eslint-plugin-anthropic-security 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Ofri Peretz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,62 @@
+<p align="center">
+  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security" target="blank"><img src="https://eslint.interlace.tools/icon-light.svg" alt="Interlace" height="90" /></a>
+  &nbsp;&nbsp;
+  <a href="https://eslint.org" target="_blank"><img src="https://eslint.interlace.tools/eslint-logo.svg" alt="ESLint" height="90" /></a>
+</p>
+
+<p align="center">
+  Security rules for the Anthropic SDK and Claude Agent SDK.
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/eslint-plugin-anthropic-security" target="_blank"><img src="https://img.shields.io/npm/v/eslint-plugin-anthropic-security.svg" alt="NPM Version" /></a>
+  <a href="https://www.npmjs.com/package/eslint-plugin-anthropic-security" target="_blank"><img src="https://img.shields.io/npm/dm/eslint-plugin-anthropic-security.svg" alt="NPM Downloads" /></a>
+  <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="Package License" /></a>
+</p>
+
+> ⭐ If this plugin caught a real bug for you, [**star the repo**](https://github.com/ofri-peretz/eslint) — it's the signal that keeps these rules maintained.
+
+## Description
+
+Security rules for [`@anthropic-ai/sdk`](https://www.npmjs.com/package/@anthropic-ai/sdk).
+
+Every rule gates on the SDK actually being imported, so the plugin stays silent in files that don't use it.
+
+## Installation
+
+```bash
+npm install --save-dev eslint-plugin-anthropic-security
+```
+
+## Usage
+
+```js
+// eslint.config.js
+import anthropicSecurity from 'eslint-plugin-anthropic-security';
+
+export default [
+  anthropicSecurity.configs.recommended,
+];
+```
+
+### oxlint
+
+Every rule runs on [oxlint](https://oxc.rs) as well as ESLint:
+
+```json
+{ "jsPlugins": ["eslint-plugin-anthropic-security/oxlint"] }
+```
+
+## Rules
+
+| Rule | Description | CWE | Recommended |
+| --- | --- | --- | --- |
+| [no-hardcoded-api-key](./docs/rules/no-hardcoded-api-key.md) | Forbid a literal API key in the Anthropic client options | CWE-798 | ✅ error |
+
+## 📄 License
+
+MIT © [Ofri Peretz](https://github.com/ofri-peretz)
+
+<p align="center">
+  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security" target="blank"><img src="https://eslint.interlace.tools/icon-light.svg" alt="Interlace" height="70" /></a>
+</p>

package/dist/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Ofri Peretz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/README.md

@@ -0,0 +1,66 @@
+<p align="center">
+  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security" target="blank"><img src="https://eslint.interlace.tools/icon-light.svg" alt="Interlace" height="90" /></a>
+  &nbsp;&nbsp;
+  <a href="https://eslint.org" target="_blank"><img src="https://eslint.interlace.tools/eslint-logo.svg" alt="ESLint" height="90" /></a>
+  &nbsp;&nbsp;
+  <a href="https://oxc.rs" target="_blank"><img src="https://eslint.interlace.tools/oxlint-logo.svg" alt="oxlint" height="90" /></a>
+  &nbsp;&nbsp;
+  <a href="https://www.npmjs.com/package/@anthropic-ai/sdk" target="_blank"><img src="https://eslint.interlace.tools/anthropic-logo.svg" alt="Anthropic" height="90" /></a>
+</p>
+
+<p align="center">
+  Security rules for the Anthropic SDK and Claude Agent SDK.
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/eslint-plugin-anthropic-security" target="_blank"><img src="https://img.shields.io/npm/v/eslint-plugin-anthropic-security.svg" alt="NPM Version" /></a>
+  <a href="https://www.npmjs.com/package/eslint-plugin-anthropic-security" target="_blank"><img src="https://img.shields.io/npm/dm/eslint-plugin-anthropic-security.svg" alt="NPM Downloads" /></a>
+  <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="Package License" /></a>
+</p>
+
+> ⭐ If this plugin caught a real bug for you, [**star the repo**](https://github.com/ofri-peretz/eslint) — it's the signal that keeps these rules maintained.
+
+## Description
+
+Security rules for [`@anthropic-ai/sdk`](https://www.npmjs.com/package/@anthropic-ai/sdk).
+
+Every rule gates on the SDK actually being imported, so the plugin stays silent in files that don't use it.
+
+## Installation
+
+```bash
+npm install --save-dev eslint-plugin-anthropic-security
+```
+
+## Usage
+
+```js
+// eslint.config.js
+import anthropicSecurity from 'eslint-plugin-anthropic-security';
+
+export default [
+  anthropicSecurity.configs.recommended,
+];
+```
+
+### oxlint
+
+Every rule runs on [oxlint](https://oxc.rs) as well as ESLint:
+
+```json
+{ "jsPlugins": ["eslint-plugin-anthropic-security/oxlint"] }
+```
+
+## Rules
+
+| Rule | Description | CWE | Recommended |
+| --- | --- | --- | --- |
+| [no-hardcoded-api-key](./docs/rules/no-hardcoded-api-key.md) | Forbid a literal API key in the Anthropic client options | CWE-798 | ✅ error |
+
+## 📄 License
+
+MIT © [Ofri Peretz](https://github.com/ofri-peretz)
+
+<p align="center">
+  <a href="https://eslint.interlace.tools/?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security" target="blank"><img src="https://eslint.interlace.tools/icon-light.svg" alt="Interlace" height="70" /></a>
+</p>

package/dist/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "eslint-plugin-anthropic-security",
+  "version": "0.1.0",
+  "description": "ESLint plugin for Anthropic SDK security — catches hardcoded API keys in the Claude client options.",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.js"
+    },
+    "./oxlint": {
+      "types": "./src/oxlint.d.ts",
+      "default": "./src/oxlint.js"
+    }
+  },
+  "author": "Ofri Peretz <ofriperetzdev@gmail.com>",
+  "license": "MIT",
+  "homepage": "https://eslint.interlace.tools/docs/security/plugin-anthropic-security?utm_source=npm&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ofri-peretz/eslint",
+    "directory": "packages/eslint-plugin-anthropic-security"
+  },
+  "bugs": {
+    "url": "https://github.com/ofri-peretz/eslint/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "src/",
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "keywords": [
+    "eslint",
+    "eslintplugin",
+    "eslint-plugin",
+    "static-analysis",
+    "linting",
+    "code-quality",
+    "security",
+    "sast",
+    "appsec",
+    "vulnerability",
+    "owasp",
+    "cwe",
+    "interlace-security",
+    "ai-security",
+    "llm",
+    "llm-security",
+    "typescript",
+    "anthropic",
+    "claude",
+    "anthropic-sdk",
+    "claude-agent-sdk",
+    "agents"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "eslint": "^8.0.0 || ^9.0.0 || ^10.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@anthropic-ai/sdk": {
+      "optional": true
+    },
+    "@anthropic-ai/claude-agent-sdk": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "tslib": "^2.3.0",
+    "@interlace/eslint-devkit": "^1.4.4"
+  },
+  "devDependencies": {
+    "@typescript-eslint/parser": "^8.46.2",
+    "@typescript-eslint/rule-tester": "^8.46.2"
+  },
+  "scripts": {
+    "build": "tsx ../../scripts/build-package.ts",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.lib.json --noEmit"
+  },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/ofri-peretz/eslint"
+  }
+}

package/dist/src/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * eslint-plugin-anthropic-security
+ *
+ * Security rules for the Anthropic SDK and Claude Agent SDK.
+ *
+ * Scope promise: every rule gates on the SDK being imported, so the plugin
+ * stays silent in files that do not use it.
+ */
+import type { TSESLint } from '@interlace/eslint-devkit';
+export { noHardcodedApiKey } from './rules/no-hardcoded-api-key';
+export declare const rules: Record<string, TSESLint.RuleModule<string, readonly unknown[]>>;
+export declare const plugin: TSESLint.FlatConfig.Plugin;
+export declare const configs: {
+    minimal: TSESLint.FlatConfig.Config;
+    recommended: TSESLint.FlatConfig.Config;
+    strict: TSESLint.FlatConfig.Config;
+};
+declare const _default: {
+    configs: {
+        minimal: TSESLint.FlatConfig.Config;
+        recommended: TSESLint.FlatConfig.Config;
+        strict: TSESLint.FlatConfig.Config;
+    };
+    meta?: { [K in keyof TSESLint.FlatConfig.PluginMeta]?: TSESLint.FlatConfig.PluginMeta[K] | undefined; };
+    processors?: Partial<Record<string, TSESLint.FlatConfig.Processor>> | undefined;
+    rules?: Record<string, TSESLint.LooseRuleDefinition> | undefined;
+};
+export default _default;

package/dist/src/index.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configs = exports.plugin = exports.rules = exports.noHardcodedApiKey = void 0;
+const no_hardcoded_api_key_1 = require("./rules/no-hardcoded-api-key");
+var no_hardcoded_api_key_2 = require("./rules/no-hardcoded-api-key");
+Object.defineProperty(exports, "noHardcodedApiKey", { enumerable: true, get: function () { return no_hardcoded_api_key_2.noHardcodedApiKey; } });
+exports.rules = {
+    // CWE-798
+    'no-hardcoded-api-key': no_hardcoded_api_key_1.noHardcodedApiKey,
+};
+exports.plugin = {
+    meta: {
+        name: 'eslint-plugin-anthropic-security',
+        version: '0.1.0',
+    },
+    rules: exports.rules,
+};
+const enabled = {
+    plugins: {
+        'anthropic-security': exports.plugin,
+    },
+    rules: {
+        'anthropic-security/no-hardcoded-api-key': 'error',
+    },
+};
+exports.configs = {
+    minimal: enabled,
+    recommended: enabled,
+    strict: enabled,
+};
+exports.default = {
+    ...exports.plugin,
+    configs: exports.configs,
+};

package/dist/src/oxlint.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-anthropic-security/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-anthropic-security/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+import { plugin } from './index';
+export = plugin;

package/dist/src/oxlint.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-anthropic-security/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-anthropic-security/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+const index_1 = require("./index");
+module.exports = index_1.plugin;

package/dist/src/rules/no-hardcoded-api-key/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+export declare const noHardcodedApiKey: import("@typescript-eslint/utils/ts-eslint").RuleModule<"hardcodedApiKey", [], unknown, import("@typescript-eslint/utils/ts-eslint").RuleListener> & {
+    name: string;
+};

package/dist/src/rules/no-hardcoded-api-key/index.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.noHardcodedApiKey = void 0;
+/**
+ * @fileoverview Forbid a literal API key in the Anthropic client options
+ * @description A key written into source is committed, pushed, mirrored into
+ * every clone and CI cache, and is billable by anyone who reads it. Rotating it
+ * means a code change, so leaked keys tend to stay live.
+ * @see https://docs.anthropic.com/en/api/getting-started
+ */
+const eslint_devkit_1 = require("@interlace/eslint-devkit");
+/** Covers the base SDK and the agent SDK, which share the client options. */
+const ANTHROPIC_MODULE_PREFIX = '@anthropic-ai/';
+const KEY_PROPS = new Set(['apiKey', 'authToken']);
+/**
+ * Whether the client options literal carries an inline credential.
+ *
+ * `process.env.ANTHROPIC_API_KEY` and any other non-literal expression are
+ * `safe` — reading a key from the environment is the correct pattern. A spread
+ * is `unreadable`: the key may be in the spread source, and guessing there
+ * would flag correct code.
+ */
+function readCredential(options) {
+    for (const prop of options.properties) {
+        if (prop.type === 'SpreadElement')
+            return 'unreadable';
+        if (prop.computed)
+            continue;
+        const isCredential = (prop.key.type === 'Identifier' && KEY_PROPS.has(prop.key.name)) ||
+            (prop.key.type === 'Literal' && KEY_PROPS.has(String(prop.key.value)));
+        if (!isCredential)
+            continue;
+        if (prop.value.type !== 'Literal')
+            return 'safe';
+        // An empty string is a placeholder, not a credential.
+        if (typeof prop.value.value === 'string' && prop.value.value.length > 0)
+            return 'literal';
+        return 'safe';
+    }
+    return 'safe';
+}
+exports.noHardcodedApiKey = (0, eslint_devkit_1.createRule)({
+    name: 'no-hardcoded-api-key',
+    meta: {
+        type: 'problem',
+        docs: {
+            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-anthropic-security/docs/rules/no-hardcoded-api-key.md',
+            description: 'Forbid a literal API key in the Anthropic client options',
+            cwe: 'CWE-798',
+            cvss: 9.1,
+        },
+        messages: {
+            hardcodedApiKey: (0, eslint_devkit_1.formatLLMMessage)({
+                icon: eslint_devkit_1.MessageIcons.SECURITY,
+                issueName: 'Hardcoded Anthropic Credential',
+                cwe: 'CWE-798',
+                owasp: 'A07:2021',
+                cvss: 9.1,
+                description: '{{prop}} is a string literal, so the credential is committed to source control and readable by anyone with repository access',
+                severity: 'CRITICAL',
+                compliance: ['SOC2', 'PCI-DSS'],
+                fix: 'Read it from the environment: new Anthropic({ {{prop}}: process.env.ANTHROPIC_API_KEY })',
+                documentationLink: 'https://docs.anthropic.com/en/api/getting-started',
+            }),
+        },
+        schema: [],
+    },
+    defaultOptions: [],
+    create(context) {
+        let importsAnthropic = false;
+        const candidates = [];
+        function inspect(node, args) {
+            const options = args[0];
+            if (options?.type !== 'ObjectExpression')
+                return;
+            if (readCredential(options) === 'literal') {
+                candidates.push({ node, prop: 'apiKey' });
+            }
+        }
+        return {
+            ImportDeclaration(node) {
+                if (node.source.value.startsWith(ANTHROPIC_MODULE_PREFIX))
+                    importsAnthropic = true;
+            },
+            NewExpression(node) {
+                inspect(node, [...node.arguments]);
+            },
+            CallExpression(node) {
+                if (node.callee.type === 'Identifier' &&
+                    node.callee.name === 'require' &&
+                    node.arguments[0]?.type === 'Literal' &&
+                    typeof node.arguments[0].value === 'string' &&
+                    node.arguments[0].value.startsWith(ANTHROPIC_MODULE_PREFIX)) {
+                    importsAnthropic = true;
+                    return;
+                }
+                inspect(node, [...node.arguments]);
+            },
+            'Program:exit'() {
+                if (!importsAnthropic)
+                    return;
+                for (const { node, prop } of candidates) {
+                    context.report({ node, messageId: 'hardcodedApiKey', data: { prop } });
+                }
+            },
+        };
+    },
+});

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "eslint-plugin-anthropic-security",
+  "version": "0.1.0",
+  "description": "ESLint plugin for Anthropic SDK security \u2014 catches hardcoded API keys in the Claude client options.",
+  "type": "commonjs",
+  "main": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    },
+    "./oxlint": {
+      "types": "./src/oxlint.d.ts",
+      "default": "./src/oxlint.js"
+    }
+  },
+  "author": "Ofri Peretz <ofriperetzdev@gmail.com>",
+  "license": "MIT",
+  "homepage": "https://eslint.interlace.tools/docs/security/plugin-anthropic-security?utm_source=npm&utm_medium=referral&utm_campaign=eslint-plugin-anthropic-security",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ofri-peretz/eslint",
+    "directory": "packages/eslint-plugin-anthropic-security"
+  },
+  "bugs": {
+    "url": "https://github.com/ofri-peretz/eslint/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "src/",
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "keywords": [
+    "eslint",
+    "eslintplugin",
+    "eslint-plugin",
+    "static-analysis",
+    "linting",
+    "code-quality",
+    "security",
+    "sast",
+    "appsec",
+    "vulnerability",
+    "owasp",
+    "cwe",
+    "interlace-security",
+    "ai-security",
+    "llm",
+    "llm-security",
+    "typescript",
+    "anthropic",
+    "claude",
+    "anthropic-sdk",
+    "claude-agent-sdk",
+    "agents"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "eslint": "^8.0.0 || ^9.0.0 || ^10.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@anthropic-ai/sdk": {
+      "optional": true
+    },
+    "@anthropic-ai/claude-agent-sdk": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "tslib": "^2.3.0",
+    "@interlace/eslint-devkit": "^1.4.4"
+  },
+  "devDependencies": {
+    "@typescript-eslint/parser": "^8.46.2",
+    "@typescript-eslint/rule-tester": "^8.46.2"
+  },
+  "scripts": {
+    "build": "tsx ../../scripts/build-package.ts",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.lib.json --noEmit"
+  },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/ofri-peretz/eslint"
+  }
+}

package/src/index.test.ts

@@ -0,0 +1,32 @@
+/**
+ * @fileoverview Plugin surface lock for eslint-plugin-anthropic-security.
+ */
+
+import { describe, it, expect } from 'vitest';
+
+import plugin, { rules, configs, plugin as namedPlugin, noHardcodedApiKey } from './index';
+
+describe('eslint-plugin-anthropic-security', () => {
+  it('exposes every rule under its documented id', () => {
+    expect(Object.keys(rules).sort()).toEqual(['no-hardcoded-api-key']);
+    expect(rules['no-hardcoded-api-key']).toBe(noHardcodedApiKey);
+  });
+
+  it('names itself for the oxlint loader', () => {
+    expect(namedPlugin.meta?.name).toBe('eslint-plugin-anthropic-security');
+    expect(namedPlugin.rules).toBe(rules);
+  });
+
+  it('ships minimal, recommended and strict configs', () => {
+    expect(Object.keys(configs).sort()).toEqual(['minimal', 'recommended', 'strict']);
+    for (const config of Object.values(configs)) {
+      expect(config.plugins).toHaveProperty('anthropic-security');
+      expect(config.rules?.['anthropic-security/no-hardcoded-api-key']).toBe('error');
+    }
+  });
+
+  it('default-exports the plugin with its configs attached', () => {
+    expect(plugin.rules).toBe(rules);
+    expect(plugin.configs).toBe(configs);
+  });
+});

package/src/index.ts

@@ -0,0 +1,53 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+
+/**
+ * eslint-plugin-anthropic-security
+ *
+ * Security rules for the Anthropic SDK and Claude Agent SDK.
+ *
+ * Scope promise: every rule gates on the SDK being imported, so the plugin
+ * stays silent in files that do not use it.
+ */
+
+import type { TSESLint } from '@interlace/eslint-devkit';
+
+import { noHardcodedApiKey } from './rules/no-hardcoded-api-key';
+
+export { noHardcodedApiKey } from './rules/no-hardcoded-api-key';
+
+export const rules: Record<string, TSESLint.RuleModule<string, readonly unknown[]>> = {
+  // CWE-798
+  'no-hardcoded-api-key': noHardcodedApiKey,
+} satisfies Record<string, TSESLint.RuleModule<string, readonly unknown[]>>;
+
+export const plugin: TSESLint.FlatConfig.Plugin = {
+  meta: {
+    name: 'eslint-plugin-anthropic-security',
+    version: '0.1.0',
+  },
+  rules,
+} satisfies TSESLint.FlatConfig.Plugin;
+
+const enabled: TSESLint.FlatConfig.Config = {
+  plugins: {
+    'anthropic-security': plugin,
+  },
+  rules: {
+    'anthropic-security/no-hardcoded-api-key': 'error',
+  },
+} satisfies TSESLint.FlatConfig.Config;
+
+export const configs = {
+  minimal: enabled,
+  recommended: enabled,
+  strict: enabled,
+};
+
+export default {
+  ...plugin,
+  configs,
+};

package/src/oxlint.ts

@@ -0,0 +1,23 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+
+/**
+ * oxlint sub-export.
+ *
+ * Consumers wire oxlint to this entry via:
+ *   { "jsPlugins": ["eslint-plugin-anthropic-security/oxlint"] }
+ *
+ * oxlint's JS plugin loader does `require('eslint-plugin-anthropic-security/oxlint')` and reads
+ * `.rules` off the result. The compiled output of `export = plugin` is
+ * `module.exports = plugin`, which gives oxlint the plugin object directly
+ * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
+ *
+ * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
+ */
+
+import { plugin } from './index';
+
+export = plugin;

package/src/rules/no-hardcoded-api-key/index.ts

@@ -0,0 +1,121 @@
+/**
+ * Copyright (c) 2025 Ofri Peretz
+ * Licensed under the MIT License. Use of this source code is governed by the
+ * MIT license that can be found in the LICENSE file.
+ */
+
+/**
+ * @fileoverview Forbid a literal API key in the Anthropic client options
+ * @description A key written into source is committed, pushed, mirrored into
+ * every clone and CI cache, and is billable by anyone who reads it. Rotating it
+ * means a code change, so leaked keys tend to stay live.
+ * @see https://docs.anthropic.com/en/api/getting-started
+ */
+
+import { TSESTree, createRule, formatLLMMessage, MessageIcons } from '@interlace/eslint-devkit';
+
+type MessageIds = 'hardcodedApiKey';
+
+/** Covers the base SDK and the agent SDK, which share the client options. */
+const ANTHROPIC_MODULE_PREFIX = '@anthropic-ai/';
+
+const KEY_PROPS = new Set(['apiKey', 'authToken']);
+
+type KeyVerdict = 'literal' | 'safe' | 'unreadable';
+
+/**
+ * Whether the client options literal carries an inline credential.
+ *
+ * `process.env.ANTHROPIC_API_KEY` and any other non-literal expression are
+ * `safe` — reading a key from the environment is the correct pattern. A spread
+ * is `unreadable`: the key may be in the spread source, and guessing there
+ * would flag correct code.
+ */
+function readCredential(options: TSESTree.ObjectExpression): KeyVerdict {
+  for (const prop of options.properties) {
+    if (prop.type === 'SpreadElement') return 'unreadable';
+    if (prop.computed) continue;
+    const isCredential =
+      (prop.key.type === 'Identifier' && KEY_PROPS.has(prop.key.name)) ||
+      (prop.key.type === 'Literal' && KEY_PROPS.has(String(prop.key.value)));
+    if (!isCredential) continue;
+    if (prop.value.type !== 'Literal') return 'safe';
+    // An empty string is a placeholder, not a credential.
+    if (typeof prop.value.value === 'string' && prop.value.value.length > 0) return 'literal';
+    return 'safe';
+  }
+  return 'safe';
+}
+
+export const noHardcodedApiKey = createRule<[], MessageIds>({
+  name: 'no-hardcoded-api-key',
+  meta: {
+    type: 'problem',
+    docs: {
+      url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-anthropic-security/docs/rules/no-hardcoded-api-key.md',
+      description: 'Forbid a literal API key in the Anthropic client options',
+      cwe: 'CWE-798',
+      cvss: 9.1,
+    },
+    messages: {
+      hardcodedApiKey: formatLLMMessage({
+        icon: MessageIcons.SECURITY,
+        issueName: 'Hardcoded Anthropic Credential',
+        cwe: 'CWE-798',
+        owasp: 'A07:2021',
+        cvss: 9.1,
+        description:
+          '{{prop}} is a string literal, so the credential is committed to source control and readable by anyone with repository access',
+        severity: 'CRITICAL',
+        compliance: ['SOC2', 'PCI-DSS'],
+        fix: 'Read it from the environment: new Anthropic({ {{prop}}: process.env.ANTHROPIC_API_KEY })',
+        documentationLink: 'https://docs.anthropic.com/en/api/getting-started',
+      }),
+    },
+    schema: [],
+  },
+  defaultOptions: [],
+  create(context) {
+    let importsAnthropic = false;
+    const candidates: Array<{ node: TSESTree.Node; prop: string }> = [];
+
+    function inspect(node: TSESTree.Node, args: TSESTree.CallExpressionArgument[]): void {
+      const options = args[0];
+      if (options?.type !== 'ObjectExpression') return;
+      if (readCredential(options) === 'literal') {
+        candidates.push({ node, prop: 'apiKey' });
+      }
+    }
+
+    return {
+      ImportDeclaration(node: TSESTree.ImportDeclaration) {
+        if (node.source.value.startsWith(ANTHROPIC_MODULE_PREFIX)) importsAnthropic = true;
+      },
+
+      NewExpression(node: TSESTree.NewExpression) {
+        inspect(node, [...node.arguments]);
+      },
+
+      CallExpression(node: TSESTree.CallExpression) {
+        if (
+          node.callee.type === 'Identifier' &&
+          node.callee.name === 'require' &&
+          node.arguments[0]?.type === 'Literal' &&
+          typeof node.arguments[0].value === 'string' &&
+          node.arguments[0].value.startsWith(ANTHROPIC_MODULE_PREFIX)
+        ) {
+          importsAnthropic = true;
+          return;
+        }
+        inspect(node, [...node.arguments]);
+      },
+
+      'Program:exit'() {
+        if (!importsAnthropic) return;
+        for (const { node, prop } of candidates) {
+          context.report({ node, messageId: 'hardcodedApiKey', data: { prop } });
+        }
+      },
+    };
+  },
+});

package/src/rules/no-hardcoded-api-key/no-hardcoded-api-key.test.ts

@@ -0,0 +1,74 @@
+/**
+ * @fileoverview Tests for no-hardcoded-api-key (Anthropic)
+ */
+
+import { RuleTester } from '@typescript-eslint/rule-tester';
+import { noHardcodedApiKey } from './index';
+
+const ruleTester = new RuleTester({
+  languageOptions: { ecmaVersion: 2022, sourceType: 'module' },
+});
+
+const IMPORT = `import Anthropic from '@anthropic-ai/sdk';`;
+
+ruleTester.run('no-hardcoded-api-key', noHardcodedApiKey, {
+  valid: [
+    { code: `${IMPORT}\nconst c = new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });` },
+    // Empty string is a placeholder, not a credential
+    { code: `${IMPORT}\nconst c = new Anthropic({ apiKey: '' });` },
+    // Non-string literal
+    { code: `${IMPORT}\nconst c = new Anthropic({ apiKey: null });` },
+    // Spread could carry the key
+    { code: `${IMPORT}\nconst c = new Anthropic({ ...opts });` },
+    // Computed key
+    { code: `${IMPORT}\nconst c = new Anthropic({ [k]: 'sk-ant-xxx' });` },
+    // Unrelated property holding a literal
+    { code: `${IMPORT}\nconst c = new Anthropic({ baseURL: 'https://api.anthropic.com' });` },
+    // No options / non-object options
+    { code: `${IMPORT}\nconst c = new Anthropic();` },
+    { code: `${IMPORT}\nconst c = new Anthropic(opts);` },
+    // Scope promise: no Anthropic import, no finding
+    { code: `const c = new Anthropic({ apiKey: 'sk-ant-hardcoded' });` },
+    // require of an unrelated module
+    { code: `const z = require('zod');\nnew Anthropic({ apiKey: 'sk-ant-hardcoded' });` },
+    // require with a non-string argument
+    { code: `const m = require(dyn);\nnew Anthropic({ apiKey: 'sk-ant-hardcoded' });` },
+    // Zero-argument call — the require gate must not choke on it
+    { code: `${IMPORT}\ninitialise();` },
+    // Quoted key that is not a credential
+    { code: `${IMPORT}\nnew Anthropic({ 'baseURL': 'https://api.anthropic.com' });` },
+    // An import of an unrelated module must not arm the rule
+    { code: `import { z } from 'zod';\nnew Anthropic({ apiKey: 'sk-ant-x' });` },
+  ],
+  invalid: [
+    {
+      code: `${IMPORT}\nconst c = new Anthropic({ apiKey: 'sk-ant-api03-hardcoded' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+    // authToken is the same class of credential
+    {
+      code: `${IMPORT}\nconst c = new Anthropic({ authToken: 'tok-live-123' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+    // Agent SDK shares the client options
+    {
+      code: `import { query } from '@anthropic-ai/claude-agent-sdk';\nnew Anthropic({ apiKey: 'sk-ant-x' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+    // require() arms it
+    {
+      code: `const Anthropic = require('@anthropic-ai/sdk');\nnew Anthropic({ apiKey: 'sk-ant-x' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+    // String-literal key
+    {
+      code: `${IMPORT}\nnew Anthropic({ 'apiKey': 'sk-ant-x' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+    // Factory-style call
+    {
+      code: `${IMPORT}\nconst c = createAnthropic({ apiKey: 'sk-ant-x' });`,
+      errors: [{ messageId: 'hardcodedApiKey' }],
+    },
+  ],
+});