agentsec-cli 0.1.0__tar.gz

agentsec_cli-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 locface
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agentsec_cli-0.1.0/PKG-INFO

@@ -0,0 +1,161 @@
+Metadata-Version: 2.4
+Name: agentsec-cli
+Version: 0.1.0
+Summary: Static security scanner for AI coding agents and MCP configurations
+Author-email: locface <locface@example.com>
+License: MIT
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.0.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: toml>=0.10.2
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Dynamic: license-file
+
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+AgentSec finds dangerous permissions, prompt injection risks, secret exposure, and unsafe tool access in:
+- **Cursor** agent configurations
+- **Claude Desktop** MCP servers
+- **Codex** / **Cline** / **Continue** agent setups
+- **MCP** (Model Context Protocol) server manifests
+- **Markdown** instruction files (CLAUDE.md, AGENTS.md, etc.)
+
+## Features
+
+- **40+ security rules** covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape risks, browser automation, and credential helper exposure
+- **Supports JSON, YAML, TOML, Markdown, Cursor/Claude/Cline/Codex config files** — detects common AI-agent configs in multiple formats
+- **SARIF output** for integration with GitHub CodeQL and other CI/CD tools
+- **GitHub Action** ready (coming soon)
+- **Zero dependencies on LLMs** — purely static analysis
+
+## Installation
+
+```bash
+pip install agentsec
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/locface/AgentSec.git
+cd AgentSec
+pip install -e .
+```
+
+## Usage
+
+### Basic scan
+
+```bash
+agentsec scan /path/to/your/project
+```
+
+### Output formats
+
+```bash
+agentsec scan . --format json          # JSON output
+agentsec scan . --format markdown      # Markdown report
+agentsec scan . --format sarif         # SARIF (for CI/CD)
+```
+
+### Filter by severity
+
+```bash
+agentsec scan . --severity critical   # only critical findings
+```
+
+### Include hidden files
+
+```bash
+agentsec scan . --include-hidden
+```
+
+## Examples
+
+Scan a repository with MCP servers:
+
+```bash
+agentsec scan ~/projects/mcp-servers --format sarif > results.sarif
+```
+
+Scan your current directory for agent configs:
+
+```bash
+agentsec scan . --include-hidden --format markdown > report.md
+```
+
+## Rules
+
+AgentSec includes rules for:
+
+| Severity | Examples |
+|----------|----------|
+| **Critical** | MCP shell execution, filesystem write access, secret exposure, Docker socket access, privileged containers, host mounts, dynamic code execution |
+| **High** | Broad path access, prompt injection, remote script install, communication write permissions, browser + local file access, wildcard tool allowlists |
+| **Medium** | Unpinned dependencies, excessive autonomy, telemetry endpoints, missing input validation |
+| **Low** | Missing policy file |
+
+## Supported config files
+
+AgentSec scans common AI-agent and MCP files, including:
+
+- `mcp.json`, `mcp.yaml`, `mcp.yml`, `mcp.toml`, `mcp-config.json`
+- `claude_desktop_config.json`, `CLAUDE.md`, `AGENTS.md`
+- `.cursorrules`, `.cursor/rules/*`, `.clinerules`, `cline_mcp`, `codex.toml`
+- `settings.json`, `package.json`, `requirements.txt`, `Dockerfile`, `docker-compose.yml`
+
+See [`agentsec/rules/additional.py`](https://github.com/locface/AgentSec/blob/main/agentsec/rules/additional.py) for the complete list.
+
+## CI/CD Integration
+
+Add AgentSec to your GitHub workflow:
+
+```yaml
+- name: Run AgentSec
+  run: |
+    pip install agentsec
+    agentsec scan . --format sarif > results.sarif
+
+- name: Upload SARIF to GitHub CodeQL
+  uses: github/codeql-action/upload-sarif@v3
+  with:
+    sarif_file: results.sarif
+```
+
+## Development
+
+```bash
+# Install dev dependencies
+pip install -e .[dev]
+
+# Run tests
+pytest
+
+# Build package
+python -m build
+```
+
+## Documentation
+
+- **[Landing Page](https://locface.github.io/AgentSec/)** — interactive demo, features, OWASP mapping, CI/CD setup
+- **[Full Documentation](https://locface.github.io/AgentSec/docs/)** — installation, usage, rules reference, FAQ
+
+## License
+
+MIT © 2026 locface
+
+## Status
+
+**Alpha** — under active development. Contributions welcome!

agentsec_cli-0.1.0/README.md

@@ -0,0 +1,138 @@
+# AgentSec
+
+**Static security scanner for AI coding agents and MCP configurations.**
+
+AgentSec finds dangerous permissions, prompt injection risks, secret exposure, and unsafe tool access in:
+- **Cursor** agent configurations
+- **Claude Desktop** MCP servers
+- **Codex** / **Cline** / **Continue** agent setups
+- **MCP** (Model Context Protocol) server manifests
+- **Markdown** instruction files (CLAUDE.md, AGENTS.md, etc.)
+
+## Features
+
+- **40+ security rules** covering shell execution, filesystem access, network exfiltration, OAuth scopes, prompt injection, container escape risks, browser automation, and credential helper exposure
+- **Supports JSON, YAML, TOML, Markdown, Cursor/Claude/Cline/Codex config files** — detects common AI-agent configs in multiple formats
+- **SARIF output** for integration with GitHub CodeQL and other CI/CD tools
+- **GitHub Action** ready (coming soon)
+- **Zero dependencies on LLMs** — purely static analysis
+
+## Installation
+
+```bash
+pip install agentsec
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/locface/AgentSec.git
+cd AgentSec
+pip install -e .
+```
+
+## Usage
+
+### Basic scan
+
+```bash
+agentsec scan /path/to/your/project
+```
+
+### Output formats
+
+```bash
+agentsec scan . --format json          # JSON output
+agentsec scan . --format markdown      # Markdown report
+agentsec scan . --format sarif         # SARIF (for CI/CD)
+```
+
+### Filter by severity
+
+```bash
+agentsec scan . --severity critical   # only critical findings
+```
+
+### Include hidden files
+
+```bash
+agentsec scan . --include-hidden
+```
+
+## Examples
+
+Scan a repository with MCP servers:
+
+```bash
+agentsec scan ~/projects/mcp-servers --format sarif > results.sarif
+```
+
+Scan your current directory for agent configs:
+
+```bash
+agentsec scan . --include-hidden --format markdown > report.md
+```
+
+## Rules
+
+AgentSec includes rules for:
+
+| Severity | Examples |
+|----------|----------|
+| **Critical** | MCP shell execution, filesystem write access, secret exposure, Docker socket access, privileged containers, host mounts, dynamic code execution |
+| **High** | Broad path access, prompt injection, remote script install, communication write permissions, browser + local file access, wildcard tool allowlists |
+| **Medium** | Unpinned dependencies, excessive autonomy, telemetry endpoints, missing input validation |
+| **Low** | Missing policy file |
+
+## Supported config files
+
+AgentSec scans common AI-agent and MCP files, including:
+
+- `mcp.json`, `mcp.yaml`, `mcp.yml`, `mcp.toml`, `mcp-config.json`
+- `claude_desktop_config.json`, `CLAUDE.md`, `AGENTS.md`
+- `.cursorrules`, `.cursor/rules/*`, `.clinerules`, `cline_mcp`, `codex.toml`
+- `settings.json`, `package.json`, `requirements.txt`, `Dockerfile`, `docker-compose.yml`
+
+See [`agentsec/rules/additional.py`](https://github.com/locface/AgentSec/blob/main/agentsec/rules/additional.py) for the complete list.
+
+## CI/CD Integration
+
+Add AgentSec to your GitHub workflow:
+
+```yaml
+- name: Run AgentSec
+  run: |
+    pip install agentsec
+    agentsec scan . --format sarif > results.sarif
+
+- name: Upload SARIF to GitHub CodeQL
+  uses: github/codeql-action/upload-sarif@v3
+  with:
+    sarif_file: results.sarif
+```
+
+## Development
+
+```bash
+# Install dev dependencies
+pip install -e .[dev]
+
+# Run tests
+pytest
+
+# Build package
+python -m build
+```
+
+## Documentation
+
+- **[Landing Page](https://locface.github.io/AgentSec/)** — interactive demo, features, OWASP mapping, CI/CD setup
+- **[Full Documentation](https://locface.github.io/AgentSec/docs/)** — installation, usage, rules reference, FAQ
+
+## License
+
+MIT © 2026 locface
+
+## Status
+
+**Alpha** — under active development. Contributions welcome!

agentsec_cli-0.1.0/agentsec/__init__.py

@@ -0,0 +1,3 @@
+"""AgentSec: Static security scanner for AI coding agents and MCP configs."""
+
+__version__ = "0.1.0"

agentsec_cli-0.1.0/agentsec/baseline.py

@@ -0,0 +1,60 @@
+"""Baseline (lockfile) management for AgentSec."""
+
+import json
+import hashlib
+from pathlib import Path
+from typing import Dict, List, Tuple
+
+
+def compute_finding_id(finding: dict) -> str:
+    """Compute a stable unique ID for a finding based on rule, file, and server."""
+    key = f"{finding['rule']}|{finding['file']}|{finding.get('server', '')}"
+    return hashlib.md5(key.encode()).hexdigest()
+
+
+def load_baseline(path: str) -> Dict[str, str]:
+    """Load baseline from JSON file. Returns dict of id -> severity."""
+    p = Path(path)
+    if not p.exists():
+        return {}
+    with open(p, 'r') as f:
+        data = json.load(f)
+    return data.get('findings', {})
+
+
+def save_baseline(path: str, findings: List[dict]) -> None:
+    """Save current findings as baseline."""
+    baseline = {}
+    for f in findings:
+        fid = compute_finding_id(f)
+        baseline[fid] = f['severity']
+    with open(path, 'w') as f:
+        json.dump({"findings": baseline}, f, indent=2)
+
+
+def compare_findings(findings: List[dict], baseline: Dict[str, str]) -> Tuple[List[dict], List[dict], List[dict]]:
+    """
+    Compare current findings against baseline.
+    Returns: (new, changed, removed)
+      - new: findings not in baseline
+      - changed: findings whose severity changed
+      - removed: baseline entries not in current findings (as list of dict with 'id' and 'severity')
+    """
+    current_ids = set()
+    new = []
+    changed = []
+
+    for f in findings:
+        fid = compute_finding_id(f)
+        current_ids.add(fid)
+        if fid not in baseline:
+            new.append(f)
+        elif baseline[fid] != f['severity']:
+            changed.append(f)
+
+    removed = []
+    for fid, sev in baseline.items():
+        if fid not in current_ids:
+            removed.append({'id': fid, 'severity': sev})
+
+    return new, changed, removed

agentsec_cli-0.1.0/agentsec/cli.py

@@ -0,0 +1,84 @@
+"""CLI entry point for AgentSec."""
+
+import sys
+import click
+from pathlib import Path
+from .scanner import Scanner
+from .report import print_summary
+from .baseline import load_baseline, save_baseline, compare_findings, compute_finding_id
+from .owasp import format_owasp
+
+
+@click.group()
+def cli():
+    """AgentSec — security scanner for AI agent configs."""
+    pass
+
+
+@cli.command()
+@click.argument("path", default=".", type=click.Path(exists=True, file_okay=False, dir_okay=True, resolve_path=True))
+@click.option("--format", "-f", default="terminal", help="Output format: terminal, json, markdown, sarif")
+@click.option("--severity", default="all", help="Minimum severity: critical, high, medium, low, all")
+@click.option("--fail-on", type=click.Choice(["critical", "high", "medium", "low"], case_sensitive=False), help="Exit with code 1 if any finding is at least this severity")
+@click.option("--include-hidden", is_flag=True, help="Include hidden files and directories")
+@click.option("--baseline", type=click.Path(exists=True, dir_okay=False, resolve_path=True), help="Path to baseline JSON file (lockfile). Compare findings against it.")
+@click.option("--update-baseline", type=click.Path(dir_okay=False, resolve_path=True), help="Save current findings as baseline JSON file and exit.")
+@click.option("--show-owasp", is_flag=True, default=False, help="Show OWASP Top 10 for LLM mapping IDs for each finding")
+def scan(path, format, severity, include_hidden, fail_on=None, baseline=None, update_baseline=None, show_owasp=False):
+    """Scan a directory for security risks in AI agent configurations."""
+    if format == "terminal":
+        click.echo(f" Scanning {path}...")
+    scanner = Scanner(Path(path), include_hidden=include_hidden, min_severity=severity)
+    findings = scanner.scan()
+
+    # If update-baseline is provided, save baseline and exit
+    if update_baseline:
+        save_baseline(update_baseline, findings)
+        if format == "terminal":
+            click.echo(f" Baseline saved to {update_baseline}")
+        return
+
+    # Load baseline if provided
+    if baseline:
+        baseline_findings = load_baseline(baseline)
+        new, changed, removed = compare_findings(findings, baseline_findings)
+        if format == "terminal":
+            click.echo(f"\n Baseline comparison against {baseline}:")
+            click.echo(f"  New findings: {len(new)}")
+            click.echo(f"  Changed severity: {len(changed)}")
+            click.echo(f"  Removed findings: {len(removed)}")
+            if new:
+                click.echo("\n New findings:")
+                for f in new:
+                    click.echo(f"  [{f['severity']}] {f['rule']} ({f['file']})")
+            if changed:
+                click.echo("\n Changed findings:")
+                for f in changed:
+                    old_sev = baseline_findings.get(compute_finding_id(f), 'unknown')
+                    click.echo(f"  [{old_sev} -> {f['severity']}] {f['rule']} ({f['file']})")
+            if removed:
+                click.echo("\n Removed findings (baseline only):")
+                for r in removed:
+                    click.echo(f"  [{r['severity']}] id: {r['id']}")
+        print_summary(findings, format, show_owasp=show_owasp)
+        if new or changed:
+            sys.exit(1)
+    else:
+        # Add OWASP tags to terminal output header if show_owasp
+        if format == "terminal" and show_owasp:
+            click.echo(" OWASP mapping enabled (LLM = OWASP Top 10 for LLM, AG = OWASP Agentic Security)\n")
+        print_summary(findings, format, show_owasp=show_owasp)
+
+    # Existing fail-on logic
+    if fail_on:
+        severity_levels = {"low": 0, "medium": 1, "high": 2, "critical": 3}
+        min_fail = severity_levels.get(fail_on.lower(), -1)
+        if min_fail >= 0:
+            for f in findings:
+                if severity_levels.get(f["severity"].lower(), -1) >= min_fail:
+                    click.echo(f"Failing due to {f['severity']} finding: {f['rule']}")
+                    sys.exit(1)
+
+
+if __name__ == "__main__":
+    cli()

agentsec_cli-0.1.0/agentsec/owasp.py

@@ -0,0 +1,212 @@
+"""OWASP Top 10 for LLM Applications — rule mapping for AgentSec.
+
+Maps each AgentSec rule to the relevant OWASP categories.
+
+OWASP Top 10 for LLM Applications (2025):
+https://genai.owasp.org/
+
+LLM01 — Prompt Injection
+LLM02 — Sensitive Information Disclosure
+LLM03 — Supply Chain Vulnerabilities
+LLM04 — Data Leakage via External Services
+LLM05 — Insecure Output Handling
+LLM06 — Excessive Agency / Unrestricted Autonomy
+LLM07 — Insecure Plugin / Extension Design
+LLM08 — Excessive Permissions / Overprivileged Access
+LLM09 — Over-reliance / Insufficient Oversight
+LLM10 — Model Theft / Intellectual Property Loss
+
+OWASP Agentic Security Top 10 (2025):
+AG01 — Insecure Agent-to-Agent Communication
+AG02 — Unauthorized Tool Access
+AG03 — Agent Impersonation
+AG04 — Task Delegation Abuse
+AG05 — Memory / Prompt Leakage
+AG06 — Inconsistent Authorization
+AG07 — Output Validation Failure
+AG08 — Agent Workflow Manipulation
+AG09 — Inadequate Audit Trail
+AG10 — Privilege Escalation
+"""
+
+# Mapping: OWASP ID -> (short name, description)
+OWASP_CATEGORIES = {
+    "LLM01": ("Prompt Injection", "Attacker injects malicious instructions via user prompts or indirect inputs"),
+    "LLM02": ("Sensitive Information Disclosure", "LLM or agent exposes sensitive data (secrets, PII, internal info)"),
+    "LLM03": ("Supply Chain Vulnerabilities", "Compromised dependencies, packages, or third-party components"),
+    "LLM04": ("Data Leakage via External Services", "Sensitive data exfiltrated through network calls, APIs, or integrations"),
+    "LLM05": ("Insecure Output Handling", "Agent output is not validated before being used in downstream operations"),
+    "LLM06": ("Excessive Agency", "Agent has more autonomy than necessary — can perform actions without oversight"),
+    "LLM07": ("Insecure Plugin/Extension Design", "Plugins or extensions have weak security boundaries"),
+    "LLM08": ("Excessive Permissions", "Agent or tool has overly broad filesystem/network/OS permissions"),
+    "LLM09": ("Over-reliance / Insufficient Oversight", "No guardrails, audit, or policy enforcement for agent actions"),
+    "LLM10": ("Model Theft / IP Loss", "Risk of proprietary model weights or IP extraction"),
+    # Agentic Security
+    "AG01": ("Insecure Agent-to-Agent Communication", "Agents communicate without proper authentication or encryption"),
+    "AG02": ("Unauthorized Tool Access", "Agent can invoke tools or capabilities without proper authorization gates"),
+    "AG03": ("Agent Impersonation", "Attacker impersonates a legitimate agent to gain access"),
+    "AG04": ("Task Delegation Abuse", "Malicious tasks can be delegated to sub-agents without validation"),
+    "AG05": ("Memory/Prompt Leakage", "Agent memory or prompt context can leak across sessions or users"),
+    "AG06": ("Inconsistent Authorization", "Authorization policies are missing, incomplete, or not enforced"),
+    "AG07": ("Output Validation Failure", "Agent output is not validated for safety or correctness"),
+    "AG08": ("Agent Workflow Manipulation", "Attacker manipulates the agent's workflow or decision chain"),
+    "AG09": ("Inadequate Audit Trail", "Agent actions are not logged or traceable"),
+    "AG10": ("Privilege Escalation", "Agent can escalate its own privileges beyond intended scope"),
+}
+
+# Rule-to-OWASP mapping: rule_name -> list of (owasp_id, category_name)
+# Covers all 41 rules from base.py + additional.py (deduplicated)
+RULE_OWASP_MAP = {
+    # === Base rules ===
+    "MCP shell execution": [
+        ("LLM06", "Excessive Agency"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    "MCP filesystem write access": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Secret exposure": [
+        ("LLM02", "Sensitive Information Disclosure"),
+    ],
+    "Broad path access": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Prompt injection risk": [
+        ("LLM01", "Prompt Injection"),
+    ],
+    "Sensitive file reference": [
+        ("LLM02", "Sensitive Information Disclosure"),
+    ],
+    "Excessive autonomy": [
+        ("LLM06", "Excessive Agency"),
+    ],
+    "Unpinned dependency": [
+        ("LLM03", "Supply Chain Vulnerabilities"),
+    ],
+    "Remote script install": [
+        ("LLM03", "Supply Chain Vulnerabilities"),
+    ],
+    "Docker socket access": [
+        ("LLM08", "Excessive Permissions"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    # === Additional rules ===
+    "Network + filesystem access": [
+        ("LLM04", "Data Leakage via External Services"),
+        ("AG05", "Memory/Prompt Leakage"),
+    ],
+    "Suspicious tool description": [
+        ("LLM01", "Prompt Injection"),
+        ("AG10", "Privilege Escalation"),
+    ],
+    "GitHub token exposure": [
+        ("LLM02", "Sensitive Information Disclosure"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    "Communication tool write permission": [
+        ("LLM04", "Data Leakage via External Services"),
+    ],
+    "Database write/delete permission": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Excessive autonomy instruction": [
+        ("LLM06", "Excessive Agency"),
+    ],
+    "Prompt injection in markdown": [
+        ("LLM01", "Prompt Injection"),
+    ],
+    "MCP OAuth broad scopes": [
+        ("LLM07", "Insecure Plugin/Extension Design"),
+        ("AG06", "Inconsistent Authorization"),
+    ],
+    "Web + filesystem access": [
+        ("LLM04", "Data Leakage via External Services"),
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Read repo + network": [
+        ("LLM04", "Data Leakage via External Services"),
+        ("AG05", "Memory/Prompt Leakage"),
+    ],
+    "Unknown/untrusted source": [
+        ("LLM03", "Supply Chain Vulnerabilities"),
+    ],
+    "No policy file": [
+        ("LLM09", "Over-reliance / Insufficient Oversight"),
+        ("AG06", "Inconsistent Authorization"),
+    ],
+    "Cursor agent config with dangerous permissions": [
+        ("LLM08", "Excessive Permissions"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    "Claude Desktop config with MCP server risks": [
+        ("LLM07", "Insecure Plugin/Extension Design"),
+    ],
+    "Codex/Cline agent with unrestricted tools": [
+        ("LLM08", "Excessive Permissions"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    "Environment variable exposure": [
+        ("LLM02", "Sensitive Information Disclosure"),
+    ],
+    "Vulnerable dependency pattern": [
+        ("LLM03", "Supply Chain Vulnerabilities"),
+    ],
+    "Insecure default command": [
+        ("LLM07", "Insecure Plugin/Extension Design"),
+    ],
+    "Read-only file system in MCP server": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Missing input validation": [
+        ("LLM05", "Insecure Output Handling"),
+        ("AG07", "Output Validation Failure"),
+    ],
+    "Package manager execution": [
+        ("LLM03", "Supply Chain Vulnerabilities"),
+    ],
+    "Container privileged mode": [
+        ("LLM08", "Excessive Permissions"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+    "Host mount exposure": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Browser automation with local file access": [
+        ("LLM04", "Data Leakage via External Services"),
+        ("AG05", "Memory/Prompt Leakage"),
+    ],
+    "Dynamic code execution": [
+        ("LLM06", "Excessive Agency"),
+        ("AG10", "Privilege Escalation"),
+    ],
+    "Wildcard tool allowlist": [
+        ("LLM08", "Excessive Permissions"),
+    ],
+    "Telemetry or analytics endpoint": [
+        ("LLM04", "Data Leakage via External Services"),
+    ],
+    "Credential helper access": [
+        ("LLM02", "Sensitive Information Disclosure"),
+        ("AG02", "Unauthorized Tool Access"),
+    ],
+}
+
+
+def get_owasp(rule_name: str) -> list:
+    """Return OWASP mappings for a rule name. Returns [(owasp_id, category_name), ...] or empty list."""
+    return RULE_OWASP_MAP.get(rule_name, [])
+
+
+def get_owasp_ids(rule_name: str) -> str:
+    """Return OWASP IDs as a comma-separated string (e.g. 'LLM06, AG02')."""
+    mappings = get_owasp(rule_name)
+    return ", ".join(owasp_id for owasp_id, _ in mappings)
+
+
+def format_owasp(rule_name: str) -> str:
+    """Format OWASP info for terminal output: '[LLM06, AG02]' or empty string."""
+    mappings = get_owasp(rule_name)
+    if not mappings:
+        return ""
+    ids = ", ".join(f"{owasp_id}" for owasp_id, _ in mappings)
+    return f"[{ids}]"

agentsec_cli-0.1.0/agentsec/parsers/__init__.py

@@ -0,0 +1,5 @@
+"""File parsers for AgentSec."""
+
+from .core import parse_file
+
+__all__ = ["parse_file"]