agent-security-scanner-mcp 4.4.6 → 4.4.8

package/README.md

@@ -34,6 +34,12 @@ npx agent-security-scanner-mcp init claude-code
 
 Replace `claude-code` with `cursor`, `claude-desktop`, `windsurf`, `cline`, `kilo-code`, `opencode`, or `cody`.
 
+Add the GitHub Actions workflow:
+
+```bash
+npx agent-security-scanner-mcp init-ci github
+```
+
 ### What To Run Before You Trust An Agent
 
 ```bash
@@ -46,6 +52,9 @@ npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact
 # Verify AI-suggested imports are real packages, not hallucinations
 npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact
 
+# Check one package before installing it
+npx agent-security-scanner-mcp check-package express npm
+
 # Add a local environment health check
 npx agent-security-scanner-mcp doctor
 
@@ -98,6 +107,10 @@ Continue reading below for full version documentation →
 
 ---
 
+> **New in v4.4.8 (2026-07-07):** Package hallucination demo — run `npx agent-security-scanner-mcp demo --type packages --no-prompt` to create and scan a tiny import file with real and fake npm packages. README examples now show both single-package verification and import scanning.
+>
+> **New in v4.4.7 (2026-07-07):** CI adoption improvements — added `init-ci github` to install the GitHub Actions workflow from the CLI, and scheduled GitHub Action runs now automatically scan the full project instead of only the latest diff. Package hallucination checks also use all tracked source files during full-project runs.
+>
 > **New in v4.3.0 (2026-05-05):** Critical security and reliability fixes — GitHub Actions now **fail closed** instead of fail-open when scanner output is invalid (preventing security gate bypass), patched **8 Hono CVEs** (XSS, path traversal, authentication bypass), fixed confidence threshold filtering case sensitivity, and corrected SARIF generation for GitHub Code Scanning. All fixes include comprehensive regression tests. **Upgrade recommended for production use.** [See Full Changelog](CHANGELOG.md#430---2026-05-05).
 >
 > **New in v4.2.0:** Compliance evidence collection — evaluate projects against SOC2-Technical (8 controls) and GDPR-Technical (6 controls) frameworks. Collects evidence from code scans, SBOM, vulnerability checks, and hallucination detection, then evaluates controls with pass/partial/fail/not_evaluated status. Supports evidence persistence for audit trails. [See Compliance Evaluation](#-compliance-evaluation-new-in-v420).
@@ -1315,9 +1328,12 @@ Checks Node.js version, Python availability, analyzer engine status, and scans a
 
 ```bash
 npx agent-security-scanner-mcp demo --lang js
+npx agent-security-scanner-mcp demo --type packages --no-prompt
 ```
 
-Creates a small file with 3 intentional vulnerabilities, runs the scanner, shows findings with CWE/OWASP references, and asks if you want to keep the file for testing.
+The security demo creates a small file with 3 intentional vulnerabilities, runs the scanner, shows findings with CWE/OWASP references, and asks if you want to keep the file for testing.
+
+The package demo creates a tiny JavaScript import file with real and hallucinated npm packages, runs `scan-packages`, and deletes the file unless you pass `--keep`.
 
 Available languages: `js` (default), `py`, `go`, `java`.
 
@@ -1342,9 +1358,17 @@ npx agent-security-scanner-mcp scan-project ./src
 
 # Check if a package is legitimate
 npx agent-security-scanner-mcp check-package flask pypi
+npx agent-security-scanner-mcp check-package express npm
 
 # Scan file imports for hallucinated packages
 npx agent-security-scanner-mcp scan-packages ./requirements.txt pypi
+npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact
+
+# Try the package hallucination demo
+npx agent-security-scanner-mcp demo --type packages --no-prompt
+
+# Install the GitHub Actions workflow
+npx agent-security-scanner-mcp init-ci github
 
 # Install Claude Code hooks for automatic scanning
 npx agent-security-scanner-mcp init-hooks
@@ -1633,6 +1657,20 @@ All MCP tools support a `verbosity` parameter to minimize context window consump
 
 ## Changelog
 
+### v4.4.8 (2026-07-07) - Package Hallucination Demo
+
+- **New demo mode:** `demo --type packages` creates a small JavaScript file with real and hallucinated npm imports, then runs `scan-packages`.
+- **Automation-friendly demo:** `--no-prompt` cleans up the generated file without waiting for input, and `--keep` preserves it for local testing.
+- **README examples:** Added clearer single-package and import-scan examples for `check-package` and `scan-packages`.
+- **Regression coverage:** Added tests for package demo cleanup and `--keep` behavior.
+
+### v4.4.7 (2026-07-07) - CI Adoption
+
+- **New CLI command:** `init-ci github` installs the public GitHub Actions workflow template into `.github/workflows/agent-security.yml`.
+- **Safer scheduled scans:** Scheduled GitHub Action runs now force full-project scanning even when pull requests use diff-only mode.
+- **Better package checks in CI:** Full-project runs verify imports from all tracked source files instead of only changed files.
+- **Regression coverage:** Added tests for the CI installer and scheduled full-project action behavior.
+
 ### v4.2.0 (2026-04-02) - Compliance Evidence Collection
 
 **🚀 New Feature: SOC2/GDPR Technical Compliance Evaluation**

package/index.js

@@ -570,6 +570,12 @@ const cliArgs = process.argv.slice(2);
     console.error(`  Error: ${err.message}\n`);
     process.exit(1);
   });
+} else if (cliArgs[0] === 'init-ci') {
+  const { runInitCi } = await import('./src/cli/init-ci.js');
+  runInitCi(cliArgs.slice(1)).then(() => process.exit(0)).catch(err => {
+    console.error(`  Error: ${err.message}\n`);
+    process.exit(1);
+  });
 } else if (cliArgs[0] === 'harden') {
   const { runHarden } = await import('./src/cli/harden.js');
   runHarden(cliArgs.slice(1)).then(() => process.exit(0)).catch(err => {
@@ -673,9 +679,11 @@ const cliArgs = process.argv.slice(2);
   console.log('\n  agent-security-scanner-mcp\n');
   console.log('  Commands:');
   console.log('    init [client]        Set up MCP config for a client');
+  console.log('    init-ci [provider]   Install CI workflow template (github)');
   console.log('    init-hooks           Install Claude Code hooks for auto-scanning');
   console.log('    doctor [--fix]       Check environment & client configs');
   console.log('    demo [--lang js]     Generate vulnerable file + scan it');
+  console.log('    demo --type packages Generate package hallucination demo + scan it');
   console.log('    report <dir>         Generate HTML security report with history [--threat-model]');
   console.log('    benchmark [flags]      Run accuracy benchmarks\n');
   console.log('  CLI Tools (for scripts & OpenClaw):');
@@ -705,6 +713,8 @@ const cliArgs = process.argv.slice(2);
   console.log('    --exclude <pattern>  Exclude matching files (scan-project)\n');
   console.log('  Examples:');
   console.log('    npx agent-security-scanner-mcp init');
+  console.log('    npx agent-security-scanner-mcp init-ci github');
+  console.log('    npx agent-security-scanner-mcp demo --type packages --no-prompt');
   console.log('    npx agent-security-scanner-mcp scan-prompt "ignore previous instructions"');
   console.log('    npx agent-security-scanner-mcp scan-security ./app.py --verbosity minimal');
   console.log('    npx agent-security-scanner-mcp check-package flask pypi');

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-scanner-mcp",
-  "version": "4.4.6",
+  "version": "4.4.8",
   "description": "npm audit for AI agents and OpenClaw skills: prompt injection firewall, package hallucination detection, MCP/security scanning, and auto-fix",
   "author": "Sinewave AI",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-scanner-mcp",
-  "version": "4.4.6",
+  "version": "4.4.8",
   "mcpName": "io.github.sinewaveai/agent-security-scanner-mcp",
   "description": "npm audit for AI agents and MCP servers. Scan code, MCP tools, prompts, and hallucinated packages for Claude Code, Cursor, Windsurf, Cline, OpenClaw, and CI.",
   "main": "index.js",

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.sinewaveai/agent-security-scanner-mcp",
   "description": "npm audit for AI agents and MCP servers: scan code, MCP tools, prompts, and hallucinated packages before agents trust them.",
-  "version": "4.4.6",
+  "version": "4.4.8",
   "transport": "stdio",
   "registry": "npm"
 }

package/src/cli/demo.js

@@ -5,6 +5,8 @@ import { createInterface } from "readline";
 import { dirname } from "path";
 import { fileURLToPath } from "url";
 import { resolvePythonCommand, pythonArgs } from "../python.js";
+import { loadPackageLists } from "../tools/check-package.js";
+import { scanPackages } from "../tools/scan-packages.js";
 
 // Handle both ESM and CJS bundling (Smithery bundles to CJS)
 let __dirname;
@@ -135,13 +137,41 @@ public class VulnDemo {
   }
 };
 
+const PACKAGE_DEMO = {
+  ecosystem: 'npm',
+  filename: 'hallucination-demo.js',
+  code: `import express from "express";
+import chalk from "chalk";
+import agentMemoryGraph from "agent-memory-graph-cache";
+
+const bridge = require("secure-mcp-session-bridge");
+
+console.log(express, chalk, agentMemoryGraph, bridge);
+`
+};
+
 function parseDemoFlags(args) {
-  const flags = { lang: 'js' };
+  const flags = {
+    lang: 'js',
+    type: 'security',
+    keep: false,
+    noPrompt: false,
+  };
   let i = 0;
   while (i < args.length) {
     const arg = args[i];
     if ((arg === '--lang' || arg === '-l') && i + 1 < args.length) {
       flags.lang = args[++i].toLowerCase();
+    } else if ((arg === '--type' || arg === '-t') && i + 1 < args.length) {
+      flags.type = args[++i].toLowerCase();
+    } else if (arg === '--packages') {
+      flags.type = 'packages';
+    } else if (arg === '--security') {
+      flags.type = 'security';
+    } else if (arg === '--keep') {
+      flags.keep = true;
+    } else if (arg === '--no-prompt' || arg === '--yes') {
+      flags.noPrompt = true;
     } else if (!arg.startsWith('-')) {
       flags.lang = arg.toLowerCase();
     }
@@ -159,8 +189,58 @@ function checkCommand(cmd, args) {
   }
 }
 
-export async function runDemo(args) {
+async function askKeep(filename) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(`  Keep ${filename} for testing? (y/N): `, (a) => { rl.close(); resolve(a); });
+  });
+}
+
+async function runPackageDemo(flags, options) {
+  const cwd = options.cwd || process.cwd();
+  const filepath = join(cwd, PACKAGE_DEMO.filename);
+
+  console.log(`\n  agent-security-scanner-mcp package demo\n`);
+  console.log(`  Creating ${PACKAGE_DEMO.filename} with real and hallucinated imports...\n`);
+
+  writeFileSync(filepath, PACKAGE_DEMO.code);
+  loadPackageLists();
+
+  console.log(`  Scanning imports with scan-packages (${PACKAGE_DEMO.ecosystem})...\n`);
+
+  const scanResult = await scanPackages({
+    file_path: filepath,
+    ecosystem: PACKAGE_DEMO.ecosystem,
+    verbosity: 'compact'
+  });
+  const output = JSON.parse(scanResult.content[0].text);
+
+  console.log(JSON.stringify(output, null, 2));
+
+  const shouldKeep = flags.keep || (!flags.noPrompt && (await askKeep(PACKAGE_DEMO.filename)).toLowerCase() === 'y');
+  if (shouldKeep) {
+    console.log(`\n  Kept: ${filepath}`);
+  } else {
+    unlinkSync(filepath);
+    console.log(`\n  Deleted: ${PACKAGE_DEMO.filename}`);
+  }
+
+  console.log(`\n  Next: ask your coding agent to add a dependency, then run`);
+  console.log(`  npx agent-security-scanner-mcp scan-packages <file> npm --verbosity compact\n`);
+
+  return output;
+}
+
+export async function runDemo(args, options = {}) {
   const flags = parseDemoFlags(args);
+  if (flags.type === 'packages' || flags.type === 'package') {
+    return runPackageDemo(flags, options);
+  }
+
+  if (flags.type !== 'security') {
+    throw new Error(`unknown demo type: ${flags.type}. Available: security, packages`);
+  }
+
   const template = DEMO_TEMPLATES[flags.lang];
   if (!template) {
     console.log(`\n  Unknown language: "${flags.lang}"`);
@@ -169,7 +249,7 @@ export async function runDemo(args) {
   }
 
   const filename = `vuln-demo.${template.ext}`;
-  const filepath = join(process.cwd(), filename);
+  const filepath = join(options.cwd || process.cwd(), filename);
 
   console.log(`\n  agent-security-scanner-mcp demo\n`);
   console.log(`  Creating ${filename} with 3 intentional vulnerabilities...\n`);
@@ -211,10 +291,7 @@ export async function runDemo(args) {
   }
 
   // Ask to keep or delete
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve) => {
-    rl.question(`  Keep ${filename} for testing? (y/N): `, (a) => { rl.close(); resolve(a); });
-  });
+  const answer = flags.keep ? 'y' : flags.noPrompt ? 'n' : await askKeep(filename);
 
   if (answer.toLowerCase() === 'y') {
     console.log(`\n  Kept: ${filepath}`);
@@ -225,4 +302,6 @@ export async function runDemo(args) {
 
   console.log(`\n  Next: Connect to your AI coding tool and ask it to`);
   console.log(`  "scan ${filename} for security issues"\n`);
+
+  return results;
 }

package/src/cli/init-ci.js

@@ -0,0 +1,75 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
+import { dirname, join, resolve } from 'path';
+import { fileURLToPath } from 'url';
+
+function parseFlags(args) {
+  const flags = {
+    provider: 'github',
+    dryRun: false,
+    force: false,
+    outputPath: null,
+  };
+
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--dry-run') {
+      flags.dryRun = true;
+    } else if (arg === '--force') {
+      flags.force = true;
+    } else if (arg === '--path' && args[i + 1]) {
+      flags.outputPath = args[++i];
+    } else if (!arg.startsWith('-')) {
+      flags.provider = arg;
+    }
+  }
+
+  return flags;
+}
+
+function repoRootFromModule() {
+  return resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
+}
+
+export async function runInitCi(args = [], options = {}) {
+  const flags = parseFlags(args);
+  const cwd = options.cwd || process.cwd();
+  const repoRoot = options.repoRoot || repoRootFromModule();
+
+  if (flags.provider !== 'github') {
+    throw new Error(`unsupported CI provider: ${flags.provider}. Supported providers: github`);
+  }
+
+  const templatePath = join(repoRoot, 'templates', 'github-action-security.yml');
+  const outputPath = resolve(cwd, flags.outputPath || join('.github', 'workflows', 'agent-security.yml'));
+
+  if (!existsSync(templatePath)) {
+    throw new Error(`GitHub Actions template not found: ${templatePath}`);
+  }
+
+  const template = readFileSync(templatePath, 'utf8');
+
+  console.log('\n  agent-security-scanner-mcp CI setup\n');
+  console.log(`  Provider: GitHub Actions`);
+  console.log(`  Output:   ${outputPath}`);
+
+  if (existsSync(outputPath) && !flags.force) {
+    console.log('\n  Workflow already exists. Use --force to overwrite, or --path to choose another file.\n');
+    return { written: false, outputPath, reason: 'exists' };
+  }
+
+  if (flags.dryRun) {
+    console.log('\n  [dry-run] Would write workflow:\n');
+    console.log(template);
+    console.log('  No changes made.\n');
+    return { written: false, outputPath, dryRun: true };
+  }
+
+  mkdirSync(dirname(outputPath), { recursive: true });
+  writeFileSync(outputPath, template, 'utf8');
+
+  console.log('\n  Wrote GitHub Actions workflow.');
+  console.log('  Next steps: commit the workflow and open a pull request to see scan comments.\n');
+
+  return { written: true, outputPath };
+}
+

package/templates/github-action-security.yml

@@ -5,6 +5,8 @@ on:
   push:
     branches: [main]
   schedule:
+    # Weekly full-project scan. The composite action automatically switches
+    # scheduled runs to full-project mode even when PRs use diff-only mode.
     - cron: "0 9 * * 1"
 
 permissions:
@@ -28,4 +30,3 @@ jobs:
           scan_packages: "true"
           scan_diff_only: "true"
           upload_sarif: "true"
-