skillscan 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. package/.eslintrc.json +15 -0
  2. package/README.md +177 -0
  3. package/dist/cli/commands/scan.d.ts +5 -0
  4. package/dist/cli/commands/scan.d.ts.map +1 -0
  5. package/dist/cli/commands/scan.js +67 -0
  6. package/dist/cli/commands/scan.js.map +1 -0
  7. package/dist/cli/index.d.ts +3 -0
  8. package/dist/cli/index.d.ts.map +1 -0
  9. package/dist/cli/index.js +18 -0
  10. package/dist/cli/index.js.map +1 -0
  11. package/dist/index.d.ts +6 -0
  12. package/dist/index.d.ts.map +1 -0
  13. package/dist/index.js +30 -0
  14. package/dist/index.js.map +1 -0
  15. package/dist/output/formatters.d.ts +3 -0
  16. package/dist/output/formatters.d.ts.map +1 -0
  17. package/dist/output/formatters.js +256 -0
  18. package/dist/output/formatters.js.map +1 -0
  19. package/dist/scanner/engine.d.ts +7 -0
  20. package/dist/scanner/engine.d.ts.map +1 -0
  21. package/dist/scanner/engine.js +119 -0
  22. package/dist/scanner/engine.js.map +1 -0
  23. package/dist/scanner/parsers/skilljson.d.ts +3 -0
  24. package/dist/scanner/parsers/skilljson.d.ts.map +1 -0
  25. package/dist/scanner/parsers/skilljson.js +38 -0
  26. package/dist/scanner/parsers/skilljson.js.map +1 -0
  27. package/dist/scanner/parsers/skillmd.d.ts +3 -0
  28. package/dist/scanner/parsers/skillmd.d.ts.map +1 -0
  29. package/dist/scanner/parsers/skillmd.js +48 -0
  30. package/dist/scanner/parsers/skillmd.js.map +1 -0
  31. package/dist/scanner/rules/file-access.d.ts +11 -0
  32. package/dist/scanner/rules/file-access.d.ts.map +1 -0
  33. package/dist/scanner/rules/file-access.js +76 -0
  34. package/dist/scanner/rules/file-access.js.map +1 -0
  35. package/dist/scanner/rules/hidden-instructions.d.ts +13 -0
  36. package/dist/scanner/rules/hidden-instructions.d.ts.map +1 -0
  37. package/dist/scanner/rules/hidden-instructions.js +88 -0
  38. package/dist/scanner/rules/hidden-instructions.js.map +1 -0
  39. package/dist/scanner/rules/index.d.ts +4 -0
  40. package/dist/scanner/rules/index.d.ts.map +1 -0
  41. package/dist/scanner/rules/index.js +21 -0
  42. package/dist/scanner/rules/index.js.map +1 -0
  43. package/dist/scanner/rules/prompt-injection.d.ts +11 -0
  44. package/dist/scanner/rules/prompt-injection.d.ts.map +1 -0
  45. package/dist/scanner/rules/prompt-injection.js +130 -0
  46. package/dist/scanner/rules/prompt-injection.js.map +1 -0
  47. package/dist/scanner/rules/sensitive-paths.d.ts +11 -0
  48. package/dist/scanner/rules/sensitive-paths.d.ts.map +1 -0
  49. package/dist/scanner/rules/sensitive-paths.js +142 -0
  50. package/dist/scanner/rules/sensitive-paths.js.map +1 -0
  51. package/dist/scoring/trust-score.d.ts +5 -0
  52. package/dist/scoring/trust-score.d.ts.map +1 -0
  53. package/dist/scoring/trust-score.js +35 -0
  54. package/dist/scoring/trust-score.js.map +1 -0
  55. package/dist/types.d.ts +47 -0
  56. package/dist/types.d.ts.map +1 -0
  57. package/dist/types.js +4 -0
  58. package/dist/types.js.map +1 -0
  59. package/jest.config.js +9 -0
  60. package/package.json +42 -0
  61. package/skill/SKILL.md +76 -0
  62. package/src/cli/commands/scan.ts +35 -0
  63. package/src/cli/index.ts +19 -0
  64. package/src/index.ts +5 -0
  65. package/src/output/formatters.ts +296 -0
  66. package/src/scanner/engine.ts +99 -0
  67. package/src/scanner/parsers/skilljson.ts +37 -0
  68. package/src/scanner/parsers/skillmd.ts +46 -0
  69. package/src/scanner/rules/file-access.ts +78 -0
  70. package/src/scanner/rules/hidden-instructions.ts +92 -0
  71. package/src/scanner/rules/index.ts +20 -0
  72. package/src/scanner/rules/prompt-injection.ts +133 -0
  73. package/src/scanner/rules/sensitive-paths.ts +144 -0
  74. package/src/scoring/trust-score.ts +34 -0
  75. package/src/types.ts +54 -0
  76. package/tests/fixtures/malicious-skill/SKILL.md +26 -0
  77. package/tests/fixtures/safe-skill/SKILL.md +25 -0
  78. package/tests/rules/prompt-injection.test.ts +123 -0
  79. package/tests/rules/sensitive-paths.test.ts +115 -0
  80. package/tests/scoring/trust-score.test.ts +100 -0
  81. package/tsconfig.json +19 -0
@@ -0,0 +1,100 @@
1
+ import { calculateScore, getRating, getRatingEmoji } from '../../src/scoring/trust-score';
2
+ import { Finding } from '../../src/types';
3
+
4
+ describe('Trust Score', () => {
5
+ describe('calculateScore', () => {
6
+ it('returns 100 for no findings', () => {
7
+ expect(calculateScore([])).toBe(100);
8
+ });
9
+
10
+ it('deducts 40 points for CRITICAL', () => {
11
+ const findings: Finding[] = [{
12
+ ruleId: 'test',
13
+ ruleName: 'Test',
14
+ severity: 'CRITICAL',
15
+ message: 'Test finding',
16
+ file: 'test.md'
17
+ }];
18
+ expect(calculateScore(findings)).toBe(60);
19
+ });
20
+
21
+ it('deducts 20 points for HIGH', () => {
22
+ const findings: Finding[] = [{
23
+ ruleId: 'test',
24
+ ruleName: 'Test',
25
+ severity: 'HIGH',
26
+ message: 'Test finding',
27
+ file: 'test.md'
28
+ }];
29
+ expect(calculateScore(findings)).toBe(80);
30
+ });
31
+
32
+ it('deducts 10 points for MEDIUM', () => {
33
+ const findings: Finding[] = [{
34
+ ruleId: 'test',
35
+ ruleName: 'Test',
36
+ severity: 'MEDIUM',
37
+ message: 'Test finding',
38
+ file: 'test.md'
39
+ }];
40
+ expect(calculateScore(findings)).toBe(90);
41
+ });
42
+
43
+ it('deducts 5 points for LOW', () => {
44
+ const findings: Finding[] = [{
45
+ ruleId: 'test',
46
+ ruleName: 'Test',
47
+ severity: 'LOW',
48
+ message: 'Test finding',
49
+ file: 'test.md'
50
+ }];
51
+ expect(calculateScore(findings)).toBe(95);
52
+ });
53
+
54
+ it('floors at 0', () => {
55
+ const findings: Finding[] = Array(5).fill({
56
+ ruleId: 'test',
57
+ ruleName: 'Test',
58
+ severity: 'CRITICAL',
59
+ message: 'Test finding',
60
+ file: 'test.md'
61
+ });
62
+ expect(calculateScore(findings)).toBe(0);
63
+ });
64
+
65
+ it('accumulates multiple findings', () => {
66
+ const findings: Finding[] = [
67
+ { ruleId: 'test', ruleName: 'Test', severity: 'CRITICAL', message: 'Test', file: 'test.md' },
68
+ { ruleId: 'test', ruleName: 'Test', severity: 'HIGH', message: 'Test', file: 'test.md' },
69
+ { ruleId: 'test', ruleName: 'Test', severity: 'MEDIUM', message: 'Test', file: 'test.md' }
70
+ ];
71
+ // 100 - 40 - 20 - 10 = 30
72
+ expect(calculateScore(findings)).toBe(30);
73
+ });
74
+ });
75
+
76
+ describe('getRating', () => {
77
+ it('returns VERIFIED for score >= 80', () => {
78
+ expect(getRating(100)).toBe('VERIFIED');
79
+ expect(getRating(80)).toBe('VERIFIED');
80
+ });
81
+
82
+ it('returns CAUTION for score 50-79', () => {
83
+ expect(getRating(79)).toBe('CAUTION');
84
+ expect(getRating(50)).toBe('CAUTION');
85
+ });
86
+
87
+ it('returns WARNING for score < 50', () => {
88
+ expect(getRating(49)).toBe('WARNING');
89
+ expect(getRating(0)).toBe('WARNING');
90
+ });
91
+ });
92
+
93
+ describe('getRatingEmoji', () => {
94
+ it('returns correct emojis', () => {
95
+ expect(getRatingEmoji('VERIFIED')).toBe('🟢');
96
+ expect(getRatingEmoji('CAUTION')).toBe('🟡');
97
+ expect(getRatingEmoji('WARNING')).toBe('🔴');
98
+ });
99
+ });
100
+ });
package/tsconfig.json ADDED
@@ -0,0 +1,19 @@
1
+ {
2
+ "compilerOptions": {
3
+ "target": "ES2020",
4
+ "module": "commonjs",
5
+ "lib": ["ES2020"],
6
+ "outDir": "./dist",
7
+ "rootDir": "./src",
8
+ "strict": true,
9
+ "esModuleInterop": true,
10
+ "skipLibCheck": true,
11
+ "forceConsistentCasingInFileNames": true,
12
+ "resolveJsonModule": true,
13
+ "declaration": true,
14
+ "declarationMap": true,
15
+ "sourceMap": true
16
+ },
17
+ "include": ["src/**/*"],
18
+ "exclude": ["node_modules", "dist", "tests"]
19
+ }