asterscanner 1.0.0

package/dist/scanner.js

@@ -0,0 +1,160 @@
+import { SECURITY_PATTERNS } from "./patterns.js";
+import { calculateScore, scorePassesThreshold } from "./scoring.js";
+/**
+ * Default scan options
+ */
+const DEFAULT_OPTIONS = {
+    minScore: 50,
+    categories: ["secrets", "code_execution", "file_system", "network", "credentials", "system"],
+    severities: ["critical", "high", "medium", "low", "info"],
+    customPatterns: [],
+    includeInfoInScore: false,
+};
+/**
+ * Security scanner for skill content
+ */
+export class Scanner {
+    options;
+    patterns;
+    constructor(options = {}) {
+        this.options = { ...DEFAULT_OPTIONS, ...options };
+        this.patterns = this.buildPatternList();
+    }
+    /**
+     * Build the list of patterns to use based on options
+     */
+    buildPatternList() {
+        const patterns = [
+            ...SECURITY_PATTERNS.filter((p) => this.options.categories.includes(p.category) &&
+                this.options.severities.includes(p.severity)),
+            ...this.options.customPatterns,
+        ];
+        return patterns;
+    }
+    /**
+     * Sanitize matched content for display (truncate and mask sensitive parts)
+     */
+    sanitizeMatch(match) {
+        if (match.length > 50) {
+            return match.substring(0, 47) + "...";
+        }
+        // Mask potential secrets
+        if (match.includes("=") || match.includes(":")) {
+            const parts = match.split(/[:=]/);
+            if (parts.length === 2 && parts[1].length > 4) {
+                const visible = parts[1].substring(0, 4);
+                return `${parts[0]}=${visible}${"*".repeat(Math.min(parts[1].length - 4, 10))}`;
+            }
+        }
+        return match;
+    }
+    /**
+     * Scan a single line for security issues
+     */
+    scanLine(line, lineNumber) {
+        const issues = [];
+        for (const patternDef of this.patterns) {
+            // Reset lastIndex for global patterns
+            patternDef.pattern.lastIndex = 0;
+            let match;
+            while ((match = patternDef.pattern.exec(line)) !== null) {
+                issues.push({
+                    patternId: patternDef.id,
+                    type: patternDef.type,
+                    category: patternDef.category,
+                    severity: patternDef.severity,
+                    message: patternDef.message,
+                    line: lineNumber,
+                    column: match.index + 1,
+                    match: this.sanitizeMatch(match[0]),
+                    recommendation: patternDef.recommendation,
+                });
+                // Prevent infinite loops for patterns that match empty strings
+                if (match[0].length === 0) {
+                    patternDef.pattern.lastIndex++;
+                }
+            }
+        }
+        return issues;
+    }
+    /**
+     * Scan content for security issues
+     */
+    scan(content) {
+        const startTime = Date.now();
+        const lines = content.split("\n");
+        const issues = [];
+        for (let i = 0; i < lines.length; i++) {
+            const lineIssues = this.scanLine(lines[i], i + 1);
+            issues.push(...lineIssues);
+        }
+        // Sort issues by severity, then by line number
+        const severityOrder = {
+            critical: 0,
+            high: 1,
+            medium: 2,
+            low: 3,
+            info: 4,
+        };
+        issues.sort((a, b) => {
+            const severityDiff = severityOrder[a.severity] - severityOrder[b.severity];
+            if (severityDiff !== 0)
+                return severityDiff;
+            return a.line - b.line;
+        });
+        const score = calculateScore(issues, this.options.includeInfoInScore);
+        const passed = scorePassesThreshold(score, this.options.minScore);
+        // Build summary
+        const summary = {
+            critical: issues.filter((i) => i.severity === "critical").length,
+            high: issues.filter((i) => i.severity === "high").length,
+            medium: issues.filter((i) => i.severity === "medium").length,
+            low: issues.filter((i) => i.severity === "low").length,
+            info: issues.filter((i) => i.severity === "info").length,
+            total: issues.length,
+        };
+        return {
+            score,
+            passed,
+            issues,
+            summary,
+            metadata: {
+                scannedAt: new Date().toISOString(),
+                contentLength: content.length,
+                lineCount: lines.length,
+                scanDurationMs: Date.now() - startTime,
+            },
+        };
+    }
+    /**
+     * Quick check if content passes security requirements
+     */
+    passes(content) {
+        return this.scan(content).passed;
+    }
+    /**
+     * Get the current options
+     */
+    getOptions() {
+        return { ...this.options };
+    }
+    /**
+     * Get the active patterns
+     */
+    getPatterns() {
+        return [...this.patterns];
+    }
+}
+/**
+ * Create a new scanner instance
+ */
+export function createScanner(options) {
+    return new Scanner(options);
+}
+/**
+ * Quick scan function for simple use cases
+ */
+export function scan(content, options) {
+    return new Scanner(options).scan(content);
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAUpE;;GAEG;AACH,MAAM,eAAe,GAA0B;IAC7C,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC;IAC5F,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC;IACzD,cAAc,EAAE,EAAE;IAClB,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,OAAO;IACV,OAAO,CAAwB;IAC/B,QAAQ,CAAoB;IAEpC,YAAY,UAAuB,EAAE;QACnC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,QAAQ,GAAG;YACf,GAAG,iBAAiB,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC5C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC/C;YACD,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc;SAC/B,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;QACxC,CAAC;QACD,yBAAyB;QACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAClF,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,QAAQ,CACd,IAAY,EACZ,UAAkB;QAElB,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,sCAAsC;YACtC,UAAU,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEjC,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC;oBACV,SAAS,EAAE,UAAU,CAAC,EAAE;oBACxB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CAAC;gBAEH,+DAA+D;gBAC/D,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAe;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,+CAA+C;QAC/C,MAAM,aAAa,GAA6B;YAC9C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,YAAY,GAChB,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,YAAY,KAAK,CAAC;gBAAE,OAAO,YAAY,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAElE,gBAAgB;QAChB,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAChE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YACxD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC5D,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;YACtD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YACxD,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;QAEF,OAAO;YACL,KAAK;YACL,MAAM;YACN,MAAM;YACN,OAAO;YACP,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACvC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAqB;IACjD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe,EAAE,OAAqB;IACzD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/scoring.d.ts

@@ -0,0 +1,30 @@
+import type { SecurityIssue, Severity } from "./types.js";
+/**
+ * Weight deductions for each severity level
+ */
+export declare const SEVERITY_WEIGHTS: Record<Severity, number>;
+/**
+ * Calculate security score based on issues found
+ *
+ * @param issues - List of security issues
+ * @param includeInfo - Whether to include info-level issues (default: false)
+ * @returns Score from 0-100
+ */
+export declare function calculateScore(issues: SecurityIssue[], includeInfo?: boolean): number;
+/**
+ * Determine if a score passes the minimum threshold
+ *
+ * @param score - The security score
+ * @param minScore - Minimum passing score (default: 50)
+ * @returns Whether the score passes
+ */
+export declare function scorePassesThreshold(score: number, minScore?: number): boolean;
+/**
+ * Get a human-readable rating based on score
+ */
+export declare function getScoreRating(score: number): "excellent" | "good" | "fair" | "poor" | "critical";
+/**
+ * Get a color code for the score (for terminal output)
+ */
+export declare function getScoreColor(score: number): "green" | "yellow" | "red";
+//# sourceMappingURL=scoring.d.ts.map

package/dist/scoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.d.ts","sourceRoot":"","sources":["../src/scoring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAMrD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EAAE,EACvB,WAAW,GAAE,OAAe,GAC3B,MAAM,CAWR;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,MAAW,GACpB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAMrD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAIvE"}

package/dist/scoring.js

@@ -0,0 +1,62 @@
+/**
+ * Weight deductions for each severity level
+ */
+export const SEVERITY_WEIGHTS = {
+    critical: 25,
+    high: 15,
+    medium: 10,
+    low: 5,
+    info: 0,
+};
+/**
+ * Calculate security score based on issues found
+ *
+ * @param issues - List of security issues
+ * @param includeInfo - Whether to include info-level issues (default: false)
+ * @returns Score from 0-100
+ */
+export function calculateScore(issues, includeInfo = false) {
+    let score = 100;
+    for (const issue of issues) {
+        if (!includeInfo && issue.severity === "info") {
+            continue;
+        }
+        score -= SEVERITY_WEIGHTS[issue.severity];
+    }
+    return Math.max(0, score);
+}
+/**
+ * Determine if a score passes the minimum threshold
+ *
+ * @param score - The security score
+ * @param minScore - Minimum passing score (default: 50)
+ * @returns Whether the score passes
+ */
+export function scorePassesThreshold(score, minScore = 50) {
+    return score >= minScore;
+}
+/**
+ * Get a human-readable rating based on score
+ */
+export function getScoreRating(score) {
+    if (score >= 90)
+        return "excellent";
+    if (score >= 70)
+        return "good";
+    if (score >= 50)
+        return "fair";
+    if (score >= 25)
+        return "poor";
+    return "critical";
+}
+/**
+ * Get a color code for the score (for terminal output)
+ */
+export function getScoreColor(score) {
+    if (score >= 70)
+        return "green";
+    if (score >= 50)
+        return "yellow";
+    return "red";
+}
+//# sourceMappingURL=scoring.js.map

package/dist/scoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.js","sourceRoot":"","sources":["../src/scoring.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,cAAuB,KAAK;IAE5B,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,WAAmB,EAAE;IAErB,OAAO,KAAK,IAAI,QAAQ,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa;IAEb,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC"}