pwnkit-cli 0.3.2 → 0.3.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/LICENSE +188 -0
  2. package/README.md +324 -0
  3. package/attacks/data-exfiltration/pii-leakage.yaml +27 -0
  4. package/attacks/encoding-bypass/base64-encoding.yaml +24 -0
  5. package/attacks/jailbreak/dan-roleplay.yaml +27 -0
  6. package/attacks/jailbreak/hypothetical-scenario.yaml +25 -0
  7. package/attacks/jailbreak/multilingual-bypass.yaml +22 -0
  8. package/attacks/output-manipulation/harmful-content.yaml +25 -0
  9. package/attacks/prompt-injection/context-manipulation.yaml +32 -0
  10. package/attacks/prompt-injection/direct-injection.yaml +28 -0
  11. package/attacks/prompt-injection/indirect-injection.yaml +33 -0
  12. package/attacks/system-prompt-extraction/direct-ask.yaml +30 -0
  13. package/attacks/system-prompt-extraction/markdown-exfil.yaml +26 -0
  14. package/attacks/tool-misuse/ssrf-via-tools.yaml +27 -0
  15. package/index.js +58458 -0
  16. package/package.json +29 -24
  17. package/dist/commands/audit.d.ts +0 -3
  18. package/dist/commands/audit.d.ts.map +0 -1
  19. package/dist/commands/audit.js +0 -32
  20. package/dist/commands/audit.js.map +0 -1
  21. package/dist/commands/findings.d.ts +0 -3
  22. package/dist/commands/findings.d.ts.map +0 -1
  23. package/dist/commands/findings.js +0 -110
  24. package/dist/commands/findings.js.map +0 -1
  25. package/dist/commands/history.d.ts +0 -3
  26. package/dist/commands/history.d.ts.map +0 -1
  27. package/dist/commands/history.js +0 -34
  28. package/dist/commands/history.js.map +0 -1
  29. package/dist/commands/index.d.ts +0 -7
  30. package/dist/commands/index.d.ts.map +0 -1
  31. package/dist/commands/index.js +0 -7
  32. package/dist/commands/index.js.map +0 -1
  33. package/dist/commands/replay.d.ts +0 -3
  34. package/dist/commands/replay.d.ts.map +0 -1
  35. package/dist/commands/replay.js +0 -83
  36. package/dist/commands/replay.js.map +0 -1
  37. package/dist/commands/review.d.ts +0 -3
  38. package/dist/commands/review.d.ts.map +0 -1
  39. package/dist/commands/review.js +0 -30
  40. package/dist/commands/review.js.map +0 -1
  41. package/dist/commands/run.d.ts +0 -16
  42. package/dist/commands/run.d.ts.map +0 -1
  43. package/dist/commands/run.js +0 -83
  44. package/dist/commands/run.js.map +0 -1
  45. package/dist/commands/scan.d.ts +0 -3
  46. package/dist/commands/scan.d.ts.map +0 -1
  47. package/dist/commands/scan.js +0 -187
  48. package/dist/commands/scan.js.map +0 -1
  49. package/dist/event-handler.d.ts +0 -19
  50. package/dist/event-handler.d.ts.map +0 -1
  51. package/dist/event-handler.js +0 -63
  52. package/dist/event-handler.js.map +0 -1
  53. package/dist/formatters/index.d.ts +0 -14
  54. package/dist/formatters/index.d.ts.map +0 -1
  55. package/dist/formatters/index.js +0 -56
  56. package/dist/formatters/index.js.map +0 -1
  57. package/dist/formatters/json.d.ts +0 -3
  58. package/dist/formatters/json.d.ts.map +0 -1
  59. package/dist/formatters/json.js +0 -4
  60. package/dist/formatters/json.js.map +0 -1
  61. package/dist/formatters/markdown.d.ts +0 -3
  62. package/dist/formatters/markdown.d.ts.map +0 -1
  63. package/dist/formatters/markdown.js +0 -90
  64. package/dist/formatters/markdown.js.map +0 -1
  65. package/dist/formatters/replay.d.ts +0 -24
  66. package/dist/formatters/replay.d.ts.map +0 -1
  67. package/dist/formatters/replay.js +0 -357
  68. package/dist/formatters/replay.js.map +0 -1
  69. package/dist/formatters/terminal.d.ts +0 -4
  70. package/dist/formatters/terminal.d.ts.map +0 -1
  71. package/dist/formatters/terminal.js +0 -190
  72. package/dist/formatters/terminal.js.map +0 -1
  73. package/dist/index.d.ts +0 -3
  74. package/dist/index.d.ts.map +0 -1
  75. package/dist/index.js +0 -157
  76. package/dist/index.js.map +0 -1
  77. package/dist/spinner.d.ts +0 -16
  78. package/dist/spinner.d.ts.map +0 -1
  79. package/dist/spinner.js +0 -97
  80. package/dist/spinner.js.map +0 -1
  81. package/dist/ui/ScanUI.d.ts +0 -37
  82. package/dist/ui/ScanUI.d.ts.map +0 -1
  83. package/dist/ui/ScanUI.js +0 -58
  84. package/dist/ui/ScanUI.js.map +0 -1
  85. package/dist/ui/renderScan.d.ts +0 -21
  86. package/dist/ui/renderScan.d.ts.map +0 -1
  87. package/dist/ui/renderScan.js +0 -191
  88. package/dist/ui/renderScan.js.map +0 -1
  89. package/dist/utils.d.ts +0 -12
  90. package/dist/utils.d.ts.map +0 -1
  91. package/dist/utils.js +0 -40
  92. package/dist/utils.js.map +0 -1
package/dist/utils.d.ts DELETED
@@ -1,12 +0,0 @@
1
- import type { ScanReport, AuditReport, ReviewReport, ScanDepth } from "@pwnkit/shared";
2
- /**
3
- * Check if an API key or CLI runtime is available for AI analysis.
4
- * Prints a warning if not — the scan will still run but without AI.
5
- */
6
- export declare function checkRuntimeAvailability(): void;
7
- /**
8
- * Encode a report as a base64url-encoded gzipped JSON string for use in a share URL.
9
- */
10
- export declare function buildShareUrl(report: ScanReport | AuditReport | ReviewReport): string;
11
- export declare function depthLabel(depth: ScanDepth): string;
12
- //# sourceMappingURL=utils.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvF;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAgB/C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,CAKrF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CASnD"}
package/dist/utils.js DELETED
@@ -1,40 +0,0 @@
1
- import { gzipSync } from "zlib";
2
- import chalk from "chalk";
3
- /**
4
- * Check if an API key or CLI runtime is available for AI analysis.
5
- * Prints a warning if not — the scan will still run but without AI.
6
- */
7
- export function checkRuntimeAvailability() {
8
- const hasApiKey = !!(process.env.OPENROUTER_API_KEY ||
9
- process.env.ANTHROPIC_API_KEY ||
10
- process.env.OPENAI_API_KEY);
11
- if (!hasApiKey) {
12
- console.log("");
13
- console.log(chalk.yellow(" Warning: No API key set. AI agent analysis will be skipped."));
14
- console.log(chalk.gray(" Set one of:"));
15
- console.log(chalk.gray(" export OPENROUTER_API_KEY=sk-or-..."));
16
- console.log(chalk.gray(" export ANTHROPIC_API_KEY=sk-ant-..."));
17
- console.log(chalk.gray(" export OPENAI_API_KEY=sk-..."));
18
- console.log("");
19
- }
20
- }
21
- /**
22
- * Encode a report as a base64url-encoded gzipped JSON string for use in a share URL.
23
- */
24
- export function buildShareUrl(report) {
25
- const json = JSON.stringify(report);
26
- const compressed = gzipSync(Buffer.from(json, "utf-8"));
27
- const b64 = compressed.toString("base64url");
28
- return `https://pwnkit.com/r#${b64}`;
29
- }
30
- export function depthLabel(depth) {
31
- switch (depth) {
32
- case "quick":
33
- return "~5 probes";
34
- case "default":
35
- return "~50 probes";
36
- case "deep":
37
- return "full coverage";
38
- }
39
- }
40
- //# sourceMappingURL=utils.js.map
package/dist/utils.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,CAAC,CAAC,CAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,CAC3B,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+C;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,wBAAwB,GAAG,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAgB;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC"}