eslint-plugin-vercel-ai-security 1.4.0 → 1.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-vercel-ai-security",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "ESLint plugin for Vercel AI SDK security — detects prompt injection, system-prompt leaks, hardcoded API keys, and unvalidated model output in generateText and streamText.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -24,7 +24,7 @@
   "homepage": "https://eslint.interlace.tools/docs/security/plugin-vercel-ai-security?utm_source=npm&utm_medium=referral&utm_campaign=eslint-plugin-vercel-ai-security",
   "repository": {
     "type": "git",
-    "url": "https://github.com/ofri-peretz/eslint",
+    "url": "git+https://github.com/ofri-peretz/eslint.git",
     "directory": "packages/eslint-plugin-vercel-ai-security"
   },
   "bugs": {
@@ -35,11 +35,8 @@
   },
   "files": [
     "src/",
-    "dist/",
     "README.md",
-    "LICENSE",
-    "CHANGELOG.md",
-    "AGENTS.md"
+    "LICENSE"
   ],
   "keywords": [
     "eslint",
@@ -86,22 +83,10 @@
   },
   "dependencies": {
     "tslib": "^2.3.0",
-    "@interlace/eslint-devkit": "^1.4.4"
-  },
-  "devDependencies": {
-    "@ai-sdk/openai": "^4.0.16",
-    "@typescript-eslint/parser": "^8.46.2",
-    "@typescript-eslint/rule-tester": "^8.46.2",
-    "ai": "^7.0.31"
-  },
-  "scripts": {
-    "build": "tsx ../../scripts/build-package.ts",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "typecheck": "tsc -p tsconfig.lib.json --noEmit"
+    "@interlace/eslint-devkit": "^1.6.1"
   },
   "funding": {
     "type": "github",
-    "url": "https://github.com/ofri-peretz/eslint"
+    "url": "git+https://github.com/ofri-peretz/eslint.git"
   }
 }

package/src/index.d.ts

@@ -1,74 +1,17 @@
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
-/**
- * eslint-plugin-vercel-ai-security
- *
- * Security-focused ESLint plugin for Vercel AI SDK.
- * SDK-aware rules with full type knowledge for generateText, streamText, tools, and streaming.
- *
- * Covers OWASP Top 10 for LLM Applications 2025 and OWASP Agentic Top 10 2026.
- *
- * @see https://sdk.vercel.ai/docs
- * @see https://owasp.org/www-project-top-10-for-large-language-model-applications/
- */
-import type { TSESLint } from '@interlace/eslint-devkit';
-export { requireValidatedPrompt } from './rules/require-validated-prompt';
-export { noSensitiveInPrompt } from './rules/no-sensitive-in-prompt';
-export { noTrainingDataExposure } from './rules/no-training-data-exposure';
-export { requireRequestTimeout } from './rules/require-request-timeout';
-export { noUnsafeOutputHandling } from './rules/no-unsafe-output-handling';
-export { requireToolConfirmation } from './rules/require-tool-confirmation';
-export { noSystemPromptLeak } from './rules/no-system-prompt-leak';
-export { requireEmbeddingValidation } from './rules/require-embedding-validation';
-export { requireOutputValidation } from './rules/require-output-validation';
-export { requireMaxTokens } from './rules/require-max-tokens';
-export { requireMaxSteps } from './rules/require-max-steps';
-export { requireAbortSignal } from './rules/require-abort-signal';
-export { noDynamicSystemPrompt } from './rules/no-dynamic-system-prompt';
-export { requireToolSchema } from './rules/require-tool-schema';
-export { noHardcodedApiKeys } from './rules/no-hardcoded-api-keys';
-export { requireOutputFiltering } from './rules/require-output-filtering';
-export { requireRagContentValidation } from './rules/require-rag-content-validation';
-export { requireErrorHandling } from './rules/require-error-handling';
-export { requireAuditLogging } from './rules/require-audit-logging';
-/**
- * Collection of all Vercel AI SDK security ESLint rules (19 total)
- *
- * OWASP Top 10 for LLM Applications 2025 (10/10):
- * - LLM01: Prompt Injection → require-validated-prompt
- * - LLM02: Sensitive Info Disclosure → no-sensitive-in-prompt
- * - LLM03: Training Data Poisoning → no-training-data-exposure
- * - LLM04: Model Denial of Service → require-request-timeout
- * - LLM05: Improper Output Handling → no-unsafe-output-handling
- * - LLM06: Excessive Agency → require-tool-confirmation
- * - LLM07: System Prompt Leakage → no-system-prompt-leak
- * - LLM08: Vector & Embedding Weaknesses → require-embedding-validation
- * - LLM09: Misinformation → require-output-validation
- * - LLM10: Unbounded Consumption → require-max-tokens, require-max-steps, require-abort-signal
- *
- * OWASP Agentic Top 10 2026 (9/10 - ASI06 N/A for TypeScript):
- * - ASI01: Agent Confusion → no-dynamic-system-prompt
- * - ASI02: Tool Misuse → require-tool-schema
- * - ASI03: Identity Abuse → no-hardcoded-api-keys
- * - ASI04: Data Exfiltration → require-output-filtering
- * - ASI05: Unexpected Code Execution → no-unsafe-output-handling
- * - ASI06: Memory Corruption → N/A (TypeScript is memory-safe)
- * - ASI07: Poisoned RAG → require-rag-content-validation
- * - ASI08: Cascading Failures → require-error-handling
- * - ASI09: Human-Agent Trust → require-tool-confirmation
- * - ASI10: Logging & Monitoring → require-audit-logging
- */
-export declare const rules: Record<string, TSESLint.RuleModule<string, readonly unknown[]>>;
-/**
- * ESLint plugin object
- */
-export declare const plugin: TSESLint.FlatConfig.Plugin;
-/**
- * Available configurations (3 options)
- */
-export declare const configs: Record<string, TSESLint.FlatConfig.Config>;
-export default plugin;
-export type * from './types/index';
+// Minimal declaration written by scripts/build-package.ts.
+//
+// tsc's generated entry declaration inlined every inferred rule-option type
+// (up to 166 kB per plugin) for an API no consumer calls directly. This types
+// what a flat config actually touches. Per-rule option types remain available
+// from the "./types" subpath export where a plugin provides one.
+import type { Linter, Rule } from 'eslint';
+
+export declare const rules: Record<string, Rule.RuleModule>;
+export declare const configs: Record<string, Linter.Config>;
+export declare const plugin: {
+  meta: { name: string; version: string };
+  rules: Record<string, Rule.RuleModule>;
+};
+
+declare const _default: typeof plugin;
+export default _default;

package/src/index.js

@@ -1,48 +1,25 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.configs = exports.plugin = exports.rules = exports.requireAuditLogging = exports.requireErrorHandling = exports.requireRagContentValidation = exports.requireOutputFiltering = exports.noHardcodedApiKeys = exports.requireToolSchema = exports.noDynamicSystemPrompt = exports.requireAbortSignal = exports.requireMaxSteps = exports.requireMaxTokens = exports.requireOutputValidation = exports.requireEmbeddingValidation = exports.noSystemPromptLeak = exports.requireToolConfirmation = exports.noUnsafeOutputHandling = exports.requireRequestTimeout = exports.noTrainingDataExposure = exports.noSensitiveInPrompt = exports.requireValidatedPrompt = void 0;
-// Import rules - LLM01: Prompt Injection
 const require_validated_prompt_1 = require("./rules/require-validated-prompt");
-// LLM02: Sensitive Information Disclosure
 const no_sensitive_in_prompt_1 = require("./rules/no-sensitive-in-prompt");
-// LLM03: Training Data Poisoning
 const no_training_data_exposure_1 = require("./rules/no-training-data-exposure");
-// LLM04: Model Denial of Service
 const require_request_timeout_1 = require("./rules/require-request-timeout");
-// LLM05/ASI05: Improper Output Handling / Unexpected Code Execution
 const no_unsafe_output_handling_1 = require("./rules/no-unsafe-output-handling");
-// LLM06/ASI09: Excessive Agency / Human-Agent Trust
 const require_tool_confirmation_1 = require("./rules/require-tool-confirmation");
-// LLM07: System Prompt Leakage
 const no_system_prompt_leak_1 = require("./rules/no-system-prompt-leak");
-// LLM08: Vector & Embedding Weaknesses
 const require_embedding_validation_1 = require("./rules/require-embedding-validation");
-// LLM09: Misinformation
 const require_output_validation_1 = require("./rules/require-output-validation");
-// LLM10: Unbounded Consumption
 const require_max_tokens_1 = require("./rules/require-max-tokens");
 const require_max_steps_1 = require("./rules/require-max-steps");
 const require_abort_signal_1 = require("./rules/require-abort-signal");
-// ASI01: Agent Confusion
 const no_dynamic_system_prompt_1 = require("./rules/no-dynamic-system-prompt");
-// ASI02: Tool Misuse & Exploitation
 const require_tool_schema_1 = require("./rules/require-tool-schema");
-// ASI03: Identity & Privilege Abuse
 const no_hardcoded_api_keys_1 = require("./rules/no-hardcoded-api-keys");
-// ASI04: Data Exfiltration
 const require_output_filtering_1 = require("./rules/require-output-filtering");
-// ASI07: Poisoned RAG Pipeline
 const require_rag_content_validation_1 = require("./rules/require-rag-content-validation");
-// ASI08: Cascading Failures
 const require_error_handling_1 = require("./rules/require-error-handling");
-// ASI10: Logging & Monitoring
 const require_audit_logging_1 = require("./rules/require-audit-logging");
-// Re-export all rules
 var require_validated_prompt_2 = require("./rules/require-validated-prompt");
 Object.defineProperty(exports, "requireValidatedPrompt", { enumerable: true, get: function () { return require_validated_prompt_2.requireValidatedPrompt; } });
 var no_sensitive_in_prompt_2 = require("./rules/no-sensitive-in-prompt");
@@ -81,85 +58,34 @@ var require_error_handling_2 = require("./rules/require-error-handling");
 Object.defineProperty(exports, "requireErrorHandling", { enumerable: true, get: function () { return require_error_handling_2.requireErrorHandling; } });
 var require_audit_logging_2 = require("./rules/require-audit-logging");
 Object.defineProperty(exports, "requireAuditLogging", { enumerable: true, get: function () { return require_audit_logging_2.requireAuditLogging; } });
-/**
- * Collection of all Vercel AI SDK security ESLint rules (19 total)
- *
- * OWASP Top 10 for LLM Applications 2025 (10/10):
- * - LLM01: Prompt Injection → require-validated-prompt
- * - LLM02: Sensitive Info Disclosure → no-sensitive-in-prompt
- * - LLM03: Training Data Poisoning → no-training-data-exposure
- * - LLM04: Model Denial of Service → require-request-timeout
- * - LLM05: Improper Output Handling → no-unsafe-output-handling
- * - LLM06: Excessive Agency → require-tool-confirmation
- * - LLM07: System Prompt Leakage → no-system-prompt-leak
- * - LLM08: Vector & Embedding Weaknesses → require-embedding-validation
- * - LLM09: Misinformation → require-output-validation
- * - LLM10: Unbounded Consumption → require-max-tokens, require-max-steps, require-abort-signal
- *
- * OWASP Agentic Top 10 2026 (9/10 - ASI06 N/A for TypeScript):
- * - ASI01: Agent Confusion → no-dynamic-system-prompt
- * - ASI02: Tool Misuse → require-tool-schema
- * - ASI03: Identity Abuse → no-hardcoded-api-keys
- * - ASI04: Data Exfiltration → require-output-filtering
- * - ASI05: Unexpected Code Execution → no-unsafe-output-handling
- * - ASI06: Memory Corruption → N/A (TypeScript is memory-safe)
- * - ASI07: Poisoned RAG → require-rag-content-validation
- * - ASI08: Cascading Failures → require-error-handling
- * - ASI09: Human-Agent Trust → require-tool-confirmation
- * - ASI10: Logging & Monitoring → require-audit-logging
- */
 exports.rules = {
-    // OWASP LLM01: Prompt Injection
     'require-validated-prompt': require_validated_prompt_1.requireValidatedPrompt,
-    // OWASP LLM02: Sensitive Information Disclosure
     'no-sensitive-in-prompt': no_sensitive_in_prompt_1.noSensitiveInPrompt,
-    // OWASP LLM03: Training Data Poisoning
     'no-training-data-exposure': no_training_data_exposure_1.noTrainingDataExposure,
-    // OWASP LLM04: Model Denial of Service
     'require-request-timeout': require_request_timeout_1.requireRequestTimeout,
-    // OWASP LLM05: Improper Output Handling / ASI05: Code Execution
     'no-unsafe-output-handling': no_unsafe_output_handling_1.noUnsafeOutputHandling,
-    // OWASP LLM06: Excessive Agency / ASI09: Human-Agent Trust
     'require-tool-confirmation': require_tool_confirmation_1.requireToolConfirmation,
-    // OWASP LLM07: System Prompt Leakage
     'no-system-prompt-leak': no_system_prompt_leak_1.noSystemPromptLeak,
-    // OWASP LLM08: Vector & Embedding Weaknesses
     'require-embedding-validation': require_embedding_validation_1.requireEmbeddingValidation,
-    // OWASP LLM09: Misinformation
     'require-output-validation': require_output_validation_1.requireOutputValidation,
-    // OWASP LLM10: Unbounded Consumption
     'require-max-tokens': require_max_tokens_1.requireMaxTokens,
     'require-max-steps': require_max_steps_1.requireMaxSteps,
     'require-abort-signal': require_abort_signal_1.requireAbortSignal,
-    // OWASP ASI01: Agent Confusion
     'no-dynamic-system-prompt': no_dynamic_system_prompt_1.noDynamicSystemPrompt,
-    // OWASP ASI02: Tool Misuse & Exploitation
     'require-tool-schema': require_tool_schema_1.requireToolSchema,
-    // OWASP ASI03: Identity & Privilege Abuse
     'no-hardcoded-api-keys': no_hardcoded_api_keys_1.noHardcodedApiKeys,
-    // OWASP ASI04: Data Exfiltration
     'require-output-filtering': require_output_filtering_1.requireOutputFiltering,
-    // OWASP ASI07: Poisoned RAG Pipeline
     'require-rag-content-validation': require_rag_content_validation_1.requireRagContentValidation,
-    // OWASP ASI08: Cascading Failures
     'require-error-handling': require_error_handling_1.requireErrorHandling,
-    // OWASP ASI10: Logging & Monitoring
     'require-audit-logging': require_audit_logging_1.requireAuditLogging,
 };
-/**
- * ESLint plugin object
- */
 exports.plugin = {
     meta: {
         name: 'eslint-plugin-vercel-ai-security',
-        version: '1.4.0',
+        version: '1.4.2',
     },
     rules: exports.rules,
 };
-/**
- * Minimal configuration - for gradual adoption
- * Only the 2 most critical rules
- */
 const minimalConfig = {
     plugins: {
         'vercel-ai-security': exports.plugin,
@@ -169,16 +95,11 @@ const minimalConfig = {
         'vercel-ai-security/no-hardcoded-api-keys': 'error',
     },
 };
-/**
- * Recommended configuration - balanced security
- * Critical rules as errors, high-priority as warnings
- */
 const recommendedConfig = {
     plugins: {
         'vercel-ai-security': exports.plugin,
     },
     rules: {
-        // Critical - always enabled as errors (LLM01-02, LLM05-07)
         'vercel-ai-security/require-validated-prompt': 'error',
         'vercel-ai-security/no-hardcoded-api-keys': 'error',
         'vercel-ai-security/no-unsafe-output-handling': 'error',
@@ -186,7 +107,6 @@ const recommendedConfig = {
         'vercel-ai-security/no-system-prompt-leak': 'error',
         'vercel-ai-security/no-dynamic-system-prompt': 'error',
         'vercel-ai-security/require-tool-confirmation': 'error',
-        // High - enabled as warnings
         'vercel-ai-security/require-tool-schema': 'error',
         'vercel-ai-security/require-max-tokens': 'error',
         'vercel-ai-security/require-max-steps': 'error',
@@ -194,7 +114,6 @@ const recommendedConfig = {
         'vercel-ai-security/require-rag-content-validation': 'warn',
         'vercel-ai-security/no-training-data-exposure': 'warn',
         'vercel-ai-security/require-request-timeout': 'warn',
-        // Medium - disabled by default
         'vercel-ai-security/require-error-handling': 'off',
         'vercel-ai-security/require-abort-signal': 'error',
         'vercel-ai-security/require-audit-logging': 'off',
@@ -202,16 +121,11 @@ const recommendedConfig = {
         'vercel-ai-security/require-output-validation': 'off',
     },
 };
-/**
- * Strict configuration - maximum security
- * All rules enabled for production deployments
- */
 const strictConfig = {
     plugins: {
         'vercel-ai-security': exports.plugin,
     },
     rules: {
-        // All critical and high as errors
         'vercel-ai-security/require-validated-prompt': 'error',
         'vercel-ai-security/no-hardcoded-api-keys': 'error',
         'vercel-ai-security/no-unsafe-output-handling': 'error',
@@ -233,15 +147,7 @@ const strictConfig = {
         'vercel-ai-security/require-audit-logging': 'warn',
     },
 };
-/**
- * Available configurations (3 options)
- */
 exports.configs = {
-    /**
-     * Flagship preset — the rule from this plugin in the ecosystem-wide
-     * flagship list (`.agent/flagship-rules.md`). Anchors the OWASP LLM02
-     * niche — green-field, no competitor.
-     */
     flagship: {
         plugins: {
             'vercel-ai-security': exports.plugin,
@@ -250,12 +156,8 @@ exports.configs = {
             'vercel-ai-security/no-unsafe-output-handling': 'error',
         },
     },
-    /** Minimal: 2 critical rules for gradual adoption */
     minimal: minimalConfig,
-    /** Recommended: Balanced security (7 errors, 7 warnings) */
     recommended: recommendedConfig,
-    /** Strict: Maximum security (17 errors, 2 warnings) */
     strict: strictConfig,
 };
-// Default export
 exports.default = exports.plugin;

package/src/oxlint.d.ts

@@ -1,20 +1,17 @@
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
-/**
- * oxlint sub-export.
- *
- * Consumers wire oxlint to this entry via:
- *   { "jsPlugins": ["eslint-plugin-vercel-ai-security/oxlint"] }
- *
- * oxlint's JS plugin loader does `require('eslint-plugin-vercel-ai-security/oxlint')` and reads
- * `.rules` off the result. The compiled output of `export = plugin` is
- * `module.exports = plugin`, which gives oxlint the plugin object directly
- * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
- *
- * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
- */
-import { plugin } from './index';
-export = plugin;
+// Minimal declaration written by scripts/build-package.ts.
+//
+// tsc's generated entry declaration inlined every inferred rule-option type
+// (up to 166 kB per plugin) for an API no consumer calls directly. This types
+// what a flat config actually touches. Per-rule option types remain available
+// from the "./types" subpath export where a plugin provides one.
+import type { Linter, Rule } from 'eslint';
+
+export declare const rules: Record<string, Rule.RuleModule>;
+export declare const configs: Record<string, Linter.Config>;
+export declare const plugin: {
+  meta: { name: string; version: string };
+  rules: Record<string, Rule.RuleModule>;
+};
+
+declare const _default: typeof plugin;
+export default _default;

package/src/oxlint.js

@@ -1,21 +1,3 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
-/**
- * oxlint sub-export.
- *
- * Consumers wire oxlint to this entry via:
- *   { "jsPlugins": ["eslint-plugin-vercel-ai-security/oxlint"] }
- *
- * oxlint's JS plugin loader does `require('eslint-plugin-vercel-ai-security/oxlint')` and reads
- * `.rules` off the result. The compiled output of `export = plugin` is
- * `module.exports = plugin`, which gives oxlint the plugin object directly
- * (`{ meta, rules }`) — no wrapper, no `.default` indirection.
- *
- * Generated by scripts/generate-oxlint-shims.mjs. Do not edit by hand.
- */
 const index_1 = require("./index");
 module.exports = index_1.plugin;

package/src/rules/no-dynamic-system-prompt/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noDynamicSystemPrompt = void 0;
-/**
- * @fileoverview Prevent dynamic content in system prompts
- * @description Detects when system prompts contain dynamic/user-controlled content
- * @see OWASP ASI01: Agent Confusion
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 const prompt_props_1 = require("../../utils/prompt-props");
 exports.noDynamicSystemPrompt = (0, eslint_devkit_1.createRule)({
@@ -59,28 +49,20 @@ exports.noDynamicSystemPrompt = (0, eslint_devkit_1.createRule)({
         const [options = {}] = context.options;
         const allowStaticTemplates = options.allowStaticTemplates ?? true;
         const sourceCode = context.sourceCode;
-        // Vercel AI SDK functions
         const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        /**
-         * Check if a node represents dynamic content
-         */
         function isDynamicContent(node) {
-            // Template literal with expressions
             if (node.type === 'TemplateLiteral') {
                 if (node.expressions.length > 0) {
                     return true;
                 }
                 return !allowStaticTemplates;
             }
-            // Binary expression (concatenation)
             if (node.type === 'BinaryExpression' && node.operator === '+') {
                 return true;
             }
-            // Call expression (function result)
             if (node.type === 'CallExpression') {
                 return true;
             }
-            // Await expression
             if (node.type === 'AwaitExpression') {
                 return true;
             }
@@ -89,22 +71,18 @@ exports.noDynamicSystemPrompt = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is an AI SDK function
                 const isAIFunction = aiSDKFunctions.some(fn => callee.includes(fn));
                 if (!isAIFunction)
                     return;
-                // Check first argument (options object)
                 const optionsArg = node.arguments[0];
                 if (!optionsArg || optionsArg.type !== 'ObjectExpression')
                     return;
-                // Find the system-prompt property (`instructions` in AI SDK v7+, `system` before it)
                 for (const prop of optionsArg.properties) {
                     if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                         continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                     if (!(0, prompt_props_1.isSystemPromptProp)(keyName))
                         continue;
-                    // Check if system prompt is dynamic
                     if (isDynamicContent(prop.value)) {
                         context.report({
                             node: prop.value,

package/src/rules/no-hardcoded-api-keys/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noHardcodedApiKeys = void 0;
-/**
- * @fileoverview Prevent hardcoded API keys in AI SDK calls
- * @description Detects hardcoded API keys/secrets in model configuration
- * @see OWASP ASI03: Identity & Privilege Abuse
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.noHardcodedApiKeys = (0, eslint_devkit_1.createRule)({
     name: 'no-hardcoded-api-keys',
@@ -61,23 +51,17 @@ exports.noHardcodedApiKeys = (0, eslint_devkit_1.createRule)({
             'apiKey', 'api_key', 'token', 'secret', 'credentials',
         ];
         const sourceCode = context.sourceCode;
-        // Known model provider functions
         const providerFunctions = [
             'openai', 'anthropic', 'google', 'cohere', 'mistral',
             'createOpenAI', 'createAnthropic', 'createGoogle', 'createMistral',
         ];
-        /**
-         * Check if a string looks like an API key
-         */
-        // oxlint-disable-next-line consistent-function-scoping
         function looksLikeApiKey(value) {
-            // Common API key patterns
             const patterns = [
-                /^sk-[a-zA-Z0-9]{20,}$/, // OpenAI
-                /^sk-ant-[a-zA-Z0-9-]+$/, // Anthropic
-                /^[a-zA-Z0-9]{32,}$/, // Generic long alphanumeric
-                /^[A-Z0-9]{20,}$/, // AWS-style keys
-                /^AIza[a-zA-Z0-9-_]{35}$/, // Google AI
+                /^sk-[a-zA-Z0-9]{20,}$/,
+                /^sk-ant-[a-zA-Z0-9-]+$/,
+                /^[a-zA-Z0-9]{32,}$/,
+                /^[A-Z0-9]{20,}$/,
+                /^AIza[a-zA-Z0-9-_]{35}$/,
             ];
             return patterns.some(p => p.test(value));
         }
@@ -90,18 +74,14 @@ exports.noHardcodedApiKeys = (0, eslint_devkit_1.createRule)({
                         : null;
                 if (!keyName)
                     return;
-                // Check if this is an API key property
                 const isApiKeyProp = apiKeyPatterns.some((pattern) => keyName.toLowerCase().includes(pattern.toLowerCase()));
                 if (!isApiKeyProp)
                     return;
-                // Check if value is a hardcoded string
                 if (node.value.type === 'Literal' && typeof node.value.value === 'string') {
                     const value = node.value.value;
-                    // Skip placeholder values
                     if (value === '' || value === 'YOUR_API_KEY' || value.startsWith('$')) {
                         return;
                     }
-                    // Report if it looks like a real API key
                     if (looksLikeApiKey(value) || value.length > 20) {
                         context.report({
                             node: node.value,
@@ -111,14 +91,11 @@ exports.noHardcodedApiKeys = (0, eslint_devkit_1.createRule)({
                     }
                 }
             },
-            // Also check model provider function calls
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is a model provider function
                 const isProvider = providerFunctions.some(fn => callee.includes(fn));
                 if (!isProvider)
                     return;
-                // Check if second argument is options with apiKey
                 const optionsArg = node.arguments[1];
                 if (optionsArg && optionsArg.type === 'ObjectExpression') {
                     for (const prop of optionsArg.properties) {

package/src/rules/no-sensitive-in-prompt/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noSensitiveInPrompt = void 0;
-/**
- * @fileoverview Prevent sensitive data from being passed to LLM prompts
- * @description Detects secrets, credentials, PII in prompts
- * @see OWASP LLM02: Sensitive Information Disclosure
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 const prompt_props_1 = require("../../utils/prompt-props");
 exports.noSensitiveInPrompt = (0, eslint_devkit_1.createRule)({
@@ -69,18 +59,11 @@ exports.noSensitiveInPrompt = (0, eslint_devkit_1.createRule)({
             'ssn', 'creditCard', 'privateKey', 'accessToken',
         ];
         const sourceCode = context.sourceCode;
-        // Vercel AI SDK functions
         const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        /**
-         * Check if an identifier name matches sensitive patterns
-         */
         function isSensitiveIdentifier(name) {
             const lowerName = name.toLowerCase();
             return sensitivePatterns.some((pattern) => lowerName.includes(pattern.toLowerCase()));
         }
-        /**
-         * Check if a node contains sensitive data
-         */
         function findSensitiveData(node) {
             if (node.type === 'Identifier' && isSensitiveIdentifier(node.name)) {
                 return node.name;
@@ -110,20 +93,17 @@ exports.noSensitiveInPrompt = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is an AI SDK function
                 const isAIFunction = aiSDKFunctions.some(fn => callee.includes(fn));
                 if (!isAIFunction)
                     return;
-                // Check first argument (options object)
                 const optionsArg = node.arguments[0];
                 if (!optionsArg || optionsArg.type !== 'ObjectExpression')
                     return;
-                // Check prompt, the system-prompt props, and messages
                 const propsToCheck = new Set(['prompt', 'messages', ...prompt_props_1.SYSTEM_PROMPT_PROPS]);
                 for (const prop of optionsArg.properties) {
                     if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                         continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                     if (!keyName || !propsToCheck.has(keyName))
                         continue;
                     const sensitiveVar = findSensitiveData(prop.value);