eslint-plugin-vercel-ai-security 1.5.2 → 1.5.4

package/src/rules/no-system-prompt-leak/index.js

@@ -1,116 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.noSystemPromptLeak = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.noSystemPromptLeak = (0, eslint_devkit_1.createRule)({
-    name: 'no-system-prompt-leak',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-system-prompt-leak.md',
-            description: 'Prevent system prompts from being exposed in API responses or client code',
-            cwe: 'CWE-200',
-            cvss: 7.5,
-        },
-        messages: {
-            systemPromptLeak: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'System Prompt Leakage',
-                cwe: 'CWE-200',
-                owasp: 'A01:2021',
-                cvss: 7.5,
-                description: 'System prompt "{{variable}}" is exposed in return statement. This reveals AI behavior instructions to users.',
-                severity: 'HIGH',
-                compliance: ['SOC2'],
-                fix: 'Remove system prompt from API response. Only return the AI-generated content.',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    systemPromptPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Variable patterns that suggest system prompts',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            systemPromptPatterns: [
-                'systemPrompt', 'system_prompt', 'SYSTEM_PROMPT',
-                'systemMessage', 'system_message', 'SYSTEM_MESSAGE',
-                'instructions', 'INSTRUCTIONS', 'aiInstructions',
-                'agentPrompt', 'basePrompt', 'contextPrompt',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const systemPromptPatterns = options.systemPromptPatterns ?? [
-            'systemPrompt', 'system_prompt', 'SYSTEM_PROMPT',
-            'systemMessage', 'instructions', 'agentPrompt',
-        ];
-        const sourceCode = context.sourceCode;
-        function isSystemPromptVariable(name) {
-            const lowerName = name.toLowerCase();
-            return systemPromptPatterns.some((pattern) => lowerName.includes(pattern.toLowerCase()));
-        }
-        function findSystemPromptVar(node) {
-            if (node.type === 'Identifier' && isSystemPromptVariable(node.name)) {
-                return node.name;
-            }
-            if (node.type === 'MemberExpression' && node.property.type === 'Identifier') {
-                if (isSystemPromptVariable(node.property.name)) {
-                    return sourceCode.getText(node);
-                }
-            }
-            return null;
-        }
-        function checkObjectForLeaks(node) {
-            for (const prop of node.properties) {
-                if (prop.type !== 'Property')
-                    continue;
-                const leakedVar = findSystemPromptVar(prop.value);
-                if (leakedVar) {
-                    context.report({
-                        node: prop,
-                        messageId: 'systemPromptLeak',
-                        data: { variable: leakedVar },
-                    });
-                }
-            }
-        }
-        return {
-            ReturnStatement(node) {
-                if (!node.argument)
-                    return;
-                if (node.argument.type === 'ObjectExpression') {
-                    checkObjectForLeaks(node.argument);
-                }
-                const leakedVar = findSystemPromptVar(node.argument);
-                if (leakedVar) {
-                    context.report({
-                        node,
-                        messageId: 'systemPromptLeak',
-                        data: { variable: leakedVar },
-                    });
-                }
-            },
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                if (!callee.match(/\.(json|send)\s*$/))
-                    return;
-                const arg = node.arguments[0];
-                if (arg && arg.type === 'ObjectExpression') {
-                    checkObjectForLeaks(arg);
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noSystemPromptLeak=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noSystemPromptLeak=(0,eslint_devkit_1.createRule)({name:"no-system-prompt-leak",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-system-prompt-leak.md",description:"Prevent system prompts from being exposed in API responses or client code",cwe:"CWE-200",cvss:7.5},messages:{systemPromptLeak:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"System Prompt Leakage",cwe:"CWE-200",owasp:"A01:2021",cvss:7.5,description:'System prompt "{{variable}}" is exposed in return statement. This reveals AI behavior instructions to users.',severity:"HIGH",compliance:["SOC2"],fix:"Remove system prompt from API response. Only return the AI-generated content.",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{systemPromptPatterns:{type:"array",items:{type:"string"},description:"Variable patterns that suggest system prompts"}},additionalProperties:false}]},defaultOptions:[{systemPromptPatterns:["systemPrompt","system_prompt","SYSTEM_PROMPT","systemMessage","system_message","SYSTEM_MESSAGE","instructions","INSTRUCTIONS","aiInstructions","agentPrompt","basePrompt","contextPrompt"]}],create(context){const[options={}]=context.options;const systemPromptPatterns=options.systemPromptPatterns??["systemPrompt","system_prompt","SYSTEM_PROMPT","systemMessage","instructions","agentPrompt"];const sourceCode=context.sourceCode;function isSystemPromptVariable(name){const lowerName=name.toLowerCase();return systemPromptPatterns.some(pattern=>lowerName.includes(pattern.toLowerCase()))}function findSystemPromptVar(node){if(node.type==="Identifier"&&isSystemPromptVariable(node.name)){return node.name}if(node.type==="MemberExpression"&&node.property.type==="Identifier"){if(isSystemPromptVariable(node.property.name)){return sourceCode.getText(node)}}return null}function checkObjectForLeaks(node){for(const prop of node.properties){if(prop.type!=="Property")continue;const leakedVar=findSystemPromptVar(prop.value);if(leakedVar){context.report({node:prop,messageId:"systemPromptLeak",data:{variable:leakedVar}})}}}return{ReturnStatement(node){if(!node.argument)return;if(node.argument.type==="ObjectExpression"){checkObjectForLeaks(node.argument)}const leakedVar=findSystemPromptVar(node.argument);if(leakedVar){context.report({node,messageId:"systemPromptLeak",data:{variable:leakedVar}})}},CallExpression(node){const callee=sourceCode.getText(node.callee);if(!callee.match(/\.(json|send)\s*$/))return;const arg=node.arguments[0];if(arg&&arg.type==="ObjectExpression"){checkObjectForLeaks(arg)}}}}});

package/src/rules/no-training-data-exposure/index.js

@@ -1,96 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.noTrainingDataExposure = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.noTrainingDataExposure = (0, eslint_devkit_1.createRule)({
-    name: 'no-training-data-exposure',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-training-data-exposure.md',
-            description: 'Prevent user data from being sent to LLM training endpoints',
-            cwe: 'CWE-359',
-            cvss: 7,
-        },
-        messages: {
-            trainingDataExposure: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'Training Data Exposure',
-                cwe: 'CWE-359',
-                owasp: 'A01:2021',
-                cvss: 7.0,
-                description: 'User data may be exposed for model training via "{{pattern}}". This can lead to data poisoning and privacy violations.',
-                severity: 'HIGH',
-                compliance: ['GDPR', 'SOC2'],
-                fix: 'Disable training data collection or avoid sending PII to training endpoints',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    trainingPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Patterns suggesting training endpoints',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            trainingPatterns: [
-                'train', 'training', 'finetune', 'fine-tune', 'fine_tune',
-                'feedback', 'improve', 'learn',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const trainingPatterns = options.trainingPatterns ?? [
-            'train', 'training', 'finetune', 'feedback',
-        ];
-        function isTrainingRelated(name) {
-            const lowerName = name.toLowerCase();
-            return trainingPatterns.some((pattern) => lowerName.includes(pattern.toLowerCase()));
-        }
-        return {
-            Property(node) {
-                const keyName = node.key.type === 'Identifier'
-                    ? node.key.name
-                    : node.key.type === 'Literal'
-                        ? String(node.key.value)
-                        : null;
-                if (!keyName)
-                    return;
-                if (isTrainingRelated(keyName)) {
-                    if (node.value.type === 'Literal' && node.value.value === true) {
-                        context.report({
-                            node,
-                            messageId: 'trainingDataExposure',
-                            data: { pattern: keyName },
-                        });
-                    }
-                }
-            },
-            Literal(node) {
-                if (typeof node.value !== 'string')
-                    return;
-                const value = node.value.toLowerCase();
-                if (value.includes('/train') ||
-                    value.includes('/finetune') ||
-                    value.includes('/fine-tune') ||
-                    value.includes('/feedback')) {
-                    context.report({
-                        node,
-                        messageId: 'trainingDataExposure',
-                        data: { pattern: node.value },
-                    });
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noTrainingDataExposure=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noTrainingDataExposure=(0,eslint_devkit_1.createRule)({name:"no-training-data-exposure",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-training-data-exposure.md",description:"Prevent user data from being sent to LLM training endpoints",cwe:"CWE-359",cvss:7},messages:{trainingDataExposure:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"Training Data Exposure",cwe:"CWE-359",owasp:"A01:2021",cvss:7,description:'User data may be exposed for model training via "{{pattern}}". This can lead to data poisoning and privacy violations.',severity:"HIGH",compliance:["GDPR","SOC2"],fix:"Disable training data collection or avoid sending PII to training endpoints",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{trainingPatterns:{type:"array",items:{type:"string"},description:"Patterns suggesting training endpoints"}},additionalProperties:false}]},defaultOptions:[{trainingPatterns:["train","training","finetune","fine-tune","fine_tune","feedback","improve","learn"]}],create(context){const[options={}]=context.options;const trainingPatterns=options.trainingPatterns??["train","training","finetune","feedback"];function isTrainingRelated(name){const lowerName=name.toLowerCase();return trainingPatterns.some(pattern=>lowerName.includes(pattern.toLowerCase()))}return{Property(node){const keyName=node.key.type==="Identifier"?node.key.name:node.key.type==="Literal"?String(node.key.value):null;if(!keyName)return;if(isTrainingRelated(keyName)){if(node.value.type==="Literal"&&node.value.value===true){context.report({node,messageId:"trainingDataExposure",data:{pattern:keyName}})}}},Literal(node){if(typeof node.value!=="string")return;const value=node.value.toLowerCase();if(value.includes("/train")||value.includes("/finetune")||value.includes("/fine-tune")||value.includes("/feedback")){context.report({node,messageId:"trainingDataExposure",data:{pattern:node.value}})}}}}});

package/src/rules/no-unsafe-output-handling/index.js

@@ -1,193 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.noUnsafeOutputHandling = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.noUnsafeOutputHandling = (0, eslint_devkit_1.createRule)({
-    name: 'no-unsafe-output-handling',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-unsafe-output-handling.md',
-            description: 'Prevent using AI output directly in dangerous operations (eval, SQL, HTML)',
-            cwe: 'CWE-94',
-            cvss: 9.8,
-            confidence: 'medium',
-        },
-        messages: {
-            unsafeOutputExecution: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'AI Output Used in Code Execution',
-                cwe: 'CWE-94',
-                owasp: 'A03:2021',
-                cvss: 9.8,
-                description: 'AI-generated content "{{variable}}" passed to {{function}}. This can lead to Remote Code Execution.',
-                severity: 'CRITICAL',
-                compliance: ['SOC2', 'PCI-DSS'],
-                fix: 'Never execute AI-generated code directly. Use sandboxed execution with validation.',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-            unsafeOutputInSQL: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'AI Output in SQL Query',
-                cwe: 'CWE-89',
-                owasp: 'A03:2021',
-                cvss: 9.0,
-                description: 'AI-generated content used in SQL query. Use parameterized queries instead.',
-                severity: 'CRITICAL',
-                compliance: ['SOC2', 'PCI-DSS'],
-                fix: 'Use parameterized queries: db.query("SELECT * FROM users WHERE id = ?", [aiOutput])',
-                documentationLink: 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html',
-            }),
-            unsafeOutputInHTML: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'AI Output in innerHTML',
-                cwe: 'CWE-79',
-                owasp: 'A03:2021',
-                cvss: 7.5,
-                description: 'AI-generated content assigned to innerHTML. This can lead to XSS attacks.',
-                severity: 'HIGH',
-                compliance: ['SOC2'],
-                fix: 'Use textContent or sanitize HTML: element.textContent = aiOutput',
-                documentationLink: 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    aiOutputPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Variable patterns that suggest AI output',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            aiOutputPatterns: [
-                'result.text',
-                'response.text',
-                'completion',
-                'generated',
-                'aiOutput',
-                'aiResponse',
-                'llmOutput',
-                'llmResponse',
-                'modelOutput',
-                'textContent',
-                '.text',
-            ],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const aiOutputPatterns = options.aiOutputPatterns ?? [
-            'result.text', 'response.text', 'completion', 'generated',
-            'aiOutput', 'aiResponse', 'llmOutput', '.text',
-        ];
-        const sourceCode = context.sourceCode;
-        const dangerousFunctions = ['eval', 'Function', 'execSync', 'exec', 'spawn', 'execFile'];
-        const sqlPatterns = ['query', 'execute', 'run', 'raw'];
-        const aiBoundVariables = new Set();
-        function isAIBound(node) {
-            if (node.type !== 'Identifier')
-                return false;
-            for (const variable of aiBoundVariables) {
-                if (variable.references.some((r) => r.identifier === node))
-                    return true;
-            }
-            return false;
-        }
-        const AI_SDK_CALLS = new Set(['generateText', 'streamText', 'generateObject', 'streamObject']);
-        function isAISDKCall(node) {
-            let target = node;
-            if (target.type === 'AwaitExpression')
-                target = target.argument;
-            if (target.type !== 'CallExpression')
-                return false;
-            const callee = target.callee;
-            if (callee.type === 'Identifier' && AI_SDK_CALLS.has(callee.name))
-                return true;
-            if (callee.type === 'MemberExpression' && callee.property.type === 'Identifier' &&
-                AI_SDK_CALLS.has(callee.property.name))
-                return true;
-            return false;
-        }
-        function isLikelyAIOutput(node) {
-            if (node.type === 'MemberExpression' && isAIBound(node.object)) {
-                return true;
-            }
-            if (isAIBound(node)) {
-                return true;
-            }
-            const text = sourceCode.getText(node);
-            return aiOutputPatterns.some((pattern) => text.includes(pattern));
-        }
-        function containsAIOutput(node) {
-            if (node.type === 'TemplateLiteral') {
-                return node.expressions.some(containsAIOutput);
-            }
-            if (node.type === 'BinaryExpression') {
-                return (node.operator === '+' &&
-                    (containsAIOutput(node.left) || containsAIOutput(node.right)));
-            }
-            return isLikelyAIOutput(node);
-        }
-        return {
-            VariableDeclarator(node) {
-                if (!node.init || !isAISDKCall(node.init))
-                    return;
-                for (const variable of sourceCode.getDeclaredVariables(node)) {
-                    aiBoundVariables.add(variable);
-                }
-            },
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const isDangerous = dangerousFunctions.some(fn => callee.includes(fn));
-                if (isDangerous) {
-                    for (const arg of node.arguments) {
-                        if (isLikelyAIOutput(arg)) {
-                            context.report({
-                                node: arg,
-                                messageId: 'unsafeOutputExecution',
-                                data: {
-                                    variable: sourceCode.getText(arg),
-                                    function: callee,
-                                },
-                            });
-                        }
-                    }
-                }
-                const isSQLFunction = sqlPatterns.some(fn => callee.includes(fn));
-                if (isSQLFunction) {
-                    for (const arg of node.arguments) {
-                        if (arg.type === 'TemplateLiteral' || arg.type === 'BinaryExpression') {
-                            if (containsAIOutput(arg)) {
-                                context.report({
-                                    node: arg,
-                                    messageId: 'unsafeOutputInSQL',
-                                });
-                            }
-                        }
-                    }
-                }
-            },
-            AssignmentExpression(node) {
-                if (node.left.type === 'MemberExpression') {
-                    const prop = node.left.property;
-                    if (prop.type === 'Identifier' && prop.name === 'innerHTML') {
-                        if (isLikelyAIOutput(node.right)) {
-                            context.report({
-                                node: node.right,
-                                messageId: 'unsafeOutputInHTML',
-                            });
-                        }
-                    }
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.noUnsafeOutputHandling=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.noUnsafeOutputHandling=(0,eslint_devkit_1.createRule)({name:"no-unsafe-output-handling",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/no-unsafe-output-handling.md",description:"Prevent using AI output directly in dangerous operations (eval, SQL, HTML)",cwe:"CWE-94",cvss:9.8,confidence:"medium"},messages:{unsafeOutputExecution:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"AI Output Used in Code Execution",cwe:"CWE-94",owasp:"A03:2021",cvss:9.8,description:'AI-generated content "{{variable}}" passed to {{function}}. This can lead to Remote Code Execution.',severity:"CRITICAL",compliance:["SOC2","PCI-DSS"],fix:"Never execute AI-generated code directly. Use sandboxed execution with validation.",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"}),unsafeOutputInSQL:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"AI Output in SQL Query",cwe:"CWE-89",owasp:"A03:2021",cvss:9,description:"AI-generated content used in SQL query. Use parameterized queries instead.",severity:"CRITICAL",compliance:["SOC2","PCI-DSS"],fix:'Use parameterized queries: db.query("SELECT * FROM users WHERE id = ?", [aiOutput])',documentationLink:"https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"}),unsafeOutputInHTML:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"AI Output in innerHTML",cwe:"CWE-79",owasp:"A03:2021",cvss:7.5,description:"AI-generated content assigned to innerHTML. This can lead to XSS attacks.",severity:"HIGH",compliance:["SOC2"],fix:"Use textContent or sanitize HTML: element.textContent = aiOutput",documentationLink:"https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"})},schema:[{type:"object",properties:{aiOutputPatterns:{type:"array",items:{type:"string"},description:"Variable patterns that suggest AI output"}},additionalProperties:false}]},defaultOptions:[{aiOutputPatterns:["result.text","response.text","completion","generated","aiOutput","aiResponse","llmOutput","llmResponse","modelOutput","textContent",".text"]}],create(context){const[options={}]=context.options;const aiOutputPatterns=options.aiOutputPatterns??["result.text","response.text","completion","generated","aiOutput","aiResponse","llmOutput",".text"];const sourceCode=context.sourceCode;const dangerousFunctions=["eval","Function","execSync","exec","spawn","execFile"];const sqlPatterns=["query","execute","run","raw"];const aiBoundVariables=new Set;function isAIBound(node){if(node.type!=="Identifier")return false;for(const variable of aiBoundVariables){if(variable.references.some(r=>r.identifier===node))return true}return false}const AI_SDK_CALLS=new Set(["generateText","streamText","generateObject","streamObject"]);function isAISDKCall(node){let target=node;if(target.type==="AwaitExpression")target=target.argument;if(target.type!=="CallExpression")return false;const callee=target.callee;if(callee.type==="Identifier"&&AI_SDK_CALLS.has(callee.name))return true;if(callee.type==="MemberExpression"&&callee.property.type==="Identifier"&&AI_SDK_CALLS.has(callee.property.name))return true;return false}function isLikelyAIOutput(node){if(node.type==="MemberExpression"&&isAIBound(node.object)){return true}if(isAIBound(node)){return true}const text=sourceCode.getText(node);return aiOutputPatterns.some(pattern=>text.includes(pattern))}function containsAIOutput(node){if(node.type==="TemplateLiteral"){return node.expressions.some(containsAIOutput)}if(node.type==="BinaryExpression"){return node.operator==="+"&&(containsAIOutput(node.left)||containsAIOutput(node.right))}return isLikelyAIOutput(node)}return{VariableDeclarator(node){if(!node.init||!isAISDKCall(node.init))return;for(const variable of sourceCode.getDeclaredVariables(node)){aiBoundVariables.add(variable)}},CallExpression(node){const callee=sourceCode.getText(node.callee);const isDangerous=dangerousFunctions.some(fn=>callee.includes(fn));if(isDangerous){for(const arg of node.arguments){if(isLikelyAIOutput(arg)){context.report({node:arg,messageId:"unsafeOutputExecution",data:{variable:sourceCode.getText(arg),function:callee}})}}}const isSQLFunction=sqlPatterns.some(fn=>callee.includes(fn));if(isSQLFunction){for(const arg of node.arguments){if(arg.type==="TemplateLiteral"||arg.type==="BinaryExpression"){if(containsAIOutput(arg)){context.report({node:arg,messageId:"unsafeOutputInSQL"})}}}}},AssignmentExpression(node){if(node.left.type==="MemberExpression"){const prop=node.left.property;if(prop.type==="Identifier"&&prop.name==="innerHTML"){if(isLikelyAIOutput(node.right)){context.report({node:node.right,messageId:"unsafeOutputInHTML"})}}}}}}});

package/src/rules/require-abort-signal/index.js

@@ -1,80 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireAbortSignal = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireAbortSignal = (0, eslint_devkit_1.createRule)({
-    name: 'require-abort-signal',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-abort-signal.md',
-            description: 'Require AbortSignal for streaming AI calls to enable proper cleanup',
-            cwe: 'CWE-404',
-            cvss: 4,
-        },
-        messages: {
-            missingAbortSignal: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Missing AbortSignal in Streaming Call',
-                cwe: 'CWE-404',
-                owasp: 'A05:2021',
-                cvss: 4.0,
-                description: '{{function}} call without abortSignal. Users cannot cancel long-running streams.',
-                severity: 'LOW',
-                fix: 'Add abortSignal option: {{function}}({ ..., abortSignal: controller.signal })',
-                documentationLink: 'https://sdk.vercel.ai/docs/ai-sdk-core/generating-text',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    targetFunctions: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Functions that should have abort signal',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            targetFunctions: ['streamText', 'streamObject'],
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const targetFunctions = options.targetFunctions ?? ['streamText', 'streamObject'];
-        const sourceCode = context.sourceCode;
-        return {
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const matchedFunction = targetFunctions.find((fn) => callee.includes(fn));
-                if (!matchedFunction)
-                    return;
-                const optionsArg = node.arguments[0];
-                if (!optionsArg || optionsArg.type !== 'ObjectExpression')
-                    return;
-                const hasAbortSignal = optionsArg.properties.some(prop => {
-                    if (prop.type !== 'Property')
-                        return false;
-                    const keyName = prop.key.type === 'Identifier'
-                        ? prop.key.name
-                        : prop.key.type === 'Literal'
-                            ? String(prop.key.value)
-                            : null;
-                    return keyName === 'abortSignal' || keyName === 'signal';
-                });
-                if (!hasAbortSignal) {
-                    context.report({
-                        node,
-                        messageId: 'missingAbortSignal',
-                        data: { function: matchedFunction },
-                    });
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireAbortSignal=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireAbortSignal=(0,eslint_devkit_1.createRule)({name:"require-abort-signal",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-abort-signal.md",description:"Require AbortSignal for streaming AI calls to enable proper cleanup",cwe:"CWE-404",cvss:4},messages:{missingAbortSignal:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Missing AbortSignal in Streaming Call",cwe:"CWE-404",owasp:"A05:2021",cvss:4,description:"{{function}} call without abortSignal. Users cannot cancel long-running streams.",severity:"LOW",fix:"Add abortSignal option: {{function}}({ ..., abortSignal: controller.signal })",documentationLink:"https://sdk.vercel.ai/docs/ai-sdk-core/generating-text"})},schema:[{type:"object",properties:{targetFunctions:{type:"array",items:{type:"string"},description:"Functions that should have abort signal"}},additionalProperties:false}]},defaultOptions:[{targetFunctions:["streamText","streamObject"]}],create(context){const[options={}]=context.options;const targetFunctions=options.targetFunctions??["streamText","streamObject"];const sourceCode=context.sourceCode;return{CallExpression(node){const callee=sourceCode.getText(node.callee);const matchedFunction=targetFunctions.find(fn=>callee.includes(fn));if(!matchedFunction)return;const optionsArg=node.arguments[0];if(!optionsArg||optionsArg.type!=="ObjectExpression")return;const hasAbortSignal=optionsArg.properties.some(prop=>{if(prop.type!=="Property")return false;const keyName=prop.key.type==="Identifier"?prop.key.name:prop.key.type==="Literal"?String(prop.key.value):null;return keyName==="abortSignal"||keyName==="signal"});if(!hasAbortSignal){context.report({node,messageId:"missingAbortSignal",data:{function:matchedFunction}})}}}}});

package/src/rules/require-audit-logging/index.js

@@ -1,110 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireAuditLogging = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.requireAuditLogging = (0, eslint_devkit_1.createRule)({
-    name: 'require-audit-logging',
-    meta: {
-        type: 'suggestion',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-audit-logging.md',
-            description: 'Suggest audit logging for AI SDK operations',
-            cwe: 'CWE-778',
-            cvss: 4,
-        },
-        messages: {
-            missingAuditLogging: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.WARNING,
-                issueName: 'Missing Audit Logging',
-                cwe: 'CWE-778',
-                owasp: 'A09:2021',
-                cvss: 4.0,
-                description: '{{function}} call lacks audit logging. AI operations should be logged for security monitoring.',
-                severity: 'LOW',
-                compliance: ['SOC2', 'PCI-DSS'],
-                fix: 'Add logging: logger.info("AI call", { userId }); before the call',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    allowInTests: {
-                        type: 'boolean',
-                        description: 'Allow missing logging in test files',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            allowInTests: true,
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const allowInTests = options.allowInTests ?? true;
-        const sourceCode = context.sourceCode;
-        const filename = context.filename;
-        if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
-            return {};
-        }
-        const aiSDKFunctions = ['generateText', 'streamText', 'generateObject', 'streamObject'];
-        const loggingPatterns = [
-            'log', 'logger', 'console', 'winston', 'pino', 'bunyan',
-            'debug', 'info', 'warn', 'error', 'trace',
-        ];
-        function isLoggingStatement(node) {
-            if (node.type !== 'ExpressionStatement')
-                return false;
-            if (node.expression.type !== 'CallExpression')
-                return false;
-            const callee = sourceCode.getText(node.expression.callee);
-            return loggingPatterns.some((pattern) => callee.toLowerCase().includes(pattern.toLowerCase()));
-        }
-        function hasNearbyLogging(node) {
-            const parent = node.parent;
-            if (!parent)
-                return false;
-            let statement = node;
-            while (statement && statement.type !== 'ExpressionStatement' &&
-                statement.type !== 'VariableDeclaration' &&
-                statement.type !== 'ReturnStatement') {
-                statement = statement.parent ?? null;
-            }
-            if (!statement)
-                return false;
-            const block = statement.parent;
-            if (!block || (block.type !== 'BlockStatement' && block.type !== 'Program')) {
-                return false;
-            }
-            const statements = block.type === 'BlockStatement' ? block.body : block.body;
-            const idx = statements.indexOf(statement);
-            if (idx === -1)
-                return false;
-            for (let i = Math.max(0, idx - 3); i < idx; i++) {
-                if (isLoggingStatement(statements[i]))
-                    return true;
-            }
-            return false;
-        }
-        return {
-            CallExpression(node) {
-                const callee = sourceCode.getText(node.callee);
-                const matchedFunction = aiSDKFunctions.find(fn => callee.includes(fn));
-                if (!matchedFunction)
-                    return;
-                if (!hasNearbyLogging(node)) {
-                    context.report({
-                        node,
-                        messageId: 'missingAuditLogging',
-                        data: { function: matchedFunction },
-                    });
-                }
-            },
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireAuditLogging=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.requireAuditLogging=(0,eslint_devkit_1.createRule)({name:"require-audit-logging",meta:{type:"suggestion",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-audit-logging.md",description:"Suggest audit logging for AI SDK operations",cwe:"CWE-778",cvss:4},messages:{missingAuditLogging:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.WARNING,issueName:"Missing Audit Logging",cwe:"CWE-778",owasp:"A09:2021",cvss:4,description:"{{function}} call lacks audit logging. AI operations should be logged for security monitoring.",severity:"LOW",compliance:["SOC2","PCI-DSS"],fix:'Add logging: logger.info("AI call", { userId }); before the call',documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{allowInTests:{type:"boolean",description:"Allow missing logging in test files"}},additionalProperties:false}]},defaultOptions:[{allowInTests:true}],create(context){const[options={}]=context.options;const allowInTests=options.allowInTests??true;const sourceCode=context.sourceCode;const filename=context.filename;if(allowInTests&&/\.(test|spec)\.[jt]sx?$/.test(filename)){return{}}const aiSDKFunctions=["generateText","streamText","generateObject","streamObject"];const loggingPatterns=["log","logger","console","winston","pino","bunyan","debug","info","warn","error","trace"];function isLoggingStatement(node){if(node.type!=="ExpressionStatement")return false;if(node.expression.type!=="CallExpression")return false;const callee=sourceCode.getText(node.expression.callee);return loggingPatterns.some(pattern=>callee.toLowerCase().includes(pattern.toLowerCase()))}function hasNearbyLogging(node){const parent=node.parent;if(!parent)return false;let statement=node;while(statement&&statement.type!=="ExpressionStatement"&&statement.type!=="VariableDeclaration"&&statement.type!=="ReturnStatement"){statement=statement.parent??null}if(!statement)return false;const block=statement.parent;if(!block||block.type!=="BlockStatement"&&block.type!=="Program"){return false}const statements=block.type==="BlockStatement"?block.body:block.body;const idx=statements.indexOf(statement);if(idx===-1)return false;for(let i=Math.max(0,idx-3);i<idx;i++){if(isLoggingStatement(statements[i]))return true}return false}return{CallExpression(node){const callee=sourceCode.getText(node.callee);const matchedFunction=aiSDKFunctions.find(fn=>callee.includes(fn));if(!matchedFunction)return;if(!hasNearbyLogging(node)){context.report({node,messageId:"missingAuditLogging",data:{function:matchedFunction}})}}}}});