clawmoat 0.7.0 → 1.0.0

package/src/vuln-ops/exploitability.js

@@ -0,0 +1,46 @@
+function scoreExploitability(findings = [], context = {}) {
+  const severityWeight = { low: 10, medium: 20, high: 35, critical: 50 };
+
+  let score = 0;
+  const reasons = [];
+
+  for (const finding of findings) {
+    score += severityWeight[finding.severity] || 0;
+
+    if (finding.type === 'dependency_attack') {
+      score += 20;
+      reasons.push('Dependency-layer attack pattern detected');
+    }
+
+    if (finding.type === 'exfiltration_attempt' || finding.type === 'secret_detected') {
+      score += 20;
+      reasons.push('Finding suggests immediate data-loss potential');
+    }
+
+    if (finding.type === 'suspicious_url') {
+      score += 10;
+      reasons.push('Suspicious remote endpoint is part of the flow');
+    }
+  }
+
+  if (findings.length >= 2) {
+    score += 10;
+    reasons.push('Multiple findings increase chaining risk');
+  }
+
+  if (context.externallyReachable) {
+    score += 20;
+    reasons.push('Exposed to external input or traffic');
+  }
+
+  score = Math.min(score, 100);
+
+  let priority = 'low';
+  if (score >= 85) priority = 'urgent';
+  else if (score >= 65) priority = 'high';
+  else if (score >= 40) priority = 'normal';
+
+  return { score, priority, reasons: [...new Set(reasons)] };
+}
+
+module.exports = { scoreExploitability };