SafeAI-Static-Analyzer 1.9.0__tar.gz → 2.0.0__tar.gz

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 1.9.0
+Version: 2.0.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -37,6 +37,8 @@ Dynamic: license-file
 [![Latest Release](https://img.shields.io/badge/latest-v1.9.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v1.9.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
+Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
+
 **SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It runs entirely offline, never executes agents or calls LLMs, and integrates into CI/CD pipelines.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
@@ -80,7 +82,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 
 | Feature | Description |
 |---------|-------------|
-| **Framework Detection** | Detects and parses 15 AI agent frameworks (AST + config + regex, no mutual exclusion) |
+| **Framework Detection** | Detects and parses 16 AI agent frameworks (AST + config + regex, no mutual exclusion) |
 | **Tool Identity & Access Modes** | Capabilities attributed to named tools (agent / MCP server / skill / tool / workflow node) on an access scale `none < read < write < mutate < execute`; inferred modes are flagged, never overstated |
 | **Capability Discovery** | Maps 19 capability categories (shell, filesystem, network, database, memory, MCP, ...) with evidence, confidence, and provenance |
 | **Capability Escalation Detection** | Per-tool authority diffs between scans (new shell, read→write widening, new MCP server, removed approval gate, ...) — 14 rules, including gating-aware subsumption |
@@ -116,7 +118,7 @@ File Collection — Python, YAML, JSON, .prompt, and .claude configs;
                  prunes VCS, caches, oversized files, and SafeAI's own artifacts
     │
     ▼
-Framework Detection — 15 parsers (AST + config + regex), all run on all files;
+Framework Detection — 16 parsers (AST + config + regex), all run on all files;
                      import graph and dependency manifests
     │
     ▼
@@ -165,13 +167,14 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 | LlamaIndex | ✔ | Partial | Minimal | Minimal | Experimental |
 | Dify | ✔ | Minimal | Minimal | Minimal | Experimental |
 | n8n | ✔ | Partial | Minimal | Minimal | Experimental |
+| Cursor (.cursorrules) | ✔ | Minimal | Minimal | Minimal | Experimental |
 
 
 ### Framework Support Details
 
 - **LangGraph** — detects `StateGraph`, `add_edge`, `bind_tools`, nodes, models
 - **CrewAI** — detects `Agent`, `Task`, tools, models
-- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, agent delegation
+- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, `register_function`, models
 - **LangChain** — detects `AgentExecutor`, `Chain`, `Tool`, `PromptTemplate`, models
 - **Semantic Kernel** — detects `Kernel.invoke`, plugins, functions, skills, memory
 - **OpenAI Agents SDK** — detects `Agent`, tools, handoffs, MCP references
@@ -186,6 +189,9 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 - **LlamaIndex** — detects agents, tools, indexes, and model references
 - **Dify** — detects Dify workflow and agent configuration files
 - **n8n** — detects n8n workflow exports, nodes, and connections
+- **Cursor (.cursorrules)** — detects declared tools/permissions and
+  capability-relevant keywords (shell, filesystem, HTTP, database) in the
+  IDE's rules config, JSON, YAML, or free text
 
 Maturity is on the scale defined in [`FRAMEWORK_SUPPORT.md`](FRAMEWORK_SUPPORT.md):
 **Partial** = reliable detection and discovery with capability/risk analysis over
@@ -307,6 +313,12 @@ pip install -e ".[dev]"
 
 ---
 
+## Privacy & Telemetry
+
+SafeAI collects no data by default. Usage telemetry is opt-in, anonymous, and fully documented in [`PRIVACY.md`](PRIVACY.md). If you do nothing, nothing is ever sent. See `PRIVACY.md` for the complete data contract, what is never collected, and how to disable telemetry.
+
+---
+
 ## CLI Usage
 
 ```bash
@@ -755,10 +767,19 @@ See [ROADMAP.md](./ROADMAP.md) for the detailed roadmap.
 SafeAI is built by and for the AI security community. Thank you to all
 contributors who have helped make AI safer:
 
-- **[@Aming9303](https://github.com/Aming9303)** — `safeai registry components`
-  CLI ([#82](https://github.com/ikaruscareer/SafeAI/pull/82)),
-  `safeai init` command ([#83](https://github.com/ikaruscareer/SafeAI/pull/83)),
-  GitHub Actions workflow example ([#84](https://github.com/ikaruscareer/SafeAI/pull/84)).
+| Contributor | Key Contributions |
+|-------------|-------------------|
+| [@i-safonoff](https://github.com/i-safonoff) | `.cursorrules` framework adapter, `rule_coverage_summary()`, RULES_REFERENCE.md, dataflow casing fix |
+| [@ARAVIND281](https://github.com/ARAVIND281) | Claude Code permission evaluation order, interprocedural data-flow tracking |
+| [@Solarthis](https://github.com/Solarthis) | MCP tool description injection detection |
+| [@Aming9303](https://github.com/Aming9303) | `safeai registry components` CLI, `safeai init` command, GitHub Actions example |
+| [@adnqcr7-code](https://github.com/adnqcr7-code) | Framework detection tests (LangGraph, CrewAI, LlamaIndex, n8n, Claude Code), CI/SARIF docs |
+| [@hadbiaghiles](https://github.com/hadbiaghiles) | AutoGen framework documentation |
+| [@D05TL3](https://github.com/D05TL3) | GitHub Actions scanning example |
+| [@mikemikimike](https://github.com/mikemikimike) | Adapter negative detection tests |
+| [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
+| [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
+| [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/README.md

@@ -6,6 +6,8 @@
 [![Latest Release](https://img.shields.io/badge/latest-v1.9.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v1.9.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
+Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
+
 **SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It runs entirely offline, never executes agents or calls LLMs, and integrates into CI/CD pipelines.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
@@ -49,7 +51,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 
 | Feature | Description |
 |---------|-------------|
-| **Framework Detection** | Detects and parses 15 AI agent frameworks (AST + config + regex, no mutual exclusion) |
+| **Framework Detection** | Detects and parses 16 AI agent frameworks (AST + config + regex, no mutual exclusion) |
 | **Tool Identity & Access Modes** | Capabilities attributed to named tools (agent / MCP server / skill / tool / workflow node) on an access scale `none < read < write < mutate < execute`; inferred modes are flagged, never overstated |
 | **Capability Discovery** | Maps 19 capability categories (shell, filesystem, network, database, memory, MCP, ...) with evidence, confidence, and provenance |
 | **Capability Escalation Detection** | Per-tool authority diffs between scans (new shell, read→write widening, new MCP server, removed approval gate, ...) — 14 rules, including gating-aware subsumption |
@@ -85,7 +87,7 @@ File Collection — Python, YAML, JSON, .prompt, and .claude configs;
                  prunes VCS, caches, oversized files, and SafeAI's own artifacts
     │
     ▼
-Framework Detection — 15 parsers (AST + config + regex), all run on all files;
+Framework Detection — 16 parsers (AST + config + regex), all run on all files;
                      import graph and dependency manifests
     │
     ▼
@@ -134,13 +136,14 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 | LlamaIndex | ✔ | Partial | Minimal | Minimal | Experimental |
 | Dify | ✔ | Minimal | Minimal | Minimal | Experimental |
 | n8n | ✔ | Partial | Minimal | Minimal | Experimental |
+| Cursor (.cursorrules) | ✔ | Minimal | Minimal | Minimal | Experimental |
 
 
 ### Framework Support Details
 
 - **LangGraph** — detects `StateGraph`, `add_edge`, `bind_tools`, nodes, models
 - **CrewAI** — detects `Agent`, `Task`, tools, models
-- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, agent delegation
+- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, `register_function`, models
 - **LangChain** — detects `AgentExecutor`, `Chain`, `Tool`, `PromptTemplate`, models
 - **Semantic Kernel** — detects `Kernel.invoke`, plugins, functions, skills, memory
 - **OpenAI Agents SDK** — detects `Agent`, tools, handoffs, MCP references
@@ -155,6 +158,9 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 - **LlamaIndex** — detects agents, tools, indexes, and model references
 - **Dify** — detects Dify workflow and agent configuration files
 - **n8n** — detects n8n workflow exports, nodes, and connections
+- **Cursor (.cursorrules)** — detects declared tools/permissions and
+  capability-relevant keywords (shell, filesystem, HTTP, database) in the
+  IDE's rules config, JSON, YAML, or free text
 
 Maturity is on the scale defined in [`FRAMEWORK_SUPPORT.md`](FRAMEWORK_SUPPORT.md):
 **Partial** = reliable detection and discovery with capability/risk analysis over
@@ -276,6 +282,12 @@ pip install -e ".[dev]"
 
 ---
 
+## Privacy & Telemetry
+
+SafeAI collects no data by default. Usage telemetry is opt-in, anonymous, and fully documented in [`PRIVACY.md`](PRIVACY.md). If you do nothing, nothing is ever sent. See `PRIVACY.md` for the complete data contract, what is never collected, and how to disable telemetry.
+
+---
+
 ## CLI Usage
 
 ```bash
@@ -724,10 +736,19 @@ See [ROADMAP.md](./ROADMAP.md) for the detailed roadmap.
 SafeAI is built by and for the AI security community. Thank you to all
 contributors who have helped make AI safer:
 
-- **[@Aming9303](https://github.com/Aming9303)** — `safeai registry components`
-  CLI ([#82](https://github.com/ikaruscareer/SafeAI/pull/82)),
-  `safeai init` command ([#83](https://github.com/ikaruscareer/SafeAI/pull/83)),
-  GitHub Actions workflow example ([#84](https://github.com/ikaruscareer/SafeAI/pull/84)).
+| Contributor | Key Contributions |
+|-------------|-------------------|
+| [@i-safonoff](https://github.com/i-safonoff) | `.cursorrules` framework adapter, `rule_coverage_summary()`, RULES_REFERENCE.md, dataflow casing fix |
+| [@ARAVIND281](https://github.com/ARAVIND281) | Claude Code permission evaluation order, interprocedural data-flow tracking |
+| [@Solarthis](https://github.com/Solarthis) | MCP tool description injection detection |
+| [@Aming9303](https://github.com/Aming9303) | `safeai registry components` CLI, `safeai init` command, GitHub Actions example |
+| [@adnqcr7-code](https://github.com/adnqcr7-code) | Framework detection tests (LangGraph, CrewAI, LlamaIndex, n8n, Claude Code), CI/SARIF docs |
+| [@hadbiaghiles](https://github.com/hadbiaghiles) | AutoGen framework documentation |
+| [@D05TL3](https://github.com/D05TL3) | GitHub Actions scanning example |
+| [@mikemikimike](https://github.com/mikemikimike) | Adapter negative detection tests |
+| [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
+| [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
+| [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/SafeAI_Static_Analyzer.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: SafeAI-Static-Analyzer
-Version: 1.9.0
+Version: 2.0.0
 Summary: The lightweight, open-source Static AI Capability & Risk Analyzer for CI/CD pipelines.
 Author: IkarusCareer
 License-Expression: Apache-2.0
@@ -37,6 +37,8 @@ Dynamic: license-file
 [![Latest Release](https://img.shields.io/badge/latest-v1.9.0-0f766e)](https://github.com/ikaruscareer/SafeAI/releases/tag/v1.9.0)
 [![Best Practices](https://bestpractices.dev/projects/14126/badge)](https://www.bestpractices.dev/en/projects/14126)
 
+Enjoying SafeAI? A ⭐ on [GitHub](https://github.com/ikaruscareer/SafeAI) helps more security teams find it.
+
 **SafeAI** is a static analysis tool that scans AI application source code for security risks, capability exposure, and governance gaps. It runs entirely offline, never executes agents or calls LLMs, and integrates into CI/CD pipelines.
 
 > 🌐 [safeai-analyzer.ikaruscareer.com](https://safeai-analyzer.ikaruscareer.com) — project landing page
@@ -80,7 +82,7 @@ SafeAI sits before runtime guardrails and red-teaming tools in the security life
 
 | Feature | Description |
 |---------|-------------|
-| **Framework Detection** | Detects and parses 15 AI agent frameworks (AST + config + regex, no mutual exclusion) |
+| **Framework Detection** | Detects and parses 16 AI agent frameworks (AST + config + regex, no mutual exclusion) |
 | **Tool Identity & Access Modes** | Capabilities attributed to named tools (agent / MCP server / skill / tool / workflow node) on an access scale `none < read < write < mutate < execute`; inferred modes are flagged, never overstated |
 | **Capability Discovery** | Maps 19 capability categories (shell, filesystem, network, database, memory, MCP, ...) with evidence, confidence, and provenance |
 | **Capability Escalation Detection** | Per-tool authority diffs between scans (new shell, read→write widening, new MCP server, removed approval gate, ...) — 14 rules, including gating-aware subsumption |
@@ -116,7 +118,7 @@ File Collection — Python, YAML, JSON, .prompt, and .claude configs;
                  prunes VCS, caches, oversized files, and SafeAI's own artifacts
     │
     ▼
-Framework Detection — 15 parsers (AST + config + regex), all run on all files;
+Framework Detection — 16 parsers (AST + config + regex), all run on all files;
                      import graph and dependency manifests
     │
     ▼
@@ -165,13 +167,14 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 | LlamaIndex | ✔ | Partial | Minimal | Minimal | Experimental |
 | Dify | ✔ | Minimal | Minimal | Minimal | Experimental |
 | n8n | ✔ | Partial | Minimal | Minimal | Experimental |
+| Cursor (.cursorrules) | ✔ | Minimal | Minimal | Minimal | Experimental |
 
 
 ### Framework Support Details
 
 - **LangGraph** — detects `StateGraph`, `add_edge`, `bind_tools`, nodes, models
 - **CrewAI** — detects `Agent`, `Task`, tools, models
-- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, agent delegation
+- **AutoGen** — detects `AssistantAgent`, `UserProxyAgent`, `register_for_llm`, `register_function`, models
 - **LangChain** — detects `AgentExecutor`, `Chain`, `Tool`, `PromptTemplate`, models
 - **Semantic Kernel** — detects `Kernel.invoke`, plugins, functions, skills, memory
 - **OpenAI Agents SDK** — detects `Agent`, tools, handoffs, MCP references
@@ -186,6 +189,9 @@ Registry & Reports — shared SQLite registry; terminal, JSON, SARIF 2.1.0, HTML
 - **LlamaIndex** — detects agents, tools, indexes, and model references
 - **Dify** — detects Dify workflow and agent configuration files
 - **n8n** — detects n8n workflow exports, nodes, and connections
+- **Cursor (.cursorrules)** — detects declared tools/permissions and
+  capability-relevant keywords (shell, filesystem, HTTP, database) in the
+  IDE's rules config, JSON, YAML, or free text
 
 Maturity is on the scale defined in [`FRAMEWORK_SUPPORT.md`](FRAMEWORK_SUPPORT.md):
 **Partial** = reliable detection and discovery with capability/risk analysis over
@@ -307,6 +313,12 @@ pip install -e ".[dev]"
 
 ---
 
+## Privacy & Telemetry
+
+SafeAI collects no data by default. Usage telemetry is opt-in, anonymous, and fully documented in [`PRIVACY.md`](PRIVACY.md). If you do nothing, nothing is ever sent. See `PRIVACY.md` for the complete data contract, what is never collected, and how to disable telemetry.
+
+---
+
 ## CLI Usage
 
 ```bash
@@ -755,10 +767,19 @@ See [ROADMAP.md](./ROADMAP.md) for the detailed roadmap.
 SafeAI is built by and for the AI security community. Thank you to all
 contributors who have helped make AI safer:
 
-- **[@Aming9303](https://github.com/Aming9303)** — `safeai registry components`
-  CLI ([#82](https://github.com/ikaruscareer/SafeAI/pull/82)),
-  `safeai init` command ([#83](https://github.com/ikaruscareer/SafeAI/pull/83)),
-  GitHub Actions workflow example ([#84](https://github.com/ikaruscareer/SafeAI/pull/84)).
+| Contributor | Key Contributions |
+|-------------|-------------------|
+| [@i-safonoff](https://github.com/i-safonoff) | `.cursorrules` framework adapter, `rule_coverage_summary()`, RULES_REFERENCE.md, dataflow casing fix |
+| [@ARAVIND281](https://github.com/ARAVIND281) | Claude Code permission evaluation order, interprocedural data-flow tracking |
+| [@Solarthis](https://github.com/Solarthis) | MCP tool description injection detection |
+| [@Aming9303](https://github.com/Aming9303) | `safeai registry components` CLI, `safeai init` command, GitHub Actions example |
+| [@adnqcr7-code](https://github.com/adnqcr7-code) | Framework detection tests (LangGraph, CrewAI, LlamaIndex, n8n, Claude Code), CI/SARIF docs |
+| [@hadbiaghiles](https://github.com/hadbiaghiles) | AutoGen framework documentation |
+| [@D05TL3](https://github.com/D05TL3) | GitHub Actions scanning example |
+| [@mikemikimike](https://github.com/mikemikimike) | Adapter negative detection tests |
+| [@mah](https://github.com/mahirhir) | Claude Code deep analysis documentation |
+| [@asarakhatun17-lgtm](https://github.com/asarakhatun17-lgtm) | Supported frameworks consistency fix |
+| [@yugaaank](https://github.com/yugaaank) | Capability detectors (Docker, Kubernetes, Redis, S3, GCP, Slack, Jira, browser) |
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md) for how to get involved.
 

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/SafeAI_Static_Analyzer.egg-info/SOURCES.txt

@@ -81,6 +81,8 @@ safeai/frameworks/claude_code/permissions.py
 safeai/frameworks/claude_code/settings.py
 safeai/frameworks/crewai/__init__.py
 safeai/frameworks/crewai/parser.py
+safeai/frameworks/cursorrules/__init__.py
+safeai/frameworks/cursorrules/parser.py
 safeai/frameworks/dify/__init__.py
 safeai/frameworks/dify/parser.py
 safeai/frameworks/google_adk/__init__.py
@@ -103,6 +105,8 @@ safeai/frameworks/openai_agents/__init__.py
 safeai/frameworks/openai_agents/parser.py
 safeai/frameworks/semantic_kernel/__init__.py
 safeai/frameworks/semantic_kernel/parser.py
+safeai/frameworks/windsurf/__init__.py
+safeai/frameworks/windsurf/parser.py
 safeai/kya/__init__.py
 safeai/kya/assurance.py
 safeai/kya/baseline.py
@@ -121,6 +125,7 @@ safeai/kya/registry/persist.py
 safeai/kya/registry/queries.py
 safeai/kya/registry/schema.py
 safeai/report/__init__.py
+safeai/report/failure_matrix.py
 safeai/report/html.py
 safeai/report/html_kit.py
 safeai/report/json_report.py
@@ -133,6 +138,10 @@ safeai/rules/base_rules.yaml
 safeai/rules/loader.py
 safeai/scoring/__init__.py
 safeai/scoring/engine.py
+safeai/telemetry/__init__.py
+safeai/telemetry/client.py
+safeai/telemetry/config.py
+safeai/telemetry/schema.py
 tests/test_adapter_dataflow.py
 tests/test_assurance.py
 tests/test_baseline.py
@@ -145,8 +154,10 @@ tests/test_component_hash.py
 tests/test_confidence_arbitration.py
 tests/test_control_mappings.py
 tests/test_crewai_framework.py
+tests/test_cursorrules_framework.py
 tests/test_env_dependency.py
 tests/test_escalation.py
+tests/test_evidence_type.py
 tests/test_fingerprints.py
 tests/test_github_action.py
 tests/test_governance_analyzer.py
@@ -156,6 +167,7 @@ tests/test_kya_integration.py
 tests/test_kya_manifest.py
 tests/test_langgraph_framework.py
 tests/test_llamaindex_framework.py
+tests/test_mcp_tool_poisoning.py
 tests/test_mcp_validation.py
 tests/test_n8n_workflow.py
 tests/test_parser_aggregation.py
@@ -177,6 +189,8 @@ tests/test_semantic.py
 tests/test_severity.py
 tests/test_suppressions.py
 tests/test_target_taxonomy_engine.py
+tests/test_telemetry.py
 tests/test_tool_identity.py
 tests/test_tool_implementation.py
-tests/test_version.py
+tests/test_version.py
+tests/test_windsurf_framework.py

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/safeai/analyzers/capability/analyzer.py

@@ -72,6 +72,7 @@ CATEGORY_BY_CAP = {
 def _finding(rule_id, rule, message, path, line, capability, framework="generic", evidence=None, confidence=0.6, score_contribution=8):
     return {
         "rule_id": rule_id,
+        "evidence_type": "static-pattern",  # #94 - regex fallback pass over raw file content
         "severity": rule.get("severity", "medium"),
         "message": message,
         "file": path,
@@ -160,6 +161,7 @@ class CapabilityAnalyzer:
 
             findings.append({
                 "rule_id": rule_id,
+                "evidence_type": "static-pattern",  # #94 - regex fallback pass over raw file content
                 "severity": rule.get("severity", "medium"),
                 "message": f"Capability discovered: {cap_name}",
                 "file": path,
@@ -249,6 +251,7 @@ class CapabilityAnalyzer:
                         rule = rule_map.get("CAP_AUTONOMY", {})
                         findings.append({
                             "rule_id": "CAP_AUTONOMY",
+                            "evidence_type": "static-pattern",  # #94 - regex fallback pass over raw file content
                             "severity": rule.get("severity", "high"),
                             "message": "Potential autonomous agent loop detected",
                             "file": path,

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/safeai/analyzers/claude_code/analyzer.py

@@ -22,8 +22,9 @@ _REMEDIATION = {
                               "command or path pattern the workflow needs.",
     "CC_BYPASS_PERMISSIONS": "Remove the bypass/auto-approve setting and keep the "
                              "human approval gate enabled in committed settings.",
-    "CC_DENY_SHADOWED": "Narrow the allow entry so the deny entry can take effect, "
-                        "or remove the deny entry that cannot apply.",
+    "CC_DENY_SHADOWED": "Remove the allow entry that cannot apply, or narrow the "
+                        "deny entry if the allow was the intended behaviour. The "
+                        "deny is what takes effect.",
     "CC_FS_WRITE_OUTSIDE_ROOT": "Constrain write grants to paths inside the project root.",
     "CC_SLASH_COMMAND_SHELL": "Pin the command, avoid inline shell in stored "
                               "instructions, and review who can invoke it.",
@@ -98,6 +99,7 @@ def _finding(rule_id, rule_map, message, path, line, evidence, reason, severity=
     resolved = severity or rule.get("severity") or _DEFAULT_SEVERITY.get(rule_id, "medium")
     return {
         "rule_id": rule_id,
+        "evidence_type": "static-config",  # #94 - reads declared permission/hook/settings entries
         "severity": resolved,
         "message": message,
         "file": path,
@@ -204,15 +206,27 @@ class ClaudeCodeAnalyzer:
 
     def _permission_findings(self, records, rule_map):
         findings = []
+        effective = cc_permissions.resolve_effective_rules(records)
         for record in records:
             if record["decision"] == "allow" and record["wildcard"] and record["tool"]:
+                # #93 - a wildcard allow grants nothing the tool's denies do not
+                # already take back, at any scope. Report it, but not as though
+                # the surface were unbounded when it demonstrably is not.
+                constrained = effective.get(str(record["tool"]).lower(), {}).get("decision") == "deny"
                 findings.append(_finding(
                     "CC_WILDCARD_PERMISSION", rule_map,
                     f"Unconstrained Claude Code permission: {record['entry']}",
                     record["path"], record["line"],
                     evidence=record["entry"],
-                    reason=f"{record['tool']} is allowed with no argument constraint, granting "
-                           f"{record['access_mode']} authority over its entire surface.",
+                    reason=(
+                        f"{record['tool']} is allowed with no argument constraint, but a deny "
+                        f"rule for the same tool is evaluated first, so the granted surface is "
+                        f"bounded by that deny."
+                        if constrained else
+                        f"{record['tool']} is allowed with no argument constraint, granting "
+                        f"{record['access_mode']} authority over its entire surface."
+                    ),
+                    severity="medium" if constrained else None,
                 ))
             if cc_permissions.writes_outside_root(record):
                 findings.append(_finding(
@@ -225,14 +239,21 @@ class ClaudeCodeAnalyzer:
                     capability="Filesystem",
                 ))
 
-        for deny, allow in cc_permissions.shadowed_denials(records):
+        # #93 - this finding used to be stated the wrong way round. Claude Code
+        # evaluates deny, then ask, then allow, and "rule specificity doesn't
+        # change the order", so a matching deny ALWAYS decides the call. It is
+        # the allow that is dead configuration, not the deny, and the severity
+        # follows: contradictory rules are a maintenance problem, not a hole.
+        for allow, deny in cc_permissions.ineffective_allows(records):
             findings.append(_finding(
                 "CC_DENY_SHADOWED", rule_map,
-                f"Deny entry is shadowed by a broader allow: {deny['entry']}",
-                deny["path"], deny["line"],
-                evidence=f"deny {deny['entry']} vs allow {allow['entry']}",
-                reason="The deny entry cannot take effect because a broader allow entry covers "
-                       "it, so the configuration reads as safer than it behaves.",
+                f"Allow entry can never apply, a deny covers it: {allow['entry']}",
+                allow["path"], allow["line"],
+                evidence=f"allow {allow['entry']} overridden by deny {deny['entry']}",
+                reason="Claude Code evaluates deny before allow and specificity does not change "
+                       "that, so the deny decides every matching call and this allow widens "
+                       "nothing. The deny is effective; the allow is dead configuration.",
+                severity="low",
             ))
         return findings
 

{safeai_static_analyzer-1.9.0 → safeai_static_analyzer-2.0.0}/safeai/analyzers/data_leakage/analyzer.py

@@ -94,6 +94,7 @@ class DataLeakageAnalyzer:
                         )
                         findings.append({
                             "rule_id": "DATA_LEAKAGE",
+                            "evidence_type": "static-pattern",  # #94 - regex patterns over source text
                             "severity": severity,
                             "message": f"Potential secret exposure: {key}",
                             "file": path,