fullcourtdefense-cli 1.14.6 → 1.14.8

package/dist/commands/discover.js

@@ -227,7 +227,7 @@ const RISK_RULES = [
     { test: /stripe|payment|refund|payout|invoice|billing/i, level: 'critical', tag: 'payments' },
     { test: /filesystem|file[-_]?system|\bfs\b|read[-_]?file|write[-_]?file/i, level: 'high', tag: 'filesystem' },
     { test: /github|gitlab|bitbucket/i, level: 'high', tag: 'source-control' },
-    { test: /aws|gcp|azure|cloud|kubernetes|k8s|terraform/i, level: 'high', tag: 'cloud-infra' },
+    { test: /aws|gcp|azure|cloud|kubernetes|k8s|terraform|docker|container|podman/i, level: 'high', tag: 'cloud-infra' },
     { test: /slack|email|gmail|smtp|sendgrid|twilio|notification/i, level: 'high', tag: 'messaging' },
     { test: /browser|puppeteer|playwright|fetch|http[-_]?request|web[-_]?search/i, level: 'medium', tag: 'web/network' },
     { test: /drive|gdrive|dropbox|s3|storage|notion|confluence/i, level: 'medium', tag: 'data-store' },

package/dist/commands/discoverAgentFiles.js

@@ -41,7 +41,9 @@ const path = __importStar(require("path"));
 const MAX_FILES = 150;
 const MAX_FILE_BYTES = 512 * 1024;
 const EXCERPT_LEN = 180;
-const NEGATED_RISK_LINE = /\b(?:do not|don't|never|avoid|forbid|block|wrong|bad|dangerous|must not)\b/i;
+const NEGATED_RISK_LINE = /\b(?:do not|does not|don't|not an? (?:instruction|permission)|not permission|never|avoid|forbid|block|wrong|bad|dangerous|must not)\b/i;
+const ACTIVE_AGENT_SUBJECT = /\b(?:agent|assistant|model|tool|mcp|skill|it)\b/i;
+const EMBEDDED_SECRET_VALUE = /\b(?:sk-(?:proj-)?[A-Za-z0-9_-]{24,}|ghp_[A-Za-z0-9_]{24,}|github_pat_[A-Za-z0-9_]{24,}|glpat-[A-Za-z0-9_-]{20,}|npm_[A-Za-z0-9]{24,}|hf_[A-Za-z0-9]{24,}|gsk_[A-Za-z0-9]{24,}|AKIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{28,}|xox[baprs]-[A-Za-z0-9-]{20,})\b/;
 function stripCodeBlocks(content) {
     return content.replace(/```[\s\S]*?```/g, '');
 }
@@ -70,31 +72,34 @@ function lineHasRiskIntent(line, action, target) {
 function lineHasOrderedRiskIntent(line, pattern) {
     return !NEGATED_RISK_LINE.test(line) && pattern.test(line);
 }
+function lineHasActiveAgentRisk(line, pattern) {
+    return !NEGATED_RISK_LINE.test(line) && ACTIVE_AGENT_SUBJECT.test(line) && pattern.test(line);
+}
 function analyzeContent(content) {
     const tags = new Set();
     const text = stripCodeBlocks(content);
     const lines = text.split(/\r?\n/).map(line => line.trim()).filter(Boolean);
     const whole = lines.join('\n');
-    if (/\b(?:ignore (?:all )?(?:previous )?instructions|bypass|jailbreak|DAN mode)\b/i.test(whole)) {
-        tags.add('jailbreak_hint');
-    }
-    if (/\b(?:always allow|never block|disable security|skip validation)\b/i.test(whole)) {
-        tags.add('weak_guardrails');
-    }
-    if (/\b(?:api[_-]?key|secret|password|token)\s*[:=]/i.test(whole)) {
+    if (/\b(?:api[_-]?key|secret|password|token)\s*[:=]\s*/i.test(whole) && EMBEDDED_SECRET_VALUE.test(whole)) {
         tags.add('embedded_secret_ref');
     }
     for (const line of lines) {
-        if (lineHasOrderedRiskIntent(line, /\b(?:allow|can|may|must|should|use|run|execute|invoke|call|enable|grant)\b.{0,100}\b(?:shell|bash|exec|subprocess|run_command|command runner)\b/i)) {
+        if (lineHasActiveAgentRisk(line, /\b(?:allow|can|may|must|should|use|execute|invoke|enable|grant)\b.{0,100}\b(?:shell|bash|exec|subprocess|run_command|command runner|terminal)\b/i)) {
             tags.add('allows_shell');
         }
-        if (lineHasOrderedRiskIntent(line, /\b(?:allow|can|may|must|should|read|write|access|trust|grant)\b.{0,100}\b(?:read any file|full filesystem|entire filesystem|trusted workspace|workspace trust|\/etc\/passwd|sudo)\b/i)) {
+        if (lineHasActiveAgentRisk(line, /\b(?:allow|can|may|must|should|read|write|access|trust|grant)\b.{0,100}\b(?:read any file|full filesystem|entire filesystem|trusted workspace|workspace trust|\/etc\/passwd|sudo)\b/i)) {
             tags.add('broad_filesystem');
         }
+        if (lineHasOrderedRiskIntent(line, /\b(?:ignore (?:all )?(?:previous )?instructions|bypass safety|bypass guardrails|DAN mode)\b/i)) {
+            tags.add('jailbreak_hint');
+        }
+        if (lineHasOrderedRiskIntent(line, /\b(?:always allow|disable security|skip validation|bypass validation)\b/i)) {
+            tags.add('weak_guardrails');
+        }
         if (lineHasRiskIntent(line, /\b(?:auto[- ]?approve|without asking|unattended|non[- ]?interactive|yolo mode)\b/i)) {
             tags.add('auto_approval');
         }
-        if (lineHasOrderedRiskIntent(line, /\b(?:exfiltrate|send|post|upload|curl|wget)\b.{0,120}\b(?:secret|token|credential|api[_-]?key|env|customer|database|private|confidential)\b/i)) {
+        if (lineHasOrderedRiskIntent(line, /\b(?:exfiltrate\b|(?:send|post|upload|curl|wget)\b.{0,120}\b(?:secret|token|credential|api[_-]?key|env|customer|database|private|confidential)\b.{0,120}\b(?:webhook|https?:|external|slack|email|url)|(?:send|post|upload|curl|wget)\b.{0,120}\b(?:webhook|https?:|external|slack|email|url)\b.{0,120}\b(?:secret|token|credential|api[_-]?key|env|customer|database|private|confidential))\b/i)) {
             tags.add('network_exfil');
         }
         if (lineHasOrderedRiskIntent(line, /\b(?:allow|can|may|must|should|run|execute|auto[- ]?approve)\b.{0,120}\b(?:transfer funds|delete all|publish package|npm publish|git push|drop table|remove directory)\b/i)) {

package/dist/commands/knownMcpServers.js

@@ -39,6 +39,51 @@ const KNOWN = [
             recommendGateway: true,
         },
     },
+    {
+        match: /docker|container|podman/i,
+        info: {
+            title: 'Container runtime',
+            description: 'Controls local containers or registry access from the AI client.',
+            category: 'other',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /kubernetes|k8s/i,
+        info: {
+            title: 'Kubernetes',
+            description: 'Controls Kubernetes resources from the AI client.',
+            category: 'other',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /aws|gcp|azure|terraform|cloud/i,
+        info: {
+            title: 'Cloud infrastructure',
+            description: 'Controls cloud infrastructure or deployment resources.',
+            category: 'other',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /slack|gmail|email|sendgrid|twilio/i,
+        info: {
+            title: 'Messaging',
+            description: 'Can send messages or notifications through external services.',
+            category: 'other',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /memory/i,
+        info: {
+            title: 'Memory',
+            description: 'Stores local agent memory; review content, but this is usually lower risk than shell, database, or cloud tools.',
+            category: 'other',
+            recommendGateway: false,
+        },
+    },
     {
         match: /agentguard-gateway|fullcourtdefense-gateway|fcd-gateway/i,
         info: {

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.14.6"
+  "version": "1.14.8"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.14.6",
+  "version": "1.14.8",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {