praxis-sec 1.0.0 → 1.1.0

package/README.md

@@ -6,7 +6,7 @@
 
 <p align="center">
   <a href="https://github.com/Ganron007/Praxis/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/Ganron007/Praxis/ci.yml?label=CI" alt="CI"></a>
-  <a href="https://github.com/marketplace/actions/praxis-sec-scan"><img src="https://img.shields.io/badge/Marketplace-Praxis%20Security%20Scan-blue" alt="GitHub Marketplace"></a>
+  <a href="https://github.com/marketplace/actions/praxis-security-scan"><img src="https://img.shields.io/badge/Marketplace-Praxis%20Security%20Scan-blue" alt="GitHub Marketplace"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-green.svg" alt="License: MIT"></a>
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A518.0.0-blue.svg" alt="Node.js: >=18.0.0">
   <img src="https://img.shields.io/npm/v/praxis-sec?label=Version" alt="npm version">
@@ -40,14 +40,29 @@
 | **CI-native** | `scan ci` gates, SARIF for Code Scanning with real `security-severity` ranking, net-new PR gating (fails only on *introduced* findings), GitHub Action inline PR annotations |
 | **Reproducible** | Every scan reports a provenance fingerprint (tool, runtime, probe/threatpack/data versions), and CI enforces determinism between two runs |
 
+## Install
+
+```bash
+npm install -g praxis-sec     # then just run: praxis
+npx praxis-sec scan .         # or no install at all
+```
+
+Requires Node.js 18+. Nothing else — no account, no API key. LLM-assisted remediation is
+opt-in via `--deep`.
+
+> **The package is `praxis-sec`, but the command is `praxis`.** The unscoped `praxis` name on
+> npm belongs to an unrelated project, so the distribution carries a suffix. Installing it puts
+> a `praxis` executable on your PATH, so every example below reads `praxis …`.
+
 ## Quick start
 
 ```bash
-npm install && npm link
+npm install -g praxis-sec
 
 praxis scan .            # full 28-agent audit + AST taint evaluation
+praxis scan git <url>    # direct remote Git repo audit (clones to temp dir & audits)
 praxis fix .             # interactive LLM-guided fixes
-praxis redteam .         # dynamic AI red team & DAST prober
+praxis scan redteam .   # adversarial agent pack against a local codebase
 praxis agents audit .    # audit the AI/agent surface
 praxis agents mcp --test-live  # live MCP JSON-RPC probe
 praxis web               # local web UI for scans and findings
@@ -68,19 +83,25 @@ praxis vibe .            # emoji-graded A–F score
 ## Command groups
 
 ```
-praxis scan       secrets · full · changed · env · redteam · standard · ci
+praxis scan       full · git · secrets · changed · env · redteam · standard · ci
 praxis fix        interactive · quick · from-report · rotate · undo · env-template
 praxis agents     audit · skill · mcp · bom · serve (MCP server)
 praxis intel      update · deps · advisories
 praxis report     team · legal · checklist · sbom · benchmark
-praxis project    init · doctor · hooks · guard · watch · baseline · plugins · policy
-praxis rules      list · export · import      (portable rule bundles)
-praxis web        local web UI                (read-only, loopback by default)
+praxis project    init · doctor · hooks · guard · watch · baseline · memory · playbook · plugins · policy
+praxis rules      list · export · import          (portable rule bundles)
+praxis web        local web UI                    (read-only, loopback by default)
 
+praxis redteam    DAST red team against a live LLM endpoint
+praxis hooks      Claude Code tool-call security gate
 praxis vibe       emoji-graded A–F score
 praxis score      numeric score
 ```
 
+> `praxis redteam` takes a **live endpoint** (e.g. `praxis redteam https://api.example.com`).
+> To run the adversarial agent pack against a **local codebase**, use
+> `praxis scan redteam <path>`.
+
 ## 28 agents at a glance
 
 | Cluster | Agents | Covers |
@@ -110,7 +131,7 @@ Template: [`.env.example`](.env.example) · Verify with `praxis project doctor`.
 ## CI
 
 ```yaml
-- uses: Ganron007/Praxis@master
+- uses: Ganron007/Praxis@v1
   with:
     threshold: '80'
     net-new: 'true'        # fail only on findings introduced by the PR

package/cli/agents/ai-infra-inventory-agent.js

@@ -424,9 +424,13 @@ export class AiInfraInventoryAgent extends BaseAgent {
       // Eval-harness / sandbox misconfigurations (P-IMP-048)
       for (const check of EVAL_HARNESS_RISK) {
         if (check.regex.test(content)) {
+          const lNum = lineNum(check.regex);
+          const lines = content.split('\n');
+          const lineText = lines[lNum - 1] || '';
+          if (lineText.includes('// praxis-ignore') || lineText.includes('# praxis-ignore')) continue;
           findings.push(createFinding({
             file,
-            line: lineNum(check.regex),
+            line: lNum,
             severity: check.severity,
             category: this.category,
             rule: check.rule,

package/cli/bin/praxis.js

@@ -150,9 +150,50 @@ scan
   .option('--agentic-target <score>', 'Target security score for agentic loop', parseInt)
   .option('--hermes-only', 'Run only Hermes-relevant agents')
   .option('--fail-below <threshold>', 'Exit 1 if score is below threshold')
+  .option('-b, --branch <name>', 'Git branch or tag to scan (when target is a Git URL)')
+  .option('--depth <n>', 'Git clone depth (default: 1 for shallow clone, 0 for full history)', parseInt)
+  .option('--git-token <token>', 'Auth token for private Git repositories (or set PRAXIS_GIT_TOKEN / GITHUB_TOKEN)')
+  .option('--git-history', 'Include Git commit history secret scanning')
+  .option('--keep-clone', 'Keep cloned repository on disk after scan instead of deleting')
+  .option('--submodules', 'Recursively clone Git submodules')
   .option('-v, --verbose', 'Verbose output')
   .action(auditCommand);
 
+scan
+  .command('git <url>')
+  .description('Direct remote Git repository audit: clone to secure temp workspace and scan')
+  .option('-b, --branch <name>', 'Git branch or tag to clone and scan')
+  .option('--depth <n>', 'Git clone depth (default: 1 for shallow clone)', parseInt)
+  .option('--git-token <token>', 'Auth token for private repositories (or set PRAXIS_GIT_TOKEN / GITHUB_TOKEN)')
+  .option('--git-history', 'Include Git commit history secret scanning')
+  .option('--keep-clone', 'Keep cloned repository on disk after scan')
+  .option('--submodules', 'Recursively clone Git submodules')
+  .option('--json', 'Output results as JSON')
+  .option('--sarif', 'Output results in SARIF format')
+  .option('--csv', 'Output results as CSV')
+  .option('--md', 'Output results as Markdown')
+  .option('--html [file]', 'HTML report path (default: praxis-report.html)')
+  .option('--no-deps', 'Skip dependency audit')
+  .option('--no-ai', 'Skip AI classification')
+  .option('--deep', 'LLM-powered taint analysis for critical/high findings')
+  .option('-v, --verbose', 'Verbose output')
+  .action((url, opts) => auditCommand(url, opts));
+
+scan
+  .command('repo <url>')
+  .description('Alias for "praxis scan git <url>"')
+  .option('-b, --branch <name>', 'Git branch or tag to clone and scan')
+  .option('--depth <n>', 'Git clone depth (default: 1)', parseInt)
+  .option('--git-token <token>', 'Auth token for private repositories')
+  .option('--git-history', 'Include Git commit history secret scanning')
+  .option('--keep-clone', 'Keep cloned repository on disk after scan')
+  .option('--json', 'Output results as JSON')
+  .option('--sarif', 'Output results in SARIF format')
+  .option('--html [file]', 'HTML report path (default: praxis-report.html)')
+  .option('--no-deps', 'Skip dependency audit')
+  .option('-v, --verbose', 'Verbose output')
+  .action((url, opts) => auditCommand(url, opts));
+
 scan
   .command('secrets [path]')
   .description('Fast pattern-based secret scan only (no agents)')
@@ -162,6 +203,10 @@ scan
   .option('--sarif', 'Output results in SARIF format')
   .option('--include-tests', 'Also scan test files')
   .option('--no-cache', 'Force full rescan')
+  .option('-b, --branch <name>', 'Git branch or tag to scan (when target is a Git URL)')
+  .option('--depth <n>', 'Git clone depth (default: 1)', parseInt)
+  .option('--git-token <token>', 'Auth token for private Git repositories')
+  .option('--keep-clone', 'Keep cloned repository on disk after scan')
   .action(scanCommand);
 
 scan

package/cli/commands/audit.js

@@ -45,6 +45,7 @@ import { generatePDF, generatePrintHTML, isChromeAvailable } from '../utils/pdf-
 import { SecretsVerifier } from '../utils/secrets-verifier.js';
 import { applyInlineAnnotations } from './autofix.js';
 import { buildScanFingerprint } from '../utils/scan-fingerprint.js';
+import { isGitUrl, cloneGitRepo } from '../core/git-clone.js';
 
 // =============================================================================
 // CONSTANTS
@@ -83,18 +84,44 @@ const EFFORT_MAP = {
 // =============================================================================
 
 export async function auditCommand(targetPath = '.', options = {}) {
-  const absolutePath = path.resolve(targetPath);
   const machineOutput = options.json || options.sarif || options.csv || options.md;
+  let gitClone = null;
+  let effectivePath = targetPath;
 
-  if (!fs.existsSync(absolutePath)) {
-    console.error(chalk.red(`  Path does not exist: ${absolutePath}`));
-    process.exitCode = 1;
-    return;
+  // ── Remote Git Repository Support ─────────────────────────────────────────
+  if (isGitUrl(targetPath)) {
+    if (!machineOutput) printBanner();
+    const gitSpinner = machineOutput ? null : ora({ text: chalk.cyan(`Cloning remote Git repository: ${targetPath}...`), color: 'cyan' }).start();
+    try {
+      gitClone = cloneGitRepo(targetPath, {
+        branch: options.branch,
+        depth: options.depth,
+        gitToken: options.gitToken,
+        submodules: options.submodules,
+        gitHistory: options.gitHistory,
+      });
+      effectivePath = gitClone.tempDir;
+      if (gitSpinner) gitSpinner.succeed(chalk.green(`Cloned ${gitClone.repoName} (${gitClone.displayUrl}) to temporary workspace`));
+    } catch (err) {
+      if (gitSpinner) gitSpinner.fail(chalk.red(err.message));
+      else console.error(chalk.red(err.message));
+      process.exitCode = 1;
+      return;
+    }
   }
 
-  if (!machineOutput) {
-    printBanner();
-  }
+  try {
+    const absolutePath = path.resolve(effectivePath);
+
+    if (!fs.existsSync(absolutePath)) {
+      console.error(chalk.red(`  Path does not exist: ${absolutePath}`));
+      process.exitCode = 1;
+      return;
+    }
+
+    if (!machineOutput && !gitClone) {
+      printBanner();
+    }
 
   // ── Cache Layer ──────────────────────────────────────────────────────────
   // --deep forces a fresh scan so taint analysis covers every finding,
@@ -624,6 +651,15 @@ export async function auditCommand(targetPath = '.', options = {}) {
     }
     process.exitCode = scoreResult.score >= threshold ? 0 : 1;
   }
+  } finally {
+    if (gitClone) {
+      if (!options.keepClone) {
+        gitClone.cleanup();
+      } else if (!machineOutput) {
+        console.log(chalk.gray(`\n  Cloned repository retained at: ${gitClone.tempDir}`));
+      }
+    }
+  }
 }
 
 /**

package/cli/commands/scan.js

@@ -38,6 +38,7 @@ import {
 import { isHighEntropyMatch, getConfidence } from '../utils/entropy.js';
 import * as output from '../utils/output.js';
 import { CacheManager } from '../utils/cache-manager.js';
+import { isGitUrl, cloneGitRepo } from '../core/git-clone.js';
 
 // =============================================================================
 // CUSTOM PATTERNS (.praxis.json)
@@ -86,10 +87,37 @@ function loadCustomPatterns(rootPath) {
 // =============================================================================
 
 export async function scanCommand(targetPath = '.', options = {}) {
-  const absolutePath = path.resolve(targetPath);
+  let gitClone = null;
+  let effectivePath = targetPath;
+
+  if (isGitUrl(targetPath)) {
+    const gitSpinner = ora({ text: chalk.cyan(`Cloning remote Git repository: ${targetPath}...`), color: 'cyan' }).start();
+    try {
+      gitClone = cloneGitRepo(targetPath, {
+        branch: options.branch,
+        depth: options.depth,
+        gitToken: options.gitToken,
+        submodules: options.submodules,
+      });
+      effectivePath = gitClone.tempDir;
+      gitSpinner.succeed(chalk.green(`Cloned ${gitClone.repoName} (${gitClone.displayUrl})`));
+    } catch (err) {
+      gitSpinner.fail(chalk.red(err.message));
+      process.exit(1);
+    }
+  }
+
+  const cleanup = () => {
+    if (gitClone && !options.keepClone) {
+      gitClone.cleanup();
+    }
+  };
+
+  const absolutePath = path.resolve(effectivePath);
 
   // Validate path exists
   if (!fs.existsSync(absolutePath)) {
+    cleanup();
     output.error(`Path does not exist: ${absolutePath}`);
     process.exit(1);
   }
@@ -209,10 +237,12 @@ export async function scanCommand(targetPath = '.', options = {}) {
     }
 
     // Exit with appropriate code
+    cleanup();
     const hasFindings = allResults.length > 0;
     process.exit(hasFindings ? 1 : 0);
 
   } catch (err) {
+    cleanup();
     spinner.fail('Scan failed');
     output.error(err.message);
     process.exit(1);

package/cli/core/.praxis/context.json

@@ -0,0 +1,210 @@
+{
+  "version": "1.0.0",
+  "generatedAt": "2026-10-02T18:49:22.592Z",
+  "rootPath": "C:\\STUDY\\Github\\CADRE-Platform\\Praxis\\cli\\core",
+  "recon": {
+    "frameworks": [],
+    "languages": [
+      "javascript"
+    ],
+    "apiRoutes": [],
+    "authPatterns": [],
+    "databases": [],
+    "cloudProviders": [],
+    "frontendExposure": [],
+    "packageManagers": [],
+    "cicd": [],
+    "hasDockerfile": false,
+    "hasTerraform": false,
+    "hasKubernetes": false,
+    "envFiles": [],
+    "configFiles": [],
+    "hasModelFiles": false,
+    "modelFiles": []
+  },
+  "fileIndex": {
+    "branding.js": {
+      "hash": "fa5bc771350efb48054cb614633a03a666b9ad5dd8d871dab41778076a71ab29",
+      "size": 1842,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "env.js": {
+      "hash": "2329f75078712d12885da3fdeed8323080102994dc1a80060c943b7e4c449f61",
+      "size": 1118,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "errors.js": {
+      "hash": "bfb1c9b324bca53a2bc52aa89e0111d0a4b66bb7758349a78f0cf9370d66197d",
+      "size": 1785,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "fs.js": {
+      "hash": "891d0ea6d876b57b9b6c87b32eaec3fa288cb02843198f00591fd5856aa01e62",
+      "size": 1786,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "version.js": {
+      "hash": "9aebd648284fa4cec1b956af4ac49be716b5aa6cf328854160a42e349c0315ac",
+      "size": 2489,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "ast/guardrail-detector.js": {
+      "hash": "d8d43bf9158eca11e3299b54547b9e77677f791e8b388878bc270e039bca9c2b",
+      "size": 5241,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "ast/index.js": {
+      "hash": "8ce6688a476826aa1a87071b6e0b6bce033e30573e4732a8fc48d5b800596012",
+      "size": 960,
+      "lastScanned": "2026-10-02T18:49:22.590Z"
+    },
+    "ast/parser.js": {
+      "hash": "c277d9fbf8029afdf4018a8d4794596c7ef29260e765e67fb4eb8f6930ffa99e",
+      "size": 21531,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "ast/scope-tree.js": {
+      "hash": "ab409fe692cddd921bb9733a78357b598db00da1e5ada8cb69497b416f641d77",
+      "size": 7126,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "ast/taint-tracker.js": {
+      "hash": "c225e3f85c57f4f2831300b42426d5119e612b23839f3a25e2035bf9d5417476",
+      "size": 6316,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "web/jobs.js": {
+      "hash": "91bef088c5f2d713300063ee65b0f6065e51a29432a96a7ac7e101cec05fcd19",
+      "size": 7025,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "web/projects.js": {
+      "hash": "6961f8ee3ea4a1d18620cd4d2ab802ddc5db17db106743990ac91af870b006c5",
+      "size": 5118,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "web/server.js": {
+      "hash": "fba1f8c517d3042520788336fb4efa6741dc7221fda2b04e0d58d7085323582f",
+      "size": 14108,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "web/ui.js": {
+      "hash": "c582824d031a66d3f068c594540b177c129d90259c366d522db65cd5dd41134c",
+      "size": 75416,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "output/compliance.js": {
+      "hash": "830b66d76e9029d0d569d312b5740d9d521b2408858dce519bb0048a25205ab0",
+      "size": 4057,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "output/html-theme.js": {
+      "hash": "33cacad539fb303e1e33f4cdd6868599d3824d4ea6f1d4750bdefbba21461fcd",
+      "size": 6823,
+      "lastScanned": "2026-10-02T18:49:22.591Z"
+    },
+    "output/index.js": {
+      "hash": "dfff64688caed4822b117bbb75ddd796666e53b2ff15b3a868abb94954d2db9a",
+      "size": 1503,
+      "lastScanned": "2026-10-02T18:49:22.592Z"
+    },
+    "output/json.js": {
+      "hash": "29cdf0b268b658fb24badacca9fe1a42e996acc5c25f6601ebde529a1501c8c7",
+      "size": 1427,
+      "lastScanned": "2026-10-02T18:49:22.592Z"
+    },
+    "output/sarif.js": {
+      "hash": "0b209b9d403e48859511880ea7caf36f8f435dafe80dc7318bc9f46bb748cc2c",
+      "size": 8863,
+      "lastScanned": "2026-10-02T18:49:22.592Z"
+    }
+  },
+  "lastFindings": {
+    "cli/__tests__/ast-engine.test.js": [
+      {
+        "line": 0,
+        "column": 0,
+        "severity": "high",
+        "category": "history",
+        "rule": "GIT_HISTORY_SECRET",
+        "title": "Historical Secret: Generic API Key Assignment",
+        "description": "Secret was removed from code but still exists in git history (commit 322700ad27, Tue Aug 18 11:19:47 2026 +0530). Anyone with repo access can retrieve it.",
+        "matched": "API_KEY ***123\"",
+        "confidence": "low",
+        "cwe": null,
+        "owasp": null,
+        "fix": "Rotate this credential immediately, then clean history: npx bfg --replace-text passwords.txt"
+      }
+    ],
+    "ast/guardrail-detector.js": [
+      {
+        "line": 70,
+        "column": 0,
+        "severity": "high",
+        "category": "llm",
+        "rule": "AI_EVAL_HARNESS_DISABLED_GUARDRAILS",
+        "title": "Eval Harness Disables Safety Guardrails",
+        "description": "An evaluation harness or agent-sandbox config disables model safety guardrails. This is the configuration class behind the OpenAI–Hugging Face July 2026 incident (models evaluated with cyber refusals disabled), and enables unchecked autonomous behavior during evaluation.",
+        "matched": "AI_EVAL_HARNESS_DISABLED_GUARDRAILS",
+        "confidence": "medium",
+        "cwe": "CWE-284",
+        "owasp": "ASI08",
+        "fix": "Keep safety guardrails enabled during evaluation, or gate their removal behind explicit containment controls (no internet, isolated egress)."
+      }
+    ],
+    "web/server.js": [
+      {
+        "line": 171,
+        "column": 46,
+        "severity": "medium",
+        "category": "ssrf",
+        "rule": "SSRF_INTERNAL_IP",
+        "title": "SSRF: Internal IP Pattern",
+        "description": "Internal IP address in code. Verify it is not reachable via user-controlled URLs.",
+        "matched": "127.0.0.1",
+        "confidence": "low",
+        "cwe": "CWE-918",
+        "owasp": "A10:2021",
+        "fix": "Block private IP ranges in URL validation for user-supplied URLs"
+      }
+    ],
+    "../../../../../../Users/Ganro/.cursor/mcp.json": [
+      {
+        "line": 1,
+        "column": 0,
+        "severity": "medium",
+        "category": "llm",
+        "rule": "MCP_SHADOW_CONFIG",
+        "title": "MCP: 1 Shadow Server(s) in User Config",
+        "description": "Found 1 MCP server(s) configured outside the project in C:\\Users\\Ganro\\.cursor\\mcp.json. These operate outside your project's security controls.",
+        "matched": "redstrike",
+        "confidence": "medium",
+        "cwe": "CWE-269",
+        "owasp": "A05:2021",
+        "fix": "Review shadow MCP servers. Move project-specific servers to the project mcp.json and track in version control."
+      }
+    ],
+    "observability": [
+      {
+        "line": 1,
+        "column": 0,
+        "severity": "medium",
+        "category": "llm",
+        "rule": "NO_OBSERVABILITY",
+        "title": "AI in Use Without Observability/Tracing",
+        "description": "This project calls LLMs, but no AI tracing/observability wiring (LangSmith, Langfuse, Helicone, OpenTelemetry, ...) was found outside dependency manifests. Without traces you cannot detect prompt-injection events, monitor output quality, or respond to AI incidents — EU AI Act Art. 12 / ISO 42001 A.6.2.6.",
+        "matched": "no tracing wiring in 19 evidence file(s)",
+        "confidence": "medium",
+        "cwe": "CWE-778",
+        "owasp": "ASI03",
+        "fix": "Wire an AI tracing/observability stack (e.g., Langfuse, Helicone, or OpenTelemetry) and log prompts, tool calls, and outputs with retention."
+      }
+    ]
+  },
+  "stats": {
+    "totalFiles": 19,
+    "totalFindings": 5,
+    "lastScore": 86.2,
+    "lastGrade": "B"
+  }
+}