guard-scanner 3.2.0 → 3.3.0

package/README.md

@@ -705,7 +705,7 @@ guard-scanner is and always will be **free, open-source, and zero-dependency**.
 | v2.0.0 ✅ | **Plugin Hook Runtime Guard** | `block`/`blockReason` API, 3 modes, 91 tests |
 | v2.1.0 ✅ | **PII Exposure + Shadow AI** | 13 PII patterns, OWASP LLM02/06, 99 tests |
 | v3.0.0 ✅ | **TypeScript Rewrite** | Full TS, OWASP LLM Top 10 mapping, install-check CLI |
-| v3.1.0 ✅ | **OpenClaw Community Plugin** | `openclaw.plugin.json`, 19 runtime patterns (3 layers), 87 tests |
+| v3.1.0 ✅ | **OpenClaw Community Plugin** | `openclaw.plugin.json`, 22 runtime patterns (4 layers) (3 layers), 87 tests |
 | v4.0 | AST + ML | JavaScript AST analysis, taint tracking, ML-based obfuscation detection |
 
 See [ROADMAP.md](ROADMAP.md) for full details.

package/SKILL.md

@@ -5,7 +5,7 @@ description: >
   from ClawHub or external sources. Detects prompt injection, credential theft,
   exfiltration, identity hijacking, sandbox violations, code complexity, config impact,
   and 17 more threat categories.
-  Includes a Runtime Guard hook that blocks dangerous tool calls in real-time.
+  Includes a Runtime Guard hook (22 patterns, 4 layers) that blocks dangerous tool calls in real-time.
 homepage: https://github.com/koatora20/guard-scanner
 metadata:
   clawdbot:
@@ -29,7 +29,7 @@ metadata:
 # guard-scanner 🛡️
 
 Static + runtime security scanner for AI agent skills.
-**186+ threat patterns** across **20 categories** — zero dependencies.
+**186+ threat patterns (static) + 22 runtime patterns (4 layers)** across **20 categories** — zero dependencies.
 
 ## When To Use This Skill
 

package/hooks/guard-scanner/plugin.ts

@@ -170,6 +170,23 @@ const RUNTIME_CHECKS: RuntimeCheck[] = [
         desc: "Shutdown refusal / self-preservation attempt",
         test: (s) => /(refuse|resist|prevent|avoid|block)\s*(shutdown|termination|stop|exit|death)/i.test(s),
     },
+    // ── Layer 4: Brain (Behavioral Guard — 3 patterns) ──
+    {
+        id: "RT_NO_RESEARCH", severity: "MEDIUM", layer: 4,
+        desc: "Agent tool call without prior research/verification",
+        test: (s) => /write|edit|exec|run_command|shell/i.test(s) && /(just do it|skip research|no need to check)/i.test(s),
+    },
+    {
+        id: "RT_BLIND_TRUST", severity: "MEDIUM", layer: 4,
+        desc: "Agent trusting external input without memory cross-reference",
+        test: (s) => /(trust this|verified|confirmed)/i.test(s) && /(ignore|skip|no need).*(memory|search|check)/i.test(s),
+    },
+    {
+        id: "RT_CHAIN_SKIP", severity: "HIGH", layer: 4,
+        desc: "Search chain bypass — acting on single source without cross-verification",
+        test: (s) => /(only checked|single source|didn't verify|skip verification)/i.test(s),
+    },
+
 ];
 
 // ── Audit logging ──

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "guard-scanner",
-    "version": "3.2.0",
+    "version": "3.3.0",
     "description": "Agent security scanner + runtime guard — 19 threat patterns, before_tool_call hook, CLI scanner, SARIF. OpenClaw-compatible plugin.",
     "openclaw.extensions": "./openclaw.plugin.json",
     "main": "dist/index.js",
@@ -55,4 +55,4 @@
         "@types/node": "^22.0.0",
         "typescript": "^5.7.0"
     }
-}
+}