@weave_protocol/mund 0.4.0 → 0.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -480,14 +480,14 @@ Detection is pattern-based: it catches known shapes of an attack, not every vari
|
|
|
480
480
|
| ASI02 | Tool Misuse and Exploitation | 🟡 | ✅ | **Hundredmen** intercepts every MCP tool call: argument scanning, server reputation, intent analysis, then approve, block or hold for review ([interceptor.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/hundredmen/src/interceptor.ts)). |
|
|
481
481
|
| ASI03 | Identity and Privilege Abuse | 🟡 | ✅ | **Hord**: HMAC-signed capability tokens with expiry, revocation and a delegation-depth cap ([capability/token.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/hord/src/capability/token.ts)). **Domere**: signed handoff tokens bound to one agent, with expiry and revocation ([handoff/verification.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/domere/src/handoff/verification.ts)). Mund catches leaked credentials. |
|
|
482
482
|
| ASI04 | Agentic Supply Chain Vulnerabilities | ✅ | ✅ | Mund: static MCP manifest scanning, OSV CVEs, and **rug-pull detection**, which baselines every tool and escalates changes that turn malicious ([rugpull.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/mund/src/rugpull.ts), [fixtures](https://github.com/Tyox-all/Weave_Protocol/blob/main/mund/tests/fixtures/rugpull)). **Tollere**: package, container and extension supply chain. |
|
|
483
|
-
| ASI05 | Unexpected Code Execution | 🟡 |
|
|
483
|
+
| ASI05 | Unexpected Code Execution | 🟡 | ✅ | Mund: dangerous-code rules and command validation. **Hundredmen** can block or hold execution calls. **Hord**'s sandbox isolates network, filesystem and environment (`sandbox-exec` on macOS, `bwrap` on Linux), kills the process group on memory or time overruns, and reports what it enforced; strict mode refuses to run without full isolation ([sandbox/isolation.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/hord/src/sandbox/isolation.ts), [escape tests](https://github.com/Tyox-all/Weave_Protocol/blob/main/hord/tests/sandbox-isolation.test.ts)). |
|
|
484
484
|
| ASI06 | Memory and Context Poisoning | 🟡 | 🟡 | Mund scans content before it enters context, and **Hord** stores memory encrypted. Gap: stored memory isn't scanned on write or integrity-checked. |
|
|
485
485
|
| ASI07 | Insecure Inter-Agent Communication | ⬜ | ✅ | **Domere**: handoffs carry a signed token with an intent hash, are bound to the receiving agent, and expire or can be revoked ([handoff/verification.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/domere/src/handoff/verification.ts)). |
|
|
486
486
|
| ASI08 | Cascading Failures | ⬜ | 🟡 | **Witan**: checkpoints, transaction rollback and recovery plans ([recovery.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/witan/src/recovery.ts)). Gap: recovers after failure; no circuit breaker to contain one. |
|
|
487
487
|
| ASI09 | Human-Agent Trust Exploitation | ⬜ | ⬜ | Not covered. |
|
|
488
488
|
| ASI10 | Rogue Agents | ⬜ | 🟡 | **Hord**: signed, hash-chained attestations of agent actions ([attestation/service.ts](https://github.com/Tyox-all/Weave_Protocol/blob/main/hord/src/attestation/service.ts)). **Hundredmen** monitors and can block calls. Gap: no behavioral baseline to spot a rogue agent automatically. |
|
|
489
489
|
|
|
490
|
-
**Totals:** Mund alone has **3 ✅** out of 20; the Weave suite has **
|
|
490
|
+
**Totals:** Mund alone has **3 ✅** out of 20; the Weave suite has **11 ✅**. Next on the path to more green: injection detection measured against Adversary's corpus (LLM01 / ASI01) and scanning memory on write (ASI06).
|
|
491
491
|
|
|
492
492
|
---
|
|
493
493
|
|
|
@@ -18,7 +18,12 @@ export declare const IntelStatusSchema: {
|
|
|
18
18
|
export declare const AddIntelSourceSchema: {
|
|
19
19
|
id: z.ZodString;
|
|
20
20
|
name: z.ZodString;
|
|
21
|
-
type: z.ZodEnum<
|
|
21
|
+
type: z.ZodEnum<{
|
|
22
|
+
custom: "custom";
|
|
23
|
+
mitre_attack: "mitre_attack";
|
|
24
|
+
community_blocklist: "community_blocklist";
|
|
25
|
+
weave_official: "weave_official";
|
|
26
|
+
}>;
|
|
22
27
|
url: z.ZodOptional<z.ZodString>;
|
|
23
28
|
description: z.ZodString;
|
|
24
29
|
auto_update: z.ZodDefault<z.ZodBoolean>;
|
|
@@ -29,13 +34,40 @@ export declare const RemoveIntelSourceSchema: {
|
|
|
29
34
|
};
|
|
30
35
|
export declare const ThreatScanSchema: {
|
|
31
36
|
content: z.ZodString;
|
|
32
|
-
categories: z.ZodOptional<z.ZodArray<z.ZodEnum<
|
|
33
|
-
|
|
37
|
+
categories: z.ZodOptional<z.ZodArray<z.ZodEnum<{
|
|
38
|
+
prompt_injection: "prompt_injection";
|
|
39
|
+
jailbreak: "jailbreak";
|
|
40
|
+
data_exfiltration: "data_exfiltration";
|
|
41
|
+
privilege_escalation: "privilege_escalation";
|
|
42
|
+
social_engineering: "social_engineering";
|
|
43
|
+
malicious_code: "malicious_code";
|
|
44
|
+
pii_extraction: "pii_extraction";
|
|
45
|
+
system_prompt_leak: "system_prompt_leak";
|
|
46
|
+
dos_attack: "dos_attack";
|
|
47
|
+
mcp_exploit: "mcp_exploit";
|
|
48
|
+
}>>>;
|
|
49
|
+
min_severity: z.ZodOptional<z.ZodEnum<{
|
|
50
|
+
critical: "critical";
|
|
51
|
+
high: "high";
|
|
52
|
+
medium: "medium";
|
|
53
|
+
low: "low";
|
|
54
|
+
}>>;
|
|
34
55
|
min_confidence: z.ZodOptional<z.ZodNumber>;
|
|
35
56
|
};
|
|
36
57
|
export declare const ListPatternsSchema: {
|
|
37
58
|
source_id: z.ZodOptional<z.ZodString>;
|
|
38
|
-
category: z.ZodOptional<z.ZodEnum<
|
|
59
|
+
category: z.ZodOptional<z.ZodEnum<{
|
|
60
|
+
prompt_injection: "prompt_injection";
|
|
61
|
+
jailbreak: "jailbreak";
|
|
62
|
+
data_exfiltration: "data_exfiltration";
|
|
63
|
+
privilege_escalation: "privilege_escalation";
|
|
64
|
+
social_engineering: "social_engineering";
|
|
65
|
+
malicious_code: "malicious_code";
|
|
66
|
+
pii_extraction: "pii_extraction";
|
|
67
|
+
system_prompt_leak: "system_prompt_leak";
|
|
68
|
+
dos_attack: "dos_attack";
|
|
69
|
+
mcp_exploit: "mcp_exploit";
|
|
70
|
+
}>>;
|
|
39
71
|
enabled_only: z.ZodDefault<z.ZodBoolean>;
|
|
40
72
|
};
|
|
41
73
|
export declare const TogglePatternSchema: {
|
|
@@ -67,7 +99,12 @@ export declare const threatIntelTools: ({
|
|
|
67
99
|
schema: {
|
|
68
100
|
id: z.ZodString;
|
|
69
101
|
name: z.ZodString;
|
|
70
|
-
type: z.ZodEnum<
|
|
102
|
+
type: z.ZodEnum<{
|
|
103
|
+
custom: "custom";
|
|
104
|
+
mitre_attack: "mitre_attack";
|
|
105
|
+
community_blocklist: "community_blocklist";
|
|
106
|
+
weave_official: "weave_official";
|
|
107
|
+
}>;
|
|
71
108
|
url: z.ZodOptional<z.ZodString>;
|
|
72
109
|
description: z.ZodString;
|
|
73
110
|
auto_update: z.ZodDefault<z.ZodBoolean>;
|
|
@@ -84,8 +121,24 @@ export declare const threatIntelTools: ({
|
|
|
84
121
|
description: string;
|
|
85
122
|
schema: {
|
|
86
123
|
content: z.ZodString;
|
|
87
|
-
categories: z.ZodOptional<z.ZodArray<z.ZodEnum<
|
|
88
|
-
|
|
124
|
+
categories: z.ZodOptional<z.ZodArray<z.ZodEnum<{
|
|
125
|
+
prompt_injection: "prompt_injection";
|
|
126
|
+
jailbreak: "jailbreak";
|
|
127
|
+
data_exfiltration: "data_exfiltration";
|
|
128
|
+
privilege_escalation: "privilege_escalation";
|
|
129
|
+
social_engineering: "social_engineering";
|
|
130
|
+
malicious_code: "malicious_code";
|
|
131
|
+
pii_extraction: "pii_extraction";
|
|
132
|
+
system_prompt_leak: "system_prompt_leak";
|
|
133
|
+
dos_attack: "dos_attack";
|
|
134
|
+
mcp_exploit: "mcp_exploit";
|
|
135
|
+
}>>>;
|
|
136
|
+
min_severity: z.ZodOptional<z.ZodEnum<{
|
|
137
|
+
critical: "critical";
|
|
138
|
+
high: "high";
|
|
139
|
+
medium: "medium";
|
|
140
|
+
low: "low";
|
|
141
|
+
}>>;
|
|
89
142
|
min_confidence: z.ZodOptional<z.ZodNumber>;
|
|
90
143
|
};
|
|
91
144
|
} | {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"threat-intel-tools.d.ts","sourceRoot":"","sources":["../src/threat-intel-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM9E,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;CAElC,CAAC;AAEF,eAAO,MAAM,iBAAiB;;CAE7B,CAAC;AAEF,eAAO,MAAM,oBAAoB
|
|
1
|
+
{"version":3,"file":"threat-intel-tools.d.ts","sourceRoot":"","sources":["../src/threat-intel-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM9E,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;CAElC,CAAC;AAEF,eAAO,MAAM,iBAAiB;;CAE7B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;CAQhC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;CAEnC,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;CAS5B,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;CAQ9B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;CAG/B,CAAC;AAMF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyC5B,CAAC;AAMF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,kBAAkB;qCAE9B;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;oCAO9C;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;8BAqBhC;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA7C5C,CAAC;;;;;kCA+DiB;QAC5B,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,eAAe,CAAC;QACtB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC;;;;qCAYgC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;;;;6BAI7B;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACtD,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;+BAQ0B;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB;;;;;;;;;;;;;;gCAsB2B;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;;;;EAIvE"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@weave_protocol/mund",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.1",
|
|
4
4
|
"description": "The Guardian Protocol - MCP-based security monitoring for agentic AI systems",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"bin": {
|
|
@@ -26,13 +26,13 @@
|
|
|
26
26
|
"node": ">=20.0.0"
|
|
27
27
|
},
|
|
28
28
|
"dependencies": {
|
|
29
|
-
"@modelcontextprotocol/sdk": "^1.
|
|
29
|
+
"@modelcontextprotocol/sdk": "^1.32.2",
|
|
30
30
|
"better-sqlite3": "^11.3.0",
|
|
31
31
|
"express": "^4.21.0",
|
|
32
32
|
"uuid": "^14.0.0",
|
|
33
33
|
"winston": "^3.14.2",
|
|
34
34
|
"yaml": "^2.5.0",
|
|
35
|
-
"zod": "^
|
|
35
|
+
"zod": "^4.6.7"
|
|
36
36
|
},
|
|
37
37
|
"devDependencies": {
|
|
38
38
|
"@types/better-sqlite3": "^7.6.11",
|