vaspera 2.5.0

package/dist/scanners/agent/manifest-audit.d.ts

@@ -0,0 +1,43 @@
+/**
+ * MCP Manifest Audit Scanner
+ *
+ * Parses MCP server manifests (server.json, mcp.json) and flags security issues:
+ * - Missing destructiveHint on write/delete tools
+ * - Missing readOnlyHint on read-only tools
+ * - Missing inputSchema (allows arbitrary input)
+ * - Unbounded allowedOrigins (wildcard *)
+ * - Missing tool descriptions
+ * - Excessive or undeclared permissions
+ *
+ * @module scanners/agent/manifest-audit
+ */
+import type { Severity } from "../../certification/types.js";
+import type { AgentScannerResult, MCPManifest, ManifestAuditCheck } from "./types.js";
+/**
+ * Run manifest audit on an MCP manifest
+ */
+export declare function runManifestAudit(manifest: MCPManifest, options?: {
+    /** Skip specific checks */
+    skipChecks?: ManifestAuditCheck[];
+    /** Only run specific checks */
+    onlyChecks?: ManifestAuditCheck[];
+}): Promise<AgentScannerResult>;
+/**
+ * Check if manifest audit is available (always true - no external deps)
+ */
+export declare function checkManifestAuditAvailable(): Promise<{
+    scanner: "manifest-audit";
+    available: boolean;
+    version: string;
+}>;
+/**
+ * Get summary statistics from audit findings
+ */
+export declare function getAuditSummary(result: AgentScannerResult): {
+    totalFindings: number;
+    byCheck: Record<ManifestAuditCheck, number>;
+    bySeverity: Record<Severity, number>;
+    toolsAudited: number;
+    passRate: number;
+};
+//# sourceMappingURL=manifest-audit.d.ts.map

package/dist/scanners/agent/manifest-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-audit.d.ts","sourceRoot":"","sources":["../../../src/scanners/agent/manifest-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EAEX,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AA+RpB;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IACR,2BAA2B;IAC3B,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,+BAA+B;IAC/B,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACnC,GACA,OAAO,CAAC,kBAAkB,CAAC,CAsE7B;AAED;;GAEG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC;IAC3D,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAMD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAkDA"}

package/dist/scanners/agent/manifest-audit.js

@@ -0,0 +1,403 @@
+/**
+ * MCP Manifest Audit Scanner
+ *
+ * Parses MCP server manifests (server.json, mcp.json) and flags security issues:
+ * - Missing destructiveHint on write/delete tools
+ * - Missing readOnlyHint on read-only tools
+ * - Missing inputSchema (allows arbitrary input)
+ * - Unbounded allowedOrigins (wildcard *)
+ * - Missing tool descriptions
+ * - Excessive or undeclared permissions
+ *
+ * @module scanners/agent/manifest-audit
+ */
+import { createHash } from "crypto";
+import { AGENT_SEVERITY_MAPPINGS } from "./types.js";
+// ============================================================================
+// Tool Classification Patterns
+// ============================================================================
+/**
+ * Patterns indicating a tool performs write/destructive operations
+ */
+const DESTRUCTIVE_PATTERNS = [
+    /write/i,
+    /create/i,
+    /delete/i,
+    /remove/i,
+    /update/i,
+    /modify/i,
+    /edit/i,
+    /insert/i,
+    /drop/i,
+    /truncate/i,
+    /execute/i,
+    /run/i,
+    /send/i,
+    /post/i,
+    /put/i,
+    /patch/i,
+    /push/i,
+    /commit/i,
+    /deploy/i,
+    /install/i,
+    /uninstall/i,
+    /upload/i,
+    /move/i,
+    /rename/i,
+    /chmod/i,
+    /chown/i,
+    /kill/i,
+    /terminate/i,
+    /restart/i,
+    /stop/i,
+    /start/i,
+];
+/**
+ * Patterns indicating a tool only reads data
+ */
+const READONLY_PATTERNS = [
+    /^read/i,
+    /^get/i,
+    /^fetch/i,
+    /^list/i,
+    /^search/i,
+    /^find/i,
+    /^query/i,
+    /^show/i,
+    /^view/i,
+    /^describe/i,
+    /^inspect/i,
+    /^check/i,
+    /^validate/i,
+    /^verify/i,
+    /^status/i,
+    /^info/i,
+    /^metadata/i,
+    /^count/i,
+    /^exists/i,
+    /^has/i,
+];
+/**
+ * Patterns indicating network access
+ */
+const NETWORK_PATTERNS = [
+    /http/i,
+    /https/i,
+    /url/i,
+    /fetch/i,
+    /request/i,
+    /api/i,
+    /webhook/i,
+    /socket/i,
+    /connect/i,
+    /download/i,
+    /upload/i,
+    /stream/i,
+    /remote/i,
+    /external/i,
+    /endpoint/i,
+];
+/**
+ * Patterns indicating code execution
+ */
+const CODE_EXECUTION_PATTERNS = [
+    /exec/i,
+    /execute/i,
+    /run/i,
+    /eval/i,
+    /shell/i,
+    /bash/i,
+    /command/i,
+    /script/i,
+    /spawn/i,
+    /process/i,
+    /terminal/i,
+    /repl/i,
+    /interpret/i,
+    /compile/i,
+];
+// ============================================================================
+// Tool Classification Functions
+// ============================================================================
+/**
+ * Check if a tool appears to be destructive based on name and description
+ */
+function isLikelyDestructive(tool) {
+    const text = `${tool.name} ${tool.description || ""}`.toLowerCase();
+    return DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(text));
+}
+/**
+ * Check if a tool appears to be read-only based on name and description
+ */
+function isLikelyReadOnly(tool) {
+    const text = `${tool.name} ${tool.description || ""}`.toLowerCase();
+    // If it matches destructive patterns, it's not read-only
+    if (DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(text))) {
+        return false;
+    }
+    return READONLY_PATTERNS.some((pattern) => pattern.test(text));
+}
+/**
+ * Check if a tool appears to have network access
+ */
+function hasLikelyNetworkAccess(tool) {
+    const text = `${tool.name} ${tool.description || ""}`.toLowerCase();
+    return NETWORK_PATTERNS.some((pattern) => pattern.test(text));
+}
+/**
+ * Check if a tool appears to execute code
+ */
+function hasLikelyCodeExecution(tool) {
+    const text = `${tool.name} ${tool.description || ""}`.toLowerCase();
+    return CODE_EXECUTION_PATTERNS.some((pattern) => pattern.test(text));
+}
+// ============================================================================
+// Audit Checks
+// ============================================================================
+/**
+ * Check for missing destructiveHint on likely destructive tools
+ */
+function checkMissingDestructiveHint(tool) {
+    if (isLikelyDestructive(tool) && tool.destructiveHint !== true) {
+        return {
+            check: "missing-destructive-hint",
+            severity: AGENT_SEVERITY_MAPPINGS["missing-destructive-hint"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" appears to perform write/destructive operations but does not declare destructiveHint: true`,
+            suggestion: `Add "destructiveHint": true to the tool definition to warn MCP clients about potential data modification`,
+            currentValue: tool.destructiveHint,
+            expectedValue: true,
+        };
+    }
+    return null;
+}
+/**
+ * Check for missing readOnlyHint on likely read-only tools
+ */
+function checkMissingReadOnlyHint(tool) {
+    if (isLikelyReadOnly(tool) && tool.readOnlyHint !== true) {
+        return {
+            check: "missing-readonly-hint",
+            severity: AGENT_SEVERITY_MAPPINGS["missing-readonly-hint"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" appears to be read-only but does not declare readOnlyHint: true`,
+            suggestion: `Add "readOnlyHint": true to enable MCP clients to optimize caching and reduce unnecessary confirmations`,
+            currentValue: tool.readOnlyHint,
+            expectedValue: true,
+        };
+    }
+    return null;
+}
+/**
+ * Check for missing input schema
+ */
+function checkMissingInputSchema(tool) {
+    if (!tool.inputSchema) {
+        return {
+            check: "missing-input-schema",
+            severity: AGENT_SEVERITY_MAPPINGS["missing-input-schema"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" does not define an inputSchema, allowing arbitrary unvalidated input`,
+            suggestion: `Define an inputSchema using JSON Schema or Zod to validate tool inputs and prevent injection attacks`,
+            currentValue: undefined,
+            expectedValue: "{ type: 'object', properties: {...}, required: [...] }",
+        };
+    }
+    return null;
+}
+/**
+ * Check for unbounded allowedOrigins (wildcard *)
+ */
+function checkUnboundedOrigins(tool) {
+    if (tool.allowedOrigins?.includes("*")) {
+        return {
+            check: "unbounded-origins",
+            severity: AGENT_SEVERITY_MAPPINGS["unbounded-origins"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" allows requests from any origin (*), which could enable cross-origin attacks`,
+            suggestion: `Replace wildcard (*) with specific allowed origins to limit cross-origin access`,
+            currentValue: tool.allowedOrigins,
+            expectedValue: ["https://trusted-domain.com"],
+        };
+    }
+    return null;
+}
+/**
+ * Check for missing tool description
+ */
+function checkMissingDescription(tool) {
+    if (!tool.description || tool.description.trim().length < 10) {
+        return {
+            check: "missing-description",
+            severity: AGENT_SEVERITY_MAPPINGS["missing-description"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" has no description or a very short description, making it difficult for AI models to use safely`,
+            suggestion: `Add a clear, detailed description explaining what the tool does, what inputs it expects, and any side effects`,
+            currentValue: tool.description,
+            expectedValue: "A clear description of at least 10 characters explaining the tool's purpose",
+        };
+    }
+    return null;
+}
+/**
+ * Check for undeclared network access
+ */
+function checkUndeclaredNetwork(tool) {
+    if (hasLikelyNetworkAccess(tool) && tool.networkAccess !== true) {
+        return {
+            check: "undeclared-network",
+            severity: AGENT_SEVERITY_MAPPINGS["undeclared-network"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" appears to have network access but does not declare networkAccess: true`,
+            suggestion: `Add "networkAccess": true to explicitly declare that this tool can make network requests`,
+            currentValue: tool.networkAccess,
+            expectedValue: true,
+        };
+    }
+    return null;
+}
+/**
+ * Check for undeclared code execution
+ */
+function checkUndeclaredCodeExecution(tool) {
+    if (hasLikelyCodeExecution(tool) && tool.codeExecution !== true) {
+        return {
+            check: "undeclared-code-execution",
+            severity: AGENT_SEVERITY_MAPPINGS["undeclared-code-execution"],
+            tool: tool.name,
+            description: `Tool "${tool.name}" appears to execute code but does not declare codeExecution: true`,
+            suggestion: `Add "codeExecution": true to warn clients about potential arbitrary code execution`,
+            currentValue: tool.codeExecution,
+            expectedValue: true,
+        };
+    }
+    return null;
+}
+// ============================================================================
+// Main Scanner Function
+// ============================================================================
+/**
+ * Run manifest audit on an MCP manifest
+ */
+export async function runManifestAudit(manifest, options) {
+    const startTime = Date.now();
+    const auditFindings = [];
+    // Define all checks
+    const allChecks = [
+        { check: "missing-destructive-hint", fn: checkMissingDestructiveHint },
+        { check: "missing-readonly-hint", fn: checkMissingReadOnlyHint },
+        { check: "missing-input-schema", fn: checkMissingInputSchema },
+        { check: "unbounded-origins", fn: checkUnboundedOrigins },
+        { check: "missing-description", fn: checkMissingDescription },
+        { check: "undeclared-network", fn: checkUndeclaredNetwork },
+        { check: "undeclared-code-execution", fn: checkUndeclaredCodeExecution },
+    ];
+    // Filter checks based on options
+    let checksToRun = allChecks;
+    if (options?.onlyChecks && options.onlyChecks.length > 0) {
+        checksToRun = allChecks.filter((c) => options.onlyChecks.includes(c.check));
+    }
+    else if (options?.skipChecks && options.skipChecks.length > 0) {
+        checksToRun = allChecks.filter((c) => !options.skipChecks.includes(c.check));
+    }
+    // Run checks on each tool
+    for (const tool of manifest.tools) {
+        for (const { fn } of checksToRun) {
+            const finding = fn(tool);
+            if (finding) {
+                auditFindings.push(finding);
+            }
+        }
+    }
+    // Convert audit findings to deterministic findings
+    const findings = auditFindings.map((af, index) => ({
+        scanner: "semgrep", // Map to existing type for compatibility
+        ruleId: `manifest-audit:${af.check}`,
+        file: "mcp-manifest",
+        line: 0,
+        message: af.description,
+        severity: af.severity,
+        confidence: 100,
+        evidence: `Tool: ${af.tool}\nCurrent: ${JSON.stringify(af.currentValue)}\nExpected: ${JSON.stringify(af.expectedValue)}`,
+        metadata: {
+            agentScanner: "manifest-audit",
+            check: af.check,
+            tool: af.tool,
+            suggestion: af.suggestion,
+        },
+    }));
+    // Calculate manifest hash
+    const manifestHash = createHash("sha256")
+        .update(JSON.stringify(manifest))
+        .digest("hex");
+    return {
+        scanner: "manifest-audit",
+        findings,
+        duration: Date.now() - startTime,
+        success: true,
+        mcpServerName: manifest.name,
+        mcpServerVersion: manifest.version,
+        manifestHash,
+        version: "1.0.0",
+        rulesUsed: checksToRun.map((c) => c.check),
+    };
+}
+/**
+ * Check if manifest audit is available (always true - no external deps)
+ */
+export async function checkManifestAuditAvailable() {
+    return {
+        scanner: "manifest-audit",
+        available: true,
+        version: "1.0.0",
+    };
+}
+/**
+ * Get summary statistics from audit findings
+ */
+export function getAuditSummary(result) {
+    const byCheck = {
+        "missing-destructive-hint": 0,
+        "missing-readonly-hint": 0,
+        "missing-input-schema": 0,
+        "unbounded-origins": 0,
+        "version-drift": 0,
+        "missing-description": 0,
+        "excessive-permissions": 0,
+        "undeclared-network": 0,
+        "undeclared-code-execution": 0,
+    };
+    const bySeverity = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    const toolsWithFindings = new Set();
+    for (const finding of result.findings) {
+        const check = finding.ruleId.replace("manifest-audit:", "");
+        if (check in byCheck) {
+            byCheck[check]++;
+        }
+        bySeverity[finding.severity]++;
+        const toolName = finding.metadata?.tool;
+        if (toolName) {
+            toolsWithFindings.add(toolName);
+        }
+    }
+    // Estimate tools audited from rulesUsed count (approximate)
+    const toolsAudited = Math.max(1, toolsWithFindings.size);
+    const maxPossibleFindings = toolsAudited * (result.rulesUsed?.length || 7);
+    const passRate = maxPossibleFindings > 0
+        ? Math.round(((maxPossibleFindings - result.findings.length) / maxPossibleFindings) * 100)
+        : 100;
+    return {
+        totalFindings: result.findings.length,
+        byCheck,
+        bySeverity,
+        toolsAudited,
+        passRate,
+    };
+}
+//# sourceMappingURL=manifest-audit.js.map

package/dist/scanners/agent/manifest-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-audit.js","sourceRoot":"","sources":["../../../src/scanners/agent/manifest-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAUpC,OAAO,EAAE,uBAAuB,EAAoB,MAAM,YAAY,CAAC;AAEvE,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,OAAO;IACP,WAAW;IACX,UAAU;IACV,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,SAAS;IACT,UAAU;IACV,YAAY;IACZ,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,UAAU;IACV,OAAO;IACP,QAAQ;CACT,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,SAAS;IACT,YAAY;IACZ,UAAU;IACV,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,UAAU;IACV,OAAO;CACR,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,UAAU;IACV,SAAS;IACT,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,WAAW;CACZ,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAG;IAC9B,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,SAAS;IACT,QAAQ;IACR,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,UAAU;CACX,CAAC;AAEF,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAuB;IAClD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IAEpE,yDAAyD;IACzD,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAuB;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAuB;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E;;GAEG;AACH,SAAS,2BAA2B,CAAC,IAAuB;IAC1D,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC/D,OAAO;YACL,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,uBAAuB,CAAC,0BAA0B,CAAC;YAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,8FAA8F;YAC7H,UAAU,EAAE,0GAA0G;YACtH,YAAY,EAAE,IAAI,CAAC,eAAe;YAClC,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,IAAuB;IACvD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO;YACL,KAAK,EAAE,uBAAuB;YAC9B,QAAQ,EAAE,uBAAuB,CAAC,uBAAuB,CAAC;YAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,mEAAmE;YAClG,UAAU,EAAE,yGAAyG;YACrH,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAuB;IACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,sBAAsB;YAC7B,QAAQ,EAAE,uBAAuB,CAAC,sBAAsB,CAAC;YACzD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,wEAAwE;YACvG,UAAU,EAAE,sGAAsG;YAClH,YAAY,EAAE,SAAS;YACvB,aAAa,EAAE,wDAAwD;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAuB;IACpD,IAAI,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,mBAAmB,CAAC;YACtD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,gFAAgF;YAC/G,UAAU,EAAE,iFAAiF;YAC7F,YAAY,EAAE,IAAI,CAAC,cAAc;YACjC,aAAa,EAAE,CAAC,4BAA4B,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAuB;IACtD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,uBAAuB,CAAC,qBAAqB,CAAC;YACxD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,mGAAmG;YAClI,UAAU,EAAE,+GAA+G;YAC3H,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,aAAa,EAAE,6EAA6E;SAC7F,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAuB;IACrD,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,uBAAuB,CAAC,oBAAoB,CAAC;YACvD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,2EAA2E;YAC1G,UAAU,EAAE,0FAA0F;YACtG,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,IAAuB;IAC3D,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,2BAA2B;YAClC,QAAQ,EAAE,uBAAuB,CAAC,2BAA2B,CAAC;YAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,oEAAoE;YACnG,UAAU,EAAE,oFAAoF;YAChG,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAqB,EACrB,OAKC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,aAAa,GAA2B,EAAE,CAAC;IAEjD,oBAAoB;IACpB,MAAM,SAAS,GAGV;QACH,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,2BAA2B,EAAE;QACtE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,wBAAwB,EAAE;QAChE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,uBAAuB,EAAE;QAC9D,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,qBAAqB,EAAE;QACzD,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,uBAAuB,EAAE;QAC7D,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,sBAAsB,EAAE;QAC3D,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,4BAA4B,EAAE;KACzE,CAAC;IAEF,iCAAiC;IACjC,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,0BAA0B;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,QAAQ,GAA2B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,SAAkB,EAAE,yCAAyC;QACtE,MAAM,EAAE,kBAAkB,EAAE,CAAC,KAAK,EAAE;QACpC,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,CAAC,WAAW;QACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE;QACxH,QAAQ,EAAE;YACR,YAAY,EAAE,gBAAgB;YAC9B,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,UAAU,EAAE,EAAE,CAAC,UAAU;SAC1B;KACF,CAAC,CAAC,CAAC;IAEJ,0BAA0B;IAC1B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAChC,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,QAAQ,CAAC,IAAI;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;QAClC,YAAY;QACZ,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAK/C,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IAOxD,MAAM,OAAO,GAAuC;QAClD,0BAA0B,EAAE,CAAC;QAC7B,uBAAuB,EAAE,CAAC;QAC1B,sBAAsB,EAAE,CAAC;QACzB,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,CAAC;QAClB,qBAAqB,EAAE,CAAC;QACxB,uBAAuB,EAAE,CAAC;QAC1B,oBAAoB,EAAE,CAAC;QACvB,2BAA2B,EAAE,CAAC;KAC/B,CAAC;IAEF,MAAM,UAAU,GAA6B;QAC3C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAuB,CAAC;QAClF,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAI,OAAO,CAAC,QAA8B,EAAE,IAAI,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,mBAAmB,GAAG,YAAY,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,mBAAmB,GAAG,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,GAAG,CAAC;QAC1F,CAAC,CAAC,GAAG,CAAC;IAER,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACrC,OAAO;QACP,UAAU;QACV,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/scanners/agent/payloads/index.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Prompt Injection Payload Corpus Loader
+ *
+ * Loads and manages injection payloads for fuzzing MCP tool inputs.
+ * Payloads are organized by category and can be extended with custom payloads.
+ *
+ * @module scanners/agent/payloads
+ */
+import type { InjectionPayload, PayloadCategory } from "../types.js";
+import type { Severity } from "../../../certification/types.js";
+/**
+ * Corpus size presets
+ */
+export declare const CORPUS_SIZES: {
+    quick: number;
+    standard: number;
+    thorough: number;
+};
+/**
+ * Load all payloads with optional filtering
+ */
+export declare function loadPayloads(options?: {
+    corpus?: "quick" | "standard" | "thorough";
+    categories?: PayloadCategory[];
+    customCorpus?: string;
+    minSeverity?: Severity;
+}): Promise<InjectionPayload[]>;
+/**
+ * Get payload statistics
+ */
+export declare function getPayloadStats(): Promise<{
+    total: number;
+    byCategory: Record<PayloadCategory, number>;
+    bySeverity: Record<Severity, number>;
+}>;
+/**
+ * Generate a randomized subset of payloads for testing
+ */
+export declare function getRandomPayloads(count: number): Promise<InjectionPayload[]>;
+/**
+ * Get payloads by specific tags
+ */
+export declare function getPayloadsByTags(tags: string[]): Promise<InjectionPayload[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/scanners/agent/payloads/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/scanners/agent/payloads/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAqBhE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;CAIxB,CAAC;AA8CF;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAC3C,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IAC3C,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,QAAQ,CAAC;CACxB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAqE9B;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC,CAgCD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAWlF;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAOnF"}