skillshield 1.0.0 → 2.1.0

package/dist/shield/runtime-monitor.js

@@ -0,0 +1,233 @@
+/**
+ * SkillShield — Runtime Monitor + Kill Switch
+ *
+ * Real-time monitoring of skill execution. Watches stdout/stderr
+ * for threat patterns, tracks resource consumption, and kills the
+ * process if anomalies are detected.
+ *
+ * This is the core differentiator: Snyk scans before install,
+ * SkillShield watches DURING execution.
+ */
+import { MALICIOUS_PATTERNS } from '../guard/patterns.js';
+export class RuntimeMonitor {
+    constructor(policy) {
+        this.events = [];
+        this.startTime = 0;
+        this.outputBytes = 0;
+        this.threatsDetected = 0;
+        this.killed = false;
+        this.policy = policy;
+        // Select high-severity patterns for real-time scanning (keep it fast)
+        this.runtimePatterns = MALICIOUS_PATTERNS.filter((p) => p.severity === 'CRITICAL' || p.severity === 'HIGH');
+    }
+    /**
+     * Attach the monitor to a running child process.
+     */
+    attach(childProcess) {
+        this.process = childProcess;
+        this.startTime = Date.now();
+        this.killed = false;
+        // Start the kill timer (max execution time)
+        this.killTimer = setTimeout(() => {
+            this.killProcess('TIMEOUT', `Execution exceeded ${this.policy.maxExecutionTime}ms limit`);
+        }, this.policy.maxExecutionTime);
+        // Monitor stdout
+        childProcess.stdout?.on('data', (data) => {
+            const text = data.toString();
+            this.outputBytes += data.length;
+            this.onOutput('STDOUT', text);
+        });
+        // Monitor stderr
+        childProcess.stderr?.on('data', (data) => {
+            const text = data.toString();
+            this.outputBytes += data.length;
+            this.onOutput('STDERR', text);
+        });
+        // Monitor exit
+        childProcess.on('exit', (code, signal) => {
+            this.recordEvent({
+                type: 'EXIT',
+                severity: 'LOW',
+                details: `Process exited with code ${code}, signal ${signal}`,
+                data: { code, signal },
+            });
+            this.cleanup();
+        });
+        // Memory monitoring (check every 2 seconds)
+        this.memoryCheckInterval = setInterval(() => {
+            this.checkMemory();
+        }, 2000);
+    }
+    /**
+     * Process output from the skill and check for threats.
+     */
+    onOutput(stream, text) {
+        // Check output size
+        if (this.outputBytes > this.policy.maxOutputBytes) {
+            this.killProcess('OUTPUT_FLOOD', `Output exceeded ${this.policy.maxOutputBytes} bytes — possible output flooding attack`);
+            return;
+        }
+        // Real-time threat scanning on output
+        if (this.policy.enableOutputScanning) {
+            this.scanOutput(text, stream);
+        }
+    }
+    /**
+     * Scan skill output for threat patterns in real-time.
+     * This catches skills that generate malicious output (e.g., writing
+     * shell commands to stdout that another tool might execute).
+     */
+    scanOutput(text, stream) {
+        for (const pattern of this.runtimePatterns) {
+            // Reset regex state for global patterns
+            pattern.pattern.lastIndex = 0;
+            const match = pattern.pattern.exec(text);
+            if (match) {
+                this.threatsDetected++;
+                this.recordEvent({
+                    type: 'THREAT_DETECTED',
+                    severity: pattern.severity,
+                    details: `[${stream}] ${pattern.description} — Evidence: "${match[0].substring(0, 100)}"`,
+                    data: {
+                        patternId: pattern.id,
+                        category: pattern.category,
+                        evidence: match[0].substring(0, 200),
+                    },
+                });
+                // Kill immediately if critical category
+                if (this.policy.criticalCategories.includes(pattern.category)) {
+                    this.killProcess('CRITICAL_THREAT', `Critical threat detected in output: ${pattern.category} — ${pattern.description}`);
+                    return;
+                }
+                // Kill if severity exceeds threshold
+                if (this.compareSeverity(pattern.severity, this.policy.killOnSeverity) >= 0) {
+                    this.killProcess('SEVERITY_THRESHOLD', `Threat severity ${pattern.severity} exceeds kill threshold ${this.policy.killOnSeverity}`);
+                    return;
+                }
+                // Kill if too many violations
+                if (this.threatsDetected >= this.policy.maxViolations) {
+                    this.killProcess('MAX_VIOLATIONS', `${this.threatsDetected} violations detected (limit: ${this.policy.maxViolations})`);
+                    return;
+                }
+            }
+        }
+    }
+    /**
+     * Check process memory usage.
+     */
+    checkMemory() {
+        if (!this.process || !this.process.pid)
+            return;
+        try {
+            // Use process.memoryUsage() for the parent — child memory is harder
+            // For child process, we estimate from output + known overhead
+            const memUsage = process.memoryUsage();
+            const heapMB = Math.round(memUsage.heapUsed / 1024 / 1024);
+            if (heapMB > this.policy.maxMemoryMB) {
+                this.killProcess('MEMORY_LIMIT', `Memory usage ${heapMB}MB exceeds limit ${this.policy.maxMemoryMB}MB`);
+            }
+        }
+        catch {
+            // Ignore memory check errors
+        }
+    }
+    /**
+     * Kill the child process — the kill switch.
+     */
+    killProcess(reason, details) {
+        if (this.killed)
+            return;
+        this.killed = true;
+        this.killReason = `${reason}: ${details}`;
+        this.recordEvent({
+            type: 'KILL_SWITCH',
+            severity: 'CRITICAL',
+            details: `🛑 KILL SWITCH ACTIVATED — ${reason}: ${details}`,
+        });
+        if (this.process && !this.process.killed) {
+            // First try SIGTERM for graceful shutdown
+            this.process.kill('SIGTERM');
+            // Force kill after 3 seconds if still running
+            setTimeout(() => {
+                if (this.process && !this.process.killed) {
+                    this.process.kill('SIGKILL');
+                }
+            }, 3000);
+        }
+        this.cleanup();
+    }
+    /**
+     * Clean up timers and intervals.
+     */
+    cleanup() {
+        if (this.killTimer) {
+            clearTimeout(this.killTimer);
+            this.killTimer = undefined;
+        }
+        if (this.memoryCheckInterval) {
+            clearInterval(this.memoryCheckInterval);
+            this.memoryCheckInterval = undefined;
+        }
+    }
+    /**
+     * Compare severity levels. Returns positive if a >= b.
+     */
+    compareSeverity(a, b) {
+        const order = {
+            CRITICAL: 4,
+            HIGH: 3,
+            MEDIUM: 2,
+            LOW: 1,
+        };
+        return order[a] - order[b];
+    }
+    recordEvent(partial) {
+        this.events.push({ ...partial, timestamp: new Date().toISOString() });
+    }
+    /**
+     * Generate the final monitoring report.
+     */
+    getReport() {
+        const endTime = Date.now();
+        return {
+            startTime: new Date(this.startTime).toISOString(),
+            endTime: new Date(endTime).toISOString(),
+            durationMs: endTime - this.startTime,
+            events: [...this.events],
+            threatsDetected: this.threatsDetected,
+            killed: this.killed,
+            killReason: this.killReason,
+            resourceUsage: {
+                peakMemoryMB: Math.round(process.memoryUsage().heapUsed / 1024 / 1024),
+                totalOutputBytes: this.outputBytes,
+                cpuTimeMs: endTime - this.startTime,
+            },
+        };
+    }
+    isKilled() {
+        return this.killed;
+    }
+    getEventCount() {
+        return this.events.length;
+    }
+}
+/**
+ * Default monitor policy — strict but reasonable for developer use.
+ */
+export function getDefaultMonitorPolicy() {
+    return {
+        maxExecutionTime: 60000, // 60 seconds
+        maxMemoryMB: 512, // 512MB
+        maxOutputBytes: 10 * 1024 * 1024, // 10MB output
+        killOnSeverity: 'CRITICAL',
+        enableOutputScanning: true,
+        maxViolations: 5,
+        criticalCategories: [
+            'MEMORY_POISONING',
+            'CREDENTIAL_THEFT',
+            'MALWARE',
+            'DATA_EXFILTRATION',
+        ],
+    };
+}
+//# sourceMappingURL=runtime-monitor.js.map

package/dist/shield/runtime-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-monitor.js","sourceRoot":"","sources":["../../src/shield/runtime-monitor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,kBAAkB,EAAkE,MAAM,sBAAsB,CAAC;AA0C1H,MAAM,OAAO,cAAc;IAezB,YAAY,MAAqB;QAbzB,WAAM,GAAmB,EAAE,CAAC;QAC5B,cAAS,GAAW,CAAC,CAAC;QACtB,gBAAW,GAAW,CAAC,CAAC;QACxB,oBAAe,GAAW,CAAC,CAAC;QAC5B,WAAM,GAAY,KAAK,CAAC;QAU9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,sEAAsE;QACtE,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAA0B;QAC/B,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QAEpB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,sBAAsB,IAAI,CAAC,MAAM,CAAC,gBAAgB,UAAU,CAAC,CAAC;QAC5F,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEjC,iBAAiB;QACjB,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,iBAAiB;QACjB,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,4BAA4B,IAAI,YAAY,MAAM,EAAE;gBAC7D,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,MAA2B,EAAE,IAAY;QACxD,oBAAoB;QACpB,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,cAAc,0CAA0C,CAAC,CAAC;YAC1H,OAAO;QACT,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,IAAY,EAAE,MAAc;QAC7C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,wCAAwC;YACxC,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEzC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,eAAe,EAAE,CAAC;gBAEvB,IAAI,CAAC,WAAW,CAAC;oBACf,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,IAAI,MAAM,KAAK,OAAO,CAAC,WAAW,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;oBACzF,IAAI,EAAE;wBACJ,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;qBACrC;iBACF,CAAC,CAAC;gBAEH,wCAAwC;gBACxC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAChC,uCAAuC,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,WAAW,EAAE,CACnF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,qCAAqC;gBACrC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5E,IAAI,CAAC,WAAW,CAAC,oBAAoB,EACnC,mBAAmB,OAAO,CAAC,QAAQ,2BAA2B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAC3F,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;oBACtD,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAC/B,GAAG,IAAI,CAAC,eAAe,gCAAgC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CACpF,CAAC;oBACF,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,OAAO;QAE/C,IAAI,CAAC;YACH,oEAAoE;YACpE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YAE3D,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrC,IAAI,CAAC,WAAW,CAAC,cAAc,EAC7B,gBAAgB,MAAM,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc,EAAE,OAAe;QACzC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC;QAE1C,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,8BAA8B,MAAM,KAAK,OAAO,EAAE;SAC5D,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzC,0CAA0C;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7B,8CAA8C;YAC9C,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,OAAO;QACb,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,CAAgB,EAAE,CAAgB;QACxD,MAAM,KAAK,GAAkC;YAC3C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACP,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAEO,WAAW,CAAC,OAAwC;QAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACjD,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;YACxC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC,SAAS;YACpC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACxB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE;gBACb,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;gBACtE,gBAAgB,EAAE,IAAI,CAAC,WAAW;gBAClC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC,SAAS;aACpC;SACF,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,gBAAgB,EAAE,KAAK,EAAM,aAAa;QAC1C,WAAW,EAAE,GAAG,EAAa,QAAQ;QACrC,cAAc,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,cAAc;QAChD,cAAc,EAAE,UAAU;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,SAAS;YACT,mBAAmB;SACpB;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillshield",
-  "version": "1.0.0",
+  "version": "2.1.0",
   "description": "Runtime security for AI Agent Skills — Scan, sandbox & enforce. Detect prompt injection, memory poisoning, supply chain attacks. 72+ patterns, 14 categories. The firewall Snyk and Cisco don't build.",
   "type": "module",
   "main": "./dist/index.js",