visus-mcp 0.8.0 → 0.9.0

package/src/sanitizer/framework-mapper.ts

@@ -4,6 +4,8 @@
  * Maps injection pattern categories to compliance framework identifiers:
  * - OWASP LLM Top 10 (2025)
  * - NIST AI 600-1 (Generative AI Profile)
+ * - NIST AI RMF (AI Risk Management Framework - AI 100-1)
+ * - NIST CSF 2.0 (Cybersecurity Framework 2.0)
  * - MITRE ATLAS (Adversarial Threat Landscape for AI Systems)
  * - ISO/IEC 42001:2023 (AI Management System - Annex A Controls)
  */
@@ -11,6 +13,8 @@
 export interface FrameworkMappings {
   owasp_llm: string;
   nist_ai_600_1: string;
+  nist_ai_rmf: string;
+  nist_csf_2_0: string;
   mitre_atlas: string;
   iso_42001: string;
 }
@@ -23,6 +27,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   direct_instruction_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -31,6 +37,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   role_hijacking: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -39,6 +47,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   system_prompt_extraction: {
     owasp_llm: 'LLM02:2025 - Sensitive Information Disclosure',
     nist_ai_600_1: 'MS-2.6 - Data Disclosure',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'PR.DS-01 - Data at Rest Protection',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -47,6 +57,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   privilege_escalation: {
     owasp_llm: 'LLM08:2025 - Excessive Agency',
     nist_ai_600_1: 'GV-1.1 - Policies and Procedures',
+    nist_ai_rmf: 'GOVERN-1.1 - Legal and Regulatory Requirements',
+    nist_csf_2_0: 'PR.AC-04 - Access Control Enforcement',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -55,6 +67,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   context_poisoning: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-5.1 - Impact Likelihood and Magnitude',
+    nist_csf_2_0: 'PR.DS-06 - Integrity Verification',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.2 - Data Quality'
   },
@@ -63,6 +77,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   data_exfiltration: {
     owasp_llm: 'LLM02:2025 - Sensitive Information Disclosure',
     nist_ai_600_1: 'MS-2.6 - Data Disclosure',
+    nist_ai_rmf: 'MANAGE-2.3 - Respond to Unknown Risks',
+    nist_csf_2_0: 'DE.AE-02 - Anomaly Detection',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.7.5 - Data Provenance / A.8.2 - Information to Users'
   },
@@ -71,6 +87,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   base64_obfuscation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -79,6 +97,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   unicode_lookalikes: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -87,6 +107,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   zero_width_characters: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -95,6 +117,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   html_script_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -103,6 +127,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   data_uri_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -111,6 +137,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   markdown_link_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -119,6 +147,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   url_fragment_hashjack: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -127,6 +157,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   social_engineering_urgency: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'GOVERN-2.2 - Personnel Training',
+    nist_csf_2_0: 'PR.AT-01 - Awareness Training',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.5.3 - AI Awareness and Training'
   },
@@ -135,6 +167,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   instruction_delimiter_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -143,6 +177,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   multi_language_obfuscation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -151,6 +187,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   reverse_text_obfuscation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -159,6 +197,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   leetspeak_obfuscation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -167,6 +207,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   jailbreak_keywords: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -175,6 +217,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   token_smuggling: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -183,6 +227,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   system_message_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -191,6 +237,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   conversation_reset: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MANAGE-4.3 - Incident Communication',
+    nist_csf_2_0: 'DE.AE-01 - Baseline Establishment',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.2.6 - Logging and Monitoring'
   },
@@ -199,6 +247,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   memory_manipulation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-5.1 - Impact Likelihood and Magnitude',
+    nist_csf_2_0: 'PR.DS-06 - Integrity Verification',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.6.2.6 - Logging and Monitoring'
   },
@@ -207,6 +257,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   capability_probing: {
     owasp_llm: 'LLM08:2025 - Excessive Agency',
     nist_ai_600_1: 'GV-1.1 - Policies and Procedures',
+    nist_ai_rmf: 'GOVERN-1.1 - Legal and Regulatory Requirements',
+    nist_csf_2_0: 'ID.AM-01 - Asset Inventory',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.2 - AI System Operational Procedures'
   },
@@ -215,6 +267,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   chain_of_thought_manipulation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -223,6 +277,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   hypothetical_scenario_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -231,6 +287,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   ethical_override: {
     owasp_llm: 'LLM08:2025 - Excessive Agency',
     nist_ai_600_1: 'GV-1.1 - Policies and Procedures',
+    nist_ai_rmf: 'GOVERN-1.1 - Legal and Regulatory Requirements',
+    nist_csf_2_0: 'GV.PO-01 - Policy Establishment',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.2.2 - Responsible AI Policies'
   },
@@ -239,6 +297,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   output_format_manipulation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.2 - Internal Controls Identification',
+    nist_csf_2_0: 'PR.DS-06 - Integrity Verification',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.2 - AI System Operational Procedures'
   },
@@ -247,6 +307,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   negative_instruction: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.2 - AI System Operational Procedures'
   },
@@ -255,6 +317,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   credential_harvesting: {
     owasp_llm: 'LLM02:2025 - Sensitive Information Disclosure',
     nist_ai_600_1: 'MS-2.6 - Data Disclosure',
+    nist_ai_rmf: 'MANAGE-2.3 - Respond to Unknown Risks',
+    nist_csf_2_0: 'PR.AC-01 - Identity Management',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.7.5 - Data Provenance / A.6.1.5 - AI System Security'
   },
@@ -263,6 +327,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   time_based_triggers: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-3.1 - Risk Monitoring',
+    nist_csf_2_0: 'DE.CM-03 - User Activity Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.2.6 - Logging and Monitoring'
   },
@@ -271,6 +337,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   code_execution_requests: {
     owasp_llm: 'LLM08:2025 - Excessive Agency',
     nist_ai_600_1: 'GV-1.1 - Policies and Procedures',
+    nist_ai_rmf: 'GOVERN-1.3 - Risk Tolerance',
+    nist_csf_2_0: 'PR.AC-04 - Access Control Enforcement',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.9.3 - Intended Use Boundaries'
   },
@@ -279,6 +347,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   file_system_access: {
     owasp_llm: 'LLM08:2025 - Excessive Agency',
     nist_ai_600_1: 'GV-1.1 - Policies and Procedures',
+    nist_ai_rmf: 'GOVERN-1.3 - Risk Tolerance',
+    nist_csf_2_0: 'PR.AC-03 - Remote Access Management',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.9.3 - Intended Use Boundaries'
   },
@@ -287,6 +357,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   training_data_extraction: {
     owasp_llm: 'LLM02:2025 - Sensitive Information Disclosure',
     nist_ai_600_1: 'MS-2.6 - Data Disclosure',
+    nist_ai_rmf: 'MAP-1.1 - Negative Impact Documentation',
+    nist_csf_2_0: 'PR.DS-01 - Data at Rest Protection',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.7.5 - Data Provenance'
   },
@@ -295,6 +367,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   simulator_mode: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.6 - AI System Safety',
+    nist_csf_2_0: 'ID.AM-02 - Platform Management',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.9.3 - Intended Use Boundaries'
   },
@@ -303,6 +377,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   nested_encoding: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -311,6 +387,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   payload_splitting: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -319,6 +397,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   css_hiding: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -327,6 +407,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   authority_impersonation: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'GOVERN-2.2 - Personnel Training',
+    nist_csf_2_0: 'PR.AT-01 - Awareness Training',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.2.2 - Responsible AI Policies'
   },
@@ -335,6 +417,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   testing_debugging_claims: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MEASURE-2.7 - AI System Security and Resilience',
+    nist_csf_2_0: 'DE.CM-01 - Network Monitoring',
     mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
     iso_42001: 'A.6.1.2 - AI System Operational Procedures'
   },
@@ -343,6 +427,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   callback_url_injection: {
     owasp_llm: 'LLM02:2025 - Sensitive Information Disclosure',
     nist_ai_600_1: 'MS-2.6 - Data Disclosure',
+    nist_ai_rmf: 'MANAGE-2.3 - Respond to Unknown Risks',
+    nist_csf_2_0: 'DE.AE-02 - Anomaly Detection',
     mitre_atlas: 'AML.T0048 - External Harms',
     iso_42001: 'A.6.1.5 - AI System Security (Adversarial Input)'
   },
@@ -351,6 +437,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   whitespace_steganography: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-02 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   },
@@ -359,6 +447,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
   comment_injection: {
     owasp_llm: 'LLM01:2025 - Prompt Injection',
     nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+    nist_ai_rmf: 'MAP-4.1 - Risk Mapping for AI Components',
+    nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
     mitre_atlas: 'AML.T0051.001 - LLM Prompt Injection: Indirect',
     iso_42001: 'A.7.4 - Data Preparation'
   }
@@ -370,6 +460,8 @@ const FRAMEWORK_MAP: Record<string, FrameworkMappings> = {
 const DEFAULT_MAPPINGS: FrameworkMappings = {
   owasp_llm: 'LLM01:2025 - Prompt Injection',
   nist_ai_600_1: 'MS-2.5 - Prompt Injection',
+  nist_ai_rmf: 'MEASURE-2.7 - AI System Security',
+  nist_csf_2_0: 'PR.DS-05 - Data-in-Transit Protection',
   mitre_atlas: 'AML.T0051.000 - LLM Prompt Injection',
   iso_42001: 'A.6.1.5 - AI System Security'
 };
@@ -388,6 +480,8 @@ export function getSupportedFrameworks(): string[] {
   return [
     'OWASP LLM Top 10 (2025)',
     'NIST AI 600-1 (Generative AI Profile)',
+    'NIST AI RMF (AI Risk Management Framework)',
+    'NIST CSF 2.0 (Cybersecurity Framework)',
     'MITRE ATLAS (Adversarial Threat Landscape)',
     'ISO/IEC 42001:2023 (AI Management System)'
   ];

package/src/sanitizer/threat-reporter.ts

@@ -9,7 +9,10 @@
  * Aligned with:
  * - OWASP LLM Top 10 (2025)
  * - NIST AI 600-1 (Generative AI Profile)
+ * - NIST AI RMF (AI Risk Management Framework)
+ * - NIST CSF 2.0 (Cybersecurity Framework 2.0)
  * - MITRE ATLAS (Adversarial Threat Landscape)
+ * - ISO/IEC 42001:2023 (AI Management System)
  */
 
 import {
@@ -34,6 +37,8 @@ export interface ThreatFinding {
   confidence: number;
   owasp_llm: string;
   nist_ai_600_1: string;
+  nist_ai_rmf: string;
+  nist_csf_2_0: string;
   mitre_atlas: string;
   iso_42001: string;
   remediation: string;
@@ -103,6 +108,8 @@ function buildFindings(patternsDetected: string[]): ThreatFinding[] {
       confidence: 0.95, // Default confidence; can be enhanced later
       owasp_llm: frameworks.owasp_llm,
       nist_ai_600_1: frameworks.nist_ai_600_1,
+      nist_ai_rmf: frameworks.nist_ai_rmf,
+      nist_csf_2_0: frameworks.nist_csf_2_0,
       mitre_atlas: frameworks.mitre_atlas,
       iso_42001: frameworks.iso_42001,
       remediation: `Content sanitized. ${category.replace(/_/g, ' ')} removed.`
@@ -126,9 +133,9 @@ function generateToonFindings(findings: ThreatFinding[]): string {
  * Fallback manual TOON format generation
  */
 function generateManualToonFormat(findings: ThreatFinding[]): string {
-  const header = `findings[${findings.length}]{id,pattern_id,category,severity,confidence,owasp_llm,nist_ai_600_1,mitre_atlas,iso_42001,remediation}:`;
+  const header = `findings[${findings.length}]{id,pattern_id,category,severity,confidence,owasp_llm,nist_ai_600_1,nist_ai_rmf,nist_csf_2_0,mitre_atlas,iso_42001,remediation}:`;
   const rows = findings.map(f =>
-    `${f.id},${f.pattern_id},${f.category},${f.severity},${f.confidence},${f.owasp_llm},${f.nist_ai_600_1},${f.mitre_atlas},${f.iso_42001},${f.remediation}`
+    `${f.id},${f.pattern_id},${f.category},${f.severity},${f.confidence},${f.owasp_llm},${f.nist_ai_600_1},${f.nist_ai_rmf},${f.nist_csf_2_0},${f.mitre_atlas},${f.iso_42001},${f.remediation}`
   );
   return `${header}\n${rows.join('\n')}`;
 }
@@ -151,7 +158,7 @@ function generateMarkdownReport(
   markdown += `**Generated:** ${timestamp}\n`;
   markdown += `**Source:** ${sourceUrl}\n`;
   markdown += `**Overall Severity:** ${overallSeverity}\n`;
-  markdown += `**Framework:** OWASP LLM Top 10 | NIST AI 600-1 | MITRE ATLAS | ISO/IEC 42001\n\n`;
+  markdown += `**Framework:** OWASP LLM Top 10 | NIST AI 600-1 | NIST AI RMF | NIST CSF 2.0 | MITRE ATLAS | ISO/IEC 42001\n\n`;
 
   // Findings Summary
   markdown += '### Findings Summary\n';
@@ -165,16 +172,18 @@ function generateMarkdownReport(
   // Findings Detail (only if we have findings)
   if (findings.length > 0) {
     markdown += '### Findings Detail\n';
-    markdown += '| # | Category | Severity | Confidence | OWASP | MITRE | ISO 42001 |\n';
-    markdown += '|---|---|---|---|---|---|---|\n';
+    markdown += '| # | Category | Severity | Conf | OWASP | AI-RMF | CSF 2.0 | MITRE | ISO |\n';
+    markdown += '|---|---|---|---|---|---|---|---|---|\n';
 
     for (const finding of findings.slice(0, 10)) { // Limit to first 10 for readability
       const confidencePct = Math.round(finding.confidence * 100);
       const owaspShort = finding.owasp_llm.split(' - ')[0]; // e.g., "LLM01:2025"
+      const nistRmfShort = finding.nist_ai_rmf.split(' - ')[0]; // e.g., "MEASURE-2.7"
+      const nistCsfShort = finding.nist_csf_2_0.split(' - ')[0]; // e.g., "DE.CM-01"
       const mitreShort = finding.mitre_atlas.split(' - ')[0]; // e.g., "AML.T0051.000"
       const isoShort = finding.iso_42001.split(' - ')[0]; // e.g., "A.6.1.5"
 
-      markdown += `| ${finding.id} | ${finding.category} | ${finding.severity} | ${confidencePct}% | ${owaspShort} | ${mitreShort} | ${isoShort} |\n`;
+      markdown += `| ${finding.id} | ${finding.category} | ${finding.severity} | ${confidencePct}% | ${owaspShort} | ${nistRmfShort} | ${nistCsfShort} | ${mitreShort} | ${isoShort} |\n`;
     }
 
     if (findings.length > 10) {
@@ -256,6 +265,8 @@ export function generateThreatReport(input: ThreatReportInput): ThreatReport | n
     frameworks: [
       'OWASP LLM Top 10',
       'NIST AI 600-1',
+      'NIST AI RMF',
+      'NIST CSF 2.0',
       'MITRE ATLAS',
       'ISO/IEC 42001'
     ],

package/src/tools/fetch-structured.ts

@@ -119,6 +119,11 @@ export async function visusFetchStructured(
 
     const { title, html } = renderResult.value;
 
+    // Type guard: fetch-structured only works with HTML (string), not binary content
+    if (Buffer.isBuffer(html)) {
+      return Err(new Error('fetch-structured does not support binary content types (PDFs, images). Use visus_fetch instead.'));
+    }
+
     // Step 2: Extract structured data from HTML using cheerio
     const extractedData = extractStructuredData(html, schema);
 

package/src/tools/fetch.ts

@@ -40,6 +40,7 @@ export async function visusFetch(input: VisusFetchInput): Promise<Result<VisusFe
     }
 
     const { html, title, contentType } = renderResult.value;
+    // rawContent can be string (HTML/JSON/SVG) or Buffer (PDF, binary)
     const rawContent = html || '';
 
     // Step 2: Detect content type and route to specialized handlers if applicable
@@ -53,6 +54,7 @@ export async function visusFetch(input: VisusFetchInput): Promise<Result<VisusFe
         normalizedMime === 'image/svg+xml') {
 
       // Route to specialized content handler
+      // Note: rawContent may be Buffer for PDFs, string for JSON/SVG
       const handlerResult = await routeContentHandler(rawContent, detectedContentType);
 
       // Handle unsupported or error cases
@@ -108,6 +110,11 @@ export async function visusFetch(input: VisusFetchInput): Promise<Result<VisusFe
     }
 
     // Step 3: For HTML/XML/RSS - use existing format conversion flow
+    // Type guard: rawContent should be string for non-binary types
+    if (Buffer.isBuffer(rawContent)) {
+      return Err(new Error('Unexpected binary content in HTML/XML/RSS path'));
+    }
+
     const formatType = detectFormat(detectedContentType);
 
     let processedContent = rawContent;

package/src/tools/read.ts

@@ -48,6 +48,11 @@ export async function visusRead(input: VisusReadInput): Promise<Result<VisusRead
 
     const { html, title: pageTitle } = renderResult.value;
 
+    // Type guard: visus_read only works with HTML (string), not binary content
+    if (Buffer.isBuffer(html)) {
+      return Err(new Error('visus_read does not support binary content types (PDFs, images). Use visus_fetch instead.'));
+    }
+
     // Step 2: Extract article content using Readability
     const readerResult = extractArticle(html, url);
 

package/src/types.ts

@@ -130,9 +130,17 @@ export interface VisusSearchOutput {
 
 /**
  * Result from browser rendering
+ *
+ * @property html - Response content as string (for text) or Buffer (for binary like PDFs)
+ *                  Use Buffer for application/pdf, image/*, and other binary types
+ * @property title - Page title extracted from response
+ * @property url - Final URL after redirects
+ * @property contentType - Content-Type header value (e.g., "application/pdf", "text/html")
+ * @property text - Optional text content (when available)
+ * @property error - Error message if rendering failed
  */
 export interface BrowserRenderResult {
-  html: string;
+  html: string | Buffer;
   title: string;
   url: string;
   contentType?: string;