hackmyagent-core 0.1.3 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/hardening/scanner.d.ts +46 -0
- package/dist/hardening/scanner.d.ts.map +1 -1
- package/dist/hardening/scanner.js +1382 -0
- package/dist/hardening/scanner.js.map +1 -1
- package/dist/hardening/scanner.test.js +291 -0
- package/dist/hardening/scanner.test.js.map +1 -1
- package/dist/hardening/security-check.d.ts +2 -1
- package/dist/hardening/security-check.d.ts.map +1 -1
- package/package.json +1 -1
|
@@ -15,6 +15,10 @@ export interface ScanOptions {
|
|
|
15
15
|
}
|
|
16
16
|
export declare class HardeningScanner {
|
|
17
17
|
private static readonly BACKUP_FILES;
|
|
18
|
+
/**
|
|
19
|
+
* Validate that a file path is within the target directory (no path traversal)
|
|
20
|
+
*/
|
|
21
|
+
private isPathWithinDirectory;
|
|
18
22
|
scan(options: ScanOptions): Promise<ScanResult>;
|
|
19
23
|
private detectPlatform;
|
|
20
24
|
/**
|
|
@@ -89,5 +93,47 @@ export declare class HardeningScanner {
|
|
|
89
93
|
* Rollback to the most recent backup
|
|
90
94
|
*/
|
|
91
95
|
rollback(targetDir: string): Promise<void>;
|
|
96
|
+
/**
|
|
97
|
+
* Recursively find SKILL.md and *.skill.md files
|
|
98
|
+
* Skips node_modules and limits depth to 5
|
|
99
|
+
*/
|
|
100
|
+
private findSkillFiles;
|
|
101
|
+
/**
|
|
102
|
+
* OpenClaw skill security checks (SKILL-001 to SKILL-006)
|
|
103
|
+
*/
|
|
104
|
+
private checkOpenclawSkills;
|
|
105
|
+
/**
|
|
106
|
+
* Recursively find HEARTBEAT.md and *.heartbeat.md files
|
|
107
|
+
* Skips node_modules and limits depth to 5
|
|
108
|
+
*/
|
|
109
|
+
private findHeartbeatFiles;
|
|
110
|
+
/**
|
|
111
|
+
* OpenClaw heartbeat security checks (HEARTBEAT-001 to HEARTBEAT-006)
|
|
112
|
+
*/
|
|
113
|
+
private checkOpenclawHeartbeat;
|
|
114
|
+
/**
|
|
115
|
+
* Find OpenClaw gateway configuration files
|
|
116
|
+
*/
|
|
117
|
+
private findGatewayConfigFiles;
|
|
118
|
+
/**
|
|
119
|
+
* OpenClaw gateway security checks (GATEWAY-001 to GATEWAY-006)
|
|
120
|
+
*/
|
|
121
|
+
private checkOpenclawGateway;
|
|
122
|
+
/**
|
|
123
|
+
* Calculate Levenshtein distance between two strings
|
|
124
|
+
*/
|
|
125
|
+
private levenshteinDistance;
|
|
126
|
+
/**
|
|
127
|
+
* Find files matching a pattern recursively (max depth 3, skips node_modules/.git)
|
|
128
|
+
*/
|
|
129
|
+
private findFilesMatching;
|
|
130
|
+
/**
|
|
131
|
+
* OpenClaw config security checks (CONFIG-001 to CONFIG-006)
|
|
132
|
+
*/
|
|
133
|
+
private checkOpenclawConfig;
|
|
134
|
+
/**
|
|
135
|
+
* OpenClaw supply chain security checks (SUPPLY-001 to SUPPLY-004)
|
|
136
|
+
*/
|
|
137
|
+
private checkOpenclawSupplyChain;
|
|
92
138
|
}
|
|
93
139
|
//# sourceMappingURL=scanner.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/hardening/scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,UAAU,EAA0C,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/hardening/scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,UAAU,EAA0C,MAAM,kBAAkB,CAAC;AAwD3F,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAgHD,qBAAa,gBAAgB;IAE3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAelC;IAEF;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAMvB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YAyNvC,cAAc;IAsE5B;;OAEG;YACW,iBAAiB;IA+F/B;;OAEG;IACH,OAAO,CAAC,gBAAgB;YAeV,uBAAuB;YAmGvB,aAAa;YAgDb,cAAc;YA+Fd,oBAAoB;YAwDpB,gBAAgB;YA0IhB,oBAAoB;YAgFpB,gBAAgB;YA2IhB,mBAAmB;YA4EnB,iBAAiB;YAyCjB,iBAAiB;YA+DjB,wBAAwB;YA0FxB,wBAAwB;YAmExB,wBAAwB;YAqHxB,oBAAoB;YA+GpB,uBAAuB;YA8HvB,iBAAiB;YA8GjB,oBAAoB;YAuGpB,mBAAmB;YAiGnB,gBAAgB;YAmIhB,oBAAoB;YAoIpB,gBAAgB;YAyHhB,qBAAqB;YA+GrB,eAAe;IAiI7B;;OAEG;YACW,mBAAmB;IA8GjC;;OAEG;YACW,oBAAoB;IAiKlC;;OAEG;YACW,iBAAiB;IA4I/B;;OAEG;YACW,oBAAoB;IAwIlC;;OAEG;YACW,eAAe;IAqJ7B;;OAEG;YACW,eAAe;IAuI7B;;OAEG;YACW,eAAe;IAyG7B;;OAEG;YACW,mBAAmB;IAmHjC,OAAO,CAAC,cAAc;IAsBtB;;OAEG;YACW,YAAY;IAkD1B;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DhD;;;OAGG;YACW,cAAc;IAgD5B;;OAEG;YACW,mBAAmB;IAoUjC;;;OAGG;YACW,kBAAkB;IAgDhC;;OAEG;YACW,sBAAsB;IA2LpC;;OAEG;YACW,sBAAsB;IA+BpC;;OAEG;YACW,oBAAoB;IAqKlC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;YACW,iBAAiB;IA8D/B;;OAEG;YACW,mBAAmB;IAmRjC;;OAEG;YACW,wBAAwB;CAsJvC"}
|