@xopcai/xopcbot 0.1.0

package/dist/agent/skills/scanner.js

@@ -0,0 +1,265 @@
+/**
+ * Skill Security Scanner
+ *
+ * Scans skill directories for potentially dangerous code patterns.
+ * Inspired by openclaw's skill-scanner.ts
+ */
+import { readdir, readFile } from 'fs/promises';
+import { join } from 'path';
+import { createLogger } from '../../utils/logger.js';
+const log = createLogger('SkillScanner');
+/**
+ * Patterns that indicate potentially dangerous code
+ */
+const CRITICAL_PATTERNS = [
+    {
+        pattern: /\bexec\s*\(/g,
+        message: 'Direct command execution (exec)',
+    },
+    {
+        pattern: /\bchild_process\.exec/g,
+        message: 'child_process.exec usage',
+    },
+    {
+        pattern: /\beval\s*\(/g,
+        message: 'Dynamic code evaluation (eval)',
+    },
+    {
+        pattern: /\bFunction\s*\(/g,
+        message: 'Dynamic function creation',
+    },
+    {
+        pattern: /require\s*\(['"]child_process['"]\)/g,
+        message: 'child_process module import',
+    },
+    {
+        pattern: /require\s*\(['"]fs['"]\)/g,
+        message: 'fs module import (file system access)',
+    },
+    {
+        pattern: /\bfs\.writeFile/g,
+        message: 'File write operation',
+    },
+    {
+        pattern: /\bfs\.unlink/g,
+        message: 'File deletion operation',
+    },
+    {
+        pattern: /\bfs\.rm/g,
+        message: 'File/directory removal operation',
+    },
+    {
+        pattern: /net\.createServer/g,
+        message: 'Network server creation',
+    },
+    {
+        pattern: /http\.createServer/g,
+        message: 'HTTP server creation',
+    },
+    {
+        pattern: /\bfetch\s*\(/g,
+        message: 'Network request (fetch)',
+    },
+    {
+        pattern: /axios\./g,
+        message: 'Network request (axios)',
+    },
+];
+const WARNING_PATTERNS = [
+    {
+        pattern: /process\.env/g,
+        message: 'Environment variable access',
+    },
+    {
+        pattern: /process\.cwd/g,
+        message: 'Current working directory access',
+    },
+    {
+        pattern: /process\.argv/g,
+        message: 'Command line argument access',
+    },
+    {
+        pattern: /\bconsole\./g,
+        message: 'Console output',
+    },
+    {
+        pattern: /setTimeout\s*\(/g,
+        message: 'Timer usage (setTimeout)',
+    },
+    {
+        pattern: /setInterval\s*\(/g,
+        message: 'Interval usage (setInterval)',
+    },
+    {
+        pattern: /__dirname/g,
+        message: 'Directory name reference',
+    },
+    {
+        pattern: /__filename/g,
+        message: 'Filename reference',
+    },
+];
+/**
+ * File extensions to scan
+ */
+const SCAN_EXTENSIONS = ['.js', '.ts', '.mjs', '.cjs', '.jsx', '.tsx'];
+/**
+ * Directories to skip
+ */
+const SKIP_DIRECTORIES = ['node_modules', '.git', 'dist', 'build', '.next', '.nuxt'];
+/**
+ * Scan a single file for security patterns
+ */
+async function scanFile(filePath, _rootDir) {
+    const findings = [];
+    try {
+        const content = await readFile(filePath, 'utf-8');
+        const lines = content.split('\n');
+        // Scan for critical patterns
+        for (const { pattern, message } of CRITICAL_PATTERNS) {
+            pattern.lastIndex = 0; // Reset regex state
+            for (let lineNum = 0; lineNum < lines.length; lineNum++) {
+                const line = lines[lineNum];
+                const match = pattern.exec(line);
+                if (match) {
+                    findings.push({
+                        severity: 'critical',
+                        message,
+                        file: filePath,
+                        line: lineNum + 1,
+                        pattern: match[0],
+                    });
+                }
+            }
+        }
+        // Scan for warning patterns
+        for (const { pattern, message } of WARNING_PATTERNS) {
+            pattern.lastIndex = 0;
+            for (let lineNum = 0; lineNum < lines.length; lineNum++) {
+                const line = lines[lineNum];
+                const match = pattern.exec(line);
+                if (match) {
+                    findings.push({
+                        severity: 'warning',
+                        message,
+                        file: filePath,
+                        line: lineNum + 1,
+                        pattern: match[0],
+                    });
+                }
+            }
+        }
+    }
+    catch (err) {
+        log.warn({ file: filePath, error: err }, 'Failed to scan file');
+    }
+    return findings;
+}
+/**
+ * Recursively scan a directory
+ */
+async function scanDirectoryRecursive(dir, rootDir, findings) {
+    try {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            // Skip hidden files and directories
+            if (entry.name.startsWith('.')) {
+                continue;
+            }
+            // Skip common build directories
+            if (entry.isDirectory() && SKIP_DIRECTORIES.includes(entry.name)) {
+                continue;
+            }
+            const fullPath = join(dir, entry.name);
+            if (entry.isDirectory()) {
+                await scanDirectoryRecursive(fullPath, rootDir, findings);
+            }
+            else if (entry.isFile()) {
+                // Check if file has a scannable extension
+                const ext = entry.name.slice(entry.name.lastIndexOf('.'));
+                if (SCAN_EXTENSIONS.includes(ext)) {
+                    const fileFindings = await scanFile(fullPath, rootDir);
+                    findings.push(...fileFindings);
+                }
+            }
+        }
+    }
+    catch (err) {
+        log.warn({ dir, error: err }, 'Failed to scan directory');
+    }
+}
+/**
+ * Scan a skill directory for security issues
+ */
+export async function scanSkillDirectory(skillDir) {
+    log.info({ skillDir }, 'Scanning skill for security issues');
+    const findings = [];
+    await scanDirectoryRecursive(skillDir, skillDir, findings);
+    const summary = {
+        critical: findings.filter(f => f.severity === 'critical').length,
+        warn: findings.filter(f => f.severity === 'warning').length,
+        info: findings.filter(f => f.severity === 'info').length,
+        findings,
+    };
+    if (summary.critical > 0) {
+        log.warn({ skillDir, critical: summary.critical }, 'Skill has critical security findings');
+    }
+    else if (summary.warn > 0) {
+        log.info({ skillDir, warnings: summary.warn }, 'Skill has security warnings');
+    }
+    else {
+        log.info({ skillDir }, 'Skill passed security scan');
+    }
+    return summary;
+}
+/**
+ * Format security findings for display
+ */
+export function formatScanSummary(summary, skillName) {
+    const lines = [];
+    lines.push(`Security scan results for "${skillName}":`);
+    lines.push(`  Critical: ${summary.critical}`);
+    lines.push(`  Warnings: ${summary.warn}`);
+    lines.push(`  Info: ${summary.info}`);
+    if (summary.findings.length > 0) {
+        lines.push('');
+        lines.push('Findings:');
+        // Show critical findings first
+        const criticalFindings = summary.findings.filter(f => f.severity === 'critical');
+        for (const finding of criticalFindings) {
+            lines.push(`  ❌ ${finding.message} at line ${finding.line}`);
+        }
+        // Show warnings
+        const warningFindings = summary.findings.filter(f => f.severity === 'warning');
+        for (const finding of warningFindings) {
+            lines.push(`  ⚠️  ${finding.message} at line ${finding.line}`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Collect security warnings for a skill installation
+ */
+export async function collectSkillInstallWarnings(skillDir, skillName) {
+    const warnings = [];
+    try {
+        const summary = await scanSkillDirectory(skillDir);
+        if (summary.critical > 0) {
+            const criticalDetails = summary.findings
+                .filter(f => f.severity === 'critical')
+                .map(f => `${f.message} (line ${f.line})`)
+                .join('; ');
+            warnings.push(`WARNING: Skill "${skillName}" contains dangerous code patterns: ${criticalDetails}`);
+        }
+        else if (summary.warn > 0) {
+            warnings.push(`Skill "${skillName}" has ${summary.warn} suspicious code pattern(s). ` +
+                `Run "xopcbot security audit --deep" for details.`);
+        }
+    }
+    catch (err) {
+        warnings.push(`Skill "${skillName}" code safety scan failed (${String(err)}). ` +
+            `Installation continues; run "xopcbot security audit --deep" after install.`);
+    }
+    return warnings;
+}
+//# sourceMappingURL=scanner.js.map

package/dist/agent/skills/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../../src/agent/skills/scanner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAmBzC;;GAEG;AACH,MAAM,iBAAiB,GAAgD;IACrE;QACE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,iCAAiC;KAC3C;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,0BAA0B;KACpC;IACD;QACE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,gCAAgC;KAC1C;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,2BAA2B;KACrC;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,OAAO,EAAE,6BAA6B;KACvC;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE,uCAAuC;KACjD;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,kCAAkC;KAC5C;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,yBAAyB;KACnC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAgD;IACpE;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,6BAA6B;KACvC;IACD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,kCAAkC;KAC5C;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,8BAA8B;KACxC;IACD;QACE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,gBAAgB;KAC1B;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,0BAA0B;KACpC;IACD;QACE,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,8BAA8B;KACxC;IACD;QACE,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,0BAA0B;KACpC;IACD;QACE,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,oBAAoB;KAC9B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAErF;;GAEG;AACH,KAAK,UAAU,QAAQ,CAAC,QAAgB,EAAE,QAAgB;IACxD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,6BAA6B;QAC7B,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACrD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,oBAAoB;YAE3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEjC,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,UAAU;wBACpB,OAAO;wBACP,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,OAAO,GAAG,CAAC;wBACjB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,gBAAgB,EAAE,CAAC;YACpD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEjC,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,SAAS;wBACnB,OAAO;wBACP,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,OAAO,GAAG,CAAC;wBACjB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CACnC,GAAW,EACX,OAAe,EACf,QAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,oCAAoC;YACpC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,gCAAgC;YAChC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjE,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,0CAA0C;gBAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1D,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,oCAAoC,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAgB;QAC3B,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;QAChE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QAC3D,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;QACxD,QAAQ;KACT,CAAC;IAEF,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,sCAAsC,CAAC,CAAC;IAC7F,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB,EAAE,SAAiB;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,8BAA8B,SAAS,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAExB,+BAA+B;QAC/B,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACjF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,YAAY,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,gBAAgB;QAChB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC/E,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,OAAO,YAAY,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAgB,EAAE,SAAiB;IACnF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ;iBACrC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC;iBACzC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,QAAQ,CAAC,IAAI,CACX,mBAAmB,SAAS,uCAAuC,eAAe,EAAE,CACrF,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CACX,UAAU,SAAS,SAAS,OAAO,CAAC,IAAI,+BAA+B;gBACvE,kDAAkD,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CACX,UAAU,SAAS,8BAA8B,MAAM,CAAC,GAAG,CAAC,KAAK;YACjE,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/agent/skills/test-framework.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Skill Test Framework
+ *
+ * Comprehensive testing framework for skills.
+ * Validates SKILL.md format, dependencies, security, and examples.
+ */
+import type { SkillMetadata } from './types.js';
+export type TestStatus = 'pass' | 'fail' | 'warn' | 'skip';
+export interface TestResult {
+    name: string;
+    status: TestStatus;
+    message?: string;
+    details?: string[];
+    duration?: number;
+}
+export interface SkillTestReport {
+    skillName: string;
+    skillPath: string;
+    timestamp: number;
+    results: TestResult[];
+    summary: {
+        total: number;
+        passed: number;
+        failed: number;
+        warnings: number;
+        skipped: number;
+    };
+    passed: boolean;
+}
+export interface TestOptions {
+    /** Skip security tests */
+    skipSecurity?: boolean;
+    /** Skip dependency tests */
+    skipDeps?: boolean;
+    /** Skip example tests */
+    skipExamples?: boolean;
+    /** Strict mode - fail on warnings */
+    strict?: boolean;
+    /** Timeout for example tests (ms) */
+    exampleTimeout?: number;
+    /** Working directory for example tests */
+    cwd?: string;
+}
+export declare class SkillTestFramework {
+    private options;
+    constructor(options?: TestOptions);
+    /**
+     * Run all tests for a skill
+     */
+    testSkill(skillDir: string): Promise<SkillTestReport>;
+    /**
+     * Test SKILL.md format
+     */
+    testSkillMdFormat(filePath: string): TestResult;
+    /**
+     * Test dependencies
+     */
+    testDependencies(metadata: SkillMetadata): Promise<TestResult>;
+    /**
+     * Test security
+     */
+    testSecurity(skillDir: string): Promise<TestResult>;
+    /**
+     * Test metadata
+     */
+    testMetadata(metadata: SkillMetadata, _skillDir: string): TestResult;
+    /**
+     * Test code examples
+     */
+    testExamples(content: string, _skillDir: string): Promise<TestResult>;
+    private extractMetadata;
+    private validateInstallSpec;
+    private extractCodeBlocks;
+    private validateShellSyntax;
+    private createReport;
+    private createFailureReport;
+}
+export interface TestRunnerOptions extends TestOptions {
+    /** Skills directory to test */
+    skillsDir: string;
+    /** Output format */
+    format?: 'text' | 'json' | 'tap';
+    /** Verbose output */
+    verbose?: boolean;
+}
+export declare class SkillTestRunner {
+    private options;
+    private framework;
+    constructor(options: TestRunnerOptions);
+    run(): Promise<{
+        reports: SkillTestReport[];
+        passed: boolean;
+    }>;
+    private findSkillDirectories;
+}
+/**
+ * Format test results as text
+ */
+export declare function formatTestResults(reports: SkillTestReport[], verbose?: boolean): string;
+/**
+ * Format test results as JSON
+ */
+export declare function formatTestResultsJson(reports: SkillTestReport[]): string;
+/**
+ * Format test results as TAP (Test Anything Protocol)
+ */
+export declare function formatTestResultsTap(reports: SkillTestReport[]): string;