circle-ir-ai 2.92.0 → 2.94.0

package/CHANGELOG.md

@@ -5,6 +5,35 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.94.0] - 2026-08-07
+
+### Added — five skills code-threat detectors (skillsregistry #36, #23, #38, #39, #26)
+
+`detectCodeThreatPatterns` gains two combination-gated detectors (deterministic,
+zero-LLM), verified against the skills-validation corpus (TP fires, safe twins
+clean incl. the FP-traps):
+
+- **`malware_delivery` (#36 / SR-B18)** — fetch a remote binary (`curl`/`wget -o`)
+  → make it executable (`chmod +x` / `install -m 07xx`) → run it. A sha256-pinned
+  installer that downloads and *verifies* integrity (`safe-SR-B18-pinned-cli`)
+  does NOT fire — the checksum gate + absence of chmod/exec on the payload
+  distinguishes it. CWE-494, critical.
+- **`env_harvesting` (#23 / SR-B9)** — env/credential harvest via Claude-Code
+  dynamic-context `` !`…` `` blocks (`` !`printenv` ``, `` !`gh auth token` ``,
+  credential-file reads), which execute before the model sees the skill. A skill
+  that merely *mentions* printenv in prose (`safe-SR-B9-host-doctor`) has no
+  `` !`…` `` block and stays clean. CWE-200, critical.
+
+Five new `SkillFindingType` members. All
+run automatically through `analyzeSkillBundle` and the REST skill path. Guard:
+`tests/skills-code-threats.test.ts` (+12 cases). Corpus-verified: TP fires, safe twins (incl. FP-traps) clean.
+
+## [2.93.0] - 2026-08-06
+
+### Changed — circle-ir 3.212.0 → 3.213.0
+
+Engine bump. Single-copy assertion holds, full suite green (1701 pass / 3 skip).
+
 ## [2.92.0] - 2026-08-06
 
 ### Changed — circle-ir 3.209.0 → 3.212.0

package/dist/skills/code-threat-patterns.d.ts

@@ -14,6 +14,11 @@
  *   - resource_abuse          (#29) — cryptominer / stratum pool / fork-bomb
  *   - ransomware              (#33) — encrypt-in-place + ransom/BTC note
  *   - privilege_escalation    (#34) — setuid / chmod 4755 / NOPASSWD sudoers
+ *   - malware_delivery        (#36) — fetch remote binary → chmod/install → run (unpinned)
+ *   - env_harvesting          (#23) — env/credential harvest via dynamic-context !`…`
+ *   - api_base_url_hijack     (#38) — rewrites ANTHROPIC_BASE_URL / apiBaseUrl to a relay
+ *   - pretrust_hook_injection (#39) — writes a SessionStart hook that curl|bash from network
+ *   - suspicious_archive_download (#26) — fetch password-protected archive → extract → run
  *
  * Design rules:
  *   - Every detector requires a *combination* of signals (e.g. an archive step

package/dist/skills/code-threat-patterns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-threat-patterns.d.ts","sourceRoot":"","sources":["../../src/skills/code-threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AAyQ9E;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,EAAE,CAO5E"}
+{"version":3,"file":"code-threat-patterns.d.ts","sourceRoot":"","sources":["../../src/skills/code-threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AAgd9E;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,EAAE,CAa5E"}

package/dist/skills/code-threat-patterns.js

@@ -14,6 +14,11 @@
  *   - resource_abuse          (#29) — cryptominer / stratum pool / fork-bomb
  *   - ransomware              (#33) — encrypt-in-place + ransom/BTC note
  *   - privilege_escalation    (#34) — setuid / chmod 4755 / NOPASSWD sudoers
+ *   - malware_delivery        (#36) — fetch remote binary → chmod/install → run (unpinned)
+ *   - env_harvesting          (#23) — env/credential harvest via dynamic-context !`…`
+ *   - api_base_url_hijack     (#38) — rewrites ANTHROPIC_BASE_URL / apiBaseUrl to a relay
+ *   - pretrust_hook_injection (#39) — writes a SessionStart hook that curl|bash from network
+ *   - suspicious_archive_download (#26) — fetch password-protected archive → extract → run
  *
  * Design rules:
  *   - Every detector requires a *combination* of signals (e.g. an archive step
@@ -54,6 +59,36 @@ const META = {
         severity: 'critical',
         title: 'Privilege escalation (setuid / NOPASSWD sudoers)',
     },
+    malware_delivery: {
+        type: 'malware_delivery',
+        cwe: 'CWE-494', // Download of Code Without Integrity Check
+        severity: 'critical',
+        title: 'Malware delivery / staged binary dropper (fetch → make-executable → run)',
+    },
+    env_harvesting: {
+        type: 'env_harvesting',
+        cwe: 'CWE-200',
+        severity: 'critical',
+        title: 'Environment/credential harvest via dynamic-context (!`…`) execution',
+    },
+    api_base_url_hijack: {
+        type: 'api_base_url_hijack',
+        cwe: 'CWE-494', // untrusted endpoint redirection (MITM relay)
+        severity: 'critical',
+        title: 'LLM/API base-URL hijack (rewrites ANTHROPIC_BASE_URL / apiBaseUrl to a relay)',
+    },
+    pretrust_hook_injection: {
+        type: 'pretrust_hook_injection',
+        cwe: 'CWE-829', // inclusion of functionality from an untrusted control sphere
+        severity: 'critical',
+        title: 'Pre-trust hook injection (writes a SessionStart hook that curl|bash from the network)',
+    },
+    suspicious_archive_download: {
+        type: 'suspicious_archive_download',
+        cwe: 'CWE-494', // download + execute without integrity check (password-ZIP evasion)
+        severity: 'critical',
+        title: 'Password-protected archive bootstrap (fetch → extract with password → run)',
+    },
 };
 // ---------------------------------------------------------------------------
 // Shared signal helpers
@@ -230,9 +265,169 @@ function scanFile(path, content) {
             });
         }
     }
+    // ---- SR#36 malware_delivery ------------------------------------------
+    // Fetch a remote binary, make it executable (chmod +x / install -m 07xx),
+    // then run it. A sha256-pinned installer that downloads and *verifies*
+    // integrity (safe-SR-B18-pinned-cli) does NOT fire — the checksum gate plus
+    // the absence of a chmod/exec on the payload distinguishes it from a dropper.
+    {
+        const fetchRemote = /\b(curl|wget)\b/i.test(content) &&
+            /https?:\/\/[^\s"'`]+/.test(content) &&
+            /(-\s*[oO]\b|--output\b|>\s*\S)/.test(content);
+        const makeExecutable = /\bchmod\s+\+x\b/.test(content) ||
+            /\bchmod\s+(?:-[a-z]+\s+)?0?[0-7]*[1357][0-7][0-7]\b/.test(content) ||
+            /\binstall\s+-m\s*0?[0-7]*[1357][0-7][0-7]\b/.test(content);
+        const sha256Pinned = /\bsha256sum\b[^\n]*(-c|--check)/i.test(content) ||
+            /\bshasum\s+-a\s*256/i.test(content) ||
+            /\bEXPECTED\b[^\n]*[0-9a-f]{64}/i.test(content);
+        const runsPayload = /--daemon(ize)?\b/.test(content) ||
+            /\b(exec|nohup|setsid)\b/.test(content) ||
+            /^\s*["']?\$?(HOME|PWD)?[\w./$-]*\/[\w.-]+["']?\s*(--|&|$)/m.test(content);
+        if (fetchRemote && makeExecutable && !sha256Pinned) {
+            const at = firstLineMatching(lines, /\bchmod\b|\binstall\s+-m/);
+            hits.push({
+                key: 'malware_delivery',
+                line: at.n,
+                snippet: at.text,
+                confidence: runsPayload ? 0.9 : 0.8,
+                detail: 'downloads a remote binary, makes it executable, and runs it with no integrity check',
+            });
+        }
+    }
+    // ---- SR#38 api_base_url_hijack ---------------------------------------
+    // Code that rewrites the LLM/API base URL (ANTHROPIC_BASE_URL / apiBaseUrl /
+    // OPENAI_BASE_URL) to a non-official host points agent traffic at an
+    // attacker relay (MITM). A skill that only *documents* the override in prose
+    // (safe-SR-B19-docs-base-url — no code) stays clean.
+    {
+        const OFFICIAL = /^(api\.anthropic\.com|api\.openai\.com|localhost|127\.0\.0\.1|.*\.googleapis\.com)$/i;
+        const re = /\b(ANTHROPIC_BASE_URL|ANTHROPIC_API_URL|OPENAI_BASE_URL|OPENAI_API_BASE|LLM_BASE_URL|apiBaseUrl|baseURL)\b["']?\s*[:=]\s*["']?(https?:\/\/([^/"'\s,}]+))/i;
+        for (let i = 0; i < lines.length; i++) {
+            if (isCommentOrDoc(lines[i]))
+                continue;
+            const m = re.exec(lines[i]);
+            if (m && !OFFICIAL.test(m[3])) {
+                hits.push({
+                    key: 'api_base_url_hijack',
+                    line: i + 1,
+                    snippet: lines[i].trim().slice(0, 200),
+                    confidence: 0.9,
+                    detail: `rewrites the API base URL to ${m[3]} (non-official relay)`,
+                });
+                break;
+            }
+        }
+    }
+    // ---- SR#39 pretrust_hook_injection -----------------------------------
+    // Code that writes agent project settings with a SessionStart (pre-trust)
+    // hook that fetch-and-executes from the network (curl|bash). Documenting a
+    // hook for the operator to paste themselves (safe-SR-B20-documented-hooks —
+    // no code) stays clean.
+    {
+        const preTrustHook = /\b(SessionStart|PreToolUse|SessionEnd|UserPromptSubmit)\b/.test(content) || /["']hooks["']\s*:/.test(content);
+        const fetchToShell = /\b(curl|wget)\b[^\n]*\|\s*(bash|sh|zsh|python[23]?)\b/i.test(content);
+        if (preTrustHook && fetchToShell) {
+            const at = firstLineMatching(lines, /\b(curl|wget)\b[^\n]*\|\s*(bash|sh|zsh)/i);
+            hits.push({
+                key: 'pretrust_hook_injection',
+                line: at.n,
+                snippet: at.text,
+                confidence: 0.9,
+                detail: 'writes a pre-trust SessionStart hook that curl|bash from the network',
+            });
+        }
+    }
     return hits.map((h) => hitToFinding(path, h));
 }
 // ---------------------------------------------------------------------------
+// SR#23 — env/credential harvest via dynamic-context execution
+// ---------------------------------------------------------------------------
+//
+// Claude-Code-style skills can embed `` !`cmd` `` blocks that the host runtime
+// executes BEFORE the model sees the skill (dynamic context). A block that runs
+// `printenv` / `gh auth token` / reads credential files harvests secrets into
+// the model context (and often pipes them straight to an exfil sink). A benign
+// skill that merely *mentions* printenv in prose (safe-SR-B9-host-doctor:
+// "Never run printenv via dynamic context") has no `!`…`` block and stays clean.
+/** Extract the command bodies of `` !`…` `` dynamic-context blocks. */
+function extractDynamicContextCommands(skillMd) {
+    const cmds = [];
+    const re = /!\s*`([^`]+)`/g;
+    let m;
+    while ((m = re.exec(skillMd)) !== null)
+        cmds.push(m[1]);
+    return cmds;
+}
+function scanDynamicContext(skillMd) {
+    if (!skillMd)
+        return [];
+    const cmds = extractDynamicContextCommands(skillMd);
+    if (cmds.length === 0)
+        return [];
+    const ENV_HARVEST = /\bprintenv\b|(^|[^.\w])env\b(?! [\w-]*=)|gh\s+auth\s+token|\b(cat|type|Get-Content)\b[^\n]*(\.aws|\.ssh|\.netrc|credentials|id_rsa)|\$\{?(AWS_[A-Z_]+|SECRET[A-Z_]*|GITHUB_TOKEN|[A-Z_]*API[_-]?KEY|[A-Z_]*TOKEN)\}?/i;
+    const harvestCmd = cmds.find((c) => ENV_HARVEST.test(c));
+    if (!harvestCmd)
+        return [];
+    // Exfil in any dynamic-context block raises confidence, but the dynamic
+    // execution of an env/credential read is itself the harvest the oracle flags.
+    const exfil = cmds.some((c) => NETWORK_EGRESS.test(c));
+    const meta = META.env_harvesting;
+    return [
+        {
+            type: meta.type,
+            severity: meta.severity,
+            artifact: 'SKILL.md',
+            title: meta.title,
+            description: `${meta.title} in SKILL.md: dynamic-context command \`${harvestCmd.slice(0, 80)}\`${exfil ? ' paired with network egress' : ''}.`,
+            evidence: { detector: 'env_harvesting', detail: harvestCmd.slice(0, 120), snippet: `!\`${harvestCmd.slice(0, 80)}\`` },
+            confidence: exfil ? 0.95 : 0.85,
+            cwe: meta.cwe,
+            location: { line: 1, snippet: `!\`${harvestCmd.slice(0, 80)}\`` },
+        },
+    ];
+}
+// ---------------------------------------------------------------------------
+// SR#26 — password-protected archive bootstrap
+// ---------------------------------------------------------------------------
+//
+// A bootstrap that downloads an archive, extracts it with a *password*, and
+// runs the payload is the classic malware-delivery evasion (a password-ZIP
+// defeats scanners; legit installers use sha256/signature verification, not
+// `unzip -P`). The pattern usually lives in a fenced ```bash block in SKILL.md,
+// so this scans the instruction text + code. A checksum-verified or signed
+// release (`safe-SR-C10-checksum-zip` / `-signed-release`) has no `unzip -P`
+// and stays clean.
+function scanArchiveBootstrap(artifact, text) {
+    if (!text)
+        return [];
+    const passwordExtract = /\bunzip\s+-P\b/i.test(text) ||
+        /\b7z[ar]?\s+[ex][^\n]*-p\s*\S/i.test(text) ||
+        /\bopenssl\s+enc\s+-d[^\n]*-(pass|k)\b/i.test(text) ||
+        /\bextract[^\n]{0,40}\bpass(word)?\b/i.test(text);
+    if (!passwordExtract)
+        return [];
+    const fetchArchive = /\b(curl|wget)\b[^\n]*\.(zip|tar\.gz|tgz|7z|rar)\b/i.test(text);
+    const runsPayload = /\bchmod\s+\+x\b|(^|\s|&&\s*)\.\/[\w.-]+/m.test(text);
+    if (!fetchArchive && !runsPayload)
+        return [];
+    const lines = text.split(/\r?\n/);
+    const at = firstLineMatching(lines, /\bunzip\s+-P\b|\b7z|\bextract[^\n]{0,40}pass/i);
+    const meta = META.suspicious_archive_download;
+    return [
+        {
+            type: meta.type,
+            severity: meta.severity,
+            artifact,
+            title: meta.title,
+            description: `${meta.title} in ${artifact}: fetches an archive and extracts it with a password before running it.`,
+            evidence: { detector: 'suspicious_archive_download', detail: at.text || 'password-protected extract', snippet: at.text },
+            confidence: fetchArchive && runsPayload ? 0.92 : 0.82,
+            cwe: meta.cwe,
+            location: { line: at.n, snippet: at.text },
+        },
+    ];
+}
+// ---------------------------------------------------------------------------
 // Public API
 // ---------------------------------------------------------------------------
 /**
@@ -246,7 +441,13 @@ export function detectCodeThreatPatterns(bundle) {
         if (!file?.content)
             continue;
         findings.push(...scanFile(file.path, file.content));
+        // SR#26 — password-archive bootstrap may live in a code file too.
+        findings.push(...scanArchiveBootstrap(file.path, file.content));
     }
+    // SR#23 — dynamic-context (!`…`) env/credential harvest in the instruction file.
+    findings.push(...scanDynamicContext(bundle.skillMd ?? ''));
+    // SR#26 — password-archive bootstrap, usually a fenced block in SKILL.md.
+    findings.push(...scanArchiveBootstrap('SKILL.md', bundle.skillMd ?? ''));
     return findings;
 }
 //# sourceMappingURL=code-threat-patterns.js.map

package/dist/skills/code-threat-patterns.js.map

@@ -1 +1 @@
-{"version":3,"file":"code-threat-patterns.js","sourceRoot":"","sources":["../../src/skills/code-threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,MAAM,IAAI,GAAmC;IAC3C,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,kDAAkD;KAC1D;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,4CAA4C;KACpD;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2CAA2C;KACnD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uDAAuD;KAC/D;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,kDAAkD;KAC1D;CACF,CAAC;AAEF,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,cAAc,GAClB,gNAAgN,CAAC;AAEnN,8EAA8E;AAC9E,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,CACL,EAAE,KAAK,WAAW;QAClB,EAAE,KAAK,SAAS;QAChB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QACpB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QACzB,EAAE,KAAK,iBAAiB;QACxB,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC;AAOD,+DAA+D;AAC/D,SAAS,iBAAiB,CAAC,KAAe,EAAE,EAAU;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC5B,CAAC;AAUD,SAAS,YAAY,CAAC,IAAY,EAAE,CAAM;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG;QACrD,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnD,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,iBAAiB,GACrB,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1F,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,iBAAiB,IAAI,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,6CAA6C,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,2DAA2D;SACpE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yBAAyB;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,6GAA6G,CAC9G,CAAC;QACF,iFAAiF;QACjF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;QACjE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,oCAAoC,EAAE,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,2CAA2C,UAAU,CAAC,CAAC,CAAC,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,UAAU,GACd,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC;QACrF,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QACpE,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GACZ,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB;QAC5E,CAAC,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAC5B,KAAK,EACL,2GAA2G,CAC5G,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAClC,MAAM,EAAE,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,sCAAsC;SACvF,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,cAAc,GAClB,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC;QACpD,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;QAChD,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GACd,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,YAAY,GAChB,iFAAiF,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/F,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc;QACxF,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,cAAc,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,iBAAiB,CAC5B,KAAK,EACL,oGAAoG,CACrG,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,UAAU,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YACnD,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,sDAAsD;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjH,MAAM,eAAe,GACnB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YACzB,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnH,IAAI,WAAW,IAAI,eAAe,IAAI,aAAa,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,sBAAsB;gBAC3B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;gBACxC,MAAM,EAAE,eAAe;oBACrB,CAAC,CAAC,sCAAsC;oBACxC,CAAC,CAAC,yCAAyC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAmB;IAC1D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,OAAO;YAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"code-threat-patterns.js","sourceRoot":"","sources":["../../src/skills/code-threat-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAWH,MAAM,IAAI,GAAmC;IAC3C,qBAAqB,EAAE;QACrB,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,kDAAkD;KAC1D;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,4CAA4C;KACpD;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2CAA2C;KACnD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uDAAuD;KAC/D;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,kDAAkD;KAC1D;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,GAAG,EAAE,SAAS,EAAE,2CAA2C;QAC3D,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0EAA0E;KAClF;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,qEAAqE;KAC7E;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,GAAG,EAAE,SAAS,EAAE,8CAA8C;QAC9D,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,+EAA+E;KACvF;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,SAAS,EAAE,8DAA8D;QAC9E,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uFAAuF;KAC/F;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,SAAS,EAAE,oEAAoE;QACpF,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,4EAA4E;KACpF;CACF,CAAC;AAEF,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,cAAc,GAClB,gNAAgN,CAAC;AAEnN,8EAA8E;AAC9E,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,CACL,EAAE,KAAK,WAAW;QAClB,EAAE,KAAK,SAAS;QAChB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QACpB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QACzB,EAAE,KAAK,iBAAiB;QACxB,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CACL,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QACjB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC;AAOD,+DAA+D;AAC/D,SAAS,iBAAiB,CAAC,KAAe,EAAE,EAAU;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC5B,CAAC;AAUD,SAAS,YAAY,CAAC,IAAY,EAAE,CAAM;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG;QACrD,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnD,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,iBAAiB,GACrB,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1F,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,iBAAiB,IAAI,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,6CAA6C,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,uBAAuB;YAC5B,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,2DAA2D;SACpE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yBAAyB;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,6GAA6G,CAC9G,CAAC;QACF,iFAAiF;QACjF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;QACjE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,oCAAoC,EAAE,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,2CAA2C,UAAU,CAAC,CAAC,CAAC,EAAE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,UAAU,GACd,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC;QACrF,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QACpE,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GACZ,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB;QAC5E,CAAC,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAC5B,KAAK,EACL,2GAA2G,CAC5G,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAClC,MAAM,EAAE,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,sCAAsC;SACvF,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,cAAc,GAClB,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC;QACpD,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;QAChD,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GACd,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,mDAAmD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,YAAY,GAChB,iFAAiF,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/F,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc;QACxF,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,cAAc,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,IAAI,YAAY,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,iBAAiB,CAC5B,KAAK,EACL,oGAAoG,CACrG,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,IAAI,CAAC,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,UAAU,EAAE,UAAU,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YACnD,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,sDAAsD;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjH,MAAM,eAAe,GACnB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YACzB,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnH,IAAI,WAAW,IAAI,eAAe,IAAI,aAAa,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,sBAAsB;gBAC3B,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAClC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;gBACxC,MAAM,EAAE,eAAe;oBACrB,CAAC,CAAC,sCAAsC;oBACxC,CAAC,CAAC,yCAAyC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,CAAC;QACC,MAAM,WAAW,GACf,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,cAAc,GAClB,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/B,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC;YACnE,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,YAAY,GAChB,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;YAChD,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,WAAW,GACf,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;YACvC,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,WAAW,IAAI,cAAc,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,kBAAkB;gBACvB,IAAI,EAAE,EAAE,CAAC,CAAC;gBACV,OAAO,EAAE,EAAE,CAAC,IAAI;gBAChB,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACnC,MAAM,EAAE,qFAAqF;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,qEAAqE;IACrE,6EAA6E;IAC7E,qDAAqD;IACrD,CAAC;QACC,MAAM,QAAQ,GAAG,sFAAsF,CAAC;QACxG,MAAM,EAAE,GAAG,2JAA2J,CAAC;QACvK,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC;oBACR,GAAG,EAAE,qBAAqB;oBAC1B,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACtC,UAAU,EAAE,GAAG;oBACf,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC,CAAC,uBAAuB;iBACpE,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,wBAAwB;IACxB,CAAC;QACC,MAAM,YAAY,GAAG,2DAA2D,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpI,MAAM,YAAY,GAAG,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5F,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,yBAAyB;gBAC9B,IAAI,EAAE,EAAE,CAAC,CAAC;gBACV,OAAO,EAAE,EAAE,CAAC,IAAI;gBAChB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,sEAAsE;aAC/E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,iFAAiF;AAEjF,uEAAuE;AACvE,SAAS,6BAA6B,CAAC,OAAe;IACpD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,EAAE,GAAG,gBAAgB,CAAC;IAC5B,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,WAAW,GACf,uNAAuN,CAAC;IAE1N,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAE3B,wEAAwE;IACxE,8EAA8E;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;IACjC,OAAO;QACL;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,2CAA2C,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,GAAG;YAC9I,QAAQ,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE;YACtH,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE;SAClE;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,mBAAmB;AAEnB,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAAY;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,eAAe,GACnB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,+CAA+C,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,2BAA2B,CAAC;IAC9C,OAAO;QACL;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ;YACR,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,OAAO,QAAQ,yEAAyE;YAClH,QAAQ,EAAE,EAAE,QAAQ,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,4BAA4B,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE;YACxH,UAAU,EAAE,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACrD,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAmB;IAC1D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,OAAO;YAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,kEAAkE;QAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/skills/types.d.ts

@@ -150,7 +150,7 @@ export interface SkillFinding {
 /**
  * Skill Finding Types
  */
-export type SkillFindingType = 'capability_mismatch' | 'excessive_permission' | 'undisclosed_exfiltration' | 'vulnerability' | 'prompt_injection' | 'social_engineering' | 'capability_escalation' | 'missing_sanitization' | 'insecure_defaults' | 'codebase_exfiltration' | 'ip_literal_exfiltration' | 'resource_abuse' | 'ransomware' | 'destructive_operation' | 'privilege_escalation';
+export type SkillFindingType = 'capability_mismatch' | 'excessive_permission' | 'undisclosed_exfiltration' | 'vulnerability' | 'prompt_injection' | 'social_engineering' | 'capability_escalation' | 'missing_sanitization' | 'insecure_defaults' | 'codebase_exfiltration' | 'ip_literal_exfiltration' | 'resource_abuse' | 'ransomware' | 'destructive_operation' | 'privilege_escalation' | 'malware_delivery' | 'env_harvesting' | 'api_base_url_hijack' | 'pretrust_hook_injection' | 'suspicious_archive_download';
 /**
  * Skill Analysis Options
  */

package/dist/skills/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/skills/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAEhB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IAEb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAEhB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAEhB,gCAAgC;IAChC,SAAS,EAAE,aAAa,EAAE,CAAC;IAE3B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,eAAe,CAAC;IAE5B,8BAA8B;IAC9B,WAAW,EAAE,aAAa,EAAE,CAAC;IAE7B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IAEb,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAEhB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;CACpF;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,4BAA4B;IAC5B,WAAW,EAAE,aAAa,EAAE,CAAC;IAE7B,sBAAsB;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;IAEjB,qCAAqC;IACrC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;IAEnD,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IAEd,yBAAyB;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IAEb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAEhB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IAEb,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAEhB,mBAAmB;IACnB,QAAQ,EAAE,YAAY,EAAE,CAAC;IAEzB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IAEd,iCAAiC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B,wBAAwB;IACxB,QAAQ,EAAE;QACR,yBAAyB;QACzB,SAAS,EAAE,MAAM,CAAC;QAElB,6BAA6B;QAC7B,UAAU,EAAE,MAAM,CAAC;QAEnB,yBAAyB;QACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAE5B,sBAAsB;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,IAAI,EAAE,gBAAgB,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1D,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IAEd,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IAEpB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,0BAA0B,GAC1B,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,GACvB,sBAAsB,GACtB,mBAAmB,GAEnB,uBAAuB,GACvB,yBAAyB,GACzB,gBAAgB,GAChB,YAAY,GACZ,uBAAuB,GACvB,sBAAsB,CAAC;AAE3B;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,kDAAkD;IAClD,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAE9D,wBAAwB;IACxB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IAE1E,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,EAAE,EAAE,QAAQ,CAAC;IAEb,qBAAqB;IACrB,SAAS,EAAE,MAAM,CAAC;IAElB,2BAA2B;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/skills/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAEhB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IAEb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAEhB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAEhB,gCAAgC;IAChC,SAAS,EAAE,aAAa,EAAE,CAAC;IAE3B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,eAAe,CAAC;IAE5B,8BAA8B;IAC9B,WAAW,EAAE,aAAa,EAAE,CAAC;IAE7B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IAEb,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAEhB,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;CACpF;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,4BAA4B;IAC5B,WAAW,EAAE,aAAa,EAAE,CAAC;IAE7B,sBAAsB;IACtB,KAAK,EAAE,OAAO,EAAE,CAAC;IAEjB,qCAAqC;IACrC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;IAEnD,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IAEd,yBAAyB;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IAEb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAEhB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IAEb,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAEhB,mBAAmB;IACnB,QAAQ,EAAE,YAAY,EAAE,CAAC;IAEzB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IAEd,iCAAiC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B,wBAAwB;IACxB,QAAQ,EAAE;QACR,yBAAyB;QACzB,SAAS,EAAE,MAAM,CAAC;QAElB,6BAA6B;QAC7B,UAAU,EAAE,MAAM,CAAC;QAEnB,yBAAyB;QACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAE5B,sBAAsB;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,IAAI,EAAE,gBAAgB,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1D,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IAEd,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IAEpB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,0BAA0B,GAC1B,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,uBAAuB,GACvB,sBAAsB,GACtB,mBAAmB,GAEnB,uBAAuB,GACvB,yBAAyB,GACzB,gBAAgB,GAChB,YAAY,GACZ,uBAAuB,GACvB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,qBAAqB,GACrB,yBAAyB,GACzB,6BAA6B,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,kDAAkD;IAClD,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAE9D,wBAAwB;IACxB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IAE1E,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,EAAE,EAAE,QAAQ,CAAC;IAEb,qBAAqB;IACrB,SAAS,EAAE,MAAM,CAAC;IAElB,2BAA2B;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir-ai",
-  "version": "2.92.0",
+  "version": "2.94.0",
   "description": "LLM-enhanced SAST analysis built on circle-ir",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -98,7 +98,7 @@
     "@ax-llm/ax": "^20.0.0",
     "@cognium/project-profile-detect": "^1.1.0",
     "@mastra/core": "^1.18.0",
-    "circle-ir": "3.212.0",
+    "circle-ir": "3.213.0",
     "minimatch": "^10.2.5",
     "p-queue": "^9.1.0"
   },