security-harness-kit 0.5.6 → 0.5.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -3
- package/npm-shrinkwrap.json +2 -2
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -30,6 +30,7 @@ With `shk`, you can:
|
|
|
30
30
|
- Install Git pre-commit hooks.
|
|
31
31
|
- Install managed hooks for Claude Code, Cursor, Codex, GitHub Copilot, Antigravity, and Windsurf.
|
|
32
32
|
- Preview metadata-only audit logs to understand blocked hook activity without storing detected values.
|
|
33
|
+
- Statically audit MCP client configurations for unsafe package, credential, HTTP, and filesystem settings.
|
|
33
34
|
- Generate a GitHub Actions workflow that runs `shk scan` on every pull request.
|
|
34
35
|
- Diagnose ignore file and `.env` safety coverage.
|
|
35
36
|
- Deploy AI agent skills to Claude Code, Codex, Cursor, GitHub Copilot, Antigravity, and Windsurf project directories.
|
|
@@ -215,6 +216,11 @@ shk audit --reason action-guard
|
|
|
215
216
|
shk audit --since 7d --tool cursor
|
|
216
217
|
shk audit --json
|
|
217
218
|
|
|
219
|
+
shk mcp audit
|
|
220
|
+
shk mcp audit --json
|
|
221
|
+
shk mcp audit --sarif
|
|
222
|
+
shk mcp audit --global
|
|
223
|
+
|
|
218
224
|
shk env dotenvx import-keys .env.keys
|
|
219
225
|
shk env encrypt .env --in-place
|
|
220
226
|
shk env run -- npm test
|
|
@@ -237,7 +243,7 @@ shk ci init github
|
|
|
237
243
|
shk ci init github --upload-sarif
|
|
238
244
|
shk ci init github --dry-run
|
|
239
245
|
shk ci init github --mode audit
|
|
240
|
-
shk ci init github --shk-version v0.5.
|
|
246
|
+
shk ci init github --shk-version v0.5.7
|
|
241
247
|
|
|
242
248
|
shk skills install
|
|
243
249
|
shk skills install --tool claude-code --global
|
|
@@ -303,8 +309,8 @@ shk env key migrate --to 1password
|
|
|
303
309
|
| Code | Meaning |
|
|
304
310
|
|------|---------|
|
|
305
311
|
| `0` | No findings at or above the active threshold, or command completed successfully. |
|
|
306
|
-
| `1` | Scan findings met or exceeded the active threshold. |
|
|
307
|
-
| `2` | Blocking AI pre-hook triggered, or a
|
|
312
|
+
| `1` | Scan or MCP audit findings met or exceeded the active threshold. |
|
|
313
|
+
| `2` | Blocking AI pre-hook triggered, or a scan/MCP audit runtime or configuration error occurred. |
|
|
308
314
|
|
|
309
315
|
## Safety Notes
|
|
310
316
|
|
package/npm-shrinkwrap.json
CHANGED
|
@@ -23,7 +23,7 @@
|
|
|
23
23
|
"hasInstallScript": true,
|
|
24
24
|
"license": "MIT",
|
|
25
25
|
"name": "security-harness-kit",
|
|
26
|
-
"version": "0.5.
|
|
26
|
+
"version": "0.5.7"
|
|
27
27
|
},
|
|
28
28
|
"node_modules/@isaacs/cliui": {
|
|
29
29
|
"engines": {
|
|
@@ -542,5 +542,5 @@
|
|
|
542
542
|
}
|
|
543
543
|
},
|
|
544
544
|
"requires": true,
|
|
545
|
-
"version": "0.5.
|
|
545
|
+
"version": "0.5.7"
|
|
546
546
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"artifactDownloadUrls": [
|
|
3
|
-
"https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.5.
|
|
3
|
+
"https://github.com/Kazuki-tam/security-harness-kit/releases/download/v0.5.7"
|
|
4
4
|
],
|
|
5
5
|
"bin": {
|
|
6
6
|
"shk": "run-shk.js"
|
|
@@ -85,7 +85,7 @@
|
|
|
85
85
|
"zipExt": ".tar.xz"
|
|
86
86
|
}
|
|
87
87
|
},
|
|
88
|
-
"version": "0.5.
|
|
88
|
+
"version": "0.5.7",
|
|
89
89
|
"volta": {
|
|
90
90
|
"node": "18.14.1",
|
|
91
91
|
"npm": "9.5.0"
|