eslint-plugin-vercel-ai-security 1.4.0 → 1.4.2

package/src/rules/no-system-prompt-leak/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noSystemPromptLeak = void 0;
-/**
- * @fileoverview Prevent system prompt leakage to clients
- * @description Detects when system prompts are exposed in API responses
- * @see OWASP LLM07: System Prompt Leakage
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
     name: 'no-system-prompt-leak',
@@ -67,16 +57,10 @@ exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
             'systemMessage', 'instructions', 'agentPrompt',
         ];
         const sourceCode = context.sourceCode;
-        /**
-         * Check if identifier matches system prompt pattern
-         */
         function isSystemPromptVariable(name) {
             const lowerName = name.toLowerCase();
             return systemPromptPatterns.some((pattern) => lowerName.includes(pattern.toLowerCase()));
         }
-        /**
-         * Find system prompt variables in an expression
-         */
         function findSystemPromptVar(node) {
             if (node.type === 'Identifier' && isSystemPromptVariable(node.name)) {
                 return node.name;
@@ -88,14 +72,10 @@ exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
             }
             return null;
         }
-        /**
-         * Check object properties for system prompt leaks
-         */
         function checkObjectForLeaks(node) {
             for (const prop of node.properties) {
                 if (prop.type !== 'Property')
                     continue;
-                // Check if property value contains system prompt
                 const leakedVar = findSystemPromptVar(prop.value);
                 if (leakedVar) {
                     context.report({
@@ -107,15 +87,12 @@ exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
             }
         }
         return {
-            // Check return statements in functions
             ReturnStatement(node) {
                 if (!node.argument)
                     return;
-                // Check if returning an object with system prompt
                 if (node.argument.type === 'ObjectExpression') {
                     checkObjectForLeaks(node.argument);
                 }
-                // Check if returning system prompt directly
                 const leakedVar = findSystemPromptVar(node.argument);
                 if (leakedVar) {
                     context.report({
@@ -125,10 +102,8 @@ exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
                     });
                 }
             },
-            // Check Response.json() calls
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check for Response.json, res.json, res.send patterns
                 if (!callee.match(/\.(json|send)\s*$/))
                     return;
                 const arg = node.arguments[0];

package/src/rules/no-training-data-exposure/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noTrainingDataExposure = void 0;
-/**
- * @fileoverview Prevent training data exposure to LLM providers
- * @description Detects when user data is sent to training endpoints or with training flags
- * @see OWASP LLM03: Training Data Poisoning
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.noTrainingDataExposure = (0, eslint_devkit_1.createRule)({
     name: 'no-training-data-exposure',
@@ -63,15 +53,11 @@ exports.noTrainingDataExposure = (0, eslint_devkit_1.createRule)({
         const trainingPatterns = options.trainingPatterns ?? [
             'train', 'training', 'finetune', 'feedback',
         ];
-        /**
-         * Check if identifier suggests training
-         */
         function isTrainingRelated(name) {
             const lowerName = name.toLowerCase();
             return trainingPatterns.some((pattern) => lowerName.includes(pattern.toLowerCase()));
         }
         return {
-            // Check for training-related properties
             Property(node) {
                 const keyName = node.key.type === 'Identifier'
                     ? node.key.name
@@ -80,7 +66,6 @@ exports.noTrainingDataExposure = (0, eslint_devkit_1.createRule)({
                         : null;
                 if (!keyName)
                     return;
-                // Check for training flags like { training: true, allowTraining: true }
                 if (isTrainingRelated(keyName)) {
                     if (node.value.type === 'Literal' && node.value.value === true) {
                         context.report({
@@ -91,7 +76,6 @@ exports.noTrainingDataExposure = (0, eslint_devkit_1.createRule)({
                     }
                 }
             },
-            // Check for training endpoint URLs
             Literal(node) {
                 if (typeof node.value !== 'string')
                     return;

package/src/rules/no-unsafe-output-handling/index.js

@@ -1,17 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.noUnsafeOutputHandling = void 0;
-/**
- * @fileoverview Prevent using AI output directly in dangerous operations
- * @description Detects when AI-generated content is used in eval, exec, or SQL
- * @see OWASP LLM05: Improper Output Handling
- * @see OWASP ASI05: Unexpected Code Execution
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
     name: 'no-unsafe-output-handling',
@@ -100,21 +89,11 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
             'aiOutput', 'aiResponse', 'llmOutput', '.text',
         ];
         const sourceCode = context.sourceCode;
-        // Dangerous execution functions
         const dangerousFunctions = ['eval', 'Function', 'execSync', 'exec', 'spawn', 'execFile'];
-        // SQL execution patterns
         const sqlPatterns = ['query', 'execute', 'run', 'raw'];
-        /**
-         * Names of variables locally bound to the result of a known AI SDK call.
-         * Tracks the idiomatic `const { text } = await generateText(...)` and
-         * `const result = await streamText(...)` patterns. Without this, the
-         * heuristic pattern match (`result.text`, `aiOutput`, …) missed every
-         * destructured-`text` case (real FN found by the OWASP-LLM02 corpus).
-         */
         const aiBoundNames = new Set();
         const AI_SDK_CALLS = new Set(['generateText', 'streamText', 'generateObject', 'streamObject']);
         function isAISDKCall(node) {
-            // generateText(...) | ai.generateText(...) | sdk.generateText(...)
             let target = node;
             if (target.type === 'AwaitExpression')
                 target = target.argument;
@@ -128,27 +107,18 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
                 return true;
             return false;
         }
-        /**
-         * Check if a node likely contains AI output
-         */
         function isLikelyAIOutput(node) {
-            // Direct member access into a tracked variable: `result.text`, `out.text`
             if (node.type === 'MemberExpression' && node.object.type === 'Identifier' &&
                 aiBoundNames.has(node.object.name)) {
                 return true;
             }
-            // Bare reference to a tracked variable (covers destructured `text` from
-            // `const { text } = await generateText(...)`).
             if (node.type === 'Identifier' && aiBoundNames.has(node.name)) {
                 return true;
             }
-            // Original heuristic — still useful for `result.text`-shaped source even
-            // when scope tracking missed the binding.
             const text = sourceCode.getText(node);
             return aiOutputPatterns.some((pattern) => text.includes(pattern));
         }
         return {
-            // Track `const r = await generateText(...)` / `const { text } = ...` shapes
             VariableDeclarator(node) {
                 if (!node.init || !isAISDKCall(node.init))
                     return;
@@ -163,10 +133,8 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
                     }
                 }
             },
-            // Check for eval() and similar with AI output
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check dangerous execution functions
                 const isDangerous = dangerousFunctions.some(fn => callee.includes(fn));
                 if (isDangerous) {
                     for (const arg of node.arguments) {
@@ -182,12 +150,10 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
                         }
                     }
                 }
-                // Check SQL query functions
                 const isSQLFunction = sqlPatterns.some(fn => callee.includes(fn));
                 if (isSQLFunction) {
                     for (const arg of node.arguments) {
                         if (arg.type === 'TemplateLiteral' || arg.type === 'BinaryExpression') {
-                            // Check if template/concatenation includes AI output
                             if (isLikelyAIOutput(arg)) {
                                 context.report({
                                     node: arg,
@@ -198,7 +164,6 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
                     }
                 }
             },
-            // Check for innerHTML assignment
             AssignmentExpression(node) {
                 if (node.left.type === 'MemberExpression') {
                     const prop = node.left.property;

package/src/rules/require-abort-signal/index.js

@@ -1,17 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireAbortSignal = void 0;
-/**
- * @fileoverview Require abort signal for streaming AI calls
- * @description Ensures streamText/streamObject have AbortSignal for proper cleanup
- * @see https://sdk.vercel.ai/docs/ai-sdk-core/generating-text
- * @see OWASP LLM10: Unbounded Consumption
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireAbortSignal = (0, eslint_devkit_1.createRule)({
     name: 'require-abort-signal',
@@ -62,15 +51,12 @@ exports.requireAbortSignal = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is a target streaming function
                 const matchedFunction = targetFunctions.find((fn) => callee.includes(fn));
                 if (!matchedFunction)
                     return;
-                // Check first argument (options object)
                 const optionsArg = node.arguments[0];
                 if (!optionsArg || optionsArg.type !== 'ObjectExpression')
                     return;
-                // Check if abortSignal is present
                 const hasAbortSignal = optionsArg.properties.some(prop => {
                     if (prop.type !== 'Property')
                         return false;

package/src/rules/require-audit-logging/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireAuditLogging = void 0;
-/**
- * @fileoverview Suggest audit logging for AI operations
- * @description Detects AI calls without surrounding logging statements
- * @see OWASP ASI10: Logging & Monitoring
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
     name: 'require-audit-logging',
@@ -59,20 +49,14 @@ exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
         const allowInTests = options.allowInTests ?? true;
         const sourceCode = context.sourceCode;
         const filename = context.filename;
-        // Skip test files if allowed
         if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
             return {};
         }
-        // Vercel AI SDK functions
         const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        // Logging patterns
         const loggingPatterns = [
             'log', 'logger', 'console', 'winston', 'pino', 'bunyan',
             'debug', 'info', 'warn', 'error', 'trace',
         ];
-        /**
-         * Check if a statement is a logging call
-         */
         function isLoggingStatement(node) {
             if (node.type !== 'ExpressionStatement')
                 return false;
@@ -81,14 +65,10 @@ exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
             const callee = sourceCode.getText(node.expression.callee);
             return loggingPatterns.some((pattern) => callee.toLowerCase().includes(pattern.toLowerCase()));
         }
-        /**
-         * Check if there's logging nearby (within 3 statements)
-         */
         function hasNearbyLogging(node) {
             const parent = node.parent;
             if (!parent)
                 return false;
-            // Find the statement containing this call
             let statement = node;
             while (statement && statement.type !== 'ExpressionStatement' &&
                 statement.type !== 'VariableDeclaration' &&
@@ -97,7 +77,6 @@ exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
             }
             if (!statement)
                 return false;
-            // Get the block or program containing this statement
             const block = statement.parent;
             if (!block || (block.type !== 'BlockStatement' && block.type !== 'Program')) {
                 return false;
@@ -106,7 +85,6 @@ exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
             const idx = statements.indexOf(statement);
             if (idx === -1)
                 return false;
-            // Check 3 statements before
             for (let i = Math.max(0, idx - 3); i < idx; i++) {
                 if (isLoggingStatement(statements[i]))
                     return true;
@@ -116,11 +94,9 @@ exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is an AI SDK function
                 const matchedFunction = aiSDKFunctions.find(fn => callee.includes(fn));
                 if (!matchedFunction)
                     return;
-                // Check for nearby logging
                 if (!hasNearbyLogging(node)) {
                     context.report({
                         node,

package/src/rules/require-embedding-validation/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireEmbeddingValidation = void 0;
-/**
- * @fileoverview Require validation of embeddings before storage or search
- * @description Detects when embeddings are used without validation
- * @see OWASP LLM08: Vector & Embedding Weaknesses
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireEmbeddingValidation = (0, eslint_devkit_1.createRule)({
     name: 'require-embedding-validation',
@@ -76,11 +66,7 @@ exports.requireEmbeddingValidation = (0, eslint_devkit_1.createRule)({
             'validate', 'verify', 'check', 'sanitize',
         ];
         const sourceCode = context.sourceCode;
-        // Vector store operations
         const vectorStoreOps = ['upsert', 'insert', 'add', 'store', 'index', 'save'];
-        /**
-         * Check if expression is an embedding call
-         */
         function isEmbeddingCall(node) {
             const callee = sourceCode.getText(node.callee);
             for (const pattern of embeddingPatterns) {
@@ -90,26 +76,18 @@ exports.requireEmbeddingValidation = (0, eslint_devkit_1.createRule)({
             }
             return null;
         }
-        /**
-         * Check if expression is validated
-         */
         function isValidated(node) {
             const callee = sourceCode.getText(node.callee);
             return validatorFunctions.some((fn) => callee.toLowerCase().includes(fn.toLowerCase()));
         }
-        /**
-         * Check if call is a vector store operation
-         */
         function isVectorStoreOp(node) {
             const callee = sourceCode.getText(node.callee);
             return vectorStoreOps.some(op => callee.toLowerCase().includes(op.toLowerCase()));
         }
         return {
             CallExpression(node) {
-                // Check if this is a vector store operation
                 if (!isVectorStoreOp(node))
                     return;
-                // Check arguments for unvalidated embeddings
                 for (const arg of node.arguments) {
                     if (arg.type === 'ObjectExpression') {
                         for (const prop of arg.properties) {
@@ -117,7 +95,6 @@ exports.requireEmbeddingValidation = (0, eslint_devkit_1.createRule)({
                                 continue;
                             const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
                             if (keyName === 'embedding' || keyName === 'vector' || keyName === 'values') {
-                                // Check if value is an unvalidated embedding call
                                 let valueNode = prop.value;
                                 if (valueNode.type === 'AwaitExpression') {
                                     valueNode = valueNode.argument;

package/src/rules/require-error-handling/index.js

@@ -1,17 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireErrorHandling = void 0;
-/**
- * @fileoverview Require error handling for AI SDK calls
- * @description Ensures generateText/streamText calls are wrapped in try-catch
- * @see https://sdk.vercel.ai/docs/ai-sdk-core/generating-text
- * @see OWASP ASI08: Cascading Failures
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireErrorHandling = (0, eslint_devkit_1.createRule)({
     name: 'require-error-handling',
@@ -60,16 +49,10 @@ exports.requireErrorHandling = (0, eslint_devkit_1.createRule)({
         const allowInTests = options.allowInTests ?? true;
         const sourceCode = context.sourceCode;
         const filename = context.filename;
-        // Skip test files if allowed
         if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
             return {};
         }
-        // Vercel AI SDK functions
         const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        /**
-         * Check if node is inside a try block
-         */
-        // oxlint-disable-next-line consistent-function-scoping
         function isInsideTryBlock(node) {
             let parent = node.parent;
             while (parent) {
@@ -83,11 +66,9 @@ exports.requireErrorHandling = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is an AI SDK function
                 const matchedFunction = aiSDKFunctions.find(fn => callee.includes(fn));
                 if (!matchedFunction)
                     return;
-                // Check if inside try block
                 const parent = node.parent;
                 if (parent?.type === 'AwaitExpression') {
                     if (!isInsideTryBlock(parent)) {

package/src/rules/require-max-steps/index.js

@@ -1,17 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireMaxSteps = void 0;
-/**
- * @fileoverview Require step limits for multi-step AI tool calls
- * @description Ensures multi-step tool calling has maxSteps to prevent infinite loops
- * @see https://sdk.vercel.ai/docs/ai-sdk-core/tools-and-tool-calling
- * @see OWASP LLM10: Unbounded Consumption
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireMaxSteps = (0, eslint_devkit_1.createRule)({
     name: 'require-max-steps',
@@ -58,30 +47,24 @@ exports.requireMaxSteps = (0, eslint_devkit_1.createRule)({
     ],
     create(context) {
         const sourceCode = context.sourceCode;
-        // Vercel AI SDK functions that support tools
         const functionsWithTools = ['generateText', 'streamText'];
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is a target AI function
                 const matchedFunction = functionsWithTools.find(fn => callee.includes(fn));
                 if (!matchedFunction)
                     return;
-                // Check first argument (options object)
                 const optionsArg = node.arguments[0];
                 if (!optionsArg || optionsArg.type !== 'ObjectExpression')
                     return;
-                // Check if tools property exists
                 const hasTools = optionsArg.properties.some(prop => {
                     if (prop.type !== 'Property')
                         return false;
                     const keyName = prop.key.type === 'Identifier' ? prop.key.name : null;
                     return keyName === 'tools';
                 });
-                // Only check for maxSteps if tools are present
                 if (!hasTools)
                     return;
-                // Check if a step limit is present: maxSteps (v4) or stopWhen (v5+, e.g. stopWhen: stepCountIs(5))
                 const hasMaxSteps = optionsArg.properties.some(prop => {
                     if (prop.type !== 'Property')
                         return false;
@@ -90,7 +73,6 @@ exports.requireMaxSteps = (0, eslint_devkit_1.createRule)({
                         : prop.key.type === 'Literal'
                             ? String(prop.key.value)
                             : null;
-                    // ponytail: any stopWhen counts — statically proving it bounds steps (arrays, custom conditions) isn't worth it; documented FN
                     return keyName === 'maxSteps' || keyName === 'max_steps' || keyName === 'stopWhen';
                 });
                 if (!hasMaxSteps) {

package/src/rules/require-max-tokens/index.js

@@ -1,17 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireMaxTokens = void 0;
-/**
- * @fileoverview Require max tokens limit in generateText/streamText calls
- * @description Prevents unbounded token consumption in AI requests
- * @see https://sdk.vercel.ai/docs/ai-sdk-core/generating-text
- * @see https://owasp.org/www-project-top-10-for-large-language-model-applications/
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireMaxTokens = (0, eslint_devkit_1.createRule)({
     name: 'require-max-tokens',
@@ -71,17 +60,14 @@ exports.requireMaxTokens = (0, eslint_devkit_1.createRule)({
         return {
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is a target AI function
                 const matchedFunction = targetFunctions.find((fn) => callee.includes(fn));
                 if (!matchedFunction) {
                     return;
                 }
-                // Check first argument (options object)
                 const optionsArg = node.arguments[0];
                 if (!optionsArg || optionsArg.type !== 'ObjectExpression') {
                     return;
                 }
-                // Check if a token limit is present: maxTokens (v4) or maxOutputTokens (v5+ rename)
                 const hasMaxTokens = optionsArg.properties.some(prop => {
                     if (prop.type !== 'Property')
                         return false;

package/src/rules/require-output-filtering/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireOutputFiltering = void 0;
-/**
- * @fileoverview Require output filtering for tool data
- * @description Detects when tools return raw data without filtering
- * @see OWASP ASI04: Data Exfiltration
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireOutputFiltering = (0, eslint_devkit_1.createRule)({
     name: 'require-output-filtering',
@@ -76,9 +66,6 @@ exports.requireOutputFiltering = (0, eslint_devkit_1.createRule)({
             'filter', 'sanitize', 'redact', 'mask',
         ];
         const sourceCode = context.sourceCode;
-        /**
-         * Check if expression is a data source call
-         */
         function isDataSourceCall(node) {
             const callee = sourceCode.getText(node.callee);
             for (const pattern of dataSourcePatterns) {
@@ -88,17 +75,10 @@ exports.requireOutputFiltering = (0, eslint_devkit_1.createRule)({
             }
             return null;
         }
-        /**
-         * Check if expression is wrapped in a filter function
-         */
         function isFilteredCall(node) {
             const callee = sourceCode.getText(node.callee);
             return filterFunctions.some((filter) => callee.toLowerCase().includes(filter.toLowerCase()));
         }
-        /**
-         * Get tool name from context
-         */
-        // oxlint-disable-next-line consistent-function-scoping
         function getToolName(node) {
             let current = node.parent;
             while (current) {
@@ -117,16 +97,13 @@ exports.requireOutputFiltering = (0, eslint_devkit_1.createRule)({
             return 'unknown';
         }
         return {
-            // Check arrow function returns in tool execute
             ArrowFunctionExpression(node) {
-                // Only check if this looks like a tool execute function
                 const parent = node.parent;
                 if (parent?.type !== 'Property')
                     return;
                 const keyName = parent.key.type === 'Identifier' ? parent.key.name : null;
                 if (keyName !== 'execute')
                     return;
-                // Check the body for direct data source returns
                 if (node.body.type === 'CallExpression') {
                     const source = isDataSourceCall(node.body);
                     if (source && !isFilteredCall(node.body)) {

package/src/rules/require-output-validation/index.js

@@ -1,16 +1,6 @@
 "use strict";
-/**
- * Copyright (c) 2025 Ofri Peretz
- * Licensed under the MIT License. Use of this source code is governed by the
- * MIT license that can be found in the LICENSE file.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireOutputValidation = void 0;
-/**
- * @fileoverview Require validation of AI output before display
- * @description Detects when AI output is displayed without validation
- * @see OWASP LLM09: Misinformation
- */
 const eslint_devkit_1 = require("@interlace/eslint-devkit");
 exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
     name: 'require-output-validation',
@@ -73,13 +63,8 @@ exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
             'render', 'display', 'show', 'send', 'respond',
         ];
         const sourceCode = context.sourceCode;
-        // AI output property patterns
         const aiOutputPatterns = ['.text', '.content', '.message', '.response', '.output'];
-        // Track variables that hold AI results
         const aiResultVariables = new Set();
-        /**
-         * Check if expression accesses AI output
-         */
         function isAIOutput(node) {
             if (node.type === 'MemberExpression') {
                 const text = sourceCode.getText(node);
@@ -91,13 +76,11 @@ exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
             return false;
         }
         return {
-            // Track AI result assignments
             VariableDeclarator(node) {
                 if (node.id.type !== 'Identifier')
                     return;
                 if (!node.init)
                     return;
-                // Check if init is AI result access
                 if (node.init.type === 'MemberExpression') {
                     const text = sourceCode.getText(node.init);
                     if (aiOutputPatterns.some(pattern => text.includes(pattern))) {
@@ -107,15 +90,10 @@ exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
             },
             CallExpression(node) {
                 const callee = sourceCode.getText(node.callee);
-                // Check if this is a display operation
                 const isDisplay = displayPatterns.some(pattern => callee.toLowerCase().includes(pattern.toLowerCase()));
                 if (!isDisplay)
                     return;
-                // Check arguments for unvalidated AI output
                 for (const arg of node.arguments) {
-                    // NOTE: `isAIOutput` only matches MemberExpression/Identifier nodes,
-                    // so a wrapped call like `render(validate(result.text))` never
-                    // reaches here — validated output is inherently not flagged.
                     if (isAIOutput(arg)) {
                         context.report({
                             node: arg,
@@ -123,7 +101,6 @@ exports.requireOutputValidation = (0, eslint_devkit_1.createRule)({
                             data: { method: callee },
                         });
                     }
-                    // Check if argument is an object with AI output
                     if (arg.type === 'ObjectExpression') {
                         for (const prop of arg.properties) {
                             if (prop.type !== 'Property')