agent-security-lens 0.1.0

package/schemas/component-intelligence.schema.json

@@ -0,0 +1,93 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/component-intelligence.schema.json",
+  "title": "AgentSecurityLens Component Intelligence Database",
+  "type": "object",
+  "required": ["schema_version", "updated_at", "components"],
+  "properties": {
+    "schema_version": { "type": "string" },
+    "updated_at": { "type": "string" },
+    "counts": {
+      "type": "object",
+      "required": ["total_records", "strict_reviewed", "curated_baseline"],
+      "properties": {
+        "total_records": { "type": "integer", "minimum": 0 },
+        "strict_reviewed": { "type": "integer", "minimum": 0 },
+        "curated_baseline": { "type": "integer", "minimum": 0 }
+      },
+      "additionalProperties": false
+    },
+    "components": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "name",
+          "type",
+          "aliases",
+          "source_patterns",
+          "trust_score",
+          "risk_level",
+          "risk_signals",
+          "safe_install_plan",
+          "alternatives",
+          "decision"
+        ],
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "type": {
+            "type": "string",
+            "enum": ["agent-framework", "mcp", "skill", "tool", "prompt", "workflow", "memory", "unknown"]
+          },
+          "aliases": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "source_patterns": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "intelligence_state": {
+            "type": "string",
+            "enum": ["strict_reviewed", "curated_baseline"]
+          },
+          "review_state": {
+            "type": "string",
+            "enum": ["reviewed", "curated_baseline"]
+          },
+          "evidence_status": { "type": "string" },
+          "disclosure": { "type": "string" },
+          "trust_score": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 100
+          },
+          "risk_level": {
+            "type": "string",
+            "enum": ["low", "medium", "high"]
+          },
+          "risk_signals": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "safe_install_plan": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "alternatives": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "decision": {
+            "type": "string",
+            "enum": ["allow", "allow_with_restrictions", "ask_user", "avoid"]
+          }
+        },
+        "additionalProperties": true
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/decision-feedback.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/decision-feedback.schema.json",
+  "title": "AgentSecurityLens Decision Feedback",
+  "type": "object",
+  "required": ["schema_version", "client", "feedback"],
+  "properties": {
+    "schema_version": { "type": "string" },
+    "client": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string" },
+        "agent_id": { "type": "string" },
+        "agent_name": { "type": "string" },
+        "client_type": { "type": "string" },
+        "mode": { "type": "string" },
+        "protocol": { "type": "string" },
+        "tier": { "type": "string" }
+      },
+      "additionalProperties": true
+    },
+    "feedback": {
+      "type": "object",
+      "required": ["feedback_type"],
+      "properties": {
+        "component_name": { "type": "string" },
+        "component_type": { "type": "string" },
+        "decision": { "type": "string" },
+        "feedback_type": {
+          "type": "string",
+          "enum": ["helpful", "too_strict", "too_permissive", "missing_component", "missing_alternative", "incorrect_risk", "other"]
+        },
+        "rating": {
+          "type": "number",
+          "minimum": 1,
+          "maximum": 5
+        },
+        "comment": { "type": "string" },
+        "recorded_at": { "type": "string" }
+      },
+      "additionalProperties": true
+    },
+    "privacy_policy": {
+      "type": "object",
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/ecosystem-candidate-registry.schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/ecosystem-candidate-registry.schema.json",
+  "title": "AgentSecurityLens Ecosystem Candidate Registry",
+  "type": "object",
+  "required": ["id", "version", "status", "candidates"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "version": { "type": "string" },
+    "status": {
+      "type": "string",
+      "enum": ["draft", "experimental", "active", "deprecated", "archived"]
+    },
+    "candidates": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "name",
+          "entity_type",
+          "lifecycle_status",
+          "claim_status",
+          "priority",
+          "regions",
+          "why_candidate",
+          "known_or_expected_artifacts",
+          "data_needs",
+          "profile_impacts"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "name": { "type": "string" },
+          "entity_type": {
+            "type": "string",
+            "enum": ["agent-ecosystem", "mcp-ecosystem", "skill-ecosystem", "agent-bundle"]
+          },
+          "lifecycle_status": {
+            "type": "string",
+            "enum": ["discovered", "candidate", "draft-profile", "experimental-profile", "active-profile", "deprecated", "archived"]
+          },
+          "claim_status": {
+            "type": "string",
+            "enum": ["unverified-user-supplied", "research-needed", "partially-verified", "verified"]
+          },
+          "priority": { "type": "integer" },
+          "regions": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "why_candidate": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "known_or_expected_artifacts": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "data_needs": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["id", "description", "status"],
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "pattern": "^[a-z0-9][a-z0-9-]*$"
+                },
+                "description": { "type": "string" },
+                "status": {
+                  "type": "string",
+                  "enum": ["needed", "in-progress", "collected", "blocked"]
+                }
+              },
+              "additionalProperties": false
+            }
+          },
+          "profile_impacts": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "notes": {
+            "type": "array",
+            "items": { "type": "string" }
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/profile.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/profile.schema.json",
+  "title": "AgentSecurityLens Profile",
+  "type": "object",
+  "required": [
+    "id",
+    "version",
+    "status",
+    "confidence",
+    "coverage",
+    "rule_packs",
+    "path_hints",
+    "known_limitations"
+  ],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "version": {
+      "type": "string"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["draft", "experimental", "active", "deprecated", "archived"]
+    },
+    "confidence": {
+      "type": "number",
+      "minimum": 0,
+      "maximum": 1
+    },
+    "coverage": {
+      "type": "number",
+      "minimum": 0,
+      "maximum": 1
+    },
+    "extends": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "rule_packs": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z0-9][a-z0-9-]*$"
+      }
+    },
+    "path_hints": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "known_limitations": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/recommendation-pack.schema.json

@@ -0,0 +1,114 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/recommendation-pack.schema.json",
+  "title": "AgentSecurityLens Recommendation Pack",
+  "type": "object",
+  "required": ["id", "version", "status", "recommendations"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "version": {
+      "type": "string"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["draft", "experimental", "active", "deprecated", "archived"]
+    },
+    "recommendations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "title",
+          "type",
+          "status",
+          "source",
+          "confidence",
+          "rank",
+          "applies_to",
+          "recommended_actions",
+          "recommended_alternatives",
+          "agent_instruction",
+          "rollback_note"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": { "type": "string" },
+          "type": {
+            "type": "string",
+            "enum": ["replacement", "configuration", "credential", "workflow", "review"]
+          },
+          "status": {
+            "type": "string",
+            "enum": ["candidate", "draft", "experimental", "active", "deprecated", "archived"]
+          },
+          "source": { "type": "string" },
+          "confidence": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1
+          },
+          "rank": { "type": "integer" },
+          "applies_to": {
+            "type": "object",
+            "properties": {
+              "rule_ids": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "categories": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "permissions_any": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "permissions_all": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "profile_ids": {
+                "type": "array",
+                "items": { "type": "string" }
+              }
+            },
+            "additionalProperties": false
+          },
+          "recommended_actions": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "recommended_alternatives": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "agent_instruction": { "type": "string" },
+          "one_step_commands": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["title", "command", "platform", "requires_confirmation"],
+              "properties": {
+                "title": { "type": "string" },
+                "command": { "type": "string" },
+                "platform": { "type": "string" },
+                "requires_confirmation": { "type": "boolean" }
+              },
+              "additionalProperties": false
+            }
+          },
+          "rollback_note": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/rule-pack.schema.json

@@ -0,0 +1,113 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/rule-pack.schema.json",
+  "title": "AgentSecurityLens Rule Pack",
+  "type": "object",
+  "required": ["id", "version", "rules"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "version": {
+      "type": "string"
+    },
+    "rules": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "title",
+          "category",
+          "severity",
+          "confidence",
+          "permissions",
+          "target_paths",
+          "patterns",
+          "why_it_matters",
+          "recommended_actions",
+          "recommended_alternatives",
+          "migration_instruction"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": {
+            "type": "string"
+          },
+          "category": {
+            "type": "string",
+            "enum": [
+              "execution-risk",
+              "remote-access-risk",
+              "data-exposure-risk",
+              "supply-chain-risk",
+              "persistence-automation-risk"
+            ]
+          },
+          "severity": {
+            "type": "string",
+            "enum": ["critical", "high", "medium", "low", "info"]
+          },
+          "confidence": {
+            "type": "number",
+            "minimum": 0,
+            "maximum": 1
+          },
+          "permissions": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "target_paths": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "patterns": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "match_scope": {
+            "type": "string",
+            "enum": ["line", "file"],
+            "default": "line"
+          },
+          "supersedes": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "why_it_matters": {
+            "type": "string"
+          },
+          "recommended_actions": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "recommended_alternatives": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "migration_instruction": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/trust-signal-taxonomy.schema.json

@@ -0,0 +1,68 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentsecuritylens.dev/schemas/trust-signal-taxonomy.schema.json",
+  "title": "AgentSecurityLens Trust Signal Taxonomy",
+  "type": "object",
+  "required": ["id", "version", "status", "signals"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "version": { "type": "string" },
+    "status": {
+      "type": "string",
+      "enum": ["draft", "experimental", "active", "deprecated", "archived"]
+    },
+    "signals": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "title",
+          "direction",
+          "weight",
+          "source_type",
+          "applies_to",
+          "evidence_required",
+          "description"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "title": { "type": "string" },
+          "direction": {
+            "type": "string",
+            "enum": ["positive", "negative", "neutral"]
+          },
+          "weight": {
+            "type": "integer",
+            "minimum": -100,
+            "maximum": 100
+          },
+          "source_type": {
+            "type": "string",
+            "enum": ["static-analysis", "github", "community", "transparency", "manual-review"]
+          },
+          "applies_to": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": ["agent", "mcp", "skill", "maintainer", "version", "recommendation"]
+            }
+          },
+          "evidence_required": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "description": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}