agent-security-lens 0.1.3 → 0.1.4

package/.mcp/server.json

@@ -8,12 +8,12 @@
     "url": "https://github.com/professor2k8/agent-security-lens",
     "source": "github"
   },
-  "version": "0.1.3",
+  "version": "0.1.4",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "agent-security-lens",
-      "version": "0.1.3",
+      "version": "0.1.4",
       "transport": {
         "type": "stdio"
       },

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.4
+
+- Add copy-ready MCP install snippets for Claude Desktop, Cursor, VS Code, Codex-style clients and generic MCP clients.
+- Add OpenHands, OpenManus and OpenClaw pre-install safety snippets.
+- Add reusable Agent pre-install policy for `AGENTS.md`, `CLAUDE.md`, Cursor rules and workspace instructions.
+- Link Agent exposure assets from README and `llms.txt`.
+- Add private exposure targets and daily exposure brief generation for operations.
+
 ## 0.1.3
 
 - Improve agent-first installation copy in the README.

package/README.md

@@ -32,6 +32,11 @@ Never submit private source code, secrets, tokens, cookies or file contents.
 
 See [Agent install guide](docs/agent-install.md) for Claude Desktop, Cursor, Codex-style and generic MCP configurations.
 
+Copy-ready files:
+
+- [Install snippets](docs/install-snippets/README.md)
+- [Agent pre-install policy](docs/policies/agent-preinstall-policy.md)
+
 ## Public Intelligence
 
 The public package includes a reviewed baseline so agents can still make conservative decisions when the cloud API is unavailable.

package/RELEASE-MANIFEST.json

@@ -1,8 +1,8 @@
 {
   "schema_version": "0.1.0",
   "package": "agent-security-lens",
-  "version": "0.1.3",
-  "generated_at": "2026-06-22T08:01:37.097Z",
+  "version": "0.1.4",
+  "generated_at": "2026-06-22T14:44:46.552Z",
   "source": "ASL verified public release exporter",
   "files": [
     {
@@ -43,7 +43,7 @@
     {
       "path": ".mcp/server.json",
       "bytes": 1316,
-      "sha256": "cff25d18a7c6d1259d400599537de259731224109f4cf16129cd4984027b16ab"
+      "sha256": "207a4751a1bce53409434134d14a9a7ee955aafe77aeb5c50c7448f832045675"
     },
     {
       "path": ".npmignore",
@@ -52,8 +52,8 @@
     },
     {
       "path": "CHANGELOG.md",
-      "bytes": 1600,
-      "sha256": "990eb963697607ee08be8f8a24ba24f78c0e4ce38c510509b20f3920cdc7fa91"
+      "bytes": 2051,
+      "sha256": "b236067b6a60d16ae7ffc080030dc4b4d6a41ba2035e0de4c0f81bf3fe05f013"
     },
     {
       "path": "CODE_OF_CONDUCT.md",
@@ -77,8 +77,8 @@
     },
     {
       "path": "README.md",
-      "bytes": 6481,
-      "sha256": "0e48df39c037cc156db7b958aa7d8dab70f6c212a984a93c1f3f2f7a27944ab6"
+      "bytes": 6626,
+      "sha256": "b19f05cbc38747ca63ccbd40595621a4dd618fe644bfff9d18e33cf290e33d5a"
     },
     {
       "path": "SECURITY.md",
@@ -130,6 +130,56 @@
       "bytes": 3044,
       "sha256": "8411a4bfacdd0f416fc79674e060524a03082aca18193347ef934771e06a65f1"
     },
+    {
+      "path": "docs/install-snippets/README.md",
+      "bytes": 1375,
+      "sha256": "c94f6df92860fe936d9bc72a338296c7c90eb72c6e1f31ccc10f90db728479ff"
+    },
+    {
+      "path": "docs/install-snippets/claude-desktop.json",
+      "bytes": 269,
+      "sha256": "02f32748c50819c19d8ae115465668a9918f25ee8996ff04ceb385279ec10116"
+    },
+    {
+      "path": "docs/install-snippets/codex-mcp.json",
+      "bytes": 269,
+      "sha256": "02f32748c50819c19d8ae115465668a9918f25ee8996ff04ceb385279ec10116"
+    },
+    {
+      "path": "docs/install-snippets/cursor.json",
+      "bytes": 269,
+      "sha256": "02f32748c50819c19d8ae115465668a9918f25ee8996ff04ceb385279ec10116"
+    },
+    {
+      "path": "docs/install-snippets/generic-mcp-client.json",
+      "bytes": 130,
+      "sha256": "aede3150b914b1c51976d0af11bd341d9f754a3bb3e93771a647a1ae0935e86f"
+    },
+    {
+      "path": "docs/install-snippets/openclaw.md",
+      "bytes": 483,
+      "sha256": "9f651a536a317614c51be627c7ed2ae9664333d68086c4394500c229d2a7c4fb"
+    },
+    {
+      "path": "docs/install-snippets/openhands.md",
+      "bytes": 517,
+      "sha256": "f5dae1f83ad23b80513c50af44b9df513a870bb4ca1a78c825d97c0202dfca9b"
+    },
+    {
+      "path": "docs/install-snippets/openmanus.md",
+      "bytes": 478,
+      "sha256": "b32e05059c36c6122f665951e1be5573d790c9ce271fa084fd5263f26ecd657e"
+    },
+    {
+      "path": "docs/install-snippets/vscode.json",
+      "bytes": 289,
+      "sha256": "b94265ea3515d9f28b1f51d5d13f242815e071a6224643d6555fab21c1722ca6"
+    },
+    {
+      "path": "docs/policies/agent-preinstall-policy.md",
+      "bytes": 2295,
+      "sha256": "e3659d89ec0143758b38ed760070c317bea0f1981328541b93ebea2b4988c273"
+    },
     {
       "path": "docs/public-intelligence/agent-framework-install-decisions-v0.1.md",
       "bytes": 8855,
@@ -207,13 +257,13 @@
     },
     {
       "path": "llms.txt",
-      "bytes": 1751,
-      "sha256": "b53f08e07a8a76e5c0054c240dd3ff7a9e8e006b02ae1a897bb4117e97c7f85c"
+      "bytes": 1991,
+      "sha256": "4bf6ae7fdd917f8d45e097e65fef32d7c051f500dfcd922be087eab74a3bfebe"
     },
     {
       "path": "package.json",
       "bytes": 2156,
-      "sha256": "2fb0be3924a8d9b20e70e92818f03f078a2f75baed9e2fd780b0accb1300d025"
+      "sha256": "dbe2016295ba12a8f38dbf441dd1f908414ceb06e98cc0b6580adf3576045b09"
     },
     {
       "path": "profiles/generic-agent/profile.json",
@@ -343,7 +393,7 @@
     {
       "path": "server.json",
       "bytes": 1316,
-      "sha256": "cff25d18a7c6d1259d400599537de259731224109f4cf16129cd4984027b16ab"
+      "sha256": "207a4751a1bce53409434134d14a9a7ee955aafe77aeb5c50c7448f832045675"
     },
     {
       "path": "src/assessment/assess.mjs",

package/docs/install-snippets/README.md

@@ -0,0 +1,41 @@
+# AgentSecurityLens Install Snippets
+
+Use these snippets to install AgentSecurityLens as a pre-install trust-check MCP.
+
+AgentSecurityLens should be called before an agent installs or enables any MCP, Skill, tool, prompt bundle, workflow or memory component.
+
+## Standard MCP Server
+
+```json
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+```
+
+## Required Agent Instruction
+
+```text
+Before installing or enabling any MCP, Skill, tool, prompt bundle,
+workflow or memory component, call AgentSecurityLens review_before_install.
+Follow agent_decision_contract and agent_actions exactly.
+Never submit private source code, secrets, tokens, cookies or file contents.
+```
+
+## Files
+
+- `claude-desktop.json`: Claude Desktop-style MCP configuration.
+- `cursor.json`: Cursor-style MCP configuration.
+- `vscode.json`: VS Code MCP server configuration shape.
+- `codex-mcp.json`: Codex-style MCP server configuration shape.
+- `generic-mcp-client.json`: Generic MCP-compatible client configuration.
+- `openhands.md`: OpenHands installation and policy note.
+- `openmanus.md`: OpenManus installation and policy note.
+- `openclaw.md`: OpenClaw installation and policy note.
+
+If a client uses a different MCP config location, keep the server block unchanged and place it where that client expects MCP servers.
+

package/docs/install-snippets/claude-desktop.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"],
+      "env": {
+        "ASL_API_URL": "https://agentsecuritylens-api.agentsecuritylens.workers.dev",
+        "ASL_MODE": "online"
+      }
+    }
+  }
+}
+

package/docs/install-snippets/codex-mcp.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"],
+      "env": {
+        "ASL_API_URL": "https://agentsecuritylens-api.agentsecuritylens.workers.dev",
+        "ASL_MODE": "online"
+      }
+    }
+  }
+}
+

package/docs/install-snippets/cursor.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"],
+      "env": {
+        "ASL_API_URL": "https://agentsecuritylens-api.agentsecuritylens.workers.dev",
+        "ASL_MODE": "online"
+      }
+    }
+  }
+}
+

package/docs/install-snippets/generic-mcp-client.json

@@ -0,0 +1,9 @@
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+

package/docs/install-snippets/openclaw.md

@@ -0,0 +1,21 @@
+# OpenClaw Install Snippet
+
+Add AgentSecurityLens as a safety check before OpenClaw enables Skills, MCPs or tools:
+
+```json
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+```
+
+Recommended OpenClaw rule:
+
+```text
+Before enabling or importing any Skill, MCP, rule, tool, prompt bundle or memory component, call AgentSecurityLens review_before_install. Unknown components require user confirmation.
+```
+

package/docs/install-snippets/openhands.md

@@ -0,0 +1,21 @@
+# OpenHands Install Snippet
+
+Add AgentSecurityLens as an MCP server using the standard MCP server block:
+
+```json
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+```
+
+Then add this workspace instruction:
+
+```text
+Before installing or enabling any MCP, Skill, plugin, tool, workflow or memory component, call AgentSecurityLens review_before_install. If the result is ask_user or avoid, do not run the install command automatically.
+```
+

package/docs/install-snippets/openmanus.md

@@ -0,0 +1,21 @@
+# OpenManus Install Snippet
+
+Add AgentSecurityLens as a pre-install trust check MCP:
+
+```json
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+```
+
+Recommended agent instruction:
+
+```text
+Before installing any MCP, Skill or tool, call AgentSecurityLens review_before_install. Follow agent_decision_contract exactly. Never submit private source code, secrets, tokens, cookies or file contents.
+```
+

package/docs/install-snippets/vscode.json

@@ -0,0 +1,14 @@
+{
+  "servers": {
+    "agent-security-lens": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"],
+      "env": {
+        "ASL_API_URL": "https://agentsecuritylens-api.agentsecuritylens.workers.dev",
+        "ASL_MODE": "online"
+      }
+    }
+  }
+}
+

package/docs/policies/agent-preinstall-policy.md

@@ -0,0 +1,70 @@
+# Agent Pre-Install Safety Policy
+
+Copy this policy into `AGENTS.md`, `CLAUDE.md`, `.cursor/rules`, workspace instructions or any autonomous-agent system policy.
+
+## Short Policy
+
+```text
+Before installing or enabling any MCP, Skill, plugin, tool, prompt bundle,
+workflow or memory component, call AgentSecurityLens review_before_install.
+Follow agent_decision_contract and agent_actions exactly.
+Never submit private source code, secrets, tokens, cookies or file contents.
+```
+
+## Strict Policy
+
+```text
+You must use AgentSecurityLens as a pre-install trust check.
+
+Before installing, enabling, importing or auto-configuring any MCP, Skill,
+plugin, tool, prompt bundle, workflow, rule pack or memory component:
+
+1. Call AgentSecurityLens get_install_policy once per session.
+2. Call AgentSecurityLens review_before_install with public component metadata.
+3. If decision is ask_user or avoid, stop automatic installation.
+4. If decision is allow_with_restrictions, apply every safe_install_plan item before installation.
+5. If the component is unknown, submit only public metadata with submit_unknown_component.
+6. Never submit private source code, secrets, tokens, cookies, browser data, customer data or file contents.
+7. After acting, call report_install_outcome.
+```
+
+## Minimal MCP Config
+
+```json
+{
+  "mcpServers": {
+    "agent-security-lens": {
+      "command": "npx",
+      "args": ["-y", "agent-security-lens"]
+    }
+  }
+}
+```
+
+## Agent Decision Mapping
+
+| ASL decision | Required agent behavior |
+| --- | --- |
+| `allow` | Install only from the recorded source/version and report outcome. |
+| `allow_with_restrictions` | Apply every safe install step before installation. |
+| `ask_user` | Do not run install command automatically. Ask the user. |
+| `avoid` | Do not install automatically. Prefer reviewed alternatives. |
+
+## Unknown Component Rule
+
+Unknown or incompletely reviewed components are not automatic-install approved.
+
+Agents may submit public metadata for review:
+
+```json
+{
+  "component_name": "example-tool",
+  "component_type": "mcp",
+  "source_url": "https://github.com/example/example-tool",
+  "install_command": "npx -y example-tool",
+  "submit_if_unknown": true
+}
+```
+
+Do not submit source code, local files, credentials, cookies, private prompts or customer data.
+

package/llms.txt

@@ -7,6 +7,8 @@ Before installing or enabling any MCP, Skill, tool, prompt bundle or workflow, c
 
 Public intelligence files:
 - docs/agent-install.md
+- docs/install-snippets/README.md
+- docs/policies/agent-preinstall-policy.md
 - docs/public-intelligence/asl-public-security-index-v0.1.md
 - docs/public-intelligence/top-mcp-security-signals-v0.1.md
 - docs/public-intelligence/top-skill-security-signals-v0.1.md
@@ -31,3 +33,6 @@ Default agent policy:
 If ASL returns `ask_user` or `avoid`, stop automatic installation.
 If ASL returns `allow_with_restrictions`, apply all safe install steps first.
 If ASL returns `unknown_component.should_submit`, submit only public metadata, never secrets or private file contents.
+
+Copy-ready policy:
+Use docs/policies/agent-preinstall-policy.md in AGENTS.md, CLAUDE.md, .cursor/rules, workspace instructions or autonomous-agent system policy.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-lens",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "private": false,
   "mcpName": "io.github.professor2k8/agent-security-lens",
   "description": "Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or tools.",
@@ -36,12 +36,12 @@
     "access": "public"
   },
   "bin": {
-    "agent-security-lens": "apps/mcp-server/agent-security-lens-mcp.mjs",
-    "asl": "apps/mcp-server/agent-security-lens-mcp.mjs",
-    "agent-security-lens-mcp": "apps/mcp-server/agent-security-lens-mcp.mjs",
-    "asl-mcp": "apps/mcp-server/agent-security-lens-mcp.mjs",
-    "asl-scan": "bin/agent-security-lens.mjs",
-    "agent-security-lens-scan": "bin/agent-security-lens.mjs"
+    "agent-security-lens": "./apps/mcp-server/agent-security-lens-mcp.mjs",
+    "asl": "./apps/mcp-server/agent-security-lens-mcp.mjs",
+    "agent-security-lens-mcp": "./apps/mcp-server/agent-security-lens-mcp.mjs",
+    "asl-mcp": "./apps/mcp-server/agent-security-lens-mcp.mjs",
+    "asl-scan": "./bin/agent-security-lens.mjs",
+    "agent-security-lens-scan": "./bin/agent-security-lens.mjs"
   },
   "scripts": {
     "assess:example": "node ./bin/agent-security-lens.mjs assess ./examples/openclaw-like --profile openclaw-like",

package/server.json

@@ -8,12 +8,12 @@
     "url": "https://github.com/professor2k8/agent-security-lens",
     "source": "github"
   },
-  "version": "0.1.3",
+  "version": "0.1.4",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "agent-security-lens",
-      "version": "0.1.3",
+      "version": "0.1.4",
       "transport": {
         "type": "stdio"
       },