ai-llm-pentest-skill 0.1.0 → 0.2.0

package/README.md

@@ -20,10 +20,10 @@ A Claude Code plugin that drives an **authorized** AI/LLM security assessment en
 ## ⚡ Quick start
 
 ```bash
-npx ai-llm-pentest-skill install   # auto-detects your assistants (Claude Code, Cursor, Codex, ...)
+npx ai-llm-pentest-skill install   # interactive picker — choose your assistants (auto-detected)
 ```
 
-The engine runs on demand via `uvx` (needs [uv](https://docs.astral.sh/uv/)) — no clone required. Then open your assistant and prompt:
+Run bare, it shows a multi-select of assistants (Claude Code, Cursor, Windsurf, Copilot, Codex/AGENTS.md, Gemini) with "(not detected)" hints; pass `--assistant`, `--all`, or `--project` to skip the prompts (and for CI). The engine runs on demand via `uvx` (needs [uv](https://docs.astral.sh/uv/)) — no clone required. Then open your assistant and prompt:
 
 > **Run an AI/LLM pentest** (or `/llm-pentest` in Claude Code)
 
@@ -227,15 +227,17 @@ Development is test-driven; see [`docs/DESIGN.md`](docs/DESIGN.md) for architect
 
 ## 🏷️ Releasing (maintainers)
 
-Releases are fully automated from [Conventional Commits](https://www.conventionalcommits.org/):
+Publishing is triggered by a **version tag** — no pull requests, no tokens:
 
-1. Merge normal `feat:` / `fix:` / `chore:` commits to `main`.
-2. **release-please** opens and maintains a **Release PR** that bumps the version
-   and updates `CHANGELOG.md`.
-3. **Merge the Release PR.** That creates the GitHub Release + tag, and the same
-   `release.yml` run then publishes to npm — tested in a job without credentials,
-   published in a minimal job via **Trusted Publishing (OIDC)**, with provenance.
-   No `NPM_TOKEN` is ever stored.
+```bash
+npm version minor        # bumps package.json + CHANGELOG date, creates tag vX.Y.Z (use patch/major as needed)
+git push --follow-tags   # pushing the tag triggers .github/workflows/release.yml
+```
+
+`release.yml` (on `v*` tags) tests in a credential-free job, then publishes to
+npm via **Trusted Publishing (OIDC)** with provenance in a minimal job that runs
+no tests and `--ignore-scripts` — so no `NPM_TOKEN` is stored and a dependency
+lifecycle script can't reach the OIDC credential.
 
 **One-time setup** on [npmjs.com](https://www.npmjs.com): open the
 `ai-llm-pentest-skill` package → **Settings → Trusted Publisher → Add**:
@@ -243,15 +245,6 @@ Releases are fully automated from [Conventional Commits](https://www.conventiona
 - Provider: **GitHub Actions**, Repository: `mstfknn/ai-llm-pentest-skill`,
   Workflow: `release.yml`
 
-> Hardening: the publish job holds `id-token: write` but runs no tests and
-> `--ignore-scripts`, so a dependency lifecycle script can't reach the OIDC
-> credential. For an extra gate, attach the publish job to a GitHub
-> **Environment** with required reviewers.
->
-> First `0.1.0`: publish once manually (`npm publish --otp=<code>`) to create the
-> package, then configure the Trusted Publisher — every release after that is
-> hands-off.
-
 ## 📄 License
 
 [MIT](LICENSE), with an explicit authorized-use notice.

package/bin/cli.mjs

@@ -1,4 +1,13 @@
 #!/usr/bin/env node
-import { run } from "../installer/commands.mjs";
+import os from "node:os";
 
-process.exit(run(process.argv.slice(2)));
+import { main } from "../installer/commands.mjs";
+import { interactiveInstall } from "../installer/interactive.mjs";
+
+process.exit(
+  await main(process.argv.slice(2), {
+    isTTY: process.stdin.isTTY,
+    ctx: { home: os.homedir(), cwd: process.cwd() },
+    interactive: interactiveInstall,
+  }),
+);

package/installer/banner.txt

@@ -0,0 +1,9 @@
+ █████╗ ██╗      ██╗     ██╗     ███╗   ███╗
+██╔══██╗██║      ██║     ██║     ████╗ ████║
+███████║██║█████╗██║     ██║     ██╔████╔██║
+██╔══██║██║╚════╝██║     ██║     ██║╚██╔╝██║
+██║  ██║██║      ███████╗███████╗██║ ╚═╝ ██║
+╚═╝  ╚═╝╚═╝      ╚══════╝╚══════╝╚═╝     ╚═╝
+   authorized AI/LLM pentest orchestration  ·  v__VERSION__
+   black · gray · white-box   →   OWASP · ATLAS · NIST
+   github.com/mstfknn/ai-llm-pentest-skill

package/installer/commands.mjs

@@ -136,6 +136,24 @@ function selectAssistants(rest, ctx) {
   return detected.length > 0 ? detected : ["claude-code"];
 }
 
+/** True when `install` was invoked bare on a TTY (→ launch the guided flow). */
+export function shouldPrompt(argv, isTTY) {
+  return (
+    argv[0] === "install" &&
+    !argv.includes("--assistant") &&
+    !argv.includes("--all") &&
+    Boolean(isTTY)
+  );
+}
+
+/** Top-level entry: launch the guided flow when appropriate, else run a command. */
+export async function main(argv, opts = {}) {
+  if (shouldPrompt(argv, opts.isTTY)) {
+    return opts.interactive(opts.ctx);
+  }
+  return run(argv, opts);
+}
+
 /** Parse argv and run a subcommand. Returns a process exit code. */
 export function run(argv, opts = {}) {
   const ctx = opts.ctx ?? { home: os.homedir(), cwd: process.cwd() };

package/installer/interactive.mjs

@@ -0,0 +1,63 @@
+// Interactive (@clack/prompts) install flow. Thin I/O layer over tested helpers.
+
+import fs from "node:fs";
+import path from "node:path";
+
+import * as p from "@clack/prompts";
+
+import { installAssistant } from "./commands.mjs";
+import { PKG_ROOT } from "./config.mjs";
+import { assistantChoices, expandSelection, renderBanner } from "./ui.mjs";
+
+function packageVersion() {
+  const pkg = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, "package.json"), "utf8"));
+  return pkg.version;
+}
+
+/** Run the guided installer. Returns a process exit code. */
+export async function interactiveInstall(ctx) {
+  // eslint-disable-next-line no-console
+  console.log(renderBanner(packageVersion()));
+  p.intro("ai-llm-pentest-skill installer");
+
+  const choices = assistantChoices(ctx);
+  const selected = await p.multiselect({
+    message: "Which assistants should this install for?",
+    options: [
+      ...choices.map((c) => ({
+        value: c.value,
+        label: c.detected ? c.label : `${c.label} (not detected)`,
+      })),
+      { value: "__all__", label: "✨ All of the above" },
+    ],
+    required: true,
+  });
+  if (p.isCancel(selected)) {
+    p.cancel("Cancelled.");
+    return 1;
+  }
+
+  const scope = await p.select({
+    message: "Install where?",
+    options: [
+      { value: "global", label: "Home directory (all projects)" },
+      { value: "project", label: "This project only" },
+    ],
+    initialValue: "global",
+  });
+  if (p.isCancel(scope)) {
+    p.cancel("Cancelled.");
+    return 1;
+  }
+
+  const keys = expandSelection(selected, choices.map((c) => c.value));
+  const spin = p.spinner();
+  for (const key of keys) {
+    spin.start(`Installing for ${key}`);
+    installAssistant(key, scope, ctx);
+    spin.stop(`Installed for ${key}`);
+  }
+
+  p.outro('Done. Prompt your assistant: "Run an AI/LLM pentest" (or /llm-pentest).');
+  return 0;
+}

package/installer/ui.mjs

@@ -0,0 +1,28 @@
+// Presentation helpers for the interactive installer.
+
+import fs from "node:fs";
+import path from "node:path";
+
+import { ASSISTANTS, detectInstalledAssistants } from "./assistants.mjs";
+import { PKG_ROOT } from "./config.mjs";
+
+/** The ASCII banner with the version filled in. */
+export function renderBanner(version) {
+  const banner = fs.readFileSync(path.join(PKG_ROOT, "installer", "banner.txt"), "utf8");
+  return banner.split("__VERSION__").join(version);
+}
+
+/** Build multiselect choices for every assistant, flagged by on-disk detection. */
+export function assistantChoices(ctx) {
+  const detected = new Set(detectInstalledAssistants(ctx));
+  return Object.entries(ASSISTANTS).map(([value, assistant]) => ({
+    value,
+    label: assistant.label,
+    detected: detected.has(value),
+  }));
+}
+
+/** Resolve a multiselect result: the __all__ sentinel expands to every key. */
+export function expandSelection(values, allKeys) {
+  return values.includes("__all__") ? [...allKeys] : values;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-llm-pentest-skill",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Installer for the ai-llm-pentest agent skill — drive an authorized AI/LLM penetration test (OWASP/ATLAS/NIST-mapped) from Claude Code, Codex, Cursor, Gemini, Copilot, and more.",
   "type": "module",
   "bin": {
@@ -45,5 +45,8 @@
   "devDependencies": {
     "tdd-guard-vitest": "^0.2.0",
     "vitest": "^5.0.0"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.8.1"
   }
 }