agentsafe-cli 0.1.0

package/README.md

@@ -0,0 +1,36 @@
+# AgentSafe
+
+AgentSafe 是一个面向 AI 编程 Agent 使用场景的开源项目安装前安全体检 CLI。它只做静态扫描，不执行目标项目代码，默认在本地输出中文 Markdown 和 JSON 风险报告。
+
+## 开发运行
+
+```powershell
+pnpm install
+pnpm test
+pnpm build
+pnpm dev -- scan . -o agentsafe-report
+```
+
+如果当前终端没有 Node/pnpm，可以在 Codex 桌面环境中使用自带运行时：
+
+```powershell
+& 'C:\Users\95365\.cache\codex-runtimes\codex-primary-runtime\dependencies\bin\pnpm.cmd' install
+& 'C:\Users\95365\.cache\codex-runtimes\codex-primary-runtime\dependencies\bin\pnpm.cmd' test
+```
+
+## CLI
+
+```powershell
+agentsafe scan <本地目录或 Git URL> -o agentsafe-report
+```
+
+常用参数：
+
+- `-o, --out-dir <dir>`：报告输出目录，默认 `agentsafe-report`
+- `--allow-domain <domain...>`：把公司内网、私有 registry 等域名加入网络风险白名单
+- `--git-binary <path>`：指定 Git 可执行文件路径
+
+输出文件：
+
+- `report.md`：中文风险报告
+- `report.json`：结构化扫描结果

package/dist/config.d.ts

@@ -0,0 +1,15 @@
+export declare const projectRoot: string;
+export declare const defaultRulesPath: string;
+export declare const defaultReportDir = "agentsafe-report";
+export declare const severityRank: {
+    readonly low: 1;
+    readonly medium: 2;
+    readonly high: 3;
+    readonly block: 4;
+};
+export declare const severityWeight: {
+    readonly low: 10;
+    readonly medium: 25;
+    readonly high: 55;
+    readonly block: 100;
+};

package/dist/config.js

@@ -0,0 +1,20 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const currentFile = fileURLToPath(import.meta.url);
+const srcDir = path.dirname(currentFile);
+export const projectRoot = path.resolve(srcDir, "..");
+export const defaultRulesPath = path.join(projectRoot, "rules", "default-rules.yaml");
+export const defaultReportDir = "agentsafe-report";
+export const severityRank = {
+    low: 1,
+    medium: 2,
+    high: 3,
+    block: 4
+};
+export const severityWeight = {
+    low: 10,
+    medium: 25,
+    high: 55,
+    block: 100
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACA,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,EAAE;IACP,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,GAAG;CACF,CAAC"}

package/dist/domain.d.ts

@@ -0,0 +1 @@
+export declare function allMatchedDomainsAllowed(snippet: string, allowDomains: string[]): boolean;

package/dist/domain.js

@@ -0,0 +1,23 @@
+export function allMatchedDomainsAllowed(snippet, allowDomains) {
+    const urls = extractUrls(snippet);
+    if (!urls.length || !allowDomains.length) {
+        return false;
+    }
+    return urls.every((url) => {
+        try {
+            const hostname = new URL(url).hostname.toLowerCase();
+            return allowDomains.some((domain) => domainMatches(hostname, domain));
+        }
+        catch {
+            return false;
+        }
+    });
+}
+function extractUrls(text) {
+    return text.match(/https?:\/\/[^\s"'`<>)]*/gi) ?? [];
+}
+function domainMatches(hostname, allowed) {
+    const normalized = allowed.toLowerCase().replace(/^\*\./, "");
+    return hostname === normalized || hostname.endsWith(`.${normalized}`);
+}
+//# sourceMappingURL=domain.js.map

package/dist/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../src/domain.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,YAAsB;IAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,OAAe;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/files.d.ts

@@ -0,0 +1,7 @@
+export interface CollectedFile {
+    absolutePath: string;
+    relativePath: string;
+    content: string;
+    bytes: number;
+}
+export declare function collectFiles(rootDir: string): Promise<CollectedFile[]>;

package/dist/files.js

@@ -0,0 +1,66 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import fg from "fast-glob";
+const scanPatterns = [
+    "**/README",
+    "**/README.md",
+    "**/README.MD",
+    "**/package.json",
+    "**/package-lock.json",
+    "**/pnpm-lock.yaml",
+    "**/yarn.lock",
+    "**/requirements*.txt",
+    "**/pyproject.toml",
+    "**/setup.py",
+    "**/Dockerfile",
+    "**/Dockerfile.*",
+    "**/.github/workflows/*.yml",
+    "**/.github/workflows/*.yaml",
+    "**/.env.example",
+    "**/*.sh",
+    "**/*.bash",
+    "**/*.zsh",
+    "**/*.ps1"
+];
+const ignorePatterns = [
+    "**/.git/**",
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/build/**",
+    "**/coverage/**",
+    "**/.next/**",
+    "**/.turbo/**",
+    "**/.venv/**",
+    "**/venv/**",
+    "**/__pycache__/**"
+];
+const maxFileBytes = 1024 * 1024;
+export async function collectFiles(rootDir) {
+    const entries = await fg(scanPatterns, {
+        cwd: rootDir,
+        dot: true,
+        onlyFiles: true,
+        unique: true,
+        ignore: ignorePatterns
+    });
+    const files = [];
+    for (const relativePath of entries.sort()) {
+        const absolutePath = path.join(rootDir, relativePath);
+        const stat = await fs.stat(absolutePath);
+        if (stat.size > maxFileBytes) {
+            continue;
+        }
+        const content = await fs.readFile(absolutePath, "utf8").catch(() => "");
+        files.push({
+            absolutePath,
+            relativePath: normalizePath(relativePath),
+            content,
+            bytes: stat.size
+        });
+    }
+    return files;
+}
+function normalizePath(filePath) {
+    return filePath.split(path.sep).join("/");
+}
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,WAAW,CAAC;AAS3B,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,mBAAmB;IACnB,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,4BAA4B;IAC5B,6BAA6B;IAC7B,iBAAiB;IACjB,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;CACX,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,YAAY;IACZ,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,aAAa;IACb,YAAY;IACZ,mBAAmB;CACpB,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,EAAE;QACrC,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC;YACT,YAAY;YACZ,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC;YACzC,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import path from "node:path";
+import { Command } from "commander";
+import { defaultReportDir, defaultRulesPath } from "./config.js";
+import { writeReports } from "./report.js";
+import { loadRules } from "./rules.js";
+import { runScan } from "./scanner.js";
+import { resolveTarget } from "./target.js";
+const program = new Command();
+program
+    .name("agentsafe")
+    .description("AI Agent 开源项目安装前安全体检工具")
+    .version("0.1.0");
+program
+    .command("scan")
+    .argument("<target>", "本地目录或 Git 仓库 URL")
+    .option("-o, --out-dir <dir>", "报告输出目录", defaultReportDir)
+    .option("--allow-domain <domain...>", "允许的可信域名，可传多个")
+    .option("--git-binary <path>", "Git 可执行文件路径")
+    .action(async (target, options) => {
+    let cleanup;
+    try {
+        const resolved = await resolveTarget(target, options.gitBinary);
+        cleanup = resolved.cleanup;
+        const rules = await loadRules(defaultRulesPath);
+        const report = await runScan({
+            target: resolved.original,
+            rootDir: resolved.rootDir,
+            rules,
+            allowDomains: options.allowDomain ?? []
+        });
+        const outDir = path.resolve(options.outDir);
+        const paths = await writeReports(report, outDir);
+        console.log(`AgentSafe 扫描完成：${report.summary.totalFindings} 个风险项，风险分 ${report.summary.score}/100`);
+        console.log(`Markdown 报告：${paths.markdownPath}`);
+        console.log(`JSON 报告：${paths.jsonPath}`);
+        if (report.summary.bySeverity.block > 0) {
+            process.exitCode = 2;
+        }
+        else if (report.summary.bySeverity.high > 0) {
+            process.exitCode = 1;
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`AgentSafe 扫描失败：${message}`);
+        process.exitCode = 1;
+    }
+    finally {
+        await cleanup?.();
+    }
+});
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wBAAwB,CAAC;KACrC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;KACxC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,CAAC;KACzD,MAAM,CAAC,4BAA4B,EAAE,cAAc,CAAC;KACpD,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAI9B,EAAE,EAAE;IACH,IAAI,OAA0C,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC3B,MAAM,EAAE,QAAQ,CAAC,QAAQ;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK;YACL,YAAY,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,aAAa,aAAa,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEzC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,EAAE,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/prompts.d.ts

@@ -0,0 +1,3 @@
+import type { Finding } from "./types.js";
+export declare function generateRecommendations(findings: Finding[]): string[];
+export declare function generateAgentPrompt(findings: Finding[]): string;

package/dist/prompts.js

@@ -0,0 +1,42 @@
+export function generateRecommendations(findings) {
+    const recommendations = new Set();
+    if (findings.some((finding) => finding.severity === "block")) {
+        recommendations.add("存在阻断级风险：不要让 AI Agent 自动执行安装、初始化或修复命令。");
+    }
+    if (findings.some((finding) => finding.category === "package-lifecycle")) {
+        recommendations.add("Node 项目建议先使用 npm/pnpm/yarn 的 --ignore-scripts 安装依赖。");
+    }
+    if (findings.some((finding) => finding.category === "network-exfiltration")) {
+        recommendations.add("发现潜在外联上传行为：确认域名可信前不要提供真实密钥和源码目录。");
+    }
+    if (findings.some((finding) => finding.category === "credential-access")) {
+        recommendations.add("发现凭据读取迹象：请在无真实 SSH、云厂商、浏览器登录态的沙箱账户中复核。");
+    }
+    if (!findings.length) {
+        recommendations.add("未发现内置规则命中的高风险模式，但仍建议分步运行安装命令并保留人工确认。");
+    }
+    recommendations.add("给 Agent 的执行权限应保持最小化：禁止自动运行 curl|bash、postinstall、未知脚本和需要 sudo 的命令。");
+    return [...recommendations];
+}
+export function generateAgentPrompt(findings) {
+    const blocked = findings.filter((finding) => finding.severity === "block");
+    const high = findings.filter((finding) => finding.severity === "high");
+    const riskyItems = [...blocked, ...high].slice(0, 8);
+    const riskyText = riskyItems.length
+        ? riskyItems
+            .map((finding) => `- ${finding.filePath}:${finding.line} 命中 ${finding.title}，不要自动运行相关命令。`)
+            .join("\n")
+        : "- 暂未发现阻断/高风险命中，但仍需逐条解释命令后再请求用户确认。";
+    return [
+        "你是 AI 编程 Agent。接下来处理该项目时必须遵守：",
+        "",
+        "1. 不要自动执行安装、初始化、修复、postinstall、prepare、curl|bash、wget|sh、sudo、chmod 777、未知 shell 脚本。",
+        "2. 运行任何命令前，先用中文解释命令目的、会读取/写入哪些路径、是否会联网。",
+        "3. 如需安装依赖，优先使用忽略生命周期脚本的方式，并等待用户确认。",
+        "4. 如命令会访问 SSH、云厂商凭据、.env、浏览器目录或上传文件，必须停止并请求用户确认。",
+        "",
+        "本次扫描需特别注意：",
+        riskyText
+    ].join("\n");
+}
+//# sourceMappingURL=prompts.js.map

package/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,QAAmB;IACzD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAC7D,eAAe,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,mBAAmB,CAAC,EAAE,CAAC;QACzE,eAAe,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,sBAAsB,CAAC,EAAE,CAAC;QAC5E,eAAe,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,mBAAmB,CAAC,EAAE,CAAC;QACzE,eAAe,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,eAAe,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC9D,CAAC;IAED,eAAe,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IAE1F,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAmB;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM;QACjC,CAAC,CAAC,UAAU;aACT,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,cAAc,CAC1E;aACA,IAAI,CAAC,IAAI,CAAC;QACb,CAAC,CAAC,mCAAmC,CAAC;IAExC,OAAO;QACL,+BAA+B;QAC/B,EAAE;QACF,sFAAsF;QACtF,yCAAyC;QACzC,oCAAoC;QACpC,kDAAkD;QAClD,EAAE;QACF,YAAY;QACZ,SAAS;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,6 @@
+import type { ScanReport } from "./types.js";
+export declare function writeReports(report: ScanReport, outDir: string): Promise<{
+    markdownPath: string;
+    jsonPath: string;
+}>;
+export declare function renderMarkdownReport(report: ScanReport): string;

package/dist/report.js

@@ -0,0 +1,74 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+const severityZh = {
+    low: "低",
+    medium: "中",
+    high: "高",
+    block: "阻断"
+};
+export async function writeReports(report, outDir) {
+    await fs.mkdir(outDir, { recursive: true });
+    const markdownPath = path.join(outDir, "report.md");
+    const jsonPath = path.join(outDir, "report.json");
+    await fs.writeFile(markdownPath, renderMarkdownReport(report), "utf8");
+    await fs.writeFile(jsonPath, `${JSON.stringify(report, null, 2)}\n`, "utf8");
+    return {
+        markdownPath,
+        jsonPath
+    };
+}
+export function renderMarkdownReport(report) {
+    const lines = [
+        "# AgentSafe 风险报告",
+        "",
+        `- 扫描目标：${report.target}`,
+        `- 扫描路径：${report.rootDir}`,
+        `- 扫描时间：${report.scannedAt}`,
+        `- 风险分：${report.summary.score}/100`,
+        `- 扫描文件数：${report.summary.scannedFiles}`,
+        `- 风险项总数：${report.summary.totalFindings}`,
+        "",
+        "## 风险等级统计",
+        "",
+        "| 等级 | 数量 |",
+        "| --- | ---: |",
+        `| 阻断 | ${report.summary.bySeverity.block} |`,
+        `| 高 | ${report.summary.bySeverity.high} |`,
+        `| 中 | ${report.summary.bySeverity.medium} |`,
+        `| 低 | ${report.summary.bySeverity.low} |`,
+        "",
+        "## 建议",
+        "",
+        ...report.recommendations.map((item) => `- ${item}`),
+        "",
+        "## 风险明细",
+        ""
+    ];
+    if (!report.findings.length) {
+        lines.push("未发现内置规则命中的风险项。", "");
+    }
+    else {
+        for (const finding of report.findings) {
+            lines.push(...renderFinding(finding));
+        }
+    }
+    lines.push("## 给 AI 编程 Agent 的安全执行提示", "", "```text", report.agentPrompt, "```", "", "## 已扫描文件", "", "| 文件 | 字节 | 命中数 |", "| --- | ---: | ---: |", ...report.scannedFiles.map((file) => `| ${file.path} | ${file.bytes} | ${file.matchedFindings} |`), "");
+    return lines.join("\n");
+}
+function renderFinding(finding) {
+    return [
+        `### ${severityZh[finding.severity]}：${finding.title}`,
+        "",
+        `- 位置：${finding.filePath}:${finding.line}:${finding.column}`,
+        `- 规则：${finding.ruleId}`,
+        `- 分类：${finding.category}`,
+        `- 说明：${finding.explainZh}`,
+        `- 建议：${finding.safeFix}`,
+        "",
+        "```text",
+        finding.snippet,
+        "```",
+        ""
+    ];
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,UAAU,GAA6B;IAC3C,GAAG,EAAE,GAAG;IACR,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,MAAc;IAInE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE7E,OAAO;QACL,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,KAAK,GAAG;QACZ,kBAAkB;QAClB,EAAE;QACF,UAAU,MAAM,CAAC,MAAM,EAAE;QACzB,UAAU,MAAM,CAAC,OAAO,EAAE;QAC1B,UAAU,MAAM,CAAC,SAAS,EAAE;QAC5B,SAAS,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM;QACnC,WAAW,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE;QACxC,WAAW,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE;QACzC,EAAE;QACF,WAAW;QACX,EAAE;QACF,aAAa;QACb,gBAAgB;QAChB,UAAU,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI;QAC7C,SAAS,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI;QAC3C,SAAS,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI;QAC7C,SAAS,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI;QAC1C,EAAE;QACF,OAAO;QACP,EAAE;QACF,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,EAAE;QACF,SAAS;QACT,EAAE;KACH,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,0BAA0B,EAC1B,EAAE,EACF,SAAS,EACT,MAAM,CAAC,WAAW,EAClB,KAAK,EACL,EAAE,EACF,UAAU,EACV,EAAE,EACF,mBAAmB,EACnB,uBAAuB,EACvB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,eAAe,IAAI,CAAC,EAClG,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,OAAO;QACL,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE;QACtD,EAAE;QACF,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE;QAC5D,QAAQ,OAAO,CAAC,MAAM,EAAE;QACxB,QAAQ,OAAO,CAAC,QAAQ,EAAE;QAC1B,QAAQ,OAAO,CAAC,SAAS,EAAE;QAC3B,QAAQ,OAAO,CAAC,OAAO,EAAE;QACzB,EAAE;QACF,SAAS;QACT,OAAO,CAAC,OAAO;QACf,KAAK;QACL,EAAE;KACH,CAAC;AACJ,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "./types.js";
+export declare function loadRules(ruleFile: string): Promise<Rule[]>;

package/dist/rules.js

@@ -0,0 +1,20 @@
+import fs from "node:fs/promises";
+import YAML from "yaml";
+export async function loadRules(ruleFile) {
+    const content = await fs.readFile(ruleFile, "utf8");
+    const parsed = YAML.parse(content);
+    if (!parsed?.rules?.length) {
+        throw new Error(`规则文件为空或格式不正确: ${ruleFile}`);
+    }
+    return parsed.rules.map((rule) => ({
+        id: rule.id,
+        title: rule.title,
+        severity: rule.severity,
+        category: rule.category,
+        patterns: rule.patterns,
+        fileGlobs: rule.file_globs,
+        explainZh: rule.explain_zh,
+        safeFix: rule.safe_fix
+    }));
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,8 @@
+import type { Rule, ScanReport } from "./types.js";
+export interface RunScanInput {
+    target: string;
+    rootDir: string;
+    rules: Rule[];
+    allowDomains?: string[];
+}
+export declare function runScan(input: RunScanInput): Promise<ScanReport>;

package/dist/scanner.js

@@ -0,0 +1,137 @@
+import picomatch from "picomatch";
+import { severityRank, severityWeight } from "./config.js";
+import { allMatchedDomainsAllowed } from "./domain.js";
+import { collectFiles } from "./files.js";
+import { generateAgentPrompt, generateRecommendations } from "./prompts.js";
+import { scanStructuredFile } from "./structured.js";
+const emptySeverityCounts = {
+    low: 0,
+    medium: 0,
+    high: 0,
+    block: 0
+};
+export async function runScan(input) {
+    const files = await collectFiles(input.rootDir);
+    const findings = [];
+    const scannedFiles = [];
+    for (const file of files) {
+        const fileFindings = [
+            ...scanStructuredFile({
+                relativePath: file.relativePath,
+                content: file.content,
+                rules: input.rules
+            }),
+            ...scanContent({
+                relativePath: file.relativePath,
+                content: file.content,
+                rules: input.rules,
+                allowDomains: input.allowDomains ?? []
+            })
+        ];
+        findings.push(...fileFindings);
+        scannedFiles.push({
+            path: file.relativePath,
+            bytes: file.bytes,
+            matchedFindings: fileFindings.length
+        });
+    }
+    const sortedFindings = sortFindings(findings);
+    const summary = summarize(sortedFindings, scannedFiles.length);
+    return {
+        target: input.target,
+        rootDir: input.rootDir,
+        scannedAt: new Date().toISOString(),
+        summary,
+        findings: sortedFindings,
+        scannedFiles,
+        recommendations: generateRecommendations(sortedFindings),
+        agentPrompt: generateAgentPrompt(sortedFindings)
+    };
+}
+function scanContent(input) {
+    const findings = [];
+    const lines = input.content.split(/\r?\n/);
+    for (const rule of input.rules) {
+        if (rule.id === "npm-lifecycle-postinstall") {
+            continue;
+        }
+        if (rule.fileGlobs?.length && !matchesAnyGlob(input.relativePath, rule.fileGlobs)) {
+            continue;
+        }
+        const regexes = rule.patterns.map((pattern) => new RegExp(pattern, "giu"));
+        for (const regex of regexes) {
+            for (const [index, line] of lines.entries()) {
+                regex.lastIndex = 0;
+                const match = regex.exec(line);
+                if (!match) {
+                    continue;
+                }
+                const snippet = compactSnippet(line);
+                if (rule.category === "network-exfiltration" &&
+                    allMatchedDomainsAllowed(snippet, input.allowDomains)) {
+                    continue;
+                }
+                findings.push({
+                    ruleId: rule.id,
+                    title: rule.title,
+                    severity: rule.severity,
+                    category: rule.category,
+                    filePath: input.relativePath,
+                    line: index + 1,
+                    column: match.index + 1,
+                    snippet,
+                    explainZh: rule.explainZh,
+                    safeFix: rule.safeFix
+                });
+            }
+        }
+    }
+    return dedupeFindings(findings);
+}
+function matchesAnyGlob(filePath, globs) {
+    return globs.some((glob) => picomatch.isMatch(filePath, glob, { dot: true }));
+}
+function compactSnippet(line) {
+    const normalized = line.trim().replace(/\s+/g, " ");
+    return normalized.length > 240 ? `${normalized.slice(0, 237)}...` : normalized;
+}
+function dedupeFindings(findings) {
+    const seen = new Set();
+    return findings.filter((finding) => {
+        const key = [
+            finding.ruleId,
+            finding.filePath,
+            finding.line,
+            finding.column,
+            finding.snippet
+        ].join(":");
+        if (seen.has(key)) {
+            return false;
+        }
+        seen.add(key);
+        return true;
+    });
+}
+function sortFindings(findings) {
+    return [...findings].sort((a, b) => {
+        const severityDelta = severityRank[b.severity] - severityRank[a.severity];
+        if (severityDelta !== 0) {
+            return severityDelta;
+        }
+        return `${a.filePath}:${a.line}`.localeCompare(`${b.filePath}:${b.line}`);
+    });
+}
+function summarize(findings, scannedFiles) {
+    const bySeverity = { ...emptySeverityCounts };
+    for (const finding of findings) {
+        bySeverity[finding.severity] += 1;
+    }
+    const rawScore = findings.reduce((score, finding) => score + severityWeight[finding.severity], 0);
+    return {
+        score: Math.min(100, rawScore),
+        totalFindings: findings.length,
+        bySeverity,
+        scannedFiles
+    };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,mBAAmB,GAA6B;IACpD,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AASF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB;IAC/C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAkB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG;YACnB,GAAG,kBAAkB,CAAC;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YACF,GAAG,WAAW,CAAC;gBACb,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;aACvC,CAAC;SACH,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/B,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,YAAY;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,YAAY,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,QAAQ,EAAE,cAAc;QACxB,YAAY;QACZ,eAAe,EAAE,uBAAuB,CAAC,cAAc,CAAC;QACxD,WAAW,EAAE,mBAAmB,CAAC,cAAc,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAKpB;IACC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,KAAK,2BAA2B,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAE3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC5C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBAErC,IACE,IAAI,CAAC,QAAQ,KAAK,sBAAsB;oBACxC,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,EACrD,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,KAAK,CAAC,YAAY;oBAC5B,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,KAAe;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG;YACV,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,OAAO;SAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,QAAmB;IACvC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE1E,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,QAAmB,EAAE,YAAoB;IAC1D,MAAM,UAAU,GAAG,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAElG,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC9B,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/structured.d.ts

@@ -0,0 +1,6 @@
+import type { Finding, Rule } from "./types.js";
+export declare function scanStructuredFile(input: {
+    relativePath: string;
+    content: string;
+    rules: Rule[];
+}): Finding[];

package/dist/structured.js

@@ -0,0 +1,71 @@
+const packageLifecycleScripts = ["preinstall", "install", "postinstall", "prepare"];
+export function scanStructuredFile(input) {
+    if (input.relativePath.endsWith("package.json")) {
+        return scanPackageJson(input.relativePath, input.content, input.rules);
+    }
+    return [];
+}
+function scanPackageJson(relativePath, content, rules) {
+    const rule = rules.find((item) => item.id === "npm-lifecycle-postinstall");
+    if (!rule) {
+        return [];
+    }
+    const parsed = parseJson(content);
+    const scripts = parsed?.scripts;
+    if (!scripts || typeof scripts !== "object" || Array.isArray(scripts)) {
+        return [];
+    }
+    const findings = [];
+    for (const scriptName of packageLifecycleScripts) {
+        const value = scripts[scriptName];
+        if (typeof value !== "string") {
+            continue;
+        }
+        const location = findJsonKeyLocation(content, scriptName);
+        findings.push({
+            ruleId: rule.id,
+            title: `${rule.title}：${scriptName}`,
+            severity: rule.severity,
+            category: rule.category,
+            filePath: relativePath,
+            line: location.line,
+            column: location.column,
+            snippet: `"${scriptName}": "${value}"`,
+            explainZh: rule.explainZh,
+            safeFix: rule.safeFix
+        });
+    }
+    return findings;
+}
+function parseJson(content) {
+    try {
+        const parsed = JSON.parse(content);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function findJsonKeyLocation(content, key) {
+    const lines = content.split(/\r?\n/);
+    const keyPattern = new RegExp(`"${escapeRegExp(key)}"\\s*:`);
+    for (const [index, line] of lines.entries()) {
+        const match = keyPattern.exec(line);
+        if (match) {
+            return {
+                line: index + 1,
+                column: match.index + 1
+            };
+        }
+    }
+    return {
+        line: 1,
+        column: 1
+    };
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=structured.js.map

package/dist/structured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured.js","sourceRoot":"","sources":["../src/structured.ts"],"names":[],"mappings":"AAEA,MAAM,uBAAuB,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAEpF,MAAM,UAAU,kBAAkB,CAAC,KAIlC;IACC,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAAe,EAAE,KAAa;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,2BAA2B,CAAC,CAAC;IAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,UAAU,IAAI,uBAAuB,EAAE,CAAC;QACjD,MAAM,KAAK,GAAI,OAAmC,CAAC,UAAU,CAAC,CAAC;QAE/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE1D,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE;YACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI,UAAU,OAAO,KAAK,GAAG;YACtC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,GAAW;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE7D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,IAAI,EAAE,KAAK,GAAG,CAAC;gBACf,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;KACV,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/target.d.ts

@@ -0,0 +1,3 @@
+import type { ResolvedTarget } from "./types.js";
+export declare function isRemoteTarget(target: string): boolean;
+export declare function resolveTarget(target: string, gitBinary?: string): Promise<ResolvedTarget>;

package/dist/target.js

@@ -0,0 +1,39 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { simpleGit } from "simple-git";
+const remoteTargetPattern = /^(https?:\/\/|git@|ssh:\/\/|[A-Za-z0-9_.-]+@[A-Za-z0-9_.-]+:).+/;
+export function isRemoteTarget(target) {
+    return remoteTargetPattern.test(target);
+}
+export async function resolveTarget(target, gitBinary) {
+    if (!isRemoteTarget(target)) {
+        const rootDir = path.resolve(target);
+        const stat = await fs.stat(rootDir).catch(() => undefined);
+        if (!stat?.isDirectory()) {
+            throw new Error(`目标不是可扫描目录: ${rootDir}`);
+        }
+        return {
+            original: target,
+            rootDir,
+            isRemote: false
+        };
+    }
+    const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "agentsafe-"));
+    const repoDir = path.join(tempRoot, "repo");
+    const git = simpleGit();
+    const binary = gitBinary ?? process.env.AGENTSAFE_GIT_BINARY ?? process.env.GIT_BINARY;
+    if (binary) {
+        git.customBinary(binary);
+    }
+    await git.clone(target, repoDir, ["--depth", "1"]);
+    return {
+        original: target,
+        rootDir: repoDir,
+        isRemote: true,
+        cleanup: async () => {
+            await fs.rm(tempRoot, { force: true, recursive: true });
+        }
+    };
+}
+//# sourceMappingURL=target.js.map

package/dist/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../src/target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC,MAAM,mBAAmB,GAAG,iEAAiE,CAAC;AAE9F,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,SAAkB;IACpE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,OAAO;YACP,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAEvF,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,68 @@
+export type Severity = "low" | "medium" | "high" | "block";
+export interface Rule {
+    id: string;
+    title: string;
+    severity: Severity;
+    category: string;
+    patterns: string[];
+    fileGlobs?: string[];
+    explainZh: string;
+    safeFix: string;
+}
+export interface RawRuleFile {
+    rules: Array<{
+        id: string;
+        title: string;
+        severity: Severity;
+        category: string;
+        patterns: string[];
+        file_globs?: string[];
+        explain_zh: string;
+        safe_fix: string;
+    }>;
+}
+export interface Finding {
+    ruleId: string;
+    title: string;
+    severity: Severity;
+    category: string;
+    filePath: string;
+    line: number;
+    column: number;
+    snippet: string;
+    explainZh: string;
+    safeFix: string;
+}
+export interface ScannedFile {
+    path: string;
+    bytes: number;
+    matchedFindings: number;
+}
+export interface ScanSummary {
+    score: number;
+    totalFindings: number;
+    bySeverity: Record<Severity, number>;
+    scannedFiles: number;
+}
+export interface ScanReport {
+    target: string;
+    rootDir: string;
+    scannedAt: string;
+    summary: ScanSummary;
+    findings: Finding[];
+    scannedFiles: ScannedFile[];
+    agentPrompt: string;
+    recommendations: string[];
+}
+export interface ScanOptions {
+    target: string;
+    outDir?: string;
+    allowDomains?: string[];
+    gitBinary?: string;
+}
+export interface ResolvedTarget {
+    original: string;
+    rootDir: string;
+    isRemote: boolean;
+    cleanup?: () => Promise<void>;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "agentsafe-cli",
+  "version": "0.1.0",
+  "description": "AgentSafe: AI Agent 开源项目安装前安全体检 CLI",
+  "type": "module",
+  "bin": {
+    "agentsafe": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "rules"
+  ],
+  "scripts": {
+    "dev": "tsx src/index.ts",
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "scan:sample": "tsx src/index.ts scan test/fixtures/risky-project -o tmp/sample-report",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "ai-agent",
+    "security",
+    "supply-chain",
+    "cli"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "commander": "^14.0.2",
+    "fast-glob": "^3.3.3",
+    "picomatch": "^4.0.3",
+    "simple-git": "^3.29.0",
+    "smol-toml": "^1.4.2",
+    "yaml": "^2.8.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.15"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "packageManager": "pnpm@11.7.0"
+}

package/rules/default-rules.yaml

@@ -0,0 +1,161 @@
+rules:
+  - id: shell-curl-pipe-bash
+    title: curl 下载内容后直接交给 shell 执行
+    severity: block
+    category: remote-code-execution
+    patterns:
+      - "\\b(curl|wget)\\b[^\\n|;]*(\\||>)\\s*(sudo\\s+)?(bash|sh|zsh)\\b"
+    explain_zh: "该命令会把远程下载内容直接交给 shell 执行，安装前无法确认真实执行内容。"
+    safe_fix: "不要让 Agent 自动运行；先下载到临时文件人工审阅，并在沙箱环境执行。"
+  - id: shell-wget-pipe-sh
+    title: wget 下载内容后直接执行
+    severity: block
+    category: remote-code-execution
+    patterns:
+      - "\\bwget\\b[^\\n|;]*\\|\\s*(sudo\\s+)?(bash|sh|zsh)\\b"
+    explain_zh: "该命令会把 wget 获取的远程脚本直接执行，属于阻断级风险。"
+    safe_fix: "改为固定版本下载、校验哈希后再手动执行。"
+  - id: shell-eval-remote
+    title: eval/exec 执行动态字符串
+    severity: high
+    category: dynamic-execution
+    patterns:
+      - "\\b(eval|exec)\\b\\s+[`\"'$]?"
+    explain_zh: "eval/exec 会执行运行时拼接的字符串，容易隐藏真实行为。"
+    safe_fix: "要求人工确认字符串来源，避免自动修复流程继续执行。"
+  - id: shell-base64-exec
+    title: base64 解码后执行
+    severity: block
+    category: obfuscation
+    patterns:
+      - "base64\\s+(-d|--decode)[^\\n|;]*(\\||;|&&).*(bash|sh|zsh|python|node|powershell|pwsh)"
+    explain_zh: "脚本会解码隐藏内容后执行，常用于混淆真实载荷。"
+    safe_fix: "先解码并审阅内容，不允许 Agent 自动运行该链路。"
+  - id: shell-dns-txt-exec
+    title: DNS TXT 查询结果进入执行链
+    severity: block
+    category: remote-code-execution
+    patterns:
+      - "\\b(dig|nslookup|Resolve-DnsName)\\b[^\\n]*(TXT|-type=txt|-Type\\s+TXT)[^\\n]*(\\||;|&&).*(bash|sh|eval|exec|python|powershell|pwsh)"
+    explain_zh: "该脚本会从 DNS TXT 记录读取字符串并执行，属于强风险行为。"
+    safe_fix: "阻止自动执行，定位域名来源并在隔离环境复核。"
+  - id: npm-lifecycle-postinstall
+    title: npm 安装生命周期脚本
+    severity: high
+    category: package-lifecycle
+    patterns:
+      - "\"(preinstall|install|postinstall|prepare)\"\\s*:"
+    explain_zh: "npm/pnpm/yarn install 时可能自动运行该脚本，Agent 修复安装失败时容易触发。"
+    safe_fix: "优先使用 npm/pnpm/yarn 的 --ignore-scripts，再人工审阅脚本内容。"
+  - id: credential-ssh-path
+    title: 读取 SSH 密钥目录
+    severity: block
+    category: credential-access
+    patterns:
+      - "(~|\\$HOME|%USERPROFILE%)[/\\\\]\\.ssh"
+    explain_zh: "脚本访问用户 SSH 密钥目录，可能导致开发机身份凭据泄露。"
+    safe_fix: "不要运行该脚本；如必须分析，使用没有真实凭据的沙箱账户。"
+  - id: credential-env-path
+    title: 读取 .env 或环境密钥文件
+    severity: high
+    category: credential-access
+    patterns:
+      - "(^|[^\\w.-])\\.env(\\.[A-Za-z0-9_-]+)?"
+    explain_zh: "脚本或配置引用 .env 文件，可能读取本地 API Key、数据库密码等敏感信息。"
+    safe_fix: "确认读取用途，使用示例环境变量文件替代真实密钥。"
+  - id: credential-cloud-path
+    title: 读取云厂商凭据目录
+    severity: block
+    category: credential-access
+    patterns:
+      - "(~|\\$HOME|%USERPROFILE%)[/\\\\]\\.(aws|azure|config[/\\\\]gcloud)"
+    explain_zh: "脚本访问云厂商凭据目录，可能造成云账号权限泄露。"
+    safe_fix: "在无云凭据的隔离用户中执行，并限制网络访问。"
+  - id: browser-secret-path
+    title: 访问浏览器数据目录
+    severity: block
+    category: credential-access
+    patterns:
+      - "(Chrome|Chromium|Edge|Firefox|Login Data|Cookies|Local State)"
+    explain_zh: "脚本提到浏览器数据目录，可能涉及 Cookie、登录态或本地加密材料。"
+    safe_fix: "不要在主力开发机运行，使用干净容器或虚拟机。"
+  - id: network-upload-curl
+    title: curl/wget 上传本地文件
+    severity: high
+    category: network-exfiltration
+    patterns:
+      - "\\b(curl|wget)\\b[^\\n]*(\\s--upload-file\\s|\\s-T\\s|\\s-F\\s|\\s--form\\s|\\s--data-binary\\s|\\s--data-raw\\s|\\s--data\\s)[^\\n]*https?://"
+    explain_zh: "命令可能把本地文件或数据上传到外部地址。"
+    safe_fix: "确认目标域名可信；未知域名需要阻断并人工复核。"
+  - id: network-netcat
+    title: 使用 nc/netcat 建立网络通道
+    severity: high
+    category: network-exfiltration
+    patterns:
+      - "\\b(nc|netcat|ncat)\\b\\s+(-e|-c|[A-Za-z0-9.-]+\\s+\\d{2,5})"
+    explain_zh: "nc/netcat 可建立原始网络通道，常被用于反连或数据转移。"
+    safe_fix: "禁止自动运行，确认业务是否真的需要该网络通道。"
+  - id: powershell-encoded-command
+    title: PowerShell EncodedCommand
+    severity: block
+    category: obfuscation
+    patterns:
+      - "\\b(powershell|pwsh)\\b[^\\n]*-(enc|encodedcommand|EncodedCommand)\\b"
+    explain_zh: "PowerShell EncodedCommand 会隐藏真实命令内容，属于阻断级风险。"
+    safe_fix: "先解码命令并审阅，禁止 Agent 自动执行。"
+  - id: python-one-liner-exec
+    title: Python one-liner 动态执行
+    severity: high
+    category: dynamic-execution
+    patterns:
+      - "\\bpython(3)?\\b\\s+-c\\s+[\"'][^\"']*(exec|eval|compile|__import__)"
+    explain_zh: "Python -c 动态执行代码，可能绕过普通文件审阅。"
+    safe_fix: "展开为可审阅脚本，确认无凭据读取和外联行为后再运行。"
+  - id: node-one-liner-exec
+    title: Node.js one-liner 动态执行
+    severity: high
+    category: dynamic-execution
+    patterns:
+      - "\\bnode\\b\\s+-e\\s+[\"'][^\"']*(eval|Function|child_process)"
+    explain_zh: "Node -e 动态执行代码，可能在安装流程中执行隐藏逻辑。"
+    safe_fix: "展开代码并人工审阅，避免自动修复命令继续执行。"
+  - id: shell-ifs-obfuscation
+    title: Shell IFS 混淆
+    severity: medium
+    category: obfuscation
+    patterns:
+      - "\\$\\{?IFS\\}?"
+    explain_zh: "脚本使用 IFS 混淆空格或命令结构，降低可读性。"
+    safe_fix: "把命令展开后再判断，未知来源脚本建议沙箱执行。"
+  - id: docker-privileged
+    title: Docker privileged 或挂载宿主敏感目录
+    severity: high
+    category: sandbox-escape-risk
+    patterns:
+      - "docker\\s+run[^\\n]*(--privileged|-v\\s+/(var/run/docker.sock|:/|~|\\$HOME))"
+    explain_zh: "Docker 命令可能授予容器过高权限或挂载宿主敏感目录。"
+    safe_fix: "去掉 privileged 和敏感挂载，使用最小权限容器。"
+  - id: dockerfile-remote-add
+    title: Dockerfile 从远程 URL ADD 内容
+    severity: medium
+    category: supply-chain
+    patterns:
+      - "^\\s*ADD\\s+https?://"
+    explain_zh: "Dockerfile 使用 ADD 从远程地址拉取内容，构建时内容可能变化。"
+    safe_fix: "改为固定版本下载并校验哈希，或把依赖纳入锁定流程。"
+  - id: github-action-unpinned
+    title: GitHub Action 未固定 commit
+    severity: medium
+    category: ci-supply-chain
+    patterns:
+      - "uses:\\s+[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+@(main|master|latest|v\\d+)"
+    explain_zh: "CI Action 未固定到 commit SHA，供应链内容可能随上游变化。"
+    safe_fix: "固定到完整 commit SHA，并定期人工升级。"
+  - id: chmod-recursive
+    title: 递归 chmod 宽权限
+    severity: medium
+    category: destructive-or-broad-access
+    patterns:
+      - "chmod\\s+(-R\\s+)?(777|a\\+rw|a\\+rwx)"
+    explain_zh: "递归开放权限可能扩大本地文件被修改或读取的范围。"
+    safe_fix: "缩小目录范围并使用最小权限。"