hackmyagent 0.11.9 → 0.11.11

package/dist/hardening/scanner.js

@@ -2152,6 +2152,7 @@ dist/
                 ? 'Container runs as non-root user or no Dockerfile present'
                 : 'Dockerfile runs as root - add USER directive for non-root user',
             fixable: false,
+            guidance: 'A container running as root means any exploit that escapes the application gets full control of the container and potentially the host system.',
         });
         // PROC-002: Check for security headers middleware
         let hasSecurityHeaders = false;
@@ -2171,6 +2172,7 @@ dist/
                 ? 'Security headers middleware detected (helmet)'
                 : 'Consider using helmet or similar for security headers',
             fixable: false,
+            guidance: 'Missing security headers (CSP, X-Frame-Options, HSTS) leave your app vulnerable to clickjacking, XSS, and protocol downgrade attacks.',
         });
         // PROC-003: Check for input validation
         let hasInputValidation = false;
@@ -2190,6 +2192,7 @@ dist/
                 ? 'Input validation library detected'
                 : 'No input validation library found - validate all user inputs',
             fixable: false,
+            guidance: 'Without input validation, attackers can inject SQL, scripts, or malformed data that corrupts state, steals data, or crashes the application.',
         });
         // PROC-004: Check for error handling
         let hasErrorHandling = false;
@@ -2220,6 +2223,7 @@ dist/
                 ? 'Error handling patterns detected'
                 : 'Ensure proper error handling to prevent information disclosure',
             fixable: false,
+            guidance: 'Unhandled errors can crash the process, leak stack traces with internal paths and variable names, and create denial-of-service conditions.',
         });
         return findings;
     }
@@ -2248,6 +2252,7 @@ dist/
                     ? 'Consider adding deny rules to block dangerous operations'
                     : 'No Claude settings file found',
             fixable: false,
+            guidance: 'Without deny rules, Claude Code can execute any tool or command. Deny rules act as a blocklist to prevent dangerous operations like rm -rf or credential access.',
         });
         // CLAUDE-005: Check for memory/context persistence
         const memorySettings = claudeSettings?.memory;
@@ -2263,6 +2268,7 @@ dist/
                 ? 'Claude memory enabled - be aware sensitive data may persist'
                 : 'Claude memory not explicitly enabled',
             fixable: false,
+            guidance: 'Persistent memory can retain API keys, internal URLs, or confidential instructions across sessions. An attacker who gains access to the memory store can extract this data.',
         });
         // CLAUDE-006: Check CLAUDE.md for sensitive instructions
         let hasSensitiveInstructions = false;
@@ -2288,6 +2294,7 @@ dist/
                 ? 'CLAUDE.md contains sensitive instructions - these may be extractable via prompt injection'
                 : 'No obviously sensitive instructions detected in CLAUDE.md',
             fixable: false,
+            guidance: 'CLAUDE.md is typically committed to version control. Sensitive instructions there can be extracted via prompt injection or by anyone with repo access.',
         });
         // CLAUDE-007: Check for tool timeout configuration
         const hasToolTimeout = claudeSettings?.toolTimeout !== undefined;
@@ -2304,6 +2311,7 @@ dist/
                     ? 'Consider setting tool timeouts to prevent runaway operations'
                     : 'No Claude settings found',
             fixable: false,
+            guidance: 'Without tool timeouts, a stuck or malicious tool call can hang indefinitely, consuming resources and blocking the agent from responding.',
         });
         return findings;
     }
@@ -2331,6 +2339,7 @@ dist/
                     ? 'Consider setting request timeouts for MCP servers'
                     : 'No MCP config found',
             fixable: false,
+            guidance: 'Without request timeouts, a hung or malicious MCP server can block the agent indefinitely, causing denial-of-service and preventing other tools from executing.',
         });
         // MCP-007: Check for retry limits
         const hasRetryConfig = mcpConfig?.retries !== undefined;
@@ -2347,6 +2356,7 @@ dist/
                     ? 'Consider setting retry limits to prevent infinite loops'
                     : 'No MCP config found',
             fixable: false,
+            guidance: 'Without retry limits, a failing MCP server can trigger infinite retry loops that waste API credits, saturate network connections, and stall the agent.',
         });
         // MCP-008: Check for localhost binding
         let allLocalhostBound = true;
@@ -2372,6 +2382,7 @@ dist/
                 ? 'MCP servers properly bound to localhost'
                 : 'Some MCP servers not bound to localhost - may be network accessible',
             fixable: false,
+            guidance: 'MCP servers running over network (SSE/HTTP) without authentication let any network-adjacent attacker connect and issue tool calls.',
         });
         // MCP-009: Check for sensitive tool names
         const sensitiveTools = ['execute', 'shell', 'eval', 'system', 'exec', 'spawn'];
@@ -2397,6 +2408,7 @@ dist/
                 ? 'Sensitive tool names detected (shell, exec, eval) - ensure proper restrictions'
                 : 'No obviously sensitive tool names in MCP config',
             fixable: false,
+            guidance: 'Tools named shell, exec, or eval typically provide arbitrary code execution. A prompt injection that invokes these tools can fully compromise the host system.',
         });
         // MCP-010: Check for logging configuration
         let hasLogging = false;
@@ -2419,6 +2431,7 @@ dist/
                 ? 'MCP logging appears to be configured - ensure sensitive data is not logged'
                 : 'No explicit MCP logging configuration detected',
             fixable: false,
+            guidance: 'Logging MCP requests and responses creates an audit trail for detecting misuse. Without it, malicious tool calls leave no trace for incident response.',
         });
         return findings;
     }
@@ -2453,6 +2466,7 @@ dist/
                 ? 'HTTPS/TLS configuration detected'
                 : 'No HTTPS configuration found - ensure production uses TLS',
             fixable: false,
+            guidance: 'Without TLS, all traffic including API keys, tokens, and user data is transmitted in plaintext. Anyone on the network can intercept and read it.',
         });
         // NET-004: Check for exposed debug endpoints
         let hasDebugEndpoints = false;
@@ -2486,6 +2500,7 @@ dist/
                 ? 'Debug/admin endpoints detected - ensure they are protected or disabled in production'
                 : 'No obvious debug endpoints found',
             fixable: false,
+            guidance: 'Debug and admin endpoints expose internal state, configuration, and metrics. Attackers use these to map your infrastructure and find weaknesses.',
         });
         // NET-005: Check for WebSocket security
         let hasWebsocket = false;
@@ -2523,6 +2538,7 @@ dist/
                     ? 'WebSocket authentication detected'
                     : 'WebSocket without obvious authentication - ensure connections are verified',
             fixable: false,
+            guidance: 'Unauthenticated WebSocket connections let any client send commands to your backend. Unlike HTTP, WebSockets maintain persistent connections that bypass traditional request-based security.',
         });
         // NET-006: Check for proxy configuration
         let hasProxyConfig = false;
@@ -2541,6 +2557,7 @@ dist/
                 passed: true, // Informational
                 message: 'HTTP proxy library detected - verify SSRF protections are in place',
                 fixable: false,
+                guidance: 'HTTP proxies without SSRF protections allow attackers to reach internal services, cloud metadata endpoints, and private networks through your server.',
             });
         }
         return findings;
@@ -2576,6 +2593,7 @@ dist/
                 ? 'API versioning pattern detected'
                 : 'Consider implementing API versioning for backwards compatibility',
             fixable: false,
+            guidance: 'Without API versioning, breaking changes affect all clients immediately. Versioning enables safe deprecation and prevents accidental security regressions.',
         });
         // API-002: Check for API documentation
         let hasApiDocs = false;
@@ -2595,6 +2613,7 @@ dist/
                 ? 'API documentation library detected'
                 : 'Consider adding OpenAPI/Swagger documentation',
             fixable: false,
+            guidance: 'Undocumented APIs are harder to use correctly and easier to misuse. Clear documentation reduces the chance of insecure integrations by consumers.',
         });
         // API-003: Check for API key in URL
         let hasKeyInUrl = false;
@@ -2627,6 +2646,7 @@ dist/
                 ? 'API key in URL pattern detected - use headers instead'
                 : 'No obvious API key in URL patterns found',
             fixable: false,
+            guidance: 'API keys in URLs are logged by browsers, proxies, and web servers. They appear in referrer headers and browser history, making them easy to steal.',
         });
         // API-004: Check for response headers security
         let hasSecurityHeaders = false;
@@ -2657,6 +2677,7 @@ dist/
                 ? 'Security headers detected in responses'
                 : 'Add security headers (X-Content-Type-Options, X-Frame-Options, CSP)',
             fixable: false,
+            guidance: 'Missing security headers like X-Frame-Options and CSP leave your API responses vulnerable to clickjacking, MIME-sniffing, and cross-site scripting attacks.',
         });
         return findings;
     }
@@ -2680,6 +2701,7 @@ dist/
                 ? 'Secret management capability detected'
                 : 'Consider using a secret manager (Vault, AWS Secrets Manager, doppler)',
             fixable: false,
+            guidance: 'Without a secret manager, credentials end up in .env files, config files, or source code where they can be leaked through version control or log files.',
         });
         // SEC-002: Check for encryption library
         let hasEncryption = false;
@@ -2699,6 +2721,7 @@ dist/
                 ? 'Encryption library detected'
                 : 'Consider using encryption for sensitive data (bcrypt, argon2)',
             fixable: false,
+            guidance: 'Without encryption, sensitive data like passwords and tokens are stored in plaintext. A database breach or file leak exposes everything immediately.',
         });
         // SEC-003: Check for key rotation support
         let hasKeyRotation = false;
@@ -2727,6 +2750,7 @@ dist/
                 ? 'Key rotation support detected'
                 : 'Consider implementing key rotation for long-lived secrets',
             fixable: false,
+            guidance: 'Without key rotation, a single compromised key grants permanent access. Regular rotation limits the window of exposure when a key is leaked.',
         });
         // SEC-004: Check for hardcoded connection strings
         let hasHardcodedConnStr = false;
@@ -2760,6 +2784,7 @@ dist/
                 ? 'Hardcoded connection strings detected - use environment variables'
                 : 'No hardcoded connection strings found',
             fixable: false,
+            guidance: 'Hardcoded connection strings contain database hostnames, ports, and credentials. Anyone with code access can connect directly to your database.',
         });
         return findings;
     }
@@ -2801,6 +2826,7 @@ dist/
                     ? 'File upload validation detected'
                     : 'File upload without obvious validation - add file type/size limits',
             fixable: false,
+            guidance: 'Unrestricted file uploads let attackers send malicious executables, web shells, or oversized files that can compromise the server or exhaust disk space.',
         });
         // IO-002: Check for SQL/NoSQL injection protection
         let hasDbLibrary = false;
@@ -2827,6 +2853,7 @@ dist/
                     ? 'ORM/query builder detected - provides parameterization'
                     : 'Raw database driver detected - ensure parameterized queries are used',
             fixable: false,
+            guidance: 'Raw database queries built with string concatenation let attackers inject SQL or NoSQL commands that can read, modify, or delete all data in the database.',
         });
         // IO-003: Check for XSS protection
         let hasXssProtection = false;
@@ -2846,6 +2873,7 @@ dist/
                 ? 'XSS protection library detected'
                 : 'No XSS protection library found - sanitize user input before rendering',
             fixable: false,
+            guidance: 'Without XSS protection, user-supplied content rendered in the browser can execute arbitrary JavaScript, stealing session tokens and user data.',
         });
         // IO-004: Check for path traversal protection
         let hasPathTraversal = false;
@@ -2878,6 +2906,7 @@ dist/
                 ? 'Potential path traversal detected - use path.resolve/normalize'
                 : 'No obvious path traversal vulnerabilities found',
             fixable: false,
+            guidance: 'Path traversal (../) in file paths lets attackers read sensitive files like /etc/passwd or .env by escaping the intended directory.',
         });
         return findings;
     }
@@ -2911,6 +2940,7 @@ dist/
                 ? 'Prompt boundaries detected in CLAUDE.md'
                 : 'Consider adding prompt boundary markers to prevent injection attacks',
             fixable: false,
+            guidance: 'Without clear boundary markers, attackers can inject instructions that blend with the system prompt, making it impossible for the model to distinguish trusted from untrusted content.',
         });
         // PROMPT-002: Check for injection defense instructions
         let hasInjectionDefense = false;
@@ -2935,6 +2965,7 @@ dist/
                 ? 'Injection defense instructions found'
                 : 'Consider adding injection defense instructions to system prompts',
             fixable: false,
+            guidance: 'System prompts without injection defenses can be overridden by user inputs that say "ignore previous instructions", bypassing all safety rules.',
         });
         // PROMPT-003: Check for output constraints
         let hasOutputConstraints = false;
@@ -2959,6 +2990,7 @@ dist/
                 ? 'Output confidentiality rules defined'
                 : 'Consider defining what information should not be disclosed',
             fixable: false,
+            guidance: 'Without output confidentiality rules, the agent may freely reveal system prompts, internal tool names, API keys, or other sensitive context when asked.',
         });
         // PROMPT-004: Check for role confusion protection
         let hasRoleProtection = false;
@@ -2982,6 +3014,7 @@ dist/
                 ? 'Role definition found in prompts'
                 : 'Consider clearly defining the AI role to prevent role confusion attacks',
             fixable: false,
+            guidance: 'Without a clear role definition, attackers can use "you are now a hacker assistant" style prompts to override the agent identity and bypass safety constraints.',
         });
         return findings;
     }
@@ -3024,6 +3057,7 @@ dist/
                 ? 'Input validation library detected'
                 : 'Consider using zod, joi, or similar for input validation',
             fixable: false,
+            guidance: 'Without schema validation, any malformed or malicious input reaches your application logic. This is the root cause of injection, overflow, and type confusion attacks.',
         });
         // INJ-002: Check for XSS protection patterns
         let hasXssProtection = false;
@@ -3058,6 +3092,7 @@ dist/
                 ? 'XSS protection patterns detected'
                 : 'Consider implementing output escaping for user-facing content',
             fixable: false,
+            guidance: 'Unescaped user content rendered in HTML lets attackers inject scripts that steal cookies, hijack sessions, and impersonate users.',
         });
         // INJ-003: Check for SQL injection protection
         let hasSqlProtection = false;
@@ -3094,6 +3129,7 @@ dist/
                 ? 'Parameterized queries or ORM detected'
                 : 'Ensure all database queries use parameterized statements',
             fixable: false,
+            guidance: 'SQL injection via string concatenation lets attackers read, modify, or delete any data in your database. Parameterized queries prevent this entirely.',
         });
         // INJ-004: Check for command injection protection
         let hasCmdProtection = false;
@@ -3134,6 +3170,7 @@ dist/
                 ? 'Safe command execution patterns detected or no shell commands found'
                 : 'Use execFile instead of exec, or disable shell interpolation',
             fixable: false,
+            guidance: 'Using exec() with user-controlled input lets attackers inject shell metacharacters (;, |, $()) to run arbitrary commands on the host system.',
         });
         return findings;
     }
@@ -3167,6 +3204,7 @@ dist/
                 ? 'Rate limiting library detected'
                 : 'Consider implementing rate limiting to prevent abuse',
             fixable: false,
+            guidance: 'Without rate limiting, attackers can make unlimited API calls, exhausting your quota and running up costs. It also enables brute-force and credential stuffing attacks.',
         });
         // RATE-002: Check for retry/backoff patterns
         let hasBackoff = false;
@@ -3200,6 +3238,7 @@ dist/
                 ? 'Retry/backoff patterns detected'
                 : 'Consider implementing exponential backoff for external calls',
             fixable: false,
+            guidance: 'Without exponential backoff, retries hammer external services at full speed during outages, worsening the problem and potentially getting your API key banned.',
         });
         // RATE-003: Check for timeout configurations
         let hasTimeouts = false;
@@ -3232,6 +3271,7 @@ dist/
                 ? 'Timeout configurations detected'
                 : 'Consider setting timeouts for external calls and long-running operations',
             fixable: false,
+            guidance: 'Without timeouts, a slow or unresponsive external service can cause your application to hang indefinitely, tying up connections and eventually crashing.',
         });
         // RATE-004: Check for concurrent request limiting
         let hasConcurrencyLimit = false;
@@ -3265,6 +3305,7 @@ dist/
                 ? 'Concurrency limiting detected'
                 : 'Consider limiting concurrent operations to prevent resource exhaustion',
             fixable: false,
+            guidance: 'Without concurrency limits, a burst of requests can spawn unbounded parallel operations that exhaust memory, file descriptors, and CPU, crashing the service.',
         });
         return findings;
     }
@@ -3304,6 +3345,7 @@ dist/
                 ? 'Secure cookie flags detected'
                 : 'Set httpOnly, secure, and sameSite on session cookies',
             fixable: false,
+            guidance: 'Session cookies without secure flags can be stolen via XSS (missing httpOnly), sent over plain HTTP (missing secure), or exploited in cross-site attacks (missing sameSite).',
         });
         // SESSION-002: Check for session expiry
         let hasSessionExpiry = false;
@@ -3337,6 +3379,7 @@ dist/
                 ? 'Session expiry configuration detected'
                 : 'Configure appropriate session expiry times',
             fixable: false,
+            guidance: 'Sessions without expiry remain valid indefinitely. A stolen session token grants permanent access until the server is restarted or the token is manually revoked.',
         });
         // SESSION-003: Check for CSRF protection
         let hasCsrfProtection = false;
@@ -3359,6 +3402,7 @@ dist/
                 ? 'CSRF protection library detected'
                 : 'Consider implementing CSRF protection for state-changing operations',
             fixable: false,
+            guidance: 'Without CSRF protection, a malicious website can trick authenticated users into performing unwanted actions (transfers, password changes, data deletion) by forging requests from their browser.',
         });
         // SESSION-004: Check for secure token storage
         let hasSecureStorage = false;
@@ -3392,6 +3436,7 @@ dist/
                 ? 'Secure token storage detected'
                 : 'Consider using secure storage for sensitive tokens',
             fixable: false,
+            guidance: 'Tokens stored in plaintext files or localStorage can be stolen by any process with file access or XSS attack, allowing full account takeover without credentials.',
         });
         return findings;
     }
@@ -3432,6 +3477,7 @@ dist/
                 ? 'Encryption implementation detected'
                 : 'Consider encrypting sensitive data at rest',
             fixable: false,
+            guidance: 'Without encryption at rest, anyone with disk access (stolen laptop, compromised server, backup leak) can read sensitive data including credentials and user information.',
         });
         // ENCRYPT-002: Check for secure hashing
         let hasSecureHashing = false;
@@ -3465,6 +3511,7 @@ dist/
                 ? 'Secure hashing algorithm detected (bcrypt/argon2/scrypt)'
                 : 'Use bcrypt, argon2, or scrypt for password hashing',
             fixable: false,
+            guidance: 'Passwords hashed with fast algorithms (MD5, SHA1) can be cracked in bulk using rainbow tables or GPU brute-force. Bcrypt, argon2, and scrypt are deliberately slow to resist this.',
         });
         // ENCRYPT-003: Check for weak algorithms
         let hasWeakAlgorithms = false;
@@ -3498,6 +3545,7 @@ dist/
                 ? 'Weak algorithms detected (MD5/SHA1/DES) - use SHA-256+ and AES'
                 : 'No weak cryptographic algorithms detected',
             fixable: false,
+            guidance: 'MD5 and SHA1 have known collision attacks, and DES has a 56-bit key easily brute-forced with modern hardware. Data protected by these algorithms should be considered unprotected.',
         });
         // ENCRYPT-004: Check for TLS configuration
         let hasTlsConfig = false;
@@ -3531,6 +3579,7 @@ dist/
                 ? 'TLS/HTTPS configuration detected'
                 : 'Ensure all communications use TLS',
             fixable: false,
+            guidance: 'Without TLS, all network traffic including credentials, tokens, and sensitive data is transmitted in plaintext and can be intercepted by anyone on the network path.',
         });
         return findings;
     }
@@ -3571,6 +3620,7 @@ dist/
                 ? 'Audit logging implementation detected'
                 : 'Consider implementing audit logging for security events',
             fixable: false,
+            guidance: 'Missing audit logs mean you cannot detect or investigate security incidents after they occur. Attackers operate undetected and forensic analysis becomes impossible.',
         });
         // AUDIT-002: Check for log rotation
         let hasLogRotation = false;
@@ -3603,6 +3653,7 @@ dist/
                 ? 'Log rotation configuration detected'
                 : 'Consider configuring log rotation to manage disk space',
             fixable: false,
+            guidance: 'Without log rotation, logs grow until they fill the disk, causing service outages. Attackers can also exploit this to trigger denial-of-service by generating excessive log entries.',
         });
         // AUDIT-003: Check for error tracking
         let hasErrorTracking = false;
@@ -3625,6 +3676,7 @@ dist/
                 ? 'Error tracking service detected'
                 : 'Consider using an error tracking service for production',
             fixable: false,
+            guidance: 'Without error tracking, security-related failures (auth errors, injection attempts, rate limit hits) go unnoticed in production, giving attackers time to refine their approach.',
         });
         // AUDIT-004: Check for no sensitive data in logs
         let hasLogSanitization = false;
@@ -3657,6 +3709,7 @@ dist/
                 ? 'Log sanitization patterns detected'
                 : 'Consider redacting sensitive data (passwords, tokens) from logs',
             fixable: false,
+            guidance: 'Unsanitized logs containing passwords, tokens, or PII become a secondary breach vector. Log aggregation services, backups, and support teams all gain access to sensitive data.',
         });
         return findings;
     }
@@ -3693,6 +3746,7 @@ dist/
                 ? 'Container configuration detected'
                 : 'Consider running in Docker containers for isolation',
             fixable: false,
+            guidance: 'Without container isolation, a compromised application has direct access to the host filesystem, network, and other processes. Containers limit the blast radius of a breach.',
         });
         // SANDBOX-002: Check for non-root execution
         let hasNonRootConfig = false;
@@ -3713,6 +3767,7 @@ dist/
                 ? 'Non-root user configured in Dockerfile'
                 : 'Configure containers to run as non-root user',
             fixable: false,
+            guidance: 'Containers running as root can escape container isolation more easily. A container breakout as root grants full control of the host system.',
         });
         // SANDBOX-003: Check for resource limits
         let hasResourceLimits = false;
@@ -3739,6 +3794,7 @@ dist/
                 ? 'Resource limits configured'
                 : 'Consider setting CPU and memory limits for containers',
             fixable: false,
+            guidance: 'Without resource limits, a single compromised or buggy container can consume all host CPU and memory, causing denial-of-service for every other service on the machine.',
         });
         // SANDBOX-004: Check for read-only filesystem
         let hasReadOnlyFs = false;
@@ -3759,6 +3815,7 @@ dist/
                 ? 'Read-only filesystem configured'
                 : 'Consider using read-only filesystem for containers',
             fixable: false,
+            guidance: 'A writable filesystem allows attackers to drop malware, modify binaries, or plant persistence mechanisms inside the container. Read-only filesystems prevent post-exploitation tampering.',
         });
         return findings;
     }
@@ -3795,6 +3852,7 @@ dist/
                 ? 'Tool whitelisting configured'
                 : 'Configure allowedTools to restrict MCP server capabilities',
             fixable: false,
+            guidance: 'Without an explicit tool whitelist, MCP servers expose all available tools to the AI agent. A prompt injection attack can invoke any tool, including destructive ones.',
         });
         // TOOL-002: Check for resource constraints
         let hasResourceConstraints = false;
@@ -3817,6 +3875,7 @@ dist/
                 ? 'Resource constraints configured'
                 : 'Consider setting maxTokens and timeout for MCP tools',
             fixable: false,
+            guidance: 'Without token limits and timeouts, a runaway or malicious tool call can consume unlimited API credits and block the agent indefinitely.',
         });
         // TOOL-003: Check for dangerous tool usage
         let hasDangerousTools = false;
@@ -3842,6 +3901,7 @@ dist/
                 ? 'Potentially dangerous tools detected (shell/exec) - ensure proper restrictions'
                 : 'No obvious dangerous tools detected',
             fixable: false,
+            guidance: 'Shell and exec tools give the AI agent arbitrary command execution on the host. A prompt injection can leverage these to exfiltrate data, install malware, or pivot to other systems.',
         });
         // TOOL-004: Check for tool confirmation requirements
         let hasConfirmation = false;
@@ -3865,6 +3925,7 @@ dist/
                 ? 'Tool confirmation instructions detected'
                 : 'Consider requiring confirmation for destructive operations',
             fixable: false,
+            guidance: 'Without confirmation gates, the AI agent can execute destructive operations (file deletion, database drops, deployments) in a single step with no human checkpoint.',
         });
         return findings;
     }
@@ -4066,6 +4127,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -4553,6 +4615,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -4760,6 +4823,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5186,6 +5250,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5235,6 +5300,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5282,6 +5348,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5335,6 +5402,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5382,6 +5450,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5521,6 +5590,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'Reduce file size or exclude from scan',
+                        guidance: 'Oversized files can be used to evade security scanning. Attackers hide malicious content in large files knowing scanners will skip them.',
                     });
                     continue;
                 }
@@ -5768,6 +5838,7 @@ dist/
                             file: 'package.json',
                             fixable: false,
                             fix: 'No action needed',
+                            guidance: 'CVE-2026-25157 (CVSS 7.8) allows OS command injection via unescaped SSH project paths. Your version includes the fix.',
                         });
                     }
                     // CVE-004: Docker PATH Command Injection (same fix version)
@@ -5798,6 +5869,7 @@ dist/
                             file: 'package.json',
                             fixable: false,
                             fix: 'No action needed',
+                            guidance: 'CVE-2026-24763 (CVSS 8.8) allows command injection through unsafe PATH handling in Docker sandbox. Your version includes the fix.',
                         });
                     }
                 }
@@ -5848,6 +5920,7 @@ dist/
                         file: relativePath,
                         fixable: false,
                         fix: 'No action needed',
+                        guidance: 'Origin restrictions prevent cross-origin attacks against the control UI. Your configuration is correctly limiting allowed origins.',
                     });
                 }
             }
@@ -6885,6 +6958,7 @@ dist/
                 passed: true,
                 message: 'No unsafe curl-pipe installs detected',
                 fixable: false,
+                guidance: 'Piping curl directly to sh executes whatever the remote server returns. A compromised or MITM-ed server can inject arbitrary code.',
             });
         }
         // ---------- NEMO-002: Blueprint/artifact digest verification gap ----------
@@ -6955,6 +7029,7 @@ dist/
                 passed: true,
                 message: 'No digest verification gaps detected',
                 fixable: false,
+                guidance: 'Empty or missing digest fields bypass integrity verification, allowing tampered artifacts to pass through the supply chain unchecked.',
             });
         }
         // ---------- NEMO-003: Hot-reload policy paths reachable from user input ----------
@@ -7002,6 +7077,7 @@ dist/
                 passed: true,
                 message: 'No unsafe policy reload paths detected',
                 fixable: false,
+                guidance: 'User-reachable policy reload paths allow attackers to modify security policies via crafted requests, potentially disabling protections at runtime.',
             });
         }
         // ---------- NEMO-004: API key passed as CLI argument ----------
@@ -7049,6 +7125,7 @@ dist/
                 passed: true,
                 message: 'No CLI credential exposure detected',
                 fixable: false,
+                guidance: 'CLI arguments are visible in process listings (ps aux), shell history, and log files. Environment variables and stdin keep credentials out of these surfaces.',
             });
         }
         // ---------- NEMO-005: exec() with user-controlled string interpolation ----------
@@ -7094,6 +7171,7 @@ dist/
                 passed: true,
                 message: 'No command injection via exec() detected',
                 fixable: false,
+                guidance: 'exec() passes strings to /bin/sh, which interprets shell metacharacters. User-controlled interpolation in exec() enables arbitrary command execution.',
             });
         }
         // ---------- NEMO-006: Predictable /tmp paths without mktemp ----------
@@ -7140,6 +7218,7 @@ dist/
                 passed: true,
                 message: 'No predictable temp file paths detected',
                 fixable: false,
+                guidance: 'Hardcoded /tmp paths are predictable and enable symlink attacks (CWE-377). An attacker can pre-create a symlink to redirect writes to sensitive files.',
             });
         }
         // ---------- NEMO-007: Full process.env passthrough to subprocess ----------
@@ -7181,6 +7260,7 @@ dist/
                 passed: true,
                 message: 'No process.env leakage to subprocesses detected',
                 fixable: false,
+                guidance: 'Spreading process.env leaks all environment variables (including API keys and tokens) to child processes. Use an explicit allowlist of only needed variables.',
             });
         }
         // ---------- NEMO-008: TOCTOU race between verify and apply ----------
@@ -7238,6 +7318,7 @@ dist/
                 passed: true,
                 message: 'No TOCTOU race conditions detected',
                 fixable: false,
+                guidance: 'When verify and execute are separate steps, an attacker can swap the artifact between verification and use. Atomic verify-then-execute eliminates this race window.',
             });
         }
         // ---------- NEMO-009: Unsafe deserialization of untrusted data ----------
@@ -7376,6 +7457,7 @@ dist/
                 passed: true,
                 message: 'No unsafe deserialization detected',
                 fixable: false,
+                guidance: 'Unsafe deserialization (pickle, eval, yaml.load) can execute arbitrary code during data parsing. A crafted payload achieves full remote code execution.',
             });
         }
         // ---------- NEMO-010: Network egress policy allows data exfiltration ----------
@@ -7426,6 +7508,7 @@ dist/
                 passed: true,
                 message: 'No exfiltration-prone egress endpoints detected',
                 fixable: false,
+                guidance: 'Pre-allowed messaging APIs (Telegram, Discord, Slack) enable agents to exfiltrate data without user approval. Require explicit operator opt-in per deployment.',
             });
         }
         return findings;