correctover-scan 1.0.0

package/README.md

@@ -0,0 +1,94 @@
+# correctover-scan
+
+> CCS Security Scanner for MCP configurations — 14 security checks mapped to OWASP AISVS 1.0
+
+![npm](https://img.shields.io/npm/v/correctover-scan)
+![license](https://img.shields.io/npm/l/correctover-scan)
+
+Scan your AI Agent MCP configuration files for security issues. Detects credential exposure, SSRF vulnerabilities, missing auth, and 11 more security checks.
+
+## Quick Start
+
+```bash
+# Scan a specific config file
+npx correctover-scan mcp.json
+
+# Auto-detect and scan all MCP configs in current directory
+npx correctover-scan
+
+# Scan a directory
+npx correctover-scan -d ./my-project
+```
+
+## What It Checks
+
+| # | Check | Severity | AISVS |
+|---|-------|----------|-------|
+| 1 | TLS Transport Encryption | 🔴 Critical | C10.1 |
+| 2 | Server Authentication | 🟠 High | C10.2 |
+| 3 | Timeout Configuration | 🟡 Medium | C9.1 |
+| 4 | Credential Exposure | 🔴 Critical | C5.1 |
+| 5 | Tool Allowlist | 🟠 High | C9.3 |
+| 6 | Token Budget Control | 🟠 High | C9.1 |
+| 7 | SSRF Protection | 🔴 Critical | C10.3 |
+| 8 | Audit Logging | 🟡 Medium | C12.1 |
+| 9 | Sandbox Isolation | 🟡 Medium | C4.1 |
+| 10 | Dependency Version Pinning | 🟡 Medium | C6.1 |
+| 11 | Error Handling Strategy | 🟡 Medium | C12.2 |
+| 12 | Input Validation | 🟠 High | C2.1 |
+| 13 | Output Validation | 🟡 Medium | C7.1 |
+| 14 | Kill Switch | 🟠 High | C9.5 |
+
+## Output Formats
+
+```bash
+# Terminal (default)
+correctover-scan mcp.json
+
+# JSON
+correctover-scan mcp.json -f json
+
+# SARIF (for CI integration)
+correctover-scan mcp.json -f sarif > report.sarif
+```
+
+## Supported Config Files
+
+Auto-detects these files:
+- `.cursor/mcp.json`
+- `claude_desktop_config.json`
+- `.claude/mcp.json`
+- `mcp.json` / `mcp.yaml` / `mcp.yml`
+- `.vscode/mcp.json`
+- `.mcp/mcp.json`
+- `config/mcp.json`
+
+## CI/CD Integration
+
+### GitHub Actions
+
+```yaml
+- uses: Correctover/correctover-scan-action@v1
+  with:
+    path: ./mcp.json
+```
+
+### Web Scanner
+
+Try the online version: [correctover.com/scan](https://correctover.com/scan/)
+
+## Standards Compliance
+
+- **OWASP AISVS 1.0** — AI System Vulnerability Severity
+- **GB/T《智能体应用安全基本要求》** — Chinese National Mandatory Standard
+
+## Links
+
+- [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
+- [CCS Standard](https://correctover.com/ccs) — Conformance Specification
+- [Web Scanner](https://correctover.com/scan/) — Online version
+- [GitHub](https://github.com/Correctover) — Source code
+
+## License
+
+MIT © Correctover

package/core/scanner.js

@@ -0,0 +1,239 @@
+/**
+ * Correctover CCS Security Scanner - Core Engine
+ * 14 security checks mapped to OWASP AISVS 1.0
+ * Shared by CLI / GitHub Action / VS Code Extension
+ */
+
+const CHECKS = [
+  {
+    id: 'mcp-tls', category: 'C10 MCP安全', name: 'TLS传输加密', severity: 'critical',
+    check: (cfg) => {
+      const servers = getServers(cfg);
+      if (!servers.length) return 'info';
+      return servers.every(s => !s.url || s.url.startsWith('https://') || s.url.startsWith('stdio:')) ? 'pass' : 'fail';
+    },
+    fix: '所有MCP Server URL应使用HTTPS协议，禁止明文HTTP传输',
+    aisvs: 'C10.1'
+  },
+  {
+    id: 'mcp-auth', category: 'C10 MCP安全', name: '服务器鉴权配置', severity: 'high',
+    check: (cfg) => {
+      const servers = getServers(cfg);
+      if (!servers.length) return 'info';
+      const hasAuth = servers.some(s => s.headers?.authorization || s.headers?.Authorization || s.env?.API_KEY);
+      return hasAuth ? 'pass' : 'warn';
+    },
+    fix: '为MCP Server配置认证头（Authorization/API Key），防止未授权访问',
+    aisvs: 'C10.2'
+  },
+  {
+    id: 'mcp-timeout', category: 'C9 Agent安全', name: '超时配置', severity: 'medium',
+    check: (cfg) => {
+      return JSON.stringify(cfg).includes('timeout') ? 'pass' : 'warn';
+    },
+    fix: '为MCP Server连接设置超时时间，防止Agent因无响应Server而挂起',
+    aisvs: 'C9.1'
+  },
+  {
+    id: 'cred-exposure', category: 'C5 访问控制', name: '凭证明文暴露', severity: 'critical',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      const patterns = [/sk-[a-zA-Z0-9]{20,}/, /AKIA[A-Z0-9]{16}/, /ghp_[a-zA-Z0-9]{36}/, /password\s*:\s*["'][^"']+["']/i];
+      return patterns.some(p => p.test(str)) ? 'fail' : 'pass';
+    },
+    fix: '禁止在配置文件中硬编码API密钥。使用环境变量引用（如 ${API_KEY}）或密钥管理服务',
+    aisvs: 'C5.1'
+  },
+  {
+    id: 'allowed-tools', category: 'C9 Agent安全', name: '工具白名单', severity: 'high',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('allowed_tools') || str.includes('allowedTools') || str.includes('permissions')) ? 'pass' : 'warn';
+    },
+    fix: '配置allowed_tools白名单，限制Agent可调用的工具范围，遵循最小权限原则',
+    aisvs: 'C9.3'
+  },
+  {
+    id: 'budget-limit', category: 'C9 Agent安全', name: 'Token预算控制', severity: 'high',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('budget') || str.includes('max_tokens') || str.includes('token_limit') || str.includes('cost_limit')) ? 'pass' : 'warn';
+    },
+    fix: '设置Token消耗预算上限，防止Agent因循环调用导致成本失控',
+    aisvs: 'C9.1'
+  },
+  {
+    id: 'ssrf-protection', category: 'C10 MCP安全', name: 'SSRF防护', severity: 'critical',
+    check: (cfg) => {
+      const servers = getServers(cfg);
+      const urls = servers.map(s => s.url || '').join(' ');
+      const internal = /169\.254\.|10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|localhost|127\.0\.0\.1/i;
+      return internal.test(urls) ? 'fail' : 'pass';
+    },
+    fix: 'MCP Server URL不应指向内网地址（169.254.x.x/10.x/172.16-31.x/192.168.x），防止SSRF攻击',
+    aisvs: 'C10.3'
+  },
+  {
+    id: 'logging', category: 'C12 监控', name: '审计日志配置', severity: 'medium',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('log') || str.includes('audit') || str.includes('trace') || str.includes('telemetry')) ? 'pass' : 'warn';
+    },
+    fix: '启用审计日志记录所有Agent操作，便于事后追溯和安全分析',
+    aisvs: 'C12.1'
+  },
+  {
+    id: 'sandbox', category: 'C4 基础设施', name: '沙箱隔离配置', severity: 'medium',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('sandbox') || str.includes('isolation') || str.includes('container') || str.includes('docker')) ? 'pass' : 'info';
+    },
+    fix: '考虑为MCP Server配置沙箱执行环境，限制文件系统和网络访问',
+    aisvs: 'C4.1'
+  },
+  {
+    id: 'version-pin', category: 'C6 供应链', name: '依赖版本锁定', severity: 'medium',
+    check: (cfg) => {
+      const servers = getServers(cfg);
+      if (!servers.length) return 'info';
+      return servers.some(s => s.command || s.version) ? 'pass' : 'warn';
+    },
+    fix: '锁定MCP Server依赖的具体版本号，防止供应链攻击',
+    aisvs: 'C6.1'
+  },
+  {
+    id: 'error-handling', category: 'C12 监控', name: '错误处理策略', severity: 'medium',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('retry') || str.includes('fallback') || str.includes('error') || str.includes('on_error')) ? 'pass' : 'warn';
+    },
+    fix: '配置错误处理和故障转移策略，确保Agent在Server故障时优雅降级',
+    aisvs: 'C12.2'
+  },
+  {
+    id: 'input-validation', category: 'C2 输入验证', name: '输入校验规则', severity: 'high',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('validation') || str.includes('schema') || str.includes('input_check') || str.includes('sanitize')) ? 'pass' : 'warn';
+    },
+    fix: '为Agent输入配置校验规则，防御提示注入和编码走私攻击',
+    aisvs: 'C2.1'
+  },
+  {
+    id: 'output-validation', category: 'C7 输出控制', name: '输出校验规则', severity: 'medium',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('output') || str.includes('response_check') || str.includes('filter')) ? 'pass' : 'info';
+    },
+    fix: '对Agent输出进行格式校验和敏感信息过滤',
+    aisvs: 'C7.1'
+  },
+  {
+    id: 'kill-switch', category: 'C9 Agent安全', name: '紧急终止机制', severity: 'high',
+    check: (cfg) => {
+      const str = JSON.stringify(cfg);
+      return (str.includes('kill') || str.includes('circuit_breaker') || str.includes('emergency') || str.includes('abort')) ? 'pass' : 'warn';
+    },
+    fix: '配置紧急终止开关（kill switch），在检测到异常行为时立即停止Agent',
+    aisvs: 'C9.5'
+  }
+];
+
+function getServers(cfg) {
+  if (cfg.mcpServers) return Object.values(cfg.mcpServers);
+  if (cfg.servers) return cfg.servers;
+  if (Array.isArray(cfg)) return cfg;
+  return [];
+}
+
+/**
+ * Run security scan on a parsed config object
+ * @param {Object} config - Parsed MCP config
+ * @returns {{ results: Array, stats: Object }}
+ */
+function runScan(config) {
+  const results = CHECKS.map(check => {
+    let status;
+    try { status = check.check(config); } catch (e) { status = 'info'; }
+    return { ...check, status };
+  });
+
+  const pass = results.filter(r => r.status === 'pass').length;
+  const warn = results.filter(r => r.status === 'warn').length;
+  const fail = results.filter(r => r.status === 'fail').length;
+  const info = results.filter(r => r.status === 'info').length;
+  const total = results.length;
+  const score = Math.round(((pass * 10 + warn * 5 + info * 7) / (total * 10)) * 100);
+
+  return { results, stats: { pass, warn, fail, info, total, score } };
+}
+
+/**
+ * Parse config content (JSON or simple YAML)
+ * @param {string} content - File content
+ * @param {string} filename - Original filename
+ * @returns {Object} Parsed config
+ */
+function parseConfig(content, filename = '') {
+  if (filename.endsWith('.json') || filename.endsWith('.toml')) {
+    return JSON.parse(content);
+  }
+  // Try JSON first for unknown extensions
+  try { return JSON.parse(content); } catch (e) {}
+  // Basic YAML parse
+  return parseSimpleYAML(content);
+}
+
+function parseSimpleYAML(text) {
+  const result = {};
+  const lines = text.split('\n');
+  let currentPath = [];
+  let indentStack = [-1];
+  for (const line of lines) {
+    if (!line.trim() || line.trim().startsWith('#')) continue;
+    const indent = line.search(/\S/);
+    const match = line.trim().match(/^([^:]+):\s*(.*)/);
+    if (!match) continue;
+    const key = match[1].trim();
+    let val = match[2].trim();
+    while (indentStack.length > 1 && indent <= indentStack[indentStack.length - 1]) {
+      indentStack.pop();
+      currentPath.pop();
+    }
+    if (val === '' || val === '{}' || val === '[]') {
+      currentPath.push(key);
+      indentStack.push(indent);
+    } else {
+      val = val.replace(/^["']|["']$/g, '');
+      setNestedValue(result, [...currentPath, key], val);
+    }
+  }
+  return result;
+}
+
+function setNestedValue(obj, path, value) {
+  let current = obj;
+  for (let i = 0; i < path.length - 1; i++) {
+    if (!current[path[i]]) current[path[i]] = {};
+    current = current[path[i]];
+  }
+  current[path[path.length - 1]] = value;
+}
+
+// Auto-detect MCP config files in a directory
+const KNOWN_CONFIG_PATHS = [
+  '.cursor/mcp.json',
+  'claude_desktop_config.json',
+  '.claude/mcp.json',
+  'mcp.json',
+  'mcp.yaml',
+  'mcp.yml',
+  '.vscode/mcp.json',
+  'config/mcp.json',
+  '.mcp/mcp.json',
+  'mcp_config.json',
+];
+
+if (typeof module !== 'undefined' && module.exports) {
+  module.exports = { CHECKS, runScan, parseConfig, getServers, KNOWN_CONFIG_PATHS };
+}

package/index.js

@@ -0,0 +1,287 @@
+#!/usr/bin/env node
+/**
+ * correctover-scan — CCS Security Scanner for MCP Configurations
+ * Usage: npx correctover-scan [config-file] [options]
+ * 
+ * Scans MCP configuration files for security issues.
+ * Maps to OWASP AISVS 1.0 and Chinese National Standard《智能体应用安全基本要求》
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { runScan, parseConfig, KNOWN_CONFIG_PATHS } = require('./core/scanner');
+
+const VERSION = '1.0.0';
+
+// Colors
+const c = {
+  reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
+  red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m',
+  cyan: '\x1b[36m', white: '\x1b[37m', gray: '\x1b[90m',
+  bgRed: '\x1b[41m', bgGreen: '\x1b[42m', bgYellow: '\x1b[43m',
+};
+
+const icons = { pass: '✅', warn: '⚠️', fail: '❌', info: 'ℹ️' };
+const sevColors = { critical: c.red, high: c.yellow, medium: c.cyan, low: c.gray };
+const sevLabels = { critical: 'CRITICAL', high: 'HIGH', medium: 'MEDIUM', low: 'LOW' };
+
+function printBanner() {
+  console.log(`
+${c.bold}${c.blue}  ╔══════════════════════════════════════════╗
+  ║   CCS Security Scanner by Correctover    ║
+  ║   AI Agent Runtime Assurance             ║
+  ╚══════════════════════════════════════════╝${c.reset}
+  ${c.dim}v${VERSION} | OWASP AISVS 1.0 | 14 security checks${c.reset}
+`);
+}
+
+function findConfigFiles(dir) {
+  const found = [];
+  for (const relPath of KNOWN_CONFIG_PATHS) {
+    const fullPath = path.resolve(dir, relPath);
+    if (fs.existsSync(fullPath)) {
+      found.push(fullPath);
+    }
+  }
+  // Also scan for any mcp*.json or mcp*.yaml in common locations
+  const scanDirs = ['.', '.cursor', '.claude', '.vscode', '.mcp', 'config'];
+  for (const d of scanDirs) {
+    const dirPath = path.resolve(dir, d);
+    if (fs.existsSync(dirPath) && fs.statSync(dirPath).isDirectory()) {
+      try {
+        const files = fs.readdirSync(dirPath);
+        for (const f of files) {
+          if (/^mcp[_-]?.*\.(json|yaml|yml)$/.test(f)) {
+            const fp = path.join(dirPath, f);
+            if (!found.includes(fp)) found.push(fp);
+          }
+        }
+      } catch (e) {}
+    }
+  }
+  return found;
+}
+
+function formatResults(results, stats, filename) {
+  const lines = [];
+  
+  // File header
+  lines.push(`${c.bold}📄 ${filename}${c.reset}`);
+  lines.push('─'.repeat(50));
+
+  // Score
+  const scoreColor = stats.score >= 80 ? c.green : stats.score >= 60 ? c.yellow : c.red;
+  lines.push(`\n${c.bold}Security Score: ${scoreColor}${c.bold}${stats.score}/100${c.reset}`);
+  lines.push(`  ${c.green}✓ ${stats.pass} passed${c.reset}  ${c.yellow}⚠ ${stats.warn} warnings${c.reset}  ${c.red}✗ ${stats.fail} critical${c.reset}  ${c.blue}ℹ ${stats.info} info${c.reset}\n`);
+
+  // Group by category
+  const categories = {};
+  for (const r of results) {
+    if (!categories[r.category]) categories[r.category] = [];
+    categories[r.category].push(r);
+  }
+
+  for (const [cat, checks] of Object.entries(categories)) {
+    lines.push(`${c.dim}── ${cat} ──${c.reset}`);
+    for (const r of checks) {
+      const icon = icons[r.status];
+      const sevColor = sevColors[r.severity];
+      const sevLabel = sevLabels[r.severity];
+      const statusStr = r.status === 'pass' ? c.green + 'PASS' : r.status === 'fail' ? c.red + 'FAIL' : r.status === 'warn' ? c.yellow + 'WARN' : c.blue + 'INFO';
+      lines.push(`  ${icon} ${r.name} ${c.reset}[${statusStr}${c.reset}] ${c.dim}${r.aisvs}${c.reset}`);
+    }
+    lines.push('');
+  }
+
+  // Recommendations
+  const issues = results.filter(r => r.status === 'fail' || r.status === 'warn');
+  if (issues.length > 0) {
+    lines.push(`${c.bold}${c.yellow}Recommendations:${c.reset}\n`);
+    for (const r of issues) {
+      const icon = r.status === 'fail' ? '🔴' : '🟡';
+      lines.push(`  ${icon} ${c.bold}${r.name}${c.reset}`);
+      lines.push(`     ${c.gray}${r.fix}${c.reset}\n`);
+    }
+  } else {
+    lines.push(`${c.green}${c.bold}🎉 All checks passed! Your MCP configuration is secure.${c.reset}\n`);
+  }
+
+  // CTA
+  lines.push(`${c.dim}── ${c.reset}`);
+  lines.push(`${c.dim}Try the web scanner: https://correctover.com/scan/${c.reset}`);
+  lines.push(`${c.dim}Learn more: https://correctover.com${c.reset}`);
+  lines.push(`${c.dim}GitHub: https://github.com/Correctover${c.reset}`);
+
+  return lines.join('\n');
+}
+
+function formatSARIF(results, filename) {
+  return {
+    version: '2.1.0',
+    $schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
+    runs: [{
+      tool: {
+        driver: {
+          name: 'correctover-scan',
+          version: VERSION,
+          informationUri: 'https://correctover.com',
+          rules: results.map(r => ({
+            id: r.id,
+            name: r.name,
+            shortDescription: { text: `${r.category}: ${r.name}` },
+            helpUri: `https://correctover.com/scan/#check-${r.id}`,
+            properties: { aisvs: r.aisvs, severity: r.severity }
+          }))
+        }
+      },
+      results: results.filter(r => r.status === 'fail' || r.status === 'warn').map(r => ({
+        ruleId: r.id,
+        level: r.status === 'fail' ? 'error' : 'warning',
+        message: { text: r.fix },
+        locations: [{ physicalLocation: { artifactLocation: { uri: filename } } }]
+      }))
+    }]
+  };
+}
+
+function formatJSON(results, stats, filename) {
+  return JSON.stringify({ scanner: 'correctover-scan', version: VERSION, file: filename, stats, results }, null, 2);
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  let configPath = null;
+  let format = 'text'; // text, json, sarif
+  let scanDir = process.cwd();
+  let recursive = false;
+
+  // Parse args
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--version' || arg === '-v') {
+      console.log(`correctover-scan v${VERSION}`);
+      process.exit(0);
+    } else if (arg === '--help' || arg === '-h') {
+      console.log(`
+Usage: correctover-scan [config-file] [options]
+
+Options:
+  -f, --format <type>   Output format: text, json, sarif (default: text)
+  -d, --dir <path>      Directory to scan for MCP configs (default: cwd)
+  -r, --recursive       Recursively find MCP config files
+  -v, --version         Show version
+  -h, --help            Show this help
+
+Examples:
+  correctover-scan mcp.json                    Scan a specific file
+  correctover-scan -d ./project                Auto-detect configs in directory
+  correctover-scan -f sarif -o report.sarif    Output SARIF format
+  npx correctover-scan                         Auto-detect in current directory
+`);
+      process.exit(0);
+    } else if (arg === '--format' || arg === '-f') {
+      format = args[++i];
+    } else if (arg === '--dir' || arg === '-d') {
+      scanDir = args[++i];
+    } else if (arg === '--recursive' || arg === '-r') {
+      recursive = true;
+    } else if (arg === '--output' || arg === '-o') {
+      // Output file - handled below
+    } else if (!arg.startsWith('-')) {
+      configPath = arg;
+    }
+  }
+
+  printBanner();
+
+  const filesToScan = [];
+
+  if (configPath) {
+    // Specific file
+    if (!fs.existsSync(configPath)) {
+      console.error(`${c.red}Error: File not found: ${configPath}${c.reset}`);
+      process.exit(1);
+    }
+    filesToScan.push(configPath);
+  } else {
+    // Auto-detect
+    console.log(`${c.dim}Auto-detecting MCP configs in ${scanDir}...${c.reset}\n`);
+    const found = findConfigFiles(scanDir);
+    if (recursive) {
+      // Walk directory tree
+      function walkDir(dir) {
+        try {
+          const entries = fs.readdirSync(dir, { withFileTypes: true });
+          for (const entry of entries) {
+            if (entry.name.startsWith('.') && entry.name !== '.cursor' && entry.name !== '.claude' && entry.name !== '.vscode' && entry.name !== '.mcp') continue;
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isDirectory() && entry.name !== 'node_modules') {
+              walkDir(fullPath);
+            } else if (entry.isFile() && /mcp[_-]?.*\.(json|yaml|yml)$/.test(entry.name)) {
+              if (!found.includes(fullPath)) found.push(fullPath);
+            }
+          }
+        } catch (e) {}
+      }
+      walkDir(scanDir);
+    }
+    filesToScan.push(...found);
+  }
+
+  if (filesToScan.length === 0) {
+    console.log(`${c.yellow}No MCP configuration files found.${c.reset}`);
+    console.log(`${c.dim}Searched paths: ${KNOWN_CONFIG_PATHS.join(', ')}${c.reset}`);
+    console.log(`\n${c.dim}Create a config file or specify one: correctover-scan path/to/mcp.json${c.reset}`);
+    process.exit(0);
+  }
+
+  console.log(`${c.dim}Found ${filesToScan.length} config file(s)${c.reset}\n`);
+
+  let totalPass = 0, totalWarn = 0, totalFail = 0, totalInfo = 0;
+  let allResults = [];
+
+  for (const fp of filesToScan) {
+    try {
+      const content = fs.readFileSync(fp, 'utf-8');
+      const config = parseConfig(content, fp);
+      const { results, stats } = runScan(config);
+      const relPath = path.relative(process.cwd(), fp) || fp;
+
+      if (format === 'text') {
+        console.log(formatResults(results, stats, relPath));
+        console.log('');
+      }
+
+      totalPass += stats.pass;
+      totalWarn += stats.warn;
+      totalFail += stats.fail;
+      totalInfo += stats.info;
+      allResults.push({ file: relPath, results, stats });
+    } catch (e) {
+      console.error(`${c.red}Error scanning ${fp}: ${e.message}${c.reset}\n`);
+    }
+  }
+
+  // JSON/SARIF output
+  if (format === 'json') {
+    const output = allResults.map(r => formatJSON(r.results, r.stats, r.file));
+    console.log(output.join('\n'));
+  } else if (format === 'sarif') {
+    const sarifResults = allResults.map(r => formatSARIF(r.results, r.file));
+    console.log(JSON.stringify(sarifResults.length === 1 ? sarifResults[0] : { runs: sarifResults.flatMap(s => s.runs) }, null, 2));
+  }
+
+  // Summary
+  if (filesToScan.length > 1 && format === 'text') {
+    const totalScore = Math.round(((totalPass * 10 + totalWarn * 5 + totalInfo * 7) / ((totalPass + totalWarn + totalFail + totalInfo) * 10)) * 100);
+    console.log(`${c.bold}═══ Summary ═══${c.reset}`);
+    console.log(`  Files scanned: ${filesToScan.length}`);
+    console.log(`  Total score: ${totalScore}/100`);
+    console.log(`  ${c.green}✓ ${totalPass}${c.reset}  ${c.yellow}⚠ ${totalWarn}${c.reset}  ${c.red}✗ ${totalFail}${c.reset}  ${c.blue}ℹ ${totalInfo}${c.reset}`);
+  }
+
+  // Exit code: 1 if any critical failures
+  if (totalFail > 0) process.exit(1);
+}
+
+main();

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "correctover-scan",
+  "version": "1.0.0",
+  "description": "CCS Security Scanner for MCP configurations — scan Agent security configs against OWASP AISVS 1.0",
+  "main": "index.js",
+  "bin": {
+    "correctover-scan": "./index.js"
+  },
+  "scripts": {
+    "test": "node test.js",
+    "prepublishOnly": "node test.js"
+  },
+  "keywords": [
+    "mcp",
+    "security",
+    "scanner",
+    "agent",
+    "ai",
+    "owasp",
+    "aisvs",
+    "ccs",
+    "correctover",
+    "claude",
+    "cursor",
+    "model-context-protocol",
+    "vulnerability",
+    "audit"
+  ],
+  "author": "Correctover",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Correctover/correctover-scan"
+  },
+  "homepage": "https://correctover.com/scan",
+  "bugs": {
+    "url": "https://github.com/Correctover/correctover-scan/issues"
+  },
+  "files": [
+    "index.js",
+    "core/scanner.js",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=16.0.0"
+  }
+}