shieldcortex 2.4.22 → 2.4.24

package/hooks/openclaw/cortex-memory/handler.js

@@ -64,6 +64,65 @@ function callCortex(tool, args = {}, options = { retries: 1, timeout: 15000 }) {
   });
 }
 
+// ==================== HOOK SCANNER ====================
+
+/**
+ * Scan installed OpenClaw hooks for potential threats
+ * Uses ShieldCortex's scanSkill via mcporter
+ * @returns {Promise<Array<{hookName: string, threat: string}>>}
+ */
+async function scanInstalledHooks() {
+  const path = await import("node:path");
+  const { homedir } = await import("node:os");
+
+  const hooksDir = path.join(homedir(), ".openclaw", "hooks");
+  const threats = [];
+
+  try {
+    const entries = await fs.readdir(hooksDir, { withFileTypes: true });
+
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+
+      const hookDir = path.join(hooksDir, entry.name);
+
+      // Check for HOOK.md
+      const hookMdPath = path.join(hookDir, "HOOK.md");
+      try {
+        const hookContent = await fs.readFile(hookMdPath, "utf-8");
+        const result = await callCortex("scan_skill", {
+          content: hookContent,
+          name: entry.name,
+          format: "hook-md",
+        });
+
+        if (result && result.includes("unsafe")) {
+          threats.push({ hookName: entry.name, threat: `HOOK.md flagged as unsafe` });
+        }
+      } catch { /* No HOOK.md, skip */ }
+
+      // Check for handler.js
+      const handlerPath = path.join(hookDir, "handler.js");
+      try {
+        const handlerContent = await fs.readFile(handlerPath, "utf-8");
+        const result = await callCortex("scan_skill", {
+          content: handlerContent,
+          name: `${entry.name}/handler.js`,
+          format: "hook-js",
+        });
+
+        if (result && result.includes("unsafe")) {
+          threats.push({ hookName: entry.name, threat: `handler.js flagged as unsafe` });
+        }
+      } catch { /* No handler.js, skip */ }
+    }
+  } catch {
+    // Hooks directory doesn't exist or is unreadable
+  }
+
+  return threats;
+}
+
 // ==================== CONTENT EXTRACTION ====================
 
 const PATTERNS = {
@@ -283,6 +342,22 @@ async function onBootstrap(event) {
   });
 
   console.log("[cortex-memory] Injected past context into bootstrap");
+
+  // Scan installed hooks for threats
+  try {
+    const threats = await scanInstalledHooks();
+    if (threats.length > 0) {
+      const warnings = threats.map(t => `- ${t.hookName}: ${t.threat}`).join("\n");
+      context.bootstrapFiles.push({
+        name: "SHIELDCORTEX_WARNINGS.md",
+        content: `# ShieldCortex Security Warning\n\nThe following installed hooks have been flagged as potentially unsafe:\n\n${warnings}\n\nConsider running: \`npx shieldcortex scan-skills\` for a detailed report.`,
+      });
+      console.log(`[cortex-memory] WARNING: ${threats.length} hook(s) flagged as potentially unsafe`);
+    }
+  } catch (scanErr) {
+    // Hook scanning is best-effort — never block bootstrap
+    console.warn("[cortex-memory] Hook scan failed:", scanErr.message);
+  }
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "2.4.22",
+  "version": "2.4.24",
   "description": "Complete memory system + security layer for AI agents. Native OpenClaw integration. Persistent storage, semantic search, prompt injection firewall, credential protection, and audit trail. One package, full solution.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/scripts/session-start-hook.mjs

@@ -11,7 +11,7 @@
  */
 
 import Database from 'better-sqlite3';
-import { existsSync } from 'fs';
+import { existsSync, readdirSync, readFileSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 
@@ -140,6 +140,56 @@ function formatContext(memories, project) {
   return lines.join('\n');
 }
 
+// ==================== SKILL FILE CHECK ====================
+
+/**
+ * Quick check of project instruction files for obviously suspicious content.
+ * This is a lightweight inline check — for full scanning use `npx shieldcortex scan-skills`.
+ */
+function checkProjectInstructionFiles(cwd) {
+  const warnings = [];
+
+  const filesToCheck = [
+    { path: '.cursorrules', name: '.cursorrules' },
+    { path: '.windsurfrules', name: '.windsurfrules' },
+    { path: '.clinerules', name: '.clinerules' },
+    { path: '.github/copilot-instructions.md', name: 'copilot-instructions.md' },
+  ];
+
+  // Suspicious patterns that indicate potential threats in instruction files
+  const suspiciousPatterns = [
+    { pattern: /ignore\s+(all\s+)?(safety|security|permission)/i, label: 'safety bypass' },
+    { pattern: /bypass\s+(the\s+)?(sandbox|permission|safety)/i, label: 'sandbox bypass' },
+    { pattern: /disable\s+(the\s+)?(firewall|security|protection)/i, label: 'security disable' },
+    { pattern: /curl\s+[\s\S]{0,100}-d\s+[\s\S]{0,100}https?:/i, label: 'data exfiltration' },
+    { pattern: /read\s+[\s\S]{0,50}~\/\.ssh/i, label: 'SSH key access' },
+    { pattern: /read\s+[\s\S]{0,50}~\/\.aws/i, label: 'AWS credential access' },
+    { pattern: /<!--[\s\S]{0,500}?(always|never|must|execute|run|send)[\s\S]{0,500}?-->/i, label: 'hidden HTML instruction' },
+    { pattern: /echo\s+[\s\S]{0,100}>\s*\//i, label: 'file write instruction' },
+    { pattern: /dangerouslyDisableSandbox/i, label: 'sandbox disable flag' },
+  ];
+
+  for (const file of filesToCheck) {
+    const fullPath = join(cwd, file.path);
+    if (!existsSync(fullPath)) continue;
+
+    try {
+      const content = readFileSync(fullPath, 'utf-8');
+
+      for (const { pattern, label } of suspiciousPatterns) {
+        if (pattern.test(content)) {
+          warnings.push(`${file.name}: suspicious pattern detected (${label})`);
+          break; // One warning per file is enough
+        }
+      }
+    } catch {
+      // File unreadable — skip
+    }
+  }
+
+  return warnings;
+}
+
 // ==================== MAIN HOOK LOGIC ====================
 
 let input = '';
@@ -213,6 +263,22 @@ ${proactiveInstructions}
       console.error(`[shieldcortex] Session start: no memories found for "${project}"`);
     }
 
+    // Quick check for suspicious project instruction files
+    try {
+      const cwd = hookData.cwd || process.cwd();
+      const skillWarnings = checkProjectInstructionFiles(cwd);
+      if (skillWarnings.length > 0) {
+        console.log(`\n⚠️  ShieldCortex detected suspicious instruction files:`);
+        for (const w of skillWarnings) {
+          console.log(`  - ${w}`);
+        }
+        console.log(`Run \`npx shieldcortex scan-skills\` for a full report.\n`);
+        console.error(`[shieldcortex] WARNING: ${skillWarnings.length} suspicious file(s) detected`);
+      }
+    } catch {
+      // Skill check is best-effort — never block session start
+    }
+
     process.exit(0);
   } catch (error) {
     console.error(`[session-start] Error: ${error.message}`);