@yottameta/yotta-skills-plugin 0.19.16 → 0.19.18

package/skills/yotta-skills/lib/verify-gate.js

@@ -0,0 +1,93 @@
+'use strict';
+const fs = require('fs');
+const path = require('path');
+const trusted = require('./trusted-verifier');
+
+const SAFE = 'SAFE TO INSTALL';
+const CAUTION = 'INSTALL WITH CAUTION';
+const REVIEW = 'REVIEW REQUIRED';
+const BLOCK = 'DO NOT INSTALL';
+
+/** 用户显式指定的引擎（人工可信，不做身份判定）。 */
+function explicitCandidates(opts) {
+  const candidates = [];
+  if (opts && opts.verify) candidates.push(path.resolve(opts.verify));
+  if (process.env.YOTTA_SKILLS_VERIFY) candidates.push(path.resolve(process.env.YOTTA_SKILLS_VERIFY));
+  return candidates;
+}
+
+/**
+ * 定位元信扫描引擎（v0.19.13 收紧）。
+ *
+ * 旧实现会读本地注册表里 slug=yotta-verify 的 source_dirs，而注册表身份来自被扫描技能
+ * 自己 SKILL.md frontmatter 的 name —— 伪造目录即可劫持校验器（执行任意代码 + 伪造
+ * SAFE 结论）。现只认两类来源：
+ *   ① 用户显式指定：--verify / YOTTA_SKILLS_VERIFY；
+ *   ② 安装管线写入的受信记录：包身份（slug / package / trust / 版本）+ 路径 realpath
+ *      + 引擎 SHA-256 与记录一致。
+ * 其余一律返回 null（fail-closed），由上层走自举安装。
+ */
+function findVerifier(context) {
+  const ctx = context || {};
+  for (const candidate of explicitCandidates(ctx.opts || {})) {
+    try {
+      if (fs.statSync(candidate).isFile()) return candidate;
+    } catch (_) {
+      // Try the next candidate.
+    }
+  }
+  const record = ctx.trustedVerifier;
+  if (record && record.path) {
+    const check = trusted.verifyEngine(record.path, { record });
+    if (check.ok) return check.path;
+  }
+  return null;
+}
+
+function parseScanOutput(stdout) {
+  try {
+    const value = JSON.parse(String(stdout || ''));
+    if (!value || typeof value.verdict !== 'string') {
+      return { ok: false, verdict: null, counts: null, error: '扫描输出缺少 verdict' };
+    }
+    return { ok: true, verdict: value.verdict, counts: value.counts || {}, error: null };
+  } catch (error) {
+    return { ok: false, verdict: null, counts: null, error: error.message };
+  }
+}
+
+function evaluateVerdict(verdict) {
+  if (verdict === SAFE) return { decision: 'allow', block: false, warn: false };
+  if (verdict === CAUTION || verdict === REVIEW) return { decision: 'warn', block: false, warn: true };
+  return { decision: 'block', block: true, warn: true };
+}
+
+function runVerifier(engine, target, options) {
+  const result = options.spawnSync(options.python, ['-B', engine, 'scan', target, '--json'], {
+    encoding: 'utf8',
+    timeout: 60000,
+  });
+  if (result && result.error) {
+    return { ok: false, verdict: null, counts: null, error: result.error.message, exitCode: null };
+  }
+  if (!result || result.status === null) {
+    return { ok: false, verdict: null, counts: null, error: '元信 scan 执行失败', exitCode: null };
+  }
+  const parsed = parseScanOutput(result.stdout);
+  if (!parsed.ok) {
+    return { ok: false, verdict: null, counts: null, error: parsed.error, exitCode: result.status };
+  }
+  return { ok: true, verdict: parsed.verdict, counts: parsed.counts, error: null, exitCode: result.status };
+}
+
+module.exports = {
+  SAFE,
+  CAUTION,
+  REVIEW,
+  BLOCK,
+  explicitCandidates,
+  findVerifier,
+  parseScanOutput,
+  evaluateVerdict,
+  runVerifier,
+};

package/skills/yotta-skills/references/skill-list.md

@@ -1,14 +1,14 @@
 # 全家技能清单（22 个）
 
 > 机器权威源：`skills.json`（随包分发）；本文件为人工可读副本，新技能发布后须同步更新
-> `skills.json`（登记表为内部台账，不随包分发）。清单更新日期：2026-09-22。
+> `skills.json`（登记表为内部台账，不随包分发）。清单更新日期：2026-09-23。
 
 | slug | 中文名 | npm 包 | 清单版本 | 说明 |
 |---|---|---|---|---|
 | `yotta-anti-shallow` | 元谨 | `@yottameta/yotta-anti-shallow` | 1.4.0 | 防 AI 敷衍规则引擎（深入分析/根因追溯时激活） |
 | `yotta-code-quality` | 元质 | `@yottameta/yotta-code-quality` | 0.4.1 | 结对式代码质量评审（十二类腐化风险 + 0-100 健康分） |
 | `yotta-workflow` | 元序 | `@yottameta/yotta-workflow` | 0.4.1 | 跨会话/跨项目通用工作流协议（状态就近存） |
-| `yotta-memory` | 元忆 | `@yottameta/yotta-memory` | 0.16.4 | 有权限边界的文件式智能体记忆（FACT/PREF/BOUND/COMMIT） |
+| `yotta-memory` | 元忆 | `@yottameta/yotta-memory` | 0.16.6 | 有权限边界的文件式智能体记忆（FACT/PREF/BOUND/COMMIT） |
 | `yotta-learn` | 元习 | `@yottameta/yotta-learn` | 0.2.1 | 学习沉淀 CLI：错误/纠正/洞见沉淀为 .learnings/ 条目 |
 | `yotta-security-audit` | 元安 | `@yottameta/yotta-security-audit` | 0.2.4 | 安全扫描引擎：13 类检测器 + 系统安全基线 |
 | `yotta-vetter` | 元审 | `@yottameta/yotta-vetter` | 0.2.5 | 安全审查协议：四阶段 review + SAFE TO INSTALL 判定 |

package/skills/yotta-skills/scripts/yotta-skills-mcp.py

@@ -26,7 +26,7 @@ import subprocess
 import sys
 from pathlib import Path
 
-VERSION = "0.19.16"
+VERSION = "0.19.18"
 TOOL_NAME = "yotta-skills"
 CN_NAME = "元阁"
 MCP_PROTOCOL_MODERN = "2026-07-28"

package/skills/yotta-skills/skills.json

@@ -0,0 +1,161 @@
+{
+  "manifestVersion": 1,
+  "updated": "2026-09-23",
+  "note": "清单同步要求：每次技能发布新版本后，按 YottaSkills 技能登记表更新本文件（登记表为内部台账，不随包分发）。",
+  "skills": [
+    {
+      "slug": "yotta-anti-shallow",
+      "name": "元谨",
+      "pkg": "@yottameta/yotta-anti-shallow",
+      "version": "1.4.0",
+      "desc": "防 AI 敷衍规则引擎（深入分析/根因追溯时激活）"
+    },
+    {
+      "slug": "yotta-code-quality",
+      "name": "元质",
+      "pkg": "@yottameta/yotta-code-quality",
+      "version": "0.4.1",
+      "desc": "结对式代码质量评审（十二类腐化风险 + 0-100 健康分）"
+    },
+    {
+      "slug": "yotta-workflow",
+      "name": "元序",
+      "pkg": "@yottameta/yotta-workflow",
+      "version": "0.4.1",
+      "desc": "跨会话/跨项目通用工作流协议（状态就近存）"
+    },
+    {
+      "slug": "yotta-memory",
+      "name": "元忆",
+      "pkg": "@yottameta/yotta-memory",
+      "version": "0.16.6",
+      "desc": "有权限边界的文件式智能体记忆（FACT/PREF/BOUND/COMMIT）"
+    },
+    {
+      "slug": "yotta-learn",
+      "name": "元习",
+      "pkg": "@yottameta/yotta-learn",
+      "version": "0.2.1",
+      "desc": "学习沉淀 CLI：错误/纠正/洞见沉淀为 .learnings/ 条目"
+    },
+    {
+      "slug": "yotta-security-audit",
+      "name": "元安",
+      "pkg": "@yottameta/yotta-security-audit",
+      "version": "0.2.4",
+      "desc": "安全扫描引擎：13 类检测器 + 系统安全基线"
+    },
+    {
+      "slug": "yotta-vetter",
+      "name": "元审",
+      "pkg": "@yottameta/yotta-vetter",
+      "version": "0.2.5",
+      "desc": "安全审查协议：四阶段 review + SAFE TO INSTALL 判定"
+    },
+    {
+      "slug": "yotta-recon",
+      "name": "元析",
+      "pkg": "@yottameta/yotta-recon",
+      "version": "0.1.7",
+      "desc": "跨智能体网络侦察：零依赖端口/服务/版本指纹探测"
+    },
+    {
+      "slug": "yotta-guardian",
+      "name": "元盾",
+      "pkg": "@yottameta/yotta-guardian",
+      "version": "0.1.5",
+      "desc": "跨智能体危险调用拦截护栏：确定性规则 + 可插拔意图验证"
+    },
+    {
+      "slug": "yotta-humanize",
+      "name": "元真",
+      "pkg": "@yottameta/yotta-humanize",
+      "version": "0.2.1",
+      "desc": "去 AI 味中文写作编辑：检测器引擎"
+    },
+    {
+      "slug": "yotta-logs",
+      "name": "元史",
+      "pkg": "@yottameta/yotta-logs",
+      "version": "0.3.1",
+      "desc": "跨智能体历史会话 / 记忆日志检索"
+    },
+    {
+      "slug": "yotta-security-testing",
+      "name": "元测",
+      "pkg": "@yottameta/yotta-security-testing",
+      "version": "0.3.1",
+      "desc": "有纪律的 AI 安全测试方法论 + Scope Guard 五道防线"
+    },
+    {
+      "slug": "yotta-agent-hardening",
+      "name": "元安全",
+      "pkg": "@yottameta/yotta-agent-hardening",
+      "version": "0.2.6",
+      "desc": "防御向 AI 智能体自身安全加固（配置面静态扫描三域）"
+    },
+    {
+      "slug": "yotta-skill-creator",
+      "name": "元造",
+      "pkg": "@yottameta/yotta-skill-creator",
+      "version": "0.1.2",
+      "desc": "工坊「造」：端到端造技能脚手架"
+    },
+    {
+      "slug": "yotta-publish-guard",
+      "name": "元守",
+      "pkg": "@yottameta/yotta-publish-guard",
+      "version": "0.4.2",
+      "desc": "工坊「守」：发布前守门（版本四件对齐 + 三通道查重）"
+    },
+    {
+      "slug": "yotta-logwatch",
+      "name": "元察",
+      "pkg": "@yottameta/yotta-logwatch",
+      "version": "0.2.9",
+      "desc": "安全日志分析检测引擎（攻击链识别/告警聚合）"
+    },
+    {
+      "slug": "yotta-intel",
+      "name": "元情",
+      "pkg": "@yottameta/yotta-intel",
+      "version": "0.2.0",
+      "desc": "威胁情报 IOC 提取与规范化引擎（STIX-lite）"
+    },
+    {
+      "slug": "yotta-secret",
+      "name": "元钥",
+      "pkg": "@yottameta/yotta-secret",
+      "version": "0.2.0",
+      "desc": "密钥 / 凭据泄露源头扫描引擎"
+    },
+    {
+      "slug": "yotta-chain",
+      "name": "元链",
+      "pkg": "@yottameta/yotta-chain",
+      "version": "0.1.4",
+      "desc": "供应链依赖校验引擎"
+    },
+    {
+      "slug": "yotta-triage",
+      "name": "元鉴",
+      "pkg": "@yottameta/yotta-triage",
+      "version": "0.1.3",
+      "desc": "恶意样本静态初筛引擎（哈希/熵/字符串/PE-ELF）"
+    },
+    {
+      "slug": "yotta-prompt",
+      "name": "元引",
+      "pkg": "@yottameta/yotta-prompt",
+      "version": "0.2.2",
+      "desc": "意图澄清 + 生态入口（常驻注入，map 串联元阁全家）"
+    },
+    {
+      "slug": "yotta-verify",
+      "name": "元信",
+      "pkg": "@yottameta/yotta-verify",
+      "version": "0.3.2",
+      "desc": "装前安全扫描器 + audited 徽章（prompt injection + 危险模式）"
+    }
+  ]
+}