veritensor 1.6.3__tar.gz → 1.8.0__tar.gz

{veritensor-1.6.3/src/veritensor.egg-info → veritensor-1.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: veritensor
-Version: 1.6.3
+Version: 1.8.0
 Summary: Antivirus for the AI Supply Chain. Scans models, datasets, notebooks, and RAG documents for threats.
 Author-email: Arsenii Brazhnyk <veritensor@gmail.com>
 License: Apache-2.0
@@ -27,6 +27,10 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: huggingface_hub>=0.19.0
 Requires-Dist: cyclonedx-python-lib>=6.0.0
+Requires-Dist: jinja2>=3.1.0
+Requires-Dist: pillow>=12.2.0
+Requires-Dist: lxml>=6.1.0
+Requires-Dist: gitpython>=3.1.47
 Provides-Extra: test
 Requires-Dist: pytest>=7.0.0; extra == "test"
 Requires-Dist: pytest-mock>=3.10.0; extra == "test"
@@ -75,7 +79,8 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 2.  **Data & RAG:** Streaming scan of **Parquet, CSV, Excel, PDF** to detect Data Poisoning, Prompt Injections, and PII.
 3.  **Notebooks:** Hardening of **Jupyter (.ipynb)** files by detecting leaked secrets (using Entropy analysis), malicious magics, and XSS.
 4.  **Supply Chain:** Audits **dependencies** (`requirements.txt`, `poetry.lock`) for Typosquatting and known CVEs (via OSV.dev).
-5.  **Governance:** Generates cryptographic **Data Manifests** (Provenance) and signs containers via **Sigstore**.
+5.  **Agentic AI & MCP Servers:** Pure AST analysis of Python files to detect Agent Hijacking risks in `@mcp.tool()` functions. Scans `claude_desktop_config.json` and `mcp.json` for over-privileged permissions.
+6.  **Governance:** Generates cryptographic **Data Manifests** (Provenance) and signs containers via **Sigstore**.
 
 ---
 
@@ -92,7 +97,7 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 *   **De-obfuscation Engine:** Automatically detects and decodes **Base64** strings to uncover hidden payloads (e.g., `SWdub3Jl...` -> `Ignore previous instructions`).
 *   **Magic Number Validation:** Detects malware masquerading as safe files (e.g., an `.exe` renamed to `invoice.pdf`).
 *   **Smart Filtering & Entropy Analysis:** Drastically reduces false positives in Jupyter Notebooks. Uses Shannon Entropy to find real, unknown API keys (WandB, Pinecone, Telegram) while ignoring safe UUIDs and standard imports.
-
+*   **CISO-Ready HTML Reports:** Generate beautiful, standalone HTML security reports with interactive charts and severity breakdowns using the `--html` flag.
 ---
 
 ## 📦 Installation
@@ -175,6 +180,30 @@ Check code cells, markdown, and saved outputs for threats:
 veritensor scan ./research/experiment.ipynb
 ```
 
+### 10. Generate a CISO-Friendly HTML Report
+Create a standalone, interactive HTML dashboard of your scan results:
+```bash
+veritensor scan ./project --html
+```
+
+### 11. Scan MCP Servers for Agent Hijacking
+Detect dangerous tool logic and over-privileged permissions in your AI agent infrastructure:
+```bash
+# Scan MCP server Python files (AST analysis — no code execution)
+veritensor scan ./mcp_servers/
+
+# Also audit MCP configuration files
+veritensor scan ./claude_desktop_config.json
+```
+
+**Example output:**
+```
+CRITICAL: MCP Agent Hijacking Risk [OS_COMMAND_EXECUTION] in tool 'run_script'
+  (line 14): os.system() inside agent tool — no human-in-the-loop confirmation
+HIGH: MCP Config [LETHAL_TRIFECTA] server 'everything':
+  filesystem + network + private data — prompt injection can silently exfiltrate all data
+```
+
 **Example Output:**
 ```Text
 ╭────────────────────────────────╮
@@ -296,22 +325,32 @@ with DAG('secure_rag_ingestion', start_date=datetime(2026, 1, 1)) as dag:
 
 Veritensor supports industry-standard formats for integration with security dashboards and audit tools.
 
-### 1. GitHub Security (SARIF)
+### 1. Interactive HTML Dashboard
+Generate a visually rich, standalone HTML report designed for CISOs and security audits. Includes severity breakdowns, charts, and easy copy-to-clipboard functionality for Jira tickets.
+```bash
+veritensor scan ./models --html
+```
+
+### 2. GitHub Security (SARIF)
 Generate a report compatible with GitHub Code Scanning:
 ```bash
 veritensor scan ./models --sarif > veritensor-report.sarif
 ```
-### 2. Software Bill of Materials (SBOM)
+### 3. Software Bill of Materials (SBOM)
 Generate a CycloneDX v1.5 SBOM to inventory your AI assets:
 ```bash
 veritensor scan ./models --sbom > sbom.json
 ```
-### 3. Raw JSON
+### 4. Raw JSON
 For custom parsers and SOAR automation:
 ```bash
 veritensor scan ./models --json
 ```
-
+### 5. Excel report
+Create an Excel report with data about the problems:
+```bash
+veritensor scan ./models --excel
+```
 ---
 
 ## 🔐 Supply Chain Security (Container Signing)
@@ -360,7 +399,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Veritensor Scan
-        uses: arsbr/Veritensor@v1.6.3 
+        uses: arsbr/Veritensor@v1.7.0 
         with:
           path: '.'
           jobs: '4'
@@ -371,7 +410,7 @@ Prevent committing malicious models to your repository. Add this to .pre-commit-
 ```yaml
 repos:
   - repo: https://github.com/arsbr/Veritensor
-    rev: v1.6.3
+    rev: v1.7.0
     hooks:
       - id: veritensor-scan
 ```
@@ -389,6 +428,8 @@ veritensor_audit:
   script:
     - veritensor scan . --jobs 4
   allow_failure: false
+```
+
 ---
 
 ## 📂 Supported Formats
@@ -399,8 +440,8 @@ veritensor_audit:
 | **Datasets** | `.parquet`, `.csv`, `.tsv`, `.jsonl`, `.ndjson`, `.ldjson` | Streaming Regex Scan (URLs, Injections, PII) |
 | **Notebooks** | `.ipynb` | JSON Structure Analysis + Code AST + Markdown Phishing |
 | **Documents** | `.pdf`, `.docx`, `.pptx`, `.txt`, `.md`, `.html` | DOM Extraction, Stealth/CSS Detection, PII |
-| **Archives** | `.zip`, `.tar`, `.gz`, `.tgz`, `.whl` | Recursive In-Memory Inspection |
-| **RAG Docs** | `requirements.txt`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
+| **Media & Archives** | `.png`, `.jpg`, `.zip`, `.tar`, `.gz`, `.whl` | EasyOCR, LSB Steganography, YARA (Enterprise) |
+| **Supply Chain** | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
 
 ---
 

{veritensor-1.6.3 → veritensor-1.8.0}/README.md

@@ -17,7 +17,8 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 2.  **Data & RAG:** Streaming scan of **Parquet, CSV, Excel, PDF** to detect Data Poisoning, Prompt Injections, and PII.
 3.  **Notebooks:** Hardening of **Jupyter (.ipynb)** files by detecting leaked secrets (using Entropy analysis), malicious magics, and XSS.
 4.  **Supply Chain:** Audits **dependencies** (`requirements.txt`, `poetry.lock`) for Typosquatting and known CVEs (via OSV.dev).
-5.  **Governance:** Generates cryptographic **Data Manifests** (Provenance) and signs containers via **Sigstore**.
+5.  **Agentic AI & MCP Servers:** Pure AST analysis of Python files to detect Agent Hijacking risks in `@mcp.tool()` functions. Scans `claude_desktop_config.json` and `mcp.json` for over-privileged permissions.
+6.  **Governance:** Generates cryptographic **Data Manifests** (Provenance) and signs containers via **Sigstore**.
 
 ---
 
@@ -34,7 +35,7 @@ Unlike standard SAST tools (which focus on code), Veritensor understands the bin
 *   **De-obfuscation Engine:** Automatically detects and decodes **Base64** strings to uncover hidden payloads (e.g., `SWdub3Jl...` -> `Ignore previous instructions`).
 *   **Magic Number Validation:** Detects malware masquerading as safe files (e.g., an `.exe` renamed to `invoice.pdf`).
 *   **Smart Filtering & Entropy Analysis:** Drastically reduces false positives in Jupyter Notebooks. Uses Shannon Entropy to find real, unknown API keys (WandB, Pinecone, Telegram) while ignoring safe UUIDs and standard imports.
-
+*   **CISO-Ready HTML Reports:** Generate beautiful, standalone HTML security reports with interactive charts and severity breakdowns using the `--html` flag.
 ---
 
 ## 📦 Installation
@@ -117,6 +118,30 @@ Check code cells, markdown, and saved outputs for threats:
 veritensor scan ./research/experiment.ipynb
 ```
 
+### 10. Generate a CISO-Friendly HTML Report
+Create a standalone, interactive HTML dashboard of your scan results:
+```bash
+veritensor scan ./project --html
+```
+
+### 11. Scan MCP Servers for Agent Hijacking
+Detect dangerous tool logic and over-privileged permissions in your AI agent infrastructure:
+```bash
+# Scan MCP server Python files (AST analysis — no code execution)
+veritensor scan ./mcp_servers/
+
+# Also audit MCP configuration files
+veritensor scan ./claude_desktop_config.json
+```
+
+**Example output:**
+```
+CRITICAL: MCP Agent Hijacking Risk [OS_COMMAND_EXECUTION] in tool 'run_script'
+  (line 14): os.system() inside agent tool — no human-in-the-loop confirmation
+HIGH: MCP Config [LETHAL_TRIFECTA] server 'everything':
+  filesystem + network + private data — prompt injection can silently exfiltrate all data
+```
+
 **Example Output:**
 ```Text
 ╭────────────────────────────────╮
@@ -238,22 +263,32 @@ with DAG('secure_rag_ingestion', start_date=datetime(2026, 1, 1)) as dag:
 
 Veritensor supports industry-standard formats for integration with security dashboards and audit tools.
 
-### 1. GitHub Security (SARIF)
+### 1. Interactive HTML Dashboard
+Generate a visually rich, standalone HTML report designed for CISOs and security audits. Includes severity breakdowns, charts, and easy copy-to-clipboard functionality for Jira tickets.
+```bash
+veritensor scan ./models --html
+```
+
+### 2. GitHub Security (SARIF)
 Generate a report compatible with GitHub Code Scanning:
 ```bash
 veritensor scan ./models --sarif > veritensor-report.sarif
 ```
-### 2. Software Bill of Materials (SBOM)
+### 3. Software Bill of Materials (SBOM)
 Generate a CycloneDX v1.5 SBOM to inventory your AI assets:
 ```bash
 veritensor scan ./models --sbom > sbom.json
 ```
-### 3. Raw JSON
+### 4. Raw JSON
 For custom parsers and SOAR automation:
 ```bash
 veritensor scan ./models --json
 ```
-
+### 5. Excel report
+Create an Excel report with data about the problems:
+```bash
+veritensor scan ./models --excel
+```
 ---
 
 ## 🔐 Supply Chain Security (Container Signing)
@@ -302,7 +337,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Veritensor Scan
-        uses: arsbr/Veritensor@v1.6.3 
+        uses: arsbr/Veritensor@v1.7.0 
         with:
           path: '.'
           jobs: '4'
@@ -313,7 +348,7 @@ Prevent committing malicious models to your repository. Add this to .pre-commit-
 ```yaml
 repos:
   - repo: https://github.com/arsbr/Veritensor
-    rev: v1.6.3
+    rev: v1.7.0
     hooks:
       - id: veritensor-scan
 ```
@@ -331,6 +366,8 @@ veritensor_audit:
   script:
     - veritensor scan . --jobs 4
   allow_failure: false
+```
+
 ---
 
 ## 📂 Supported Formats
@@ -341,8 +378,8 @@ veritensor_audit:
 | **Datasets** | `.parquet`, `.csv`, `.tsv`, `.jsonl`, `.ndjson`, `.ldjson` | Streaming Regex Scan (URLs, Injections, PII) |
 | **Notebooks** | `.ipynb` | JSON Structure Analysis + Code AST + Markdown Phishing |
 | **Documents** | `.pdf`, `.docx`, `.pptx`, `.txt`, `.md`, `.html` | DOM Extraction, Stealth/CSS Detection, PII |
-| **Archives** | `.zip`, `.tar`, `.gz`, `.tgz`, `.whl` | Recursive In-Memory Inspection |
-| **RAG Docs** | `requirements.txt`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
+| **Media & Archives** | `.png`, `.jpg`, `.zip`, `.tar`, `.gz`, `.whl` | EasyOCR, LSB Steganography, YARA (Enterprise) |
+| **Supply Chain** | `requirements.txt`, `pyproject.toml`, `poetry.lock`, `Pipfile.lock` | Typosquatting, OSV.dev CVE Lookup |
 
 ---
 

{veritensor-1.6.3 → veritensor-1.8.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "veritensor"
-version = "1.6.3"
+version = "1.8.0"
 description = "Antivirus for the AI Supply Chain. Scans models, datasets, notebooks, and RAG documents for threats."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -32,7 +32,11 @@ dependencies = [
     "pyyaml>=6.0",
     "huggingface_hub>=0.19.0",
     "cyclonedx-python-lib>=6.0.0",
+    "jinja2>=3.1.0",
+    "pillow>=12.2.0",
+    "lxml>=6.1.0",
     # Fickling removed from here to avoid installing PyTorch (800MB+) for regular users
+    "gitpython>=3.1.47",
 ]
 
 

veritensor-1.8.0/src/veritensor/__init__.py

@@ -0,0 +1,2 @@
+__version__ = "1.8.0"
+