agent-security-scanner-mcp 4.4.7 → 4.4.8

package/README.md

@@ -52,6 +52,9 @@ npx agent-security-scanner-mcp scan-mcp ./path/to/mcp-server --verbosity compact
 # Verify AI-suggested imports are real packages, not hallucinations
 npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact
 
+# Check one package before installing it
+npx agent-security-scanner-mcp check-package express npm
+
 # Add a local environment health check
 npx agent-security-scanner-mcp doctor
 
@@ -104,6 +107,8 @@ Continue reading below for full version documentation →
 
 ---
 
+> **New in v4.4.8 (2026-07-07):** Package hallucination demo — run `npx agent-security-scanner-mcp demo --type packages --no-prompt` to create and scan a tiny import file with real and fake npm packages. README examples now show both single-package verification and import scanning.
+>
 > **New in v4.4.7 (2026-07-07):** CI adoption improvements — added `init-ci github` to install the GitHub Actions workflow from the CLI, and scheduled GitHub Action runs now automatically scan the full project instead of only the latest diff. Package hallucination checks also use all tracked source files during full-project runs.
 >
 > **New in v4.3.0 (2026-05-05):** Critical security and reliability fixes — GitHub Actions now **fail closed** instead of fail-open when scanner output is invalid (preventing security gate bypass), patched **8 Hono CVEs** (XSS, path traversal, authentication bypass), fixed confidence threshold filtering case sensitivity, and corrected SARIF generation for GitHub Code Scanning. All fixes include comprehensive regression tests. **Upgrade recommended for production use.** [See Full Changelog](CHANGELOG.md#430---2026-05-05).
@@ -1323,9 +1328,12 @@ Checks Node.js version, Python availability, analyzer engine status, and scans a
 
 ```bash
 npx agent-security-scanner-mcp demo --lang js
+npx agent-security-scanner-mcp demo --type packages --no-prompt
 ```
 
-Creates a small file with 3 intentional vulnerabilities, runs the scanner, shows findings with CWE/OWASP references, and asks if you want to keep the file for testing.
+The security demo creates a small file with 3 intentional vulnerabilities, runs the scanner, shows findings with CWE/OWASP references, and asks if you want to keep the file for testing.
+
+The package demo creates a tiny JavaScript import file with real and hallucinated npm packages, runs `scan-packages`, and deletes the file unless you pass `--keep`.
 
 Available languages: `js` (default), `py`, `go`, `java`.
 
@@ -1350,9 +1358,14 @@ npx agent-security-scanner-mcp scan-project ./src
 
 # Check if a package is legitimate
 npx agent-security-scanner-mcp check-package flask pypi
+npx agent-security-scanner-mcp check-package express npm
 
 # Scan file imports for hallucinated packages
 npx agent-security-scanner-mcp scan-packages ./requirements.txt pypi
+npx agent-security-scanner-mcp scan-packages ./src/app.ts npm --verbosity compact
+
+# Try the package hallucination demo
+npx agent-security-scanner-mcp demo --type packages --no-prompt
 
 # Install the GitHub Actions workflow
 npx agent-security-scanner-mcp init-ci github
@@ -1644,6 +1657,13 @@ All MCP tools support a `verbosity` parameter to minimize context window consump
 
 ## Changelog
 
+### v4.4.8 (2026-07-07) - Package Hallucination Demo
+
+- **New demo mode:** `demo --type packages` creates a small JavaScript file with real and hallucinated npm imports, then runs `scan-packages`.
+- **Automation-friendly demo:** `--no-prompt` cleans up the generated file without waiting for input, and `--keep` preserves it for local testing.
+- **README examples:** Added clearer single-package and import-scan examples for `check-package` and `scan-packages`.
+- **Regression coverage:** Added tests for package demo cleanup and `--keep` behavior.
+
 ### v4.4.7 (2026-07-07) - CI Adoption
 
 - **New CLI command:** `init-ci github` installs the public GitHub Actions workflow template into `.github/workflows/agent-security.yml`.

package/index.js

@@ -683,6 +683,7 @@ const cliArgs = process.argv.slice(2);
   console.log('    init-hooks           Install Claude Code hooks for auto-scanning');
   console.log('    doctor [--fix]       Check environment & client configs');
   console.log('    demo [--lang js]     Generate vulnerable file + scan it');
+  console.log('    demo --type packages Generate package hallucination demo + scan it');
   console.log('    report <dir>         Generate HTML security report with history [--threat-model]');
   console.log('    benchmark [flags]      Run accuracy benchmarks\n');
   console.log('  CLI Tools (for scripts & OpenClaw):');
@@ -713,6 +714,7 @@ const cliArgs = process.argv.slice(2);
   console.log('  Examples:');
   console.log('    npx agent-security-scanner-mcp init');
   console.log('    npx agent-security-scanner-mcp init-ci github');
+  console.log('    npx agent-security-scanner-mcp demo --type packages --no-prompt');
   console.log('    npx agent-security-scanner-mcp scan-prompt "ignore previous instructions"');
   console.log('    npx agent-security-scanner-mcp scan-security ./app.py --verbosity minimal');
   console.log('    npx agent-security-scanner-mcp check-package flask pypi');

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-scanner-mcp",
-  "version": "4.4.7",
+  "version": "4.4.8",
   "description": "npm audit for AI agents and OpenClaw skills: prompt injection firewall, package hallucination detection, MCP/security scanning, and auto-fix",
   "author": "Sinewave AI",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-security-scanner-mcp",
-  "version": "4.4.7",
+  "version": "4.4.8",
   "mcpName": "io.github.sinewaveai/agent-security-scanner-mcp",
   "description": "npm audit for AI agents and MCP servers. Scan code, MCP tools, prompts, and hallucinated packages for Claude Code, Cursor, Windsurf, Cline, OpenClaw, and CI.",
   "main": "index.js",

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.sinewaveai/agent-security-scanner-mcp",
   "description": "npm audit for AI agents and MCP servers: scan code, MCP tools, prompts, and hallucinated packages before agents trust them.",
-  "version": "4.4.7",
+  "version": "4.4.8",
   "transport": "stdio",
   "registry": "npm"
 }

package/src/cli/demo.js

@@ -5,6 +5,8 @@ import { createInterface } from "readline";
 import { dirname } from "path";
 import { fileURLToPath } from "url";
 import { resolvePythonCommand, pythonArgs } from "../python.js";
+import { loadPackageLists } from "../tools/check-package.js";
+import { scanPackages } from "../tools/scan-packages.js";
 
 // Handle both ESM and CJS bundling (Smithery bundles to CJS)
 let __dirname;
@@ -135,13 +137,41 @@ public class VulnDemo {
   }
 };
 
+const PACKAGE_DEMO = {
+  ecosystem: 'npm',
+  filename: 'hallucination-demo.js',
+  code: `import express from "express";
+import chalk from "chalk";
+import agentMemoryGraph from "agent-memory-graph-cache";
+
+const bridge = require("secure-mcp-session-bridge");
+
+console.log(express, chalk, agentMemoryGraph, bridge);
+`
+};
+
 function parseDemoFlags(args) {
-  const flags = { lang: 'js' };
+  const flags = {
+    lang: 'js',
+    type: 'security',
+    keep: false,
+    noPrompt: false,
+  };
   let i = 0;
   while (i < args.length) {
     const arg = args[i];
     if ((arg === '--lang' || arg === '-l') && i + 1 < args.length) {
       flags.lang = args[++i].toLowerCase();
+    } else if ((arg === '--type' || arg === '-t') && i + 1 < args.length) {
+      flags.type = args[++i].toLowerCase();
+    } else if (arg === '--packages') {
+      flags.type = 'packages';
+    } else if (arg === '--security') {
+      flags.type = 'security';
+    } else if (arg === '--keep') {
+      flags.keep = true;
+    } else if (arg === '--no-prompt' || arg === '--yes') {
+      flags.noPrompt = true;
     } else if (!arg.startsWith('-')) {
       flags.lang = arg.toLowerCase();
     }
@@ -159,8 +189,58 @@ function checkCommand(cmd, args) {
   }
 }
 
-export async function runDemo(args) {
+async function askKeep(filename) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(`  Keep ${filename} for testing? (y/N): `, (a) => { rl.close(); resolve(a); });
+  });
+}
+
+async function runPackageDemo(flags, options) {
+  const cwd = options.cwd || process.cwd();
+  const filepath = join(cwd, PACKAGE_DEMO.filename);
+
+  console.log(`\n  agent-security-scanner-mcp package demo\n`);
+  console.log(`  Creating ${PACKAGE_DEMO.filename} with real and hallucinated imports...\n`);
+
+  writeFileSync(filepath, PACKAGE_DEMO.code);
+  loadPackageLists();
+
+  console.log(`  Scanning imports with scan-packages (${PACKAGE_DEMO.ecosystem})...\n`);
+
+  const scanResult = await scanPackages({
+    file_path: filepath,
+    ecosystem: PACKAGE_DEMO.ecosystem,
+    verbosity: 'compact'
+  });
+  const output = JSON.parse(scanResult.content[0].text);
+
+  console.log(JSON.stringify(output, null, 2));
+
+  const shouldKeep = flags.keep || (!flags.noPrompt && (await askKeep(PACKAGE_DEMO.filename)).toLowerCase() === 'y');
+  if (shouldKeep) {
+    console.log(`\n  Kept: ${filepath}`);
+  } else {
+    unlinkSync(filepath);
+    console.log(`\n  Deleted: ${PACKAGE_DEMO.filename}`);
+  }
+
+  console.log(`\n  Next: ask your coding agent to add a dependency, then run`);
+  console.log(`  npx agent-security-scanner-mcp scan-packages <file> npm --verbosity compact\n`);
+
+  return output;
+}
+
+export async function runDemo(args, options = {}) {
   const flags = parseDemoFlags(args);
+  if (flags.type === 'packages' || flags.type === 'package') {
+    return runPackageDemo(flags, options);
+  }
+
+  if (flags.type !== 'security') {
+    throw new Error(`unknown demo type: ${flags.type}. Available: security, packages`);
+  }
+
   const template = DEMO_TEMPLATES[flags.lang];
   if (!template) {
     console.log(`\n  Unknown language: "${flags.lang}"`);
@@ -169,7 +249,7 @@ export async function runDemo(args) {
   }
 
   const filename = `vuln-demo.${template.ext}`;
-  const filepath = join(process.cwd(), filename);
+  const filepath = join(options.cwd || process.cwd(), filename);
 
   console.log(`\n  agent-security-scanner-mcp demo\n`);
   console.log(`  Creating ${filename} with 3 intentional vulnerabilities...\n`);
@@ -211,10 +291,7 @@ export async function runDemo(args) {
   }
 
   // Ask to keep or delete
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve) => {
-    rl.question(`  Keep ${filename} for testing? (y/N): `, (a) => { rl.close(); resolve(a); });
-  });
+  const answer = flags.keep ? 'y' : flags.noPrompt ? 'n' : await askKeep(filename);
 
   if (answer.toLowerCase() === 'y') {
     console.log(`\n  Kept: ${filepath}`);
@@ -225,4 +302,6 @@ export async function runDemo(args) {
 
   console.log(`\n  Next: Connect to your AI coding tool and ask it to`);
   console.log(`  "scan ${filename} for security issues"\n`);
+
+  return results;
 }