codegate-ai 0.1.0

package/dist/knowledge-base/claude-code.json

@@ -0,0 +1,152 @@
+{
+  "tool": "claude-code",
+  "version_range": ">=1.0.0",
+  "config_paths": [
+    {
+      "path": ".claude/settings.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["env_override", "hooks", "consent_bypass", "mcp_config"],
+      "fields_of_interest": {
+        "env": "environment variable overrides",
+        "hooks": "shell command hooks",
+        "enableAllProjectMcpServers": "MCP auto-approval flag",
+        "enabledMcpjsonServers": "per-server auto-approval list"
+      }
+    },
+    {
+      "path": ".claude/settings.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["env_override", "hooks", "consent_bypass", "mcp_config"],
+      "fields_of_interest": {
+        "env": "environment variable overrides",
+        "hooks": "shell command hooks",
+        "enableAllProjectMcpServers": "MCP auto-approval flag",
+        "enabledMcpjsonServers": "per-server auto-approval list"
+      }
+    },
+    {
+      "path": ".claude/settings.local.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["env_override", "hooks", "consent_bypass", "mcp_config"],
+      "fields_of_interest": {
+        "env": "environment variable overrides",
+        "hooks": "shell command hooks",
+        "enableAllProjectMcpServers": "MCP auto-approval flag",
+        "enabledMcpjsonServers": "per-server auto-approval list"
+      }
+    },
+    {
+      "path": ".claude/settings.local.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["env_override", "hooks", "consent_bypass", "mcp_config"],
+      "fields_of_interest": {
+        "env": "environment variable overrides",
+        "hooks": "shell command hooks",
+        "enableAllProjectMcpServers": "MCP auto-approval flag",
+        "enabledMcpjsonServers": "per-server auto-approval list"
+      }
+    },
+    {
+      "path": "CLAUDE.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".claude/CLAUDE.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".claude/CLAUDE.md",
+      "scope": "user",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".claude/plugins.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["plugin_config", "remote_resource", "command_exec"]
+    },
+    {
+      "path": ".claude/plugins.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["plugin_config", "remote_resource", "command_exec"]
+    },
+    {
+      "path": ".mcp.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "remote_resource"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcp_servers.*.command": "stdio command (snake_case alias)",
+        "mcp_servers.*.args": "stdio command arguments (snake_case alias)",
+        "mcp_servers.*.url": "remote endpoint (snake_case alias)",
+        "mcp_servers.*.env": "runtime environment variables (snake_case alias)",
+        "context_servers.*.command": "stdio command (context server alias)",
+        "context_servers.*.args": "stdio command arguments (context server alias)",
+        "context_servers.*.url": "remote endpoint (context server alias)",
+        "context_servers.*.env": "runtime environment variables (context server alias)"
+      }
+    },
+    {
+      "path": ".mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "remote_resource"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcp_servers.*.command": "stdio command (snake_case alias)",
+        "mcp_servers.*.args": "stdio command arguments (snake_case alias)",
+        "mcp_servers.*.url": "remote endpoint (snake_case alias)",
+        "mcp_servers.*.env": "runtime environment variables (snake_case alias)",
+        "context_servers.*.command": "stdio command (context server alias)",
+        "context_servers.*.args": "stdio command arguments (context server alias)",
+        "context_servers.*.url": "remote endpoint (context server alias)",
+        "context_servers.*.env": "runtime environment variables (context server alias)"
+      }
+    }
+  ],
+  "skill_paths": [
+    {
+      "path": ".claude/commands/**/*.md",
+      "scope": "project",
+      "type": "custom_command",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".claude/commands/**/*.md",
+      "scope": "user",
+      "type": "custom_command",
+      "risk_surface": ["prompt_injection"]
+    }
+  ],
+  "extension_mechanisms": [
+    {
+      "type": "claude_sdk_plugin",
+      "install_pattern": "claude plugin install <package>",
+      "risk": "plugin packages can add tools and execution-capable workflows",
+      "fetchable": true
+    },
+    {
+      "type": "mcp_npm_package",
+      "install_pattern": "npx -y <package>",
+      "risk": "arbitrary code execution at install/runtime",
+      "fetchable": true
+    }
+  ]
+}

package/dist/knowledge-base/cline.json

@@ -0,0 +1,224 @@
+{
+  "tool": "cline",
+  "version_range": ">=0.1.0",
+  "config_paths": [
+    {
+      "path": ".clinerules",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".clinerules/**/*.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor", "command_exec"]
+    },
+    {
+      "path": ".clinerules/**/*.txt",
+      "scope": "project",
+      "format": "text",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": "Documents/Cline/Rules/**/*.md",
+      "scope": "user",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": "Documents/Cline/Rules/**/*.txt",
+      "scope": "user",
+      "format": "text",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".cline/settings.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "consent_bypass", "command_exec"]
+    },
+    {
+      "path": ".cline/settings.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "consent_bypass", "command_exec"]
+    },
+    {
+      "path": ".cline/mcp.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "command_exec", "remote_resource", "consent_bypass"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcpServers.*.alwaysAllow": "auto-approval toggle"
+      }
+    },
+    {
+      "path": ".cline/mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "command_exec", "remote_resource", "consent_bypass"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcpServers.*.alwaysAllow": "auto-approval toggle"
+      }
+    },
+    {
+      "path": ".cline/data/settings/cline_mcp_settings.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "command_exec", "remote_resource", "consent_bypass"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcpServers.*.alwaysAllow": "auto-approval toggle"
+      }
+    },
+    {
+      "path": ".cline/data/cache/remote_config_*.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "remote_resource", "consent_bypass"]
+    },
+    {
+      "path": "Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "command_exec", "remote_resource", "consent_bypass"],
+      "fields_of_interest": {
+        "mcpServers.*.command": "stdio command",
+        "mcpServers.*.args": "stdio command arguments",
+        "mcpServers.*.url": "remote endpoint",
+        "mcpServers.*.env": "runtime environment variables",
+        "mcpServers.*.alwaysAllow": "auto-approval toggle"
+      }
+    },
+    {
+      "path": "Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/cache/remote_config_*.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["mcp_config", "remote_resource", "consent_bypass"]
+    },
+    {
+      "path": ".cline/hooks.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["hooks", "command_exec"]
+    },
+    {
+      "path": ".cline/hooks.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["hooks", "command_exec"]
+    },
+    {
+      "path": ".clinerules/hooks/*",
+      "scope": "project",
+      "format": "text",
+      "risk_surface": ["hooks", "command_exec"]
+    },
+    {
+      "path": "Documents/Cline/Hooks/*",
+      "scope": "user",
+      "format": "text",
+      "risk_surface": ["hooks", "command_exec"]
+    },
+    {
+      "path": ".cline/workflows.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "prompt_injection"]
+    },
+    {
+      "path": ".cline/workflows.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "prompt_injection"]
+    },
+    {
+      "path": ".cline/marketplace.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["plugin_config", "remote_resource", "command_exec"]
+    },
+    {
+      "path": ".cline/marketplace.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["plugin_config", "remote_resource", "command_exec"]
+    }
+  ],
+  "skill_paths": [
+    {
+      "path": ".cline/skills/**/*.md",
+      "scope": "project",
+      "type": "skill",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".clinerules/skills/**/*.md",
+      "scope": "project",
+      "type": "skill",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".cline/skills/**/*.md",
+      "scope": "user",
+      "type": "skill",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".cline/workflows/*.md",
+      "scope": "project",
+      "type": "workflow",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    },
+    {
+      "path": ".clinerules/workflows/**/*.md",
+      "scope": "project",
+      "type": "workflow",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    },
+    {
+      "path": ".cline/workflows/*.md",
+      "scope": "user",
+      "type": "workflow",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    },
+    {
+      "path": "Documents/Cline/Workflows/**/*.md",
+      "scope": "user",
+      "type": "workflow",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    },
+    {
+      "path": ".cline/commands/**/*.md",
+      "scope": "project",
+      "type": "slash_command",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    },
+    {
+      "path": ".cline/commands/**/*.md",
+      "scope": "user",
+      "type": "slash_command",
+      "risk_surface": ["prompt_injection", "command_exec"]
+    }
+  ],
+  "extension_mechanisms": [
+    {
+      "type": "cline_marketplace",
+      "install_pattern": "cline install <extension>",
+      "risk": "extensions can register tools and command workflows",
+      "fetchable": true
+    }
+  ]
+}

package/dist/knowledge-base/codex.json

@@ -0,0 +1,162 @@
+{
+  "tool": "codex-cli",
+  "version_range": ">=0.1.0",
+  "config_paths": [
+    {
+      "path": ".codex/config.toml",
+      "scope": "project",
+      "format": "toml",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"],
+      "fields_of_interest": {
+        "mcp_servers.*.command": "stdio command",
+        "mcp_servers.*.args": "stdio command arguments",
+        "mcp_servers.*.url": "remote endpoint",
+        "mcp_servers.*.env": "runtime environment variables",
+        "approval_policy": "interactive approval mode",
+        "sandbox_mode": "sandbox policy"
+      }
+    },
+    {
+      "path": ".codex/config.toml",
+      "scope": "user",
+      "format": "toml",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"],
+      "fields_of_interest": {
+        "mcp_servers.*.command": "stdio command",
+        "mcp_servers.*.args": "stdio command arguments",
+        "mcp_servers.*.url": "remote endpoint",
+        "mcp_servers.*.env": "runtime environment variables",
+        "approval_policy": "interactive approval mode",
+        "sandbox_mode": "sandbox policy"
+      }
+    },
+    {
+      "path": ".config/codex/config.toml",
+      "scope": "user",
+      "format": "toml",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"],
+      "fields_of_interest": {
+        "mcp_servers.*.command": "stdio command",
+        "mcp_servers.*.args": "stdio command arguments",
+        "mcp_servers.*.url": "remote endpoint",
+        "mcp_servers.*.env": "runtime environment variables",
+        "approval_policy": "interactive approval mode",
+        "sandbox_mode": "sandbox policy"
+      }
+    },
+    {
+      "path": "Library/Application Support/codex/config.toml",
+      "scope": "user",
+      "format": "toml",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"],
+      "fields_of_interest": {
+        "mcp_servers.*.command": "stdio command",
+        "mcp_servers.*.args": "stdio command arguments",
+        "mcp_servers.*.url": "remote endpoint",
+        "mcp_servers.*.env": "runtime environment variables",
+        "approval_policy": "interactive approval mode",
+        "sandbox_mode": "sandbox policy"
+      }
+    },
+    {
+      "path": "AppData/Roaming/codex/config.toml",
+      "scope": "user",
+      "format": "toml",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"],
+      "fields_of_interest": {
+        "mcp_servers.*.command": "stdio command",
+        "mcp_servers.*.args": "stdio command arguments",
+        "mcp_servers.*.url": "remote endpoint",
+        "mcp_servers.*.env": "runtime environment variables",
+        "approval_policy": "interactive approval mode",
+        "sandbox_mode": "sandbox policy"
+      }
+    },
+    {
+      "path": ".codex/.env",
+      "scope": "project",
+      "format": "dotenv",
+      "risk_surface": ["env_override"]
+    },
+    {
+      "path": ".codex/.env",
+      "scope": "user",
+      "format": "dotenv",
+      "risk_surface": ["env_override"]
+    },
+    {
+      "path": ".config/codex/.env",
+      "scope": "user",
+      "format": "dotenv",
+      "risk_surface": ["env_override"]
+    },
+    {
+      "path": "Library/Application Support/codex/.env",
+      "scope": "user",
+      "format": "dotenv",
+      "risk_surface": ["env_override"]
+    },
+    {
+      "path": "AppData/Roaming/codex/.env",
+      "scope": "user",
+      "format": "dotenv",
+      "risk_surface": ["env_override"]
+    },
+    {
+      "path": "codex.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config", "consent_bypass"]
+    },
+    {
+      "path": "AGENTS.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".codex/AGENTS.md",
+      "scope": "user",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": "CODEX.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".codex/CODEX.md",
+      "scope": "user",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    }
+  ],
+  "skill_paths": [
+    {
+      "path": ".codex/commands/**/*.md",
+      "scope": "project",
+      "type": "custom_command",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".codex/commands/**/*.md",
+      "scope": "user",
+      "type": "custom_command",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".codex/skills/**/*.md",
+      "scope": "project",
+      "type": "skill",
+      "risk_surface": ["prompt_injection"]
+    },
+    {
+      "path": ".codex/skills/**/*.md",
+      "scope": "user",
+      "type": "skill",
+      "risk_surface": ["prompt_injection"]
+    }
+  ]
+}

package/dist/knowledge-base/copilot.json

@@ -0,0 +1,132 @@
+{
+  "tool": "github-copilot",
+  "version_range": ">=1.0.0",
+  "config_paths": [
+    {
+      "path": ".github/copilot-instructions.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".instructions.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": "*.instructions.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".github/instructions/*.instructions.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".github/prompts/*.prompt.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".github/chatmodes/*.chatmode.md",
+      "scope": "project",
+      "format": "markdown",
+      "risk_surface": ["prompt_injection", "unicode_backdoor"]
+    },
+    {
+      "path": ".vscode/mcp.json",
+      "scope": "project",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config"]
+    },
+    {
+      "path": "Library/Application Support/Code/User/mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config"]
+    },
+    {
+      "path": "AppData/Roaming/Code/User/mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config"]
+    },
+    {
+      "path": "Library/Application Support/Code - Insiders/User/mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config"]
+    },
+    {
+      "path": "AppData/Roaming/Code - Insiders/User/mcp.json",
+      "scope": "user",
+      "format": "jsonc",
+      "risk_surface": ["command_exec", "mcp_config"]
+    },
+    {
+      "path": ".vscode/extensions.json",
+      "scope": "project",
+      "format": "json",
+      "risk_surface": ["ide_settings", "plugin_config"]
+    },
+    {
+      "path": "Library/Application Support/Code/User/extensions.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings", "plugin_config"]
+    },
+    {
+      "path": "AppData/Roaming/Code/User/extensions.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings", "plugin_config"]
+    },
+    {
+      "path": "Library/Application Support/Code - Insiders/User/extensions.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings", "plugin_config"]
+    },
+    {
+      "path": "AppData/Roaming/Code - Insiders/User/extensions.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings", "plugin_config"]
+    },
+    {
+      "path": ".vscode/settings.json",
+      "scope": "project",
+      "format": "json",
+      "risk_surface": ["ide_settings"]
+    },
+    {
+      "path": "Library/Application Support/Code/User/settings.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings"]
+    },
+    {
+      "path": "AppData/Roaming/Code/User/settings.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings"]
+    },
+    {
+      "path": "Library/Application Support/Code - Insiders/User/settings.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings"]
+    },
+    {
+      "path": "AppData/Roaming/Code - Insiders/User/settings.json",
+      "scope": "user",
+      "format": "json",
+      "risk_surface": ["ide_settings"]
+    }
+  ]
+}