cisco-ai-skill-scanner 1.0.0__py3-none-any.whl → 1.0.2__py3-none-any.whl

skillanalyzer/data/yara_rules/script_injection.yara

@@ -1,83 +0,0 @@
-//////////////////////////////////////////
-// Detects common scripting payloads (JS, VBScript, etc.) embeddings.
-// Target: JavaScript, VBScript, or ActiveX payloads.
-// (Event handlers or inline scripts)
-//////////////////////////////////////////
-
-rule script_injection{
-
-    meta:
-        author = "Cisco"
-        description = "Detects embedded scripting payloads (JS, VBScript, etc.) in MCP tool descriptions"
-        classification = "harmful"
-        threat_type = "INJECTION ATTACK"
-
-    strings:
-
-        // Script tags and protocol handlers (exclude XML namespaces)
-        $tags = /(<\/?script[^>]*>|javascript:)/i
-
-        // ALWAYS exclude (safe in all file types)
-        $xml_namespace = /(xmlns:script=|<script:module|<script:)/
-        $openoffice_xml = /openoffice\.org\/2000\/script/
-        $legitimate_cdn = /(cdnjs\.cloudflare\.com|cdn\.jsdelivr\.net|unpkg\.com)/i
-
-        // Only exclude in MARKDOWN files (risky in .py files!)
-        // Check for markdown-specific syntax
-        $markdown_heading = /^#\s+/
-        $markdown_list = /^\*\s+/
-        $markdown_code_block = /(```html|```javascript|```js)/i
-        $documentation_context = /(example.*html|artifact.*structure|template|single.*file)/i
-
-        // Execution functions
-        $execution_functions = /\b(setTimeout|Function|setInterval)\s*\(/i
-
-        // VBScript execution and Windows Script Host objects
-        $vbs_execution = /\b(vbscript|CreateObject|WScript\.Shell|Shell\.Application)\b/i
-
-        // VBScript dangerous functions (more specific to avoid false positives in docs)
-        $vbs_dangerous_functions = /\b(WScript\.Shell\.Exec|Shell\.Application\.ShellExecute|CreateObject.*Exec)\s*\(/i
-
-        // Base64 encoded script data URIs
-        $encoded_script_uris = /\bdata:(text\/html|application\/javascript);base64\b/i
-
-        // ANSI terminal deception patterns
-        $ansi_deception = /(\\x1[Bb]\[38;5;\d+|\\x1[Bb]\[2F\\x1[Bb]\[1G|\\x1[Bb]\[1;1H\\x1[Bb]\[0J|\\x1[Bb]\]8;;.*\\x1[Bb]\\|\\033\[[0-9;]*m|\\e\[[0-9;]*[mGKHF])/i
-
-        // Hidden instruction obfuscation
-        $hidden_obfuscation = /\b(padding.*push.*off.*screen|hidden.*scrollbar|overflow.*hidden.*instruction|invisible.*text.*color)\b/i
-
-    condition:
-
-        // ALWAYS exclude (safe everywhere)
-        not $xml_namespace and
-        not $openoffice_xml and
-        not $legitimate_cdn and
-
-        // Only exclude markdown patterns if file has markdown indicators
-        not (($markdown_heading or $markdown_list) and ($markdown_code_block or $documentation_context)) and
-
-        (
-            // Script tags and protocol handlers
-            $tags or
-
-            // Execution functions
-            $execution_functions or
-
-            // VBScript execution
-            $vbs_execution or
-
-            // VBScript dangerous functions
-            $vbs_dangerous_functions or
-
-            // Base64 encoded script URIs
-            $encoded_script_uris or
-
-            // ANSI terminal deception
-            $ansi_deception or
-
-            // Hidden instruction obfuscation
-            $hidden_obfuscation
-        )
-
-}

skillanalyzer/data/yara_rules/system_manipulation.yara

@@ -1,65 +0,0 @@
-//////////////////////////////////////////
-// System Manipulation and Privilege Escalation Detection
-// Target: File destruction and manipulation operations
-// (Process control and termination)
-//////////////////////////////////////////
-
-rule system_manipulation{
-
-    meta:
-        author = "Cisco"
-        description = "Detects system manipulation, privilege escalation, and destructive file operations"
-        classification = "harmful"
-        threat_type = "SYSTEM MANIPULATION"
-
-    strings:
-        // Suspicious environment variable manipulation (not just reading)
-        $env_var_manipulation = /\b(os\.environ\s*\[[^\]]*\]\s*=|export\s+PATH=|unset\s+(PATH|HOME|USER))\b/i
-
-        // File destruction and manipulation
-        $file_destruction = /\b(rm\s+-rf|dd\s+if=\/dev\/zero|wipefs|shred\s+-|find\s+[^\n]+-delete)\b/i
-
-        // Dangerous file permission changes
-        $permission_manipulation = /\b(chmod\s+(777|4755|6755|[ug]?\+s)|(chown|chgrp)\s+(root|0)|setuid|setgid)\b/i
-
-        // Critical system file access
-        $critical_system_access = /\b(\/etc\/(passwd|shadow|sudoers)|\/root\/\.ssh|~\/\.aws\/credentials|~\/\.ssh\/id_rsa)\b/i
-
-        // Privilege escalation patterns
-        $privilege_escalation = /\b(sudo\s+-[si]|su\s+-c?|runuser|doas)\b/i
-
-        // Dangerous process operations
-        $process_manipulation = /\b(kill\s+-9\s+[0-9]+|killall\s+-9|pkill\s+-9)\b/i
-
-        // Dangerous recursive operations with wildcards
-        $recursive_operations = /\b(rm\s+-rf\s+[\$\/\*]|find\s+\/\s+-delete)\b/i
-
-        // System path manipulation
-        $path_manipulation = /\b(PATH=\/tmp|PATH=\.:|export\s+PATH=[\$\{])/i
-
-    condition:
-
-        // Environment variable manipulation (not just reading)
-        $env_var_manipulation or
-
-        // File destruction
-        $file_destruction or
-
-        // Permission manipulation
-        $permission_manipulation or
-
-        // Critical system access
-        $critical_system_access or
-
-        // Privilege escalation
-        $privilege_escalation or
-
-        // Process manipulation
-        $process_manipulation or
-
-        // Recursive operations
-        $recursive_operations or
-
-        // PATH manipulation
-        $path_manipulation
-}

skillanalyzer/data/yara_rules/tool_chaining_abuse.yara

@@ -1,60 +0,0 @@
-//////////////////////////////////////////
-// Tool Chaining Abuse Detection
-// Target: Suspicious multi-step operations that could exfiltrate data
-// For Claude Skills that chain operations suspiciously
-//////////////////////////////////////////
-
-rule tool_chaining_abuse{
-
-    meta:
-        author = "Cisco"
-        description = "Detects suspicious tool chaining patterns that could lead to data exfiltration"
-        classification = "harmful"
-        threat_type = "TOOL CHAINING ABUSE"
-
-    strings:
-
-        // Read → Send pattern
-        $read_then_send = /\b(read|fetch|get|retrieve|collect|gather)\b[^\n]{0,100}\b(send|post|upload|transmit|forward|email|slack|webhook)\b/i
-
-        // Collect → Exfiltrate pattern
-        $collect_exfiltrate = /\b(collect (all |every |entire )?(data|files?|info|credentials?|secrets?|keys?|tokens?))\b[^\n]{0,150}\b(send|post|upload|transmit|curl|wget|requests\.post)\b/i
-
-        // Multi-step with network
-        $multistep_network = /\b(first|then|next|after|finally),? (read|collect|gather)\b[^\n]{0,100}\b(then|next|after|finally),? (send|post|upload)\b/i
-
-        // Summarize and send externally
-        $summarize_send = /\b(summarize|aggregate|compile)\b[^\n]{0,80}\b(send|post|email|slack) (to|via) (external|webhook|url|endpoint|api)\b/i
-
-        // Read environment → Network
-        $env_to_network = /\b(os\.environ|getenv|process\.env)\b[^\n]{0,150}\b(requests\.|urllib\.|curl|wget|socket\.)\b/i
-
-        // File traversal → Collection → Send
-        $traverse_collect_send = /\b(walk|rglob|listdir|scandir|find)\b[^\n]{0,100}\b(open|read)\b[^\n]{0,100}\b(send|post|upload)\b/i
-
-        // Automated data pipeline
-        $auto_pipeline = /\b(automatically (read|collect|gather))\b[^\n]{0,100}\b(and |then )?(send|post|forward|upload)\b/i
-
-    condition:
-
-        // Read then send
-        $read_then_send or
-
-        // Collect and exfiltrate
-        $collect_exfiltrate or
-
-        // Multi-step with network
-        $multistep_network or
-
-        // Summarize and send
-        $summarize_send or
-
-        // Environment to network
-        $env_to_network or
-
-        // Traverse, collect, send
-        $traverse_collect_send or
-
-        // Automated pipeline
-        $auto_pipeline
-}