praxis-sec 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +170 -0
- package/ai-defense/cost-protection.md +292 -0
- package/ai-defense/llm-security-checklist.md +324 -0
- package/ai-defense/prompt-injection-patterns.js +283 -0
- package/ai-defense/system-prompt-armor.md +327 -0
- package/checklists/launch-day.md +168 -0
- package/cli/agents/abom-generator.js +225 -0
- package/cli/agents/agent-attestation-agent.js +318 -0
- package/cli/agents/agent-config-scanner.js +787 -0
- package/cli/agents/agent-telemetry-agent.js +415 -0
- package/cli/agents/agentic-security-agent.js +296 -0
- package/cli/agents/agentic-supply-chain-agent.js +463 -0
- package/cli/agents/ai-infra-inventory-agent.js +449 -0
- package/cli/agents/api-fuzzer.js +345 -0
- package/cli/agents/auth-bypass-agent.js +348 -0
- package/cli/agents/base-agent.js +280 -0
- package/cli/agents/cicd-scanner.js +300 -0
- package/cli/agents/config-auditor.js +757 -0
- package/cli/agents/deep-analyzer.js +776 -0
- package/cli/agents/endpoint-agent-abuse-agent.js +404 -0
- package/cli/agents/exception-handler-agent.js +187 -0
- package/cli/agents/git-history-scanner.js +169 -0
- package/cli/agents/governance-audits.js +138 -0
- package/cli/agents/hermes-security-agent.js +536 -0
- package/cli/agents/html-reporter.js +1125 -0
- package/cli/agents/index.js +147 -0
- package/cli/agents/injection-tester.js +502 -0
- package/cli/agents/legal-risk-agent.js +328 -0
- package/cli/agents/llm-redteam.js +199 -0
- package/cli/agents/managed-agent-scanner.js +333 -0
- package/cli/agents/mcp-security-agent.js +588 -0
- package/cli/agents/memory-poisoning-agent.js +305 -0
- package/cli/agents/mobile-scanner.js +231 -0
- package/cli/agents/model-file-scanner.js +259 -0
- package/cli/agents/orchestrator.js +355 -0
- package/cli/agents/pii-compliance-agent.js +301 -0
- package/cli/agents/policy-engine.js +229 -0
- package/cli/agents/prompt-injection-prober.js +224 -0
- package/cli/agents/rag-security-agent.js +204 -0
- package/cli/agents/recon-agent.js +207 -0
- package/cli/agents/sbom-generator.js +265 -0
- package/cli/agents/scoring-engine.js +273 -0
- package/cli/agents/ssrf-prober.js +130 -0
- package/cli/agents/stateful-watcher.js +238 -0
- package/cli/agents/supabase-rls-agent.js +154 -0
- package/cli/agents/supply-chain-agent.js +857 -0
- package/cli/agents/swarm-orchestrator.js +200 -0
- package/cli/agents/verifier-agent.js +303 -0
- package/cli/agents/vibe-coding-agent.js +250 -0
- package/cli/bin/praxis.js +866 -0
- package/cli/commands/abom.js +73 -0
- package/cli/commands/agent-fix.js +1245 -0
- package/cli/commands/audit.js +1180 -0
- package/cli/commands/autofix.js +383 -0
- package/cli/commands/baseline.js +193 -0
- package/cli/commands/benchmark.js +327 -0
- package/cli/commands/checklist.js +223 -0
- package/cli/commands/ci.js +403 -0
- package/cli/commands/deps.js +516 -0
- package/cli/commands/diff.js +200 -0
- package/cli/commands/doctor.js +195 -0
- package/cli/commands/env-audit.js +349 -0
- package/cli/commands/fix.js +218 -0
- package/cli/commands/guard.js +396 -0
- package/cli/commands/hooks.js +278 -0
- package/cli/commands/init.js +514 -0
- package/cli/commands/legal.js +158 -0
- package/cli/commands/live-advisories.js +241 -0
- package/cli/commands/mcp.js +660 -0
- package/cli/commands/openclaw.js +386 -0
- package/cli/commands/red-team.js +350 -0
- package/cli/commands/redteam.js +78 -0
- package/cli/commands/remediate.js +797 -0
- package/cli/commands/rotate.js +768 -0
- package/cli/commands/rules.js +196 -0
- package/cli/commands/scan-mcp.js +534 -0
- package/cli/commands/scan-skill.js +588 -0
- package/cli/commands/scan-standard.js +251 -0
- package/cli/commands/scan.js +524 -0
- package/cli/commands/score.js +449 -0
- package/cli/commands/shell.js +514 -0
- package/cli/commands/team-report.js +398 -0
- package/cli/commands/undo.js +161 -0
- package/cli/commands/update-intel.js +126 -0
- package/cli/commands/vibe-check.js +276 -0
- package/cli/commands/watch.js +757 -0
- package/cli/commands/web.js +63 -0
- package/cli/core/ast/guardrail-detector.js +141 -0
- package/cli/core/ast/index.js +22 -0
- package/cli/core/ast/parser.js +676 -0
- package/cli/core/ast/scope-tree.js +287 -0
- package/cli/core/ast/taint-tracker.js +158 -0
- package/cli/core/branding.js +37 -0
- package/cli/core/env.js +38 -0
- package/cli/core/errors.js +61 -0
- package/cli/core/fs.js +62 -0
- package/cli/core/output/compliance.js +90 -0
- package/cli/core/output/html-theme.js +158 -0
- package/cli/core/output/index.js +57 -0
- package/cli/core/output/json.js +48 -0
- package/cli/core/output/sarif.js +240 -0
- package/cli/core/version.js +67 -0
- package/cli/core/web/jobs.js +183 -0
- package/cli/core/web/projects.js +146 -0
- package/cli/core/web/server.js +439 -0
- package/cli/data/atlas-knowledge.json +5640 -0
- package/cli/data/eaa-catalog.json +39 -0
- package/cli/data/known-mcps.json +26 -0
- package/cli/data/probes/prompt-injection-corpus.json +271 -0
- package/cli/data/threat-intel.json +85 -0
- package/cli/data/threatpacks/latest.json +41 -0
- package/cli/hooks/patterns.js +313 -0
- package/cli/hooks/post-tool-use.js +140 -0
- package/cli/hooks/pre-tool-use.js +186 -0
- package/cli/index.js +90 -0
- package/cli/providers/llm-provider.js +766 -0
- package/cli/utils/autofix-rules.js +74 -0
- package/cli/utils/cache-manager.js +310 -0
- package/cli/utils/compliance-map.js +191 -0
- package/cli/utils/entropy.js +132 -0
- package/cli/utils/fix-ledger.js +127 -0
- package/cli/utils/hermes-tool-registry.js +252 -0
- package/cli/utils/intel/cache.js +61 -0
- package/cli/utils/intel/http.js +88 -0
- package/cli/utils/intel/index.js +235 -0
- package/cli/utils/intel/merge.js +229 -0
- package/cli/utils/intel/sources/epss.js +54 -0
- package/cli/utils/intel/sources/ghsa.js +81 -0
- package/cli/utils/intel/sources/gitguardian.js +40 -0
- package/cli/utils/intel/sources/gitleaks.js +101 -0
- package/cli/utils/intel/sources/kev.js +38 -0
- package/cli/utils/intel/sources/nvd.js +84 -0
- package/cli/utils/intel/sources/osv.js +132 -0
- package/cli/utils/intel/sources/phylum.js +44 -0
- package/cli/utils/intel/sources/snyk.js +46 -0
- package/cli/utils/intel/sources/socket.js +69 -0
- package/cli/utils/intel/sources/sonatype.js +84 -0
- package/cli/utils/intel/sources/threatpack.js +69 -0
- package/cli/utils/mcp-trust.js +60 -0
- package/cli/utils/output.js +251 -0
- package/cli/utils/patterns.js +1130 -0
- package/cli/utils/pdf-generator.js +94 -0
- package/cli/utils/plugin-loader.js +364 -0
- package/cli/utils/rule-import.js +228 -0
- package/cli/utils/rule-registry.js +426 -0
- package/cli/utils/scan-fingerprint.js +109 -0
- package/cli/utils/scan-playbook.js +312 -0
- package/cli/utils/score-history.js +119 -0
- package/cli/utils/secrets-verifier.js +247 -0
- package/cli/utils/security-memory.js +296 -0
- package/cli/utils/standards/atlas-knowledge.js +87 -0
- package/cli/utils/standards/index.js +127 -0
- package/cli/utils/standards/sources/avid.js +45 -0
- package/cli/utils/standards/sources/eu-ai-act.js +89 -0
- package/cli/utils/standards/sources/google-saif.js +39 -0
- package/cli/utils/standards/sources/iso-42001.js +94 -0
- package/cli/utils/standards/sources/mitre-atlas.js +54 -0
- package/cli/utils/standards/sources/nist-ai-600-1.js +45 -0
- package/cli/utils/standards/sources/owasp-llm.js +45 -0
- package/cli/utils/standards/sources/owasp-ml.js +45 -0
- package/cli/utils/threat-intel.js +265 -0
- package/configs/firebase/firestore-rules.txt +215 -0
- package/configs/firebase/security-checklist.md +236 -0
- package/configs/firebase/storage-rules.txt +206 -0
- package/configs/gitignore-template +258 -0
- package/configs/nextjs-security-headers.js +220 -0
- package/configs/praxisignore-template +50 -0
- package/configs/supabase/secure-client.ts +225 -0
- package/configs/supabase/security-checklist.md +278 -0
- package/docs/THIRD_PARTY_NOTICES.md +26 -0
- package/docs/THREAT_INTEL.md +292 -0
- package/docs/USAGE.md +1205 -0
- package/docs/design/WEB-UI.md +82 -0
- package/package.json +71 -0
- package/scripts/check-determinism.mjs +119 -0
- package/snippets/README.md +122 -0
- package/snippets/api-security/api-security-checklist.md +412 -0
- package/snippets/api-security/cors-config.ts +322 -0
- package/snippets/api-security/input-validation.ts +430 -0
- package/snippets/auth/jwt-checklist.md +322 -0
- package/snippets/rate-limiting/nextjs-middleware.ts +211 -0
- package/snippets/rate-limiting/upstash-ratelimit.ts +229 -0
package/cli/index.js
ADDED
|
@@ -0,0 +1,90 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Praxis CLI - Module Entry Point
|
|
3
|
+
* ===================================
|
|
4
|
+
*
|
|
5
|
+
* This file exports the CLI commands and agents for programmatic use.
|
|
6
|
+
* For normal CLI usage, run: npx praxis-sec
|
|
7
|
+
*/
|
|
8
|
+
|
|
9
|
+
// ── Core Commands ─────────────────────────────────────────────────────────────
|
|
10
|
+
export { scanCommand } from './commands/scan.js';
|
|
11
|
+
export { checklistCommand } from './commands/checklist.js';
|
|
12
|
+
export { initCommand } from './commands/init.js';
|
|
13
|
+
export { depsCommand, runDepsAudit } from './commands/deps.js';
|
|
14
|
+
export { scoreCommand } from './commands/score.js';
|
|
15
|
+
|
|
16
|
+
// ── v4.0 Commands ─────────────────────────────────────────────────────────────
|
|
17
|
+
export { auditCommand } from './commands/audit.js';
|
|
18
|
+
export { redTeamCommand } from './commands/red-team.js';
|
|
19
|
+
export { watchCommand } from './commands/watch.js';
|
|
20
|
+
|
|
21
|
+
// ── v4.2 Commands ─────────────────────────────────────────────────────────────
|
|
22
|
+
export { doctorCommand } from './commands/doctor.js';
|
|
23
|
+
|
|
24
|
+
// ── v4.3 Commands ─────────────────────────────────────────────────────────────
|
|
25
|
+
export { baselineCommand } from './commands/baseline.js';
|
|
26
|
+
|
|
27
|
+
// ── v6.0 Commands ─────────────────────────────────────────────────────────────
|
|
28
|
+
export { diffCommand } from './commands/diff.js';
|
|
29
|
+
export { vibeCheckCommand } from './commands/vibe-check.js';
|
|
30
|
+
export { benchmarkCommand } from './commands/benchmark.js';
|
|
31
|
+
export { openclawCommand } from './commands/openclaw.js';
|
|
32
|
+
export { scanSkillCommand } from './commands/scan-skill.js';
|
|
33
|
+
export { abomCommand } from './commands/abom.js';
|
|
34
|
+
export { updateIntelCommand } from './commands/update-intel.js';
|
|
35
|
+
export { scanStandardCommand } from './commands/scan-standard.js';
|
|
36
|
+
|
|
37
|
+
// ── Patterns ──────────────────────────────────────────────────────────────────
|
|
38
|
+
export { SECRET_PATTERNS, SECURITY_PATTERNS, SKIP_DIRS, SKIP_EXTENSIONS, SKIP_FILENAMES } from './utils/patterns.js';
|
|
39
|
+
|
|
40
|
+
// ── Agent Framework ───────────────────────────────────────────────────────────
|
|
41
|
+
export { BaseAgent, createFinding } from './agents/base-agent.js';
|
|
42
|
+
export { Orchestrator } from './agents/orchestrator.js';
|
|
43
|
+
export { buildOrchestrator } from './agents/index.js';
|
|
44
|
+
|
|
45
|
+
// ── Individual Agents ─────────────────────────────────────────────────────────
|
|
46
|
+
export { ReconAgent } from './agents/recon-agent.js';
|
|
47
|
+
export { InjectionTester } from './agents/injection-tester.js';
|
|
48
|
+
export { AuthBypassAgent } from './agents/auth-bypass-agent.js';
|
|
49
|
+
export { SSRFProber } from './agents/ssrf-prober.js';
|
|
50
|
+
export { SupplyChainAudit } from './agents/supply-chain-agent.js';
|
|
51
|
+
export { ConfigAuditor } from './agents/config-auditor.js';
|
|
52
|
+
export { LLMRedTeam } from './agents/llm-redteam.js';
|
|
53
|
+
export { MobileScanner } from './agents/mobile-scanner.js';
|
|
54
|
+
export { GitHistoryScanner } from './agents/git-history-scanner.js';
|
|
55
|
+
export { CICDScanner } from './agents/cicd-scanner.js';
|
|
56
|
+
export { APIFuzzer } from './agents/api-fuzzer.js';
|
|
57
|
+
export { SupabaseRLSAgent } from './agents/supabase-rls-agent.js';
|
|
58
|
+
export { VibeCodingAgent } from './agents/vibe-coding-agent.js';
|
|
59
|
+
export { ExceptionHandlerAgent } from './agents/exception-handler-agent.js';
|
|
60
|
+
export { AgentConfigScanner } from './agents/agent-config-scanner.js';
|
|
61
|
+
export { ABOMGenerator } from './agents/abom-generator.js';
|
|
62
|
+
export { ModelFileScanner } from './agents/model-file-scanner.js';
|
|
63
|
+
export { PromptInjectionProber } from './agents/prompt-injection-prober.js';
|
|
64
|
+
|
|
65
|
+
// ── Supporting Modules ────────────────────────────────────────────────────────
|
|
66
|
+
export { ScoringEngine, GRADES, CATEGORIES } from './agents/scoring-engine.js';
|
|
67
|
+
export { SBOMGenerator } from './agents/sbom-generator.js';
|
|
68
|
+
export { PolicyEngine } from './agents/policy-engine.js';
|
|
69
|
+
export { HTMLReporter } from './agents/html-reporter.js';
|
|
70
|
+
|
|
71
|
+
// ── Caching ──────────────────────────────────────────────────────────────────
|
|
72
|
+
export { CacheManager } from './utils/cache-manager.js';
|
|
73
|
+
|
|
74
|
+
// ── LLM Providers ─────────────────────────────────────────────────────────────
|
|
75
|
+
export { createProvider, autoDetectProvider } from './providers/llm-provider.js';
|
|
76
|
+
|
|
77
|
+
// ── v8.0.0 — Praxis × Hermes Agent ────────────────────────────────────────
|
|
78
|
+
export { HermesSecurityAgent } from './agents/hermes-security-agent.js';
|
|
79
|
+
export { AgentAttestationAgent } from './agents/agent-attestation-agent.js';
|
|
80
|
+
export { HERMES_TOOLS, registerWithHermes, verifyIntegrity } from './utils/hermes-tool-registry.js';
|
|
81
|
+
|
|
82
|
+
// ── AI Security Standards (modular registry) ─────────────────────────────
|
|
83
|
+
export {
|
|
84
|
+
ALL_STANDARDS,
|
|
85
|
+
listStandards,
|
|
86
|
+
getStandard,
|
|
87
|
+
mapFindingToStandards,
|
|
88
|
+
getStandardsSummary,
|
|
89
|
+
filterFindingsByStandard,
|
|
90
|
+
} from './utils/standards/index.js';
|