acidtest 0.1.0

package/dist/layers/crossref.js

@@ -0,0 +1,143 @@
+/**
+ * Layer 4: Cross-Reference Analysis
+ * Compares findings across layers to detect permission mismatches and deception
+ */
+/**
+ * Cross-reference findings from previous layers
+ */
+export async function scanCrossReference(skill, previousFindings) {
+    const findings = [];
+    const metadata = skill.metadata;
+    // Extract findings by category
+    const networkFindings = previousFindings.filter(f => f.category.includes('network') ||
+        f.category === 'exfiltration-sinks' ||
+        f.patternId?.startsWith('ex-'));
+    const shellFindings = previousFindings.filter(f => f.category.includes('child_process') ||
+        f.category.includes('shell') ||
+        f.patternId === 'di-001');
+    const fileSystemFindings = previousFindings.filter(f => f.category.includes('filesystem') ||
+        f.category.includes('sensitive-paths') ||
+        f.patternId?.startsWith('sp-'));
+    const envAccessFindings = previousFindings.filter(f => f.patternId === 'cp-006' // process.env access
+    );
+    // Get declared permissions
+    const allowedTools = metadata['allowed-tools'] || [];
+    const allowedBins = metadata.bins || [];
+    const allowedEnv = metadata.env || [];
+    // Check for network capability mismatches
+    if (networkFindings.length > 0) {
+        const declaredNetwork = allowedTools.some(tool => ['browser', 'http', 'fetch', 'network', 'web', 'curl', 'wget'].some(net => tool.toLowerCase().includes(net))) || allowedBins.some(bin => ['curl', 'wget'].some(net => bin.toLowerCase().includes(net)));
+        if (!declaredNetwork) {
+            findings.push({
+                severity: 'CRITICAL',
+                category: 'permission-mismatch',
+                title: 'Undeclared network access',
+                detail: 'Code makes network calls but skill does not declare network permissions',
+                evidence: `Found ${networkFindings.length} network-related finding(s) in code`
+            });
+        }
+    }
+    // Check for shell execution mismatches
+    if (shellFindings.length > 0) {
+        const declaredShell = allowedTools.some(tool => ['shell', 'bash', 'exec', 'command'].some(sh => tool.toLowerCase().includes(sh))) || allowedBins.some(bin => ['bash', 'sh', 'zsh', 'fish', 'cmd', 'powershell'].some(sh => bin.toLowerCase() === sh));
+        if (!declaredShell) {
+            findings.push({
+                severity: 'CRITICAL',
+                category: 'permission-mismatch',
+                title: 'Undeclared shell execution',
+                detail: 'Code executes shell commands but skill does not declare shell permissions',
+                evidence: `Found ${shellFindings.length} shell-related finding(s) in code`
+            });
+        }
+    }
+    // Check for file system access mismatches
+    if (fileSystemFindings.length > 0) {
+        const declaredFS = allowedTools.some(tool => ['file', 'filesystem', 'fs', 'read', 'write'].some(fs => tool.toLowerCase().includes(fs)));
+        if (!declaredFS) {
+            findings.push({
+                severity: 'HIGH',
+                category: 'permission-mismatch',
+                title: 'Undeclared file system access',
+                detail: 'Code accesses sensitive file paths but skill does not declare filesystem permissions',
+                evidence: `Found ${fileSystemFindings.length} filesystem-related finding(s) in code`
+            });
+        }
+    }
+    // Check for environment variable mismatches
+    if (envAccessFindings.length > 0 && skill.codeFiles.length > 0) {
+        // Extract environment variables accessed in code
+        const codeEnvVars = extractEnvVarsFromCode(skill.codeFiles);
+        // Find undeclared env vars
+        const undeclaredEnvVars = codeEnvVars.filter(envVar => !allowedEnv.includes(envVar));
+        if (undeclaredEnvVars.length > 0) {
+            findings.push({
+                severity: 'HIGH',
+                category: 'permission-mismatch',
+                title: 'Undeclared environment variable access',
+                detail: 'Code accesses environment variables not declared in skill metadata',
+                evidence: `Undeclared variables: ${undeclaredEnvVars.slice(0, 5).join(', ')}${undeclaredEnvVars.length > 5 ? '...' : ''}`
+            });
+        }
+    }
+    // Check for deception indicators
+    const description = (metadata.description || '').toLowerCase();
+    const benignKeywords = ['calculator', 'timer', 'note', 'reminder', 'formatter', 'converter'];
+    const seemsBenign = benignKeywords.some(kw => description.includes(kw));
+    if (seemsBenign && networkFindings.length > 0) {
+        findings.push({
+            severity: 'HIGH',
+            category: 'deception-indicator',
+            title: 'Benign description with network access',
+            detail: `Skill claims to be a "${metadata.description}" but makes network calls`,
+            evidence: 'Simple utility skills typically do not require network access'
+        });
+    }
+    // Check for supply chain indicators
+    if (skill.codeFiles.length > 0) {
+        // Check for suspiciously large code files for simple functionality
+        const totalCodeSize = skill.codeFiles.reduce((sum, f) => sum + f.content.length, 0);
+        if (totalCodeSize > 100000 && seemsBenign) {
+            findings.push({
+                severity: 'MEDIUM',
+                category: 'supply-chain-risk',
+                title: 'Unusually large code for stated purpose',
+                detail: `Code is ${totalCodeSize} characters but skill description suggests simple functionality`,
+                evidence: 'Large code size may indicate hidden functionality'
+            });
+        }
+        // Check for minified code
+        const hasMinified = skill.codeFiles.some(f => {
+            const lines = f.content.split('\n');
+            const avgLineLength = f.content.length / lines.length;
+            return avgLineLength > 200; // Average line > 200 chars suggests minification
+        });
+        if (hasMinified) {
+            findings.push({
+                severity: 'MEDIUM',
+                category: 'supply-chain-risk',
+                title: 'Minified or obfuscated code detected',
+                detail: 'Code appears to be minified or obfuscated',
+                evidence: 'Minified code is harder to audit and may hide malicious behavior'
+            });
+        }
+    }
+    return {
+        layer: 'crossref',
+        findings
+    };
+}
+/**
+ * Extract environment variable names accessed in code
+ */
+function extractEnvVarsFromCode(codeFiles) {
+    const envVars = new Set();
+    const envPattern = /process\.env\.([A-Z_][A-Z0-9_]*)/g;
+    for (const file of codeFiles) {
+        let match;
+        while ((match = envPattern.exec(file.content)) !== null) {
+            envVars.add(match[1]);
+        }
+    }
+    return Array.from(envVars);
+}
+//# sourceMappingURL=crossref.js.map

package/dist/layers/crossref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crossref.js","sourceRoot":"","sources":["../../src/layers/crossref.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAY,EACZ,gBAA2B;IAE3B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEhC,+BAA+B;IAC/B,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAClD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,QAAQ,KAAK,oBAAoB;QACnC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAC/B,CAAC;IAEF,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAChD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;QACpC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC,CAAC,SAAS,KAAK,QAAQ,CACzB,CAAC;IAEF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACrD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACtC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAC/B,CAAC;IAEF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,qBAAqB;KAC/C,CAAC;IAEF,2BAA2B;IAC3B,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;IAEtC,0CAA0C;IAC1C,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACxE,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACjC,CACF,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC1B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC9D,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,2BAA2B;gBAClC,MAAM,EAAE,yEAAyE;gBACjF,QAAQ,EAAE,SAAS,eAAe,CAAC,MAAM,qCAAqC;aAC/E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAC7C,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAChC,CACF,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC1B,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAC3D,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CACzB,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,4BAA4B;gBACnC,MAAM,EAAE,2EAA2E;gBACnF,QAAQ,EAAE,SAAS,aAAa,CAAC,MAAM,mCAAmC;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1C,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CACtD,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAChC,CACF,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,+BAA+B;gBACtC,MAAM,EAAE,sFAAsF;gBAC9F,QAAQ,EAAE,SAAS,kBAAkB,CAAC,MAAM,wCAAwC;aACrF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,iDAAiD;QACjD,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5D,2BAA2B;QAC3B,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvC,CAAC;QAEF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,wCAAwC;gBAC/C,MAAM,EAAE,oEAAoE;gBAC5E,QAAQ,EAAE,yBAAyB,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;aAC1H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,WAAW,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,qBAAqB;YAC/B,KAAK,EAAE,wCAAwC;YAC/C,MAAM,EAAE,yBAAyB,QAAQ,CAAC,WAAW,2BAA2B;YAChF,QAAQ,EAAE,+DAA+D;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,mEAAmE;QACnE,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpF,IAAI,aAAa,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,mBAAmB;gBAC7B,KAAK,EAAE,yCAAyC;gBAChD,MAAM,EAAE,WAAW,aAAa,iEAAiE;gBACjG,QAAQ,EAAE,mDAAmD;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,aAAa,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACtD,OAAO,aAAa,GAAG,GAAG,CAAC,CAAC,iDAAiD;QAC/E,CAAC,CAAC,CAAC;QAEH,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,mBAAmB;gBAC7B,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EAAE,2CAA2C;gBACnD,QAAQ,EAAE,kEAAkE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,SAAgB;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,UAAU,GAAG,mCAAmC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC"}

package/dist/layers/injection.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Layer 2: Prompt Injection Scan
+ * Scans markdown content for prompt injection patterns
+ */
+import type { Skill, LayerResult } from '../types.js';
+/**
+ * Scan markdown content for prompt injection patterns
+ */
+export declare function scanInjection(skill: Skill): Promise<LayerResult>;
+//# sourceMappingURL=injection.d.ts.map

package/dist/layers/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/layers/injection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAW,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/D;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAmEtE"}

package/dist/layers/injection.js

@@ -0,0 +1,88 @@
+/**
+ * Layer 2: Prompt Injection Scan
+ * Scans markdown content for prompt injection patterns
+ */
+import { loadPatterns } from '../pattern-loader.js';
+/**
+ * Scan markdown content for prompt injection patterns
+ */
+export async function scanInjection(skill) {
+    const findings = [];
+    const markdown = skill.markdownContent;
+    // Load prompt injection and sensitive path patterns
+    const promptPatterns = await loadPatterns('prompt-injection');
+    const pathPatterns = await loadPatterns('sensitive-paths');
+    // Combine patterns that apply to markdown layer
+    const allPatterns = [...promptPatterns, ...pathPatterns].filter(p => p.layer === 'markdown');
+    // Scan against each pattern
+    for (const pattern of allPatterns) {
+        const regex = new RegExp(pattern.match.value, pattern.match.flags || '');
+        const matches = markdown.match(regex);
+        if (matches && matches.length > 0) {
+            // Try to find line number for the match
+            const lineNumber = findLineNumber(markdown, matches[0]);
+            findings.push({
+                severity: pattern.severity,
+                category: pattern.category || 'prompt-injection',
+                title: pattern.name,
+                file: 'SKILL.md',
+                line: lineNumber,
+                detail: pattern.description || `Pattern match: ${pattern.name}`,
+                evidence: matches.length > 1 ? `${matches.length} matches found` : `Match: "${truncate(matches[0], 100)}"`,
+                patternId: pattern.id
+            });
+        }
+    }
+    // Additional heuristic checks
+    // Check for excessively long markdown (could hide malicious content)
+    if (markdown.length > 50000) {
+        findings.push({
+            severity: 'LOW',
+            category: 'suspicious-size',
+            title: 'Unusually large skill documentation',
+            file: 'SKILL.md',
+            detail: `Skill documentation is ${markdown.length} characters`,
+            evidence: 'Large files can hide malicious content'
+        });
+    }
+    // Check for base64-looking strings in markdown (potential obfuscation)
+    const base64Pattern = /[A-Za-z0-9+\/]{50,}={0,2}/g;
+    const base64Matches = markdown.match(base64Pattern);
+    if (base64Matches && base64Matches.length > 0) {
+        findings.push({
+            severity: 'MEDIUM',
+            category: 'obfuscation',
+            title: 'Possible base64-encoded content in markdown',
+            file: 'SKILL.md',
+            detail: `Found ${base64Matches.length} base64-looking string(s)`,
+            evidence: 'Base64 encoding can hide malicious instructions'
+        });
+    }
+    return {
+        layer: 'markdown',
+        findings
+    };
+}
+/**
+ * Find line number for a match in text
+ */
+function findLineNumber(text, match) {
+    const index = text.indexOf(match);
+    if (index === -1)
+        return undefined;
+    const beforeMatch = text.substring(0, index);
+    const lineNumber = beforeMatch.split('\n').length;
+    return lineNumber;
+}
+/**
+ * Truncate string for display
+ */
+function truncate(str, maxLength) {
+    // Remove newlines and excessive whitespace
+    const cleaned = str.replace(/\s+/g, ' ').trim();
+    if (cleaned.length <= maxLength) {
+        return cleaned;
+    }
+    return cleaned.substring(0, maxLength) + '...';
+}
+//# sourceMappingURL=injection.js.map

package/dist/layers/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/layers/injection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAY;IAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC;IAEvC,oDAAoD;IACpD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAE3D,gDAAgD;IAChD,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,YAAY,CAAC,CAAC,MAAM,CAC7D,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAC5B,CAAC;IAEF,4BAA4B;IAC5B,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,wCAAwC;YACxC,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAExD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,kBAAkB;gBAChD,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,kBAAkB,OAAO,CAAC,IAAI,EAAE;gBAC/D,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;gBAC1G,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8BAA8B;IAE9B,qEAAqE;IACrE,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,qCAAqC;YAC5C,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,0BAA0B,QAAQ,CAAC,MAAM,aAAa;YAC9D,QAAQ,EAAE,wCAAwC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,MAAM,aAAa,GAAG,4BAA4B,CAAC;IACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,aAAa;YACvB,KAAK,EAAE,6CAA6C;YACpD,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,SAAS,aAAa,CAAC,MAAM,2BAA2B;YAChE,QAAQ,EAAE,iDAAiD;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAElD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,SAAiB;IAC9C,2CAA2C;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;AACjD,CAAC"}

package/dist/layers/permissions.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Layer 1: Permission Audit
+ * Analyzes YAML frontmatter to identify requested permissions and assess risk
+ */
+import type { Skill, LayerResult } from '../types.js';
+/**
+ * Scan skill permissions from YAML frontmatter
+ */
+export declare function scanPermissions(skill: Skill): Promise<LayerResult>;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/layers/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/layers/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAW,WAAW,EAAW,MAAM,aAAa,CAAC;AAGxE;;GAEG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAiIxE"}

package/dist/layers/permissions.js

@@ -0,0 +1,120 @@
+/**
+ * Layer 1: Permission Audit
+ * Analyzes YAML frontmatter to identify requested permissions and assess risk
+ */
+import { loadPatterns } from '../pattern-loader.js';
+/**
+ * Scan skill permissions from YAML frontmatter
+ */
+export async function scanPermissions(skill) {
+    const findings = [];
+    const metadata = skill.metadata;
+    // Load credential patterns for environment variable scanning
+    const credentialPatterns = await loadPatterns('credential-patterns');
+    // Check for no declared permissions (suspicious)
+    if (!metadata.bins && !metadata.env && !metadata['allowed-tools']) {
+        findings.push({
+            severity: 'LOW',
+            category: 'permissions',
+            title: 'No declared permissions',
+            file: 'SKILL.md',
+            detail: 'Skill declares no permissions (bins, env, or allowed-tools)',
+            evidence: 'Legitimate skills typically declare at least one permission'
+        });
+    }
+    // Scan environment variables for credential patterns
+    if (metadata.env && Array.isArray(metadata.env)) {
+        for (const envVar of metadata.env) {
+            for (const pattern of credentialPatterns) {
+                if (pattern.layer !== 'permissions')
+                    continue;
+                const regex = new RegExp(pattern.match.value, pattern.match.flags);
+                if (regex.test(envVar)) {
+                    findings.push({
+                        severity: pattern.severity,
+                        category: 'credential-request',
+                        title: pattern.name,
+                        file: 'SKILL.md',
+                        detail: `Requests credential environment variable: ${envVar}`,
+                        evidence: pattern.description,
+                        patternId: pattern.id
+                    });
+                }
+            }
+        }
+    }
+    // Check allowed-tools for dangerous permissions
+    if (metadata['allowed-tools'] && Array.isArray(metadata['allowed-tools'])) {
+        const tools = metadata['allowed-tools'];
+        // Check for shell/command execution
+        const shellTools = ['shell', 'bash', 'exec', 'command'];
+        const hasShell = tools.some(tool => shellTools.some(shellTool => tool.toLowerCase().includes(shellTool)));
+        if (hasShell) {
+            findings.push({
+                severity: 'CRITICAL',
+                category: 'dangerous-permission',
+                title: 'Shell execution permission',
+                file: 'SKILL.md',
+                detail: 'Skill requests shell/command execution capability',
+                evidence: `Allowed tools: ${tools.filter(t => shellTools.some(st => t.toLowerCase().includes(st))).join(', ')}`
+            });
+        }
+        // Check for network access
+        const networkTools = ['browser', 'http', 'fetch', 'network', 'web', 'curl', 'wget'];
+        const hasNetwork = tools.some(tool => networkTools.some(netTool => tool.toLowerCase().includes(netTool)));
+        if (hasNetwork) {
+            findings.push({
+                severity: 'HIGH',
+                category: 'network-permission',
+                title: 'Network access permission',
+                file: 'SKILL.md',
+                detail: 'Skill requests network/HTTP access capability',
+                evidence: `Allowed tools: ${tools.filter(t => networkTools.some(nt => t.toLowerCase().includes(nt))).join(', ')}`
+            });
+        }
+        // Check for file system access
+        const fsTools = ['file', 'filesystem', 'fs', 'read', 'write'];
+        const hasFileSystem = tools.some(tool => fsTools.some(fsTool => tool.toLowerCase().includes(fsTool)));
+        if (hasFileSystem) {
+            findings.push({
+                severity: 'MEDIUM',
+                category: 'filesystem-permission',
+                title: 'File system access permission',
+                file: 'SKILL.md',
+                detail: 'Skill requests file system access capability',
+                evidence: `Allowed tools: ${tools.filter(t => fsTools.some(ft => t.toLowerCase().includes(ft))).join(', ')}`
+            });
+        }
+    }
+    // Check for dangerous system binaries
+    if (metadata.bins && Array.isArray(metadata.bins)) {
+        const dangerousBins = [
+            { pattern: /^(bash|sh|zsh|fish|cmd|powershell)$/i, severity: 'CRITICAL', reason: 'Shell interpreter' },
+            { pattern: /^(curl|wget|fetch)$/i, severity: 'HIGH', reason: 'Network download tool' },
+            { pattern: /^(nc|netcat|ncat)$/i, severity: 'CRITICAL', reason: 'Network connection tool' },
+            { pattern: /^(python|node|ruby|perl|php)$/i, severity: 'HIGH', reason: 'Script interpreter' },
+            { pattern: /^(docker|kubectl|podman)$/i, severity: 'HIGH', reason: 'Container management' },
+            { pattern: /^(ssh|scp|sftp)$/i, severity: 'HIGH', reason: 'Remote access tool' },
+            { pattern: /^(git)$/i, severity: 'MEDIUM', reason: 'Version control (can clone arbitrary repos)' }
+        ];
+        for (const bin of metadata.bins) {
+            for (const dangerous of dangerousBins) {
+                if (dangerous.pattern.test(bin)) {
+                    findings.push({
+                        severity: dangerous.severity,
+                        category: 'dangerous-binary',
+                        title: `Dangerous binary: ${bin}`,
+                        file: 'SKILL.md',
+                        detail: `Requests access to system binary: ${bin}`,
+                        evidence: dangerous.reason
+                    });
+                }
+            }
+        }
+    }
+    return {
+        layer: 'permissions',
+        findings
+    };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/layers/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/layers/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAY;IAChD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEhC,6DAA6D;IAC7D,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,qBAAqB,CAAC,CAAC;IAErE,iDAAiD;IACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,aAAa;YACvB,KAAK,EAAE,yBAAyB;YAChC,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,6DAA6D;YACrE,QAAQ,EAAE,6DAA6D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YAClC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa;oBAAE,SAAS;gBAE9C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,oBAAoB;wBAC9B,KAAK,EAAE,OAAO,CAAC,IAAI;wBACnB,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,6CAA6C,MAAM,EAAE;wBAC7D,QAAQ,EAAE,OAAO,CAAC,WAAW;wBAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QAExC,oCAAoC;QACpC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACrE,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,sBAAsB;gBAChC,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,mDAAmD;gBAC3D,QAAQ,EAAE,kBAAkB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAChH,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CACnE,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,oBAAoB;gBAC9B,KAAK,EAAE,2BAA2B;gBAClC,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,+CAA+C;gBACvD,QAAQ,EAAE,kBAAkB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,uBAAuB;gBACjC,KAAK,EAAE,+BAA+B;gBACtC,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,8CAA8C;gBACtD,QAAQ,EAAE,kBAAkB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG;YACpB,EAAE,OAAO,EAAE,sCAAsC,EAAE,QAAQ,EAAE,UAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC/G,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAe,EAAE,MAAM,EAAE,uBAAuB,EAAE;YAC/F,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAmB,EAAE,MAAM,EAAE,yBAAyB,EAAE;YACpG,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,MAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACtG,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE;YACpG,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE;YACzF,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAiB,EAAE,MAAM,EAAE,6CAA6C,EAAE;SAC5G,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;gBACtC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,QAAQ,EAAE,kBAAkB;wBAC5B,KAAK,EAAE,qBAAqB,GAAG,EAAE;wBACjC,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,qCAAqC,GAAG,EAAE;wBAClD,QAAQ,EAAE,SAAS,CAAC,MAAM;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/pattern-loader.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Pattern loader utility
+ * Loads detection patterns from JSON files
+ */
+import type { Pattern } from './types.js';
+/**
+ * Load patterns from a specific category file
+ */
+export declare function loadPatterns(category: string): Promise<Pattern[]>;
+/**
+ * Load all available patterns
+ */
+export declare function loadAllPatterns(): Promise<Pattern[]>;
+//# sourceMappingURL=pattern-loader.d.ts.map

package/dist/pattern-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-loader.d.ts","sourceRoot":"","sources":["../src/pattern-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAmB,MAAM,YAAY,CAAC;AAO3D;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAiBvE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAkB1D"}

package/dist/pattern-loader.js

@@ -0,0 +1,50 @@
+/**
+ * Pattern loader utility
+ * Loads detection patterns from JSON files
+ */
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const patternCache = new Map();
+/**
+ * Load patterns from a specific category file
+ */
+export async function loadPatterns(category) {
+    // Check cache first
+    if (patternCache.has(category)) {
+        return patternCache.get(category);
+    }
+    try {
+        const patternPath = join(__dirname, 'patterns', `${category}.json`);
+        const content = readFileSync(patternPath, 'utf-8');
+        const data = JSON.parse(content);
+        patternCache.set(category, data.patterns);
+        return data.patterns;
+    }
+    catch (error) {
+        console.warn(`Warning: Could not load patterns for category: ${category}`);
+        return [];
+    }
+}
+/**
+ * Load all available patterns
+ */
+export async function loadAllPatterns() {
+    const categories = [
+        'prompt-injection',
+        'dangerous-imports',
+        'sensitive-paths',
+        'exfiltration-sinks',
+        'obfuscation',
+        'credential-patterns'
+    ];
+    const allPatterns = [];
+    for (const category of categories) {
+        const patterns = await loadPatterns(category);
+        allPatterns.push(...patterns);
+    }
+    return allPatterns;
+}
+//# sourceMappingURL=pattern-loader.js.map

package/dist/pattern-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-loader.js","sourceRoot":"","sources":["../src/pattern-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;AAElD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,oBAAoB;IACpB,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,IAAI,GAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElD,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,UAAU,GAAG;QACjB,kBAAkB;QAClB,mBAAmB;QACnB,iBAAiB;QACjB,oBAAoB;QACpB,aAAa;QACb,qBAAqB;KACtB,CAAC;IAEF,MAAM,WAAW,GAAc,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/patterns/credential-patterns.json

@@ -0,0 +1,77 @@
+{
+  "category": "credential-patterns",
+  "patterns": [
+    {
+      "id": "cp-001",
+      "name": "env-var-api-key",
+      "description": "Requests API key environment variable",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "(API_KEY|APIKEY|API_SECRET)",
+        "flags": "g"
+      },
+      "layer": "permissions"
+    },
+    {
+      "id": "cp-002",
+      "name": "env-var-token",
+      "description": "Requests token environment variable",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "(TOKEN|ACCESS_TOKEN|AUTH_TOKEN|BEARER_TOKEN)",
+        "flags": "g"
+      },
+      "layer": "permissions"
+    },
+    {
+      "id": "cp-003",
+      "name": "env-var-password",
+      "description": "Requests password environment variable",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "(PASSWORD|PASSWD|PWD)(?!_HASH)",
+        "flags": "g"
+      },
+      "layer": "permissions"
+    },
+    {
+      "id": "cp-004",
+      "name": "env-var-secret",
+      "description": "Requests secret environment variable",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "(SECRET|CLIENT_SECRET)",
+        "flags": "g"
+      },
+      "layer": "permissions"
+    },
+    {
+      "id": "cp-005",
+      "name": "env-var-credential",
+      "description": "Requests credential environment variable",
+      "severity": "HIGH",
+      "match": {
+        "type": "regex",
+        "value": "(CREDENTIAL|CREDENTIALS)",
+        "flags": "g"
+      },
+      "layer": "permissions"
+    },
+    {
+      "id": "cp-006",
+      "name": "process-env-access",
+      "description": "Accesses process.env in code",
+      "severity": "MEDIUM",
+      "match": {
+        "type": "regex",
+        "value": "process\\.env\\.[A-Z_]+",
+        "flags": "g"
+      },
+      "layer": "code"
+    }
+  ]
+}