, no version number repetition
+
+---
+
+## Phase 4: Regenerate Artifacts
+
+```bash
+python3 scripts/generate_agents_md.py > AGENTS.md
+python3 scripts/generate_llms_txt.py > llms.txt
+python3 scripts/generate_llms_txt.py --full > llms-full.txt
+```
+
+Check if anything actually changed:
+
+```bash
+git diff --stat AGENTS.md llms.txt llms-full.txt
+```
+
+If no diff, the artifacts are already current. If there is a diff, stage them.
+
+---
+
+## Phase 5: Validate, Audit, Test
+
+Run the full quality gate:
+
+```bash
+python3 scripts/validate.py --strict
+python3 scripts/audit_skills.py --ci
+npm test
+```
+
+**Expected results:**
+- `validate.py`: `Errors: 0 | Warnings: 0 | VALIDATION PASSED`
+- `audit_skills.py`: `HIGH: 0 | WARN: 0` (INFO is acceptable)
+- `npm test`: `1..N` with zero `not ok`
+
+**One-liner:**
+```bash
+python3 scripts/validate.py --strict && python3 scripts/audit_skills.py --ci && npm test
+```
+
+**If tests fail:** Fix the issue, do NOT skip. Common failures:
+- Stale counts → re-run `generate:all` or fix README/ARCHITECTURE
+- Missing frontmatter → add to new KB docs
+- Broken symlink → `ai-toolkit doctor --fix`
+
+---
+
+## Phase 6: Commit
+
+Stage all release files:
+
+```bash
+git add package.json manifest.json app/.claude-plugin/plugin.json
+git add package-lock.json
+git add CHANGELOG.md
+git add AGENTS.md llms.txt llms-full.txt
+git add -p  # review and stage any other changes
+```
+
+Commit:
+
+```bash
+git commit -m "chore: release vX.Y.Z"
+```
+
+---
+
+## Phase 7: Tag and Push
+
+```bash
+git tag vX.Y.Z
+git push origin main --tags
+```
+
+This triggers `.github/workflows/publish.yml` which:
+1. Runs `validate.py --strict`
+2. Runs `npm test`
+3. Publishes to npm as `@softspark/ai-toolkit@X.Y.Z`
+
+**After CI completes:** Run the [Release Verification SOP](release-verification-sop.md)
+to smoke-test the published package.
+
+---
+
+## Rollback
+
+If a bad release was published:
+
+```bash
+# Unpublish from npm (within 72h)
+npm unpublish @softspark/ai-toolkit@X.Y.Z
+
+# Or deprecate (preferred — doesn't break existing installs)
+npm deprecate @softspark/ai-toolkit@X.Y.Z "Known issue: <description>. Use vA.B.C instead."
+
+# Delete tag
+git tag -d vX.Y.Z
+git push origin --delete vX.Y.Z
+```
+
+---
+
+## Checklist Summary
+
+| # | Step | Command / Action | Pass Criteria |
+|---|------|-----------------|---------------|
+| 1 | Version bump type | Decide patch/minor/major | — |
+| 2 | `package.json` version | Edit `"version"` | Matches target |
+| 3 | `manifest.json` version | Edit `"version"` | Matches target |
+| 4 | `plugin.json` version | Edit `"version"` | Matches target |
+| 5 | `package-lock.json` | `npm install --package-lock-only` | Matches target |
+| 6 | Count sync | Check `package.json` description, README | `validate.py` passes |
+| 7 | CHANGELOG.md | Add release entry | Entry exists for vX.Y.Z |
+| 8 | Regenerate artifacts | `generate_agents_md.py`, `generate_llms_txt.py` | No unexpected diff |
+| 9 | Validate | `validate.py --strict` | 0 errors, 0 warnings |
+| 10 | Security audit | `audit_skills.py --ci` | 0 HIGH |
+| 11 | Tests | `npm test` | All pass |
+| 12 | Commit | `git commit` | Clean working tree |
+| 13 | Tag | `git tag vX.Y.Z` | Tag exists |
+| 14 | Push | `git push origin main --tags` | CI triggered |
+
+---
+
 ## kb/procedures/release-verification-sop.md
 
 ---

package/llms.txt

@@ -15,6 +15,7 @@
 - [No Hardcoded Counts in Secondary Docs](kb/best-practices/no-hardcoded-counts.md)
 - [How-To Guides](kb/howto/README.md)
 - [SOP: Claude Toolkit Maintenance](kb/procedures/maintenance-sop.md)
+- [SOP: Release Preparation](kb/procedures/release-preparation-sop.md)
 - [SOP: Release Verification](kb/procedures/release-verification-sop.md)
 - [Agents Catalog](kb/reference/agents-catalog.md)
 - [Anti-Pattern Registry Format](kb/reference/anti-pattern-registry-format.md)

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.5.0",
+  "version": "1.5.1",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Professional-grade AI coding toolkit: 92 skills, 44 agents, multi-platform support (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, Google Antigravity), machine-enforced safety constitution, persona presets, skill security auditor, expanded lifecycle hooks, 11 plugin packs, and benchmark tooling.",
   "keywords": [
     "claude",