skillshield 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (167) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +400 -0
  3. package/dist/channels/discord.d.ts +18 -0
  4. package/dist/channels/discord.d.ts.map +1 -0
  5. package/dist/channels/discord.js +275 -0
  6. package/dist/channels/discord.js.map +1 -0
  7. package/dist/channels/index.d.ts +67 -0
  8. package/dist/channels/index.d.ts.map +1 -0
  9. package/dist/channels/index.js +127 -0
  10. package/dist/channels/index.js.map +1 -0
  11. package/dist/channels/slack.d.ts +20 -0
  12. package/dist/channels/slack.d.ts.map +1 -0
  13. package/dist/channels/slack.js +296 -0
  14. package/dist/channels/slack.js.map +1 -0
  15. package/dist/channels/telegram.d.ts +20 -0
  16. package/dist/channels/telegram.d.ts.map +1 -0
  17. package/dist/channels/telegram.js +223 -0
  18. package/dist/channels/telegram.js.map +1 -0
  19. package/dist/channels/whatsapp.d.ts +25 -0
  20. package/dist/channels/whatsapp.d.ts.map +1 -0
  21. package/dist/channels/whatsapp.js +187 -0
  22. package/dist/channels/whatsapp.js.map +1 -0
  23. package/dist/cli/commands/badge.d.ts +11 -0
  24. package/dist/cli/commands/badge.d.ts.map +1 -0
  25. package/dist/cli/commands/badge.js +98 -0
  26. package/dist/cli/commands/badge.js.map +1 -0
  27. package/dist/cli/commands/config.d.ts +3 -0
  28. package/dist/cli/commands/config.d.ts.map +1 -0
  29. package/dist/cli/commands/config.js +140 -0
  30. package/dist/cli/commands/config.js.map +1 -0
  31. package/dist/cli/commands/deploy.d.ts +3 -0
  32. package/dist/cli/commands/deploy.d.ts.map +1 -0
  33. package/dist/cli/commands/deploy.js +56 -0
  34. package/dist/cli/commands/deploy.js.map +1 -0
  35. package/dist/cli/commands/init.d.ts +3 -0
  36. package/dist/cli/commands/init.d.ts.map +1 -0
  37. package/dist/cli/commands/init.js +99 -0
  38. package/dist/cli/commands/init.js.map +1 -0
  39. package/dist/cli/commands/install.d.ts +3 -0
  40. package/dist/cli/commands/install.d.ts.map +1 -0
  41. package/dist/cli/commands/install.js +90 -0
  42. package/dist/cli/commands/install.js.map +1 -0
  43. package/dist/cli/commands/list.d.ts +3 -0
  44. package/dist/cli/commands/list.d.ts.map +1 -0
  45. package/dist/cli/commands/list.js +76 -0
  46. package/dist/cli/commands/list.js.map +1 -0
  47. package/dist/cli/commands/run.d.ts +3 -0
  48. package/dist/cli/commands/run.d.ts.map +1 -0
  49. package/dist/cli/commands/run.js +160 -0
  50. package/dist/cli/commands/run.js.map +1 -0
  51. package/dist/cli/commands/scan.d.ts +3 -0
  52. package/dist/cli/commands/scan.d.ts.map +1 -0
  53. package/dist/cli/commands/scan.js +133 -0
  54. package/dist/cli/commands/scan.js.map +1 -0
  55. package/dist/cli/commands/search.d.ts +3 -0
  56. package/dist/cli/commands/search.d.ts.map +1 -0
  57. package/dist/cli/commands/search.js +56 -0
  58. package/dist/cli/commands/search.js.map +1 -0
  59. package/dist/cli/index.d.ts +3 -0
  60. package/dist/cli/index.d.ts.map +1 -0
  61. package/dist/cli/index.js +70 -0
  62. package/dist/cli/index.js.map +1 -0
  63. package/dist/core/config.d.ts +167 -0
  64. package/dist/core/config.d.ts.map +1 -0
  65. package/dist/core/config.js +398 -0
  66. package/dist/core/config.js.map +1 -0
  67. package/dist/core/parser.d.ts +34 -0
  68. package/dist/core/parser.d.ts.map +1 -0
  69. package/dist/core/parser.js +462 -0
  70. package/dist/core/parser.js.map +1 -0
  71. package/dist/core/runtime.d.ts +68 -0
  72. package/dist/core/runtime.d.ts.map +1 -0
  73. package/dist/core/runtime.js +560 -0
  74. package/dist/core/runtime.js.map +1 -0
  75. package/dist/core/types.d.ts +525 -0
  76. package/dist/core/types.d.ts.map +1 -0
  77. package/dist/core/types.js +44 -0
  78. package/dist/core/types.js.map +1 -0
  79. package/dist/guard/index.d.ts +57 -0
  80. package/dist/guard/index.d.ts.map +1 -0
  81. package/dist/guard/index.js +238 -0
  82. package/dist/guard/index.js.map +1 -0
  83. package/dist/guard/patterns.d.ts +21 -0
  84. package/dist/guard/patterns.d.ts.map +1 -0
  85. package/dist/guard/patterns.js +797 -0
  86. package/dist/guard/patterns.js.map +1 -0
  87. package/dist/hub/index.d.ts +44 -0
  88. package/dist/hub/index.d.ts.map +1 -0
  89. package/dist/hub/index.js +144 -0
  90. package/dist/hub/index.js.map +1 -0
  91. package/dist/hub/registry.d.ts +52 -0
  92. package/dist/hub/registry.d.ts.map +1 -0
  93. package/dist/hub/registry.js +192 -0
  94. package/dist/hub/registry.js.map +1 -0
  95. package/dist/i18n/index.d.ts +19 -0
  96. package/dist/i18n/index.d.ts.map +1 -0
  97. package/dist/i18n/index.js +92 -0
  98. package/dist/i18n/index.js.map +1 -0
  99. package/dist/i18n/locales/en.d.ts +110 -0
  100. package/dist/i18n/locales/en.d.ts.map +1 -0
  101. package/dist/i18n/locales/en.js +123 -0
  102. package/dist/i18n/locales/en.js.map +1 -0
  103. package/dist/i18n/locales/es.d.ts +110 -0
  104. package/dist/i18n/locales/es.d.ts.map +1 -0
  105. package/dist/i18n/locales/es.js +123 -0
  106. package/dist/i18n/locales/es.js.map +1 -0
  107. package/dist/i18n/locales/pt.d.ts +110 -0
  108. package/dist/i18n/locales/pt.d.ts.map +1 -0
  109. package/dist/i18n/locales/pt.js +123 -0
  110. package/dist/i18n/locales/pt.js.map +1 -0
  111. package/dist/i18n/locales/zh.d.ts +110 -0
  112. package/dist/i18n/locales/zh.d.ts.map +1 -0
  113. package/dist/i18n/locales/zh.js +123 -0
  114. package/dist/i18n/locales/zh.js.map +1 -0
  115. package/dist/index.d.ts +168 -0
  116. package/dist/index.d.ts.map +1 -0
  117. package/dist/index.js +275 -0
  118. package/dist/index.js.map +1 -0
  119. package/dist/router/index.d.ts +89 -0
  120. package/dist/router/index.d.ts.map +1 -0
  121. package/dist/router/index.js +292 -0
  122. package/dist/router/index.js.map +1 -0
  123. package/dist/router/providers.d.ts +48 -0
  124. package/dist/router/providers.d.ts.map +1 -0
  125. package/dist/router/providers.js +733 -0
  126. package/dist/router/providers.js.map +1 -0
  127. package/dist/runtime/executor.d.ts +96 -0
  128. package/dist/runtime/executor.d.ts.map +1 -0
  129. package/dist/runtime/executor.js +389 -0
  130. package/dist/runtime/executor.js.map +1 -0
  131. package/dist/sandbox/index.d.ts +52 -0
  132. package/dist/sandbox/index.d.ts.map +1 -0
  133. package/dist/sandbox/index.js +248 -0
  134. package/dist/sandbox/index.js.map +1 -0
  135. package/dist/security/skillguard.d.ts +25 -0
  136. package/dist/security/skillguard.d.ts.map +1 -0
  137. package/dist/security/skillguard.js +137 -0
  138. package/dist/security/skillguard.js.map +1 -0
  139. package/dist/tools/index.d.ts +55 -0
  140. package/dist/tools/index.d.ts.map +1 -0
  141. package/dist/tools/index.js +276 -0
  142. package/dist/tools/index.js.map +1 -0
  143. package/dist/tools/web-engine.d.ts +158 -0
  144. package/dist/tools/web-engine.d.ts.map +1 -0
  145. package/dist/tools/web-engine.js +802 -0
  146. package/dist/tools/web-engine.js.map +1 -0
  147. package/dist/tools/web-tools.d.ts +173 -0
  148. package/dist/tools/web-tools.d.ts.map +1 -0
  149. package/dist/tools/web-tools.js +251 -0
  150. package/dist/tools/web-tools.js.map +1 -0
  151. package/dist/utils/errors.d.ts +44 -0
  152. package/dist/utils/errors.d.ts.map +1 -0
  153. package/dist/utils/errors.js +130 -0
  154. package/dist/utils/errors.js.map +1 -0
  155. package/dist/utils/logger.d.ts +28 -0
  156. package/dist/utils/logger.d.ts.map +1 -0
  157. package/dist/utils/logger.js +121 -0
  158. package/dist/utils/logger.js.map +1 -0
  159. package/examples/basic-usage.ts +276 -0
  160. package/examples/code-reviewer.skill.md +83 -0
  161. package/examples/creative-writer.skill.md +80 -0
  162. package/examples/data-analyzer.skill.md +61 -0
  163. package/examples/hello-world.skill.md +36 -0
  164. package/examples/sample-skill.md +156 -0
  165. package/examples/summarizer.skill.md +62 -0
  166. package/examples/translator.skill.md +45 -0
  167. package/package.json +110 -0
@@ -0,0 +1,238 @@
1
+ import { readFileSync } from "fs";
2
+ import { MALICIOUS_PATTERNS, getThreatLevel, } from "./patterns.js";
3
+ export class SkillGuard {
4
+ constructor(customPatterns) {
5
+ this.customPatterns = [];
6
+ if (customPatterns) {
7
+ this.customPatterns = customPatterns;
8
+ this.patterns = [...MALICIOUS_PATTERNS, ...customPatterns];
9
+ }
10
+ else {
11
+ this.patterns = MALICIOUS_PATTERNS;
12
+ }
13
+ }
14
+ async scanSkill(skillContent, skillId, options) {
15
+ const threats = [];
16
+ const lines = skillContent.split("\n");
17
+ // Filter patterns based on options
18
+ let patternsToUse = this.patterns;
19
+ if (options?.skipPatterns) {
20
+ patternsToUse = patternsToUse.filter((p) => !options.skipPatterns.includes(p.id));
21
+ }
22
+ if (options?.categories) {
23
+ patternsToUse = patternsToUse.filter((p) => options.categories.includes(p.category));
24
+ }
25
+ // Scan each line
26
+ for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
27
+ const line = lines[lineIdx];
28
+ for (const pattern of patternsToUse) {
29
+ const matches = [...line.matchAll(pattern.pattern)];
30
+ for (const match of matches) {
31
+ // Skip if max severity is set and pattern exceeds it
32
+ if (options?.maxSeverity &&
33
+ this.getSeverityScore(pattern.severity) >
34
+ this.getSeverityScore(options.maxSeverity)) {
35
+ continue;
36
+ }
37
+ threats.push({
38
+ patternId: pattern.id,
39
+ category: pattern.category,
40
+ severity: pattern.severity,
41
+ lineNumber: lineIdx + 1,
42
+ columnNumber: match.index || 0,
43
+ description: pattern.description,
44
+ evidence: match[0],
45
+ remediation: pattern.remediation,
46
+ });
47
+ }
48
+ }
49
+ }
50
+ return this.generateReport(skillContent, threats, skillId);
51
+ }
52
+ async scanFile(filePath, options) {
53
+ try {
54
+ const content = readFileSync(filePath, "utf-8");
55
+ return this.scanSkill(content, filePath, options);
56
+ }
57
+ catch (error) {
58
+ throw new Error(`Failed to read file ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
59
+ }
60
+ }
61
+ async scanClawHubSkill(skillId, options) {
62
+ // This would fetch from ClawHub API in production
63
+ // For now, throw an informational error
64
+ throw new Error(`ClawHub skill scanning requires network access. Skill ID: ${skillId}`);
65
+ }
66
+ generateReport(content, threats, skillId) {
67
+ // Count threats by severity
68
+ const severityBreakdown = {
69
+ CRITICAL: 0,
70
+ HIGH: 0,
71
+ MEDIUM: 0,
72
+ LOW: 0,
73
+ };
74
+ const threatBreakdown = {
75
+ CODE_INJECTION: 0,
76
+ DATA_EXFILTRATION: 0,
77
+ CREDENTIAL_THEFT: 0,
78
+ FILE_SYSTEM_ABUSE: 0,
79
+ CRYPTO_MINING: 0,
80
+ KEYLOGGER: 0,
81
+ OBFUSCATION: 0,
82
+ PROMPT_INJECTION: 0,
83
+ NETWORK_ABUSE: 0,
84
+ PRIVILEGE_ESCALATION: 0,
85
+ MALWARE: 0,
86
+ MEMORY_POISONING: 0,
87
+ SENSITIVE_DATA: 0,
88
+ SUPPLY_CHAIN: 0,
89
+ };
90
+ for (const threat of threats) {
91
+ severityBreakdown[threat.severity]++;
92
+ threatBreakdown[threat.category]++;
93
+ }
94
+ // Calculate safety score (higher = safer)
95
+ const threatLevelData = getThreatLevel(threats.map((t) => MALICIOUS_PATTERNS.find((p) => p.id === t.patternId)));
96
+ // Determine overall status
97
+ let overallStatus = "APPROVED";
98
+ if (threatLevelData.level === "CRITICAL") {
99
+ overallStatus = "BLOCKED";
100
+ }
101
+ else if (threatLevelData.level === "HIGH_RISK" ||
102
+ threatLevelData.level === "MEDIUM_RISK") {
103
+ overallStatus = "REVIEW_REQUIRED";
104
+ }
105
+ // Generate summary
106
+ const summary = this.generateSummary(threats, severityBreakdown, overallStatus);
107
+ return {
108
+ skillId,
109
+ timestamp: new Date().toISOString(),
110
+ safetyScore: threatLevelData.score,
111
+ riskLevel: threatLevelData.level,
112
+ totalThreatsFound: threats.length,
113
+ threatBreakdown,
114
+ severityBreakdown,
115
+ threats: threats.sort((a, b) => {
116
+ const severityOrder = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
117
+ return (severityOrder[a.severity] - severityOrder[b.severity] ||
118
+ a.lineNumber - b.lineNumber);
119
+ }),
120
+ summary,
121
+ overallStatus,
122
+ };
123
+ }
124
+ generateSummary(threats, severityBreakdown, status) {
125
+ if (threats.length === 0) {
126
+ return "No security threats detected. Skill appears safe to execute.";
127
+ }
128
+ const parts = [];
129
+ if (severityBreakdown.CRITICAL > 0) {
130
+ parts.push(`${severityBreakdown.CRITICAL} critical threat${severityBreakdown.CRITICAL !== 1 ? "s" : ""}`);
131
+ }
132
+ if (severityBreakdown.HIGH > 0) {
133
+ parts.push(`${severityBreakdown.HIGH} high-risk threat${severityBreakdown.HIGH !== 1 ? "s" : ""}`);
134
+ }
135
+ if (severityBreakdown.MEDIUM > 0) {
136
+ parts.push(`${severityBreakdown.MEDIUM} medium-risk threat${severityBreakdown.MEDIUM !== 1 ? "s" : ""}`);
137
+ }
138
+ const threatList = parts.length > 0 ? parts.join(", ") : "threats detected";
139
+ return `${threatList} found. Status: ${status}. Review before execution.`;
140
+ }
141
+ getSeverityScore(severity) {
142
+ const scores = {
143
+ CRITICAL: 4,
144
+ HIGH: 3,
145
+ MEDIUM: 2,
146
+ LOW: 1,
147
+ };
148
+ return scores[severity];
149
+ }
150
+ addCustomPattern(pattern) {
151
+ this.customPatterns.push(pattern);
152
+ this.patterns.push(pattern);
153
+ }
154
+ removePattern(patternId) {
155
+ const idx = this.patterns.findIndex((p) => p.id === patternId);
156
+ if (idx >= 0) {
157
+ this.patterns.splice(idx, 1);
158
+ return true;
159
+ }
160
+ return false;
161
+ }
162
+ getPatterns() {
163
+ return this.patterns;
164
+ }
165
+ printReport(report) {
166
+ console.log("\n╔══════════════════════════════════════════════════════════╗");
167
+ console.log("║ SKILLSHIELD SECURITY REPORT ║");
168
+ console.log("╚══════════════════════════════════════════════════════════╝\n");
169
+ console.log(`Timestamp: ${report.timestamp}`);
170
+ if (report.skillId) {
171
+ console.log(`Skill ID: ${report.skillId}`);
172
+ }
173
+ console.log(`\nSafety Score: ${report.safetyScore}/100`);
174
+ console.log(`Risk Level: ${report.riskLevel}`);
175
+ console.log(`Status: ${report.overallStatus}`);
176
+ console.log(`\nThreats Found: ${report.totalThreatsFound}`);
177
+ if (report.totalThreatsFound > 0) {
178
+ console.log("\nBreakdown by Severity:");
179
+ console.log(` CRITICAL: ${report.severityBreakdown.CRITICAL || 0} threat${report.severityBreakdown.CRITICAL !== 1 ? "s" : ""}`);
180
+ console.log(` HIGH: ${report.severityBreakdown.HIGH || 0} threat${report.severityBreakdown.HIGH !== 1 ? "s" : ""}`);
181
+ console.log(` MEDIUM: ${report.severityBreakdown.MEDIUM || 0} threat${report.severityBreakdown.MEDIUM !== 1 ? "s" : ""}`);
182
+ console.log(` LOW: ${report.severityBreakdown.LOW || 0} threat${report.severityBreakdown.LOW !== 1 ? "s" : ""}`);
183
+ console.log("\nBreakdown by Category:");
184
+ const categories = Object.entries(report.threatBreakdown).filter(([_, count]) => count > 0);
185
+ for (const [category, count] of categories) {
186
+ console.log(` ${category}: ${count} threat${count !== 1 ? "s" : ""}`);
187
+ }
188
+ console.log("\nDetailed Threats:");
189
+ console.log("─".repeat(60));
190
+ for (const threat of report.threats.slice(0, 20)) {
191
+ // Show first 20 threats
192
+ const severityColor = this.getSeverityColor(threat.severity);
193
+ console.log(`${severityColor}[${threat.severity}]${this.resetColor()} ${threat.description}`);
194
+ console.log(` Line ${threat.lineNumber}: ${threat.evidence}`);
195
+ console.log(` Pattern ID: ${threat.patternId}`);
196
+ if (threat.remediation) {
197
+ console.log(` Remediation: ${threat.remediation}`);
198
+ }
199
+ console.log();
200
+ }
201
+ if (report.threats.length > 20) {
202
+ console.log(`... and ${report.threats.length - 20} more threat${report.threats.length - 20 !== 1 ? "s" : ""}\n`);
203
+ }
204
+ }
205
+ console.log(`Summary: ${report.summary}\n`);
206
+ }
207
+ getSeverityColor(severity) {
208
+ const colors = {
209
+ CRITICAL: "\x1b[41m\x1b[37m", // Red background, white text
210
+ HIGH: "\x1b[43m\x1b[30m", // Yellow background, black text
211
+ MEDIUM: "\x1b[44m\x1b[37m", // Blue background, white text
212
+ LOW: "\x1b[42m\x1b[30m", // Green background, black text
213
+ };
214
+ return colors[severity];
215
+ }
216
+ resetColor() {
217
+ return "\x1b[0m";
218
+ }
219
+ }
220
+ // Quick scan function (no class instantiation)
221
+ export async function scanSkill(skillContent, skillId, options) {
222
+ const guard = new SkillGuard();
223
+ return guard.scanSkill(skillContent, skillId, options);
224
+ }
225
+ export async function scanFile(filePath, options) {
226
+ const guard = new SkillGuard();
227
+ return guard.scanFile(filePath, options);
228
+ }
229
+ export async function quickScan(skillContent) {
230
+ const report = await scanSkill(skillContent);
231
+ return {
232
+ isSafe: report.overallStatus === "APPROVED",
233
+ threatCount: report.totalThreatsFound,
234
+ criticalThreats: report.severityBreakdown.CRITICAL,
235
+ };
236
+ }
237
+ export default SkillGuard;
238
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,EACL,kBAAkB,EAKlB,cAAc,GACf,MAAM,eAAe,CAAC;AAmCvB,MAAM,OAAO,UAAU;IAIrB,YAAY,cAAmC;QAHvC,mBAAc,GAAuB,EAAE,CAAC;QAI9C,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,kBAAkB,EAAE,GAAG,cAAc,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,YAAoB,EACpB,OAAgB,EAChB,OAAqB;QAErB,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,mCAAmC;QACnC,IAAI,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,aAAa,GAAG,aAAa,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7C,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACxB,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,OAAO,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CACzC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAEpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,qDAAqD;oBACrD,IACE,OAAO,EAAE,WAAW;wBACpB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACrC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,EAC5C,CAAC;wBACD,SAAS;oBACX,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,UAAU,EAAE,OAAO,GAAG,CAAC;wBACvB,YAAY,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;wBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;qBACjC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,OAAqB;QAErB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAe,EACf,OAAqB;QAErB,kDAAkD;QAClD,wCAAwC;QACxC,MAAM,IAAI,KAAK,CACb,6DAA6D,OAAO,EAAE,CACvE,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,OAAe,EACf,OAA0B,EAC1B,OAAgB;QAEhB,4BAA4B;QAC5B,MAAM,iBAAiB,GAAkC;YACvD,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACP,CAAC;QAEF,MAAM,eAAe,GAAmC;YACtD,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,CAAC;YAChB,oBAAoB,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;SAChB,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,CAAC;QAED,0CAA0C;QAC1C,MAAM,eAAe,GAAG,cAAc,CACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAC/B,CACxB,CAAC;QAEF,2BAA2B;QAC3B,IAAI,aAAa,GAA+C,UAAU,CAAC;QAC3E,IAAI,eAAe,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACzC,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;aAAM,IACL,eAAe,CAAC,KAAK,KAAK,WAAW;YACrC,eAAe,CAAC,KAAK,KAAK,aAAa,EACvC,CAAC;YACD,aAAa,GAAG,iBAAiB,CAAC;QACpC,CAAC;QAED,mBAAmB;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,OAAO,EACP,iBAAiB,EACjB,aAAa,CACd,CAAC;QAEF,OAAO;YACL,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,eAAe,CAAC,KAAK;YAClC,SAAS,EAAE,eAAe,CAAC,KAAK;YAChC,iBAAiB,EAAE,OAAO,CAAC,MAAM;YACjC,eAAe;YACf,iBAAiB;YACjB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC7B,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBAClE,OAAO,CACL,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACrD,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC5B,CAAC;YACJ,CAAC,CAAC;YACF,OAAO;YACP,aAAa;SACd,CAAC;IACJ,CAAC;IAEO,eAAe,CACrB,OAA0B,EAC1B,iBAAgD,EAChD,MAAc;QAEd,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,8DAA8D,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC;QAEjB,IAAI,iBAAiB,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,CAAC,QAAQ,mBAAmB,iBAAiB,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,CAAC,IAAI,oBAAoB,iBAAiB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CACR,GAAG,iBAAiB,CAAC,MAAM,sBAAsB,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7F,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC5E,OAAO,GAAG,UAAU,mBAAmB,MAAM,4BAA4B,CAAC;IAC5E,CAAC;IAEO,gBAAgB,CAAC,QAAuB;QAC9C,MAAM,MAAM,GAAkC;YAC5C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;SACP,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,gBAAgB,CAAC,OAAyB;QACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,MAAsB;QAChC,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAE9E,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,WAAW,MAAM,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,iBAAiB,CAAC,QAAQ,IAAI,CAAC,UAAU,MAAM,CAAC,iBAAiB,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpH,CAAC;YACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,UAAU,MAAM,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5G,CAAC;YACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,UAAU,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChH,CAAC;YACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,UAAU,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1G,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAC9D,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAC1B,CAAC;YACF,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,KAAK,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAE5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBACjD,wBAAwB;gBACxB,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC7D,OAAO,CAAC,GAAG,CACT,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CACjF,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CACT,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,eAAe,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC9C,CAAC;IAEO,gBAAgB,CAAC,QAAuB;QAC9C,MAAM,MAAM,GAAkC;YAC5C,QAAQ,EAAE,kBAAkB,EAAE,6BAA6B;YAC3D,IAAI,EAAE,kBAAkB,EAAE,gCAAgC;YAC1D,MAAM,EAAE,kBAAkB,EAAE,8BAA8B;YAC1D,GAAG,EAAE,kBAAkB,EAAE,+BAA+B;SACzD,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAEO,UAAU;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoB,EACpB,OAAgB,EAChB,OAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgB,EAChB,OAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,YAAoB;IAKlD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,aAAa,KAAK,UAAU;QAC3C,WAAW,EAAE,MAAM,CAAC,iBAAiB;QACrC,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,QAAQ;KACnD,CAAC;AACJ,CAAC;AAED,eAAe,UAAU,CAAC"}
@@ -0,0 +1,21 @@
1
+ export type ThreatCategory = "CODE_INJECTION" | "DATA_EXFILTRATION" | "CREDENTIAL_THEFT" | "FILE_SYSTEM_ABUSE" | "CRYPTO_MINING" | "KEYLOGGER" | "OBFUSCATION" | "PROMPT_INJECTION" | "NETWORK_ABUSE" | "PRIVILEGE_ESCALATION" | "MALWARE" | "MEMORY_POISONING" | "SENSITIVE_DATA" | "SUPPLY_CHAIN";
2
+ export type SeverityLevel = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW";
3
+ export interface MaliciousPattern {
4
+ id: string;
5
+ category: ThreatCategory;
6
+ severity: SeverityLevel;
7
+ pattern: RegExp;
8
+ description: string;
9
+ example: string;
10
+ remediation?: string;
11
+ }
12
+ export declare const MALICIOUS_PATTERNS: MaliciousPattern[];
13
+ export declare function getPatternsByCategory(category: ThreatCategory): MaliciousPattern[];
14
+ export declare function getPatternsBySeverity(severity: SeverityLevel): MaliciousPattern[];
15
+ export declare function getThreatLevel(patterns: MaliciousPattern[]): {
16
+ score: number;
17
+ level: "SAFE" | "LOW_RISK" | "MEDIUM_RISK" | "HIGH_RISK" | "CRITICAL";
18
+ breakdown: Record<ThreatCategory, number>;
19
+ };
20
+ export default MALICIOUS_PATTERNS;
21
+ //# sourceMappingURL=patterns.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/guard/patterns.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,WAAW,GACX,aAAa,GACb,kBAAkB,GAClB,eAAe,GACf,sBAAsB,GACtB,SAAS,GACT,kBAAkB,GAClB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EAgvBhD,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,GACvB,gBAAgB,EAAE,CAEpB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,GACtB,gBAAgB,EAAE,CAEpB;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;IACtE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;CAC3C,CAsDA;AAED,eAAe,kBAAkB,CAAC"}