cyberaudit-skill 3.0.7 → 3.1.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { Command } from "commander";
-import { existsSync, mkdirSync, cpSync, readdirSync, writeFileSync, readFileSync } from "fs";
+import { existsSync, mkdirSync, cpSync, writeFileSync, readFileSync } from "fs";
 import { createInterface } from "readline";
 import { homedir } from "os";
 import { join, dirname } from "path";
@@ -37,23 +37,29 @@ function detectInstalledAgents() {
         found.push("antigravity-cli");
     return found;
 }
-function installSkill(targetDir, dryRun) {
+function installSkill(targetDir, agent, dryRun) {
     if (!existsSync(SKILL_SRC)) {
         console.error(`✗ Skill source not found at ${SKILL_SRC}.`);
         return false;
     }
-    const skillMdOk = existsSync(targetDir) && existsSync(join(targetDir, "SKILL.md"));
-    if (skillMdOk) {
-        console.log(`  ✓ Already installed at ${targetDir}`);
-        return true;
-    }
     if (dryRun) {
         console.log(`  → Would install to ${targetDir} (--dry-run)`);
         return true;
     }
+    // Install/update skill files
     mkdirSync(targetDir, { recursive: true });
     cpSync(SKILL_SRC, targetDir, { recursive: true });
-    console.log(`  ✓ Installed at ${targetDir} (${readdirSync(targetDir).length} files)`);
+    console.log(`  ✓ Installed at ${targetDir}`);
+    // Install command files for opencode
+    if (agent === "opencode") {
+        const cmdDir = join(homedir(), ".config", "opencode", "commands");
+        const cmdSrc = join(PKG_ROOT, "skills", "cyberaudit", "commands");
+        if (existsSync(cmdSrc)) {
+            mkdirSync(cmdDir, { recursive: true });
+            cpSync(cmdSrc, cmdDir, { recursive: true });
+            console.log(`  ✓ Commands installed to opencode`);
+        }
+    }
     return true;
 }
 function installForCursor(dryRun) {
@@ -92,7 +98,7 @@ function installForAgent(agent, dryRun) {
             const paths = AGENT_TARGETS[agent];
             if (!paths?.length)
                 return false;
-            return installSkill(paths[0], dryRun);
+            return installSkill(paths[0], agent, dryRun);
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyberaudit-skill",
-  "version": "3.0.7",
+  "version": "3.1.0",
   "description": "Universal security audit skill for AI agents. Install once, audit any web or mobile app. OpenCode, Claude Code, Cursor, Kiro, Gemini — all supported.",
   "keywords": [
     "mcp",

package/skills/cyberaudit/commands/audit.md

@@ -0,0 +1,10 @@
+---
+description: Run full security audit (auto-detect web/mobile/API)
+---
+Run a full security audit.
+1. Load COMMANDS.md for all available commands
+2. Detect type: web / mobile / API / both
+3. Load SKILL.md then boot sequence (STEP 1-4)
+4. Execute full audit methodology
+5. Score findings with CVSS 3.1
+6. Generate report

package/skills/cyberaudit/commands/audit:api.md

@@ -0,0 +1,10 @@
+---
+description: API security audit — OWASP API Top 10, REST/GraphQL/WS
+---
+Run an API security audit.
+1. Load api/API-PHILOSOPHY.md for methodology
+2. Load api/API-CHECKLIST.md for full checklist
+3. Load type-specific guide from api/types/ (REST.md, GRAPHQL.md, or WEBSOCKET.md)
+4. Execute every phase: discovery, auth, authorization (BOLA/BOPLA), input validation, rate limiting, data exposure, config
+5. Score each finding with CVSS 3.1
+6. Generate report using reports/REPORT-TEMPLATE-API.md

package/skills/cyberaudit/commands/audit:help.md

@@ -0,0 +1,6 @@
+---
+description: List all available CyberAudit commands
+---
+Display all available CyberAudit commands.
+Load and display the command tables from COMMANDS.md.
+Sections: Global, Web, Mobile, API, Compliance.

package/skills/cyberaudit/commands/audit:mobile.md

@@ -0,0 +1,10 @@
+---
+description: Mobile app audit — OWASP MASVS, storage, network, binary
+---
+Run a mobile application security audit.
+1. Load MOBILE-PHILOSOPHY.md for methodology
+2. Load MOBILE-CHECKLIST.md for full checklist
+3. Load relevant framework guide from mobile/frameworks/
+4. Execute every phase: storage, network, binary, permissions, deeplinks, auth, crypto, runtime
+5. Score each finding with CVSS 3.1
+6. Generate report using reports/REPORT-TEMPLATE-MOBILE.md

package/skills/cyberaudit/commands/audit:quick.md

@@ -0,0 +1,8 @@
+---
+description: Quick scan — critical vulnerabilities only (15-30 min)
+---
+Run a quick security scan (critical vulnerabilities only).
+1. Focus on: exposed secrets, critical CVE, auth bypass, public debug endpoints, massive data leaks
+2. Exclude: low/medium findings, business logic, architecture review
+3. Report only CRITICAL + HIGH findings with CVSS 3.1
+4. Generate minimal report

package/skills/cyberaudit/commands/audit:report.md

@@ -0,0 +1,10 @@
+---
+description: Generate complete audit report with CVSS scoring
+---
+Generate a complete security audit report.
+1. Collect all findings from current session
+2. Score each with CVSS 3.1 (vector string + numeric score)
+3. Use appropriate report template from reports/
+4. Include: executive summary, scope, findings table, detailed findings, remediation plan, compliance table, conclusion
+5. Prioritize by severity: CRITICAL → HIGH → MEDIUM → LOW
+6. Include fixed code for each finding

package/skills/cyberaudit/commands/audit:web.md

@@ -0,0 +1,10 @@
+---
+description: Web application audit — OWASP Top 10, full methodology
+---
+Run a web application security audit.
+1. Load WEB-PHILOSOPHY.md for methodology
+2. Load WEB-CHECKLIST.md for full checklist
+3. Load relevant framework guide from web/frameworks/
+4. Execute every phase: auth, injection, XSS, CSRF, CORS, secrets, deps, SSRF, IDOR, logic, crypto, XXE, deserialization
+5. Score each finding with CVSS 3.1
+6. Generate report using reports/REPORT-TEMPLATE-WEB.md