eslint-plugin-vercel-ai-security 1.4.1 → 1.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-vercel-ai-security",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "ESLint plugin for Vercel AI SDK security — detects prompt injection, system-prompt leaks, hardcoded API keys, and unvalidated model output in generateText and streamText.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -74,7 +74,8 @@
     "node": ">=18.0.0"
   },
   "peerDependencies": {
-    "eslint": "^8.0.0 || ^9.0.0 || ^10.0.0"
+    "eslint": "^8.0.0 || ^9.0.0 || ^10.0.0",
+    "ai": "^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0"
   },
   "peerDependenciesMeta": {
     "ai": {
@@ -83,7 +84,7 @@
   },
   "dependencies": {
     "tslib": "^2.3.0",
-    "@interlace/eslint-devkit": "^1.6.1"
+    "@interlace/eslint-devkit": "^1.7.0"
   },
   "funding": {
     "type": "github",

package/src/index.js

@@ -82,7 +82,7 @@ exports.rules = {
 exports.plugin = {
     meta: {
         name: 'eslint-plugin-vercel-ai-security',
-        version: '1.4.1',
+        version: '1.5.0',
     },
     rules: exports.rules,
 };

package/src/rules/no-dynamic-system-prompt/index.js

@@ -80,7 +80,7 @@ exports.noDynamicSystemPrompt = (0, eslint_devkit_1.createRule)({
                 for (const prop of optionsArg.properties) {
                     if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                         continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                     if (!(0, prompt_props_1.isSystemPromptProp)(keyName))
                         continue;
                     if (isDynamicContent(prop.value)) {

package/src/rules/no-sensitive-in-prompt/index.js

@@ -103,7 +103,7 @@ exports.noSensitiveInPrompt = (0, eslint_devkit_1.createRule)({
                 for (const prop of optionsArg.properties) {
                     if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                         continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                     if (!keyName || !propsToCheck.has(keyName))
                         continue;
                     const sensitiveVar = findSensitiveData(prop.value);

package/src/rules/no-unsafe-output-handling/index.js

@@ -91,7 +91,16 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
         const sourceCode = context.sourceCode;
         const dangerousFunctions = ['eval', 'Function', 'execSync', 'exec', 'spawn', 'execFile'];
         const sqlPatterns = ['query', 'execute', 'run', 'raw'];
-        const aiBoundNames = new Set();
+        const aiBoundVariables = new Set();
+        function isAIBound(node) {
+            if (node.type !== 'Identifier')
+                return false;
+            for (const variable of aiBoundVariables) {
+                if (variable.references.some((r) => r.identifier === node))
+                    return true;
+            }
+            return false;
+        }
         const AI_SDK_CALLS = new Set(['generateText', 'streamText', 'generateObject', 'streamObject']);
         function isAISDKCall(node) {
             let target = node;
@@ -108,29 +117,31 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
             return false;
         }
         function isLikelyAIOutput(node) {
-            if (node.type === 'MemberExpression' && node.object.type === 'Identifier' &&
-                aiBoundNames.has(node.object.name)) {
+            if (node.type === 'MemberExpression' && isAIBound(node.object)) {
                 return true;
             }
-            if (node.type === 'Identifier' && aiBoundNames.has(node.name)) {
+            if (isAIBound(node)) {
                 return true;
             }
             const text = sourceCode.getText(node);
             return aiOutputPatterns.some((pattern) => text.includes(pattern));
         }
+        function containsAIOutput(node) {
+            if (node.type === 'TemplateLiteral') {
+                return node.expressions.some(containsAIOutput);
+            }
+            if (node.type === 'BinaryExpression') {
+                return (node.operator === '+' &&
+                    (containsAIOutput(node.left) || containsAIOutput(node.right)));
+            }
+            return isLikelyAIOutput(node);
+        }
         return {
             VariableDeclarator(node) {
                 if (!node.init || !isAISDKCall(node.init))
                     return;
-                if (node.id.type === 'Identifier') {
-                    aiBoundNames.add(node.id.name);
-                }
-                else if (node.id.type === 'ObjectPattern') {
-                    for (const prop of node.id.properties) {
-                        if (prop.type === 'Property' && prop.value.type === 'Identifier') {
-                            aiBoundNames.add(prop.value.name);
-                        }
-                    }
+                for (const variable of sourceCode.getDeclaredVariables(node)) {
+                    aiBoundVariables.add(variable);
                 }
             },
             CallExpression(node) {
@@ -154,7 +165,7 @@ exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
                 if (isSQLFunction) {
                     for (const arg of node.arguments) {
                         if (arg.type === 'TemplateLiteral' || arg.type === 'BinaryExpression') {
-                            if (isLikelyAIOutput(arg)) {
+                            if (containsAIOutput(arg)) {
                                 context.report({
                                     node: arg,
                                     messageId: 'unsafeOutputInSQL',

package/src/rules/require-max-tokens/index.js

@@ -76,7 +76,10 @@ exports.requireMaxTokens = (0, eslint_devkit_1.createRule)({
                         : prop.key.type === 'Literal'
                             ? String(prop.key.value)
                             : null;
-                    return keyName === 'maxTokens' || keyName === 'max_tokens' || keyName === 'maxOutputTokens';
+                    return (keyName === 'maxTokens' ||
+                        keyName === 'max_tokens' ||
+                        keyName === 'maxOutputTokens' ||
+                        keyName === 'max_output_tokens');
                 });
                 if (!hasMaxTokens) {
                     context.report({

package/src/rules/require-rag-content-validation/index.js

@@ -132,7 +132,7 @@ exports.requireRagContentValidation = (0, eslint_devkit_1.createRule)({
                 for (const prop of optionsArg.properties) {
                     if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                         continue;
-                    const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                    const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                     if (keyName !== 'prompt' && !(0, prompt_props_1.isSystemPromptProp)(keyName))
                         continue;
                     const ragSource = containsRagContent(prop.value);

package/src/rules/require-validated-prompt/index.js

@@ -162,7 +162,7 @@ exports.requireValidatedPrompt = (0, eslint_devkit_1.createRule)({
             for (const prop of optionsArg.properties) {
                 if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
                     continue;
-                const keyName = (0, prompt_props_1.getStaticPropName)(prop.key);
+                const keyName = (0, prompt_props_1.getStaticPropName)(prop);
                 if (keyName === 'prompt') {
                     const result = hasUnsafeUserInput(prop.value);
                     if (result.unsafe) {

package/src/utils/prompt-props.js

@@ -8,10 +8,13 @@ exports.SYSTEM_PROMPT_PROPS = new Set(['instructions', 'system']);
 function isSystemPromptProp(name) {
     return name !== null && exports.SYSTEM_PROMPT_PROPS.has(name);
 }
-function getStaticPropName(key) {
-    if (key.type === eslint_devkit_1.AST_NODE_TYPES.Identifier)
-        return key.name;
-    if (key.type === eslint_devkit_1.AST_NODE_TYPES.Literal && typeof key.value === 'string')
-        return key.value;
+function getStaticPropName(prop) {
+    if (prop.computed)
+        return null;
+    if (prop.key.type === eslint_devkit_1.AST_NODE_TYPES.Identifier)
+        return prop.key.name;
+    if (prop.key.type === eslint_devkit_1.AST_NODE_TYPES.Literal && typeof prop.key.value === 'string') {
+        return prop.key.value;
+    }
     return null;
 }