registry / @panguard-ai/panguard-skill-auditor / 1.8.4

@panguard-ai/panguard-skill-auditor@1.8.4

Security auditor for OpenClaw/AgentSkills SKILL.md files

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 15 file(s), 57.3 KB of source

Source & flagged code

1 flagged

dist/checks/atr-check.jsView file

Lines 145-185javascript

145 ? `Matched: ${match.matchedPatterns.slice(0, 3).join(', ')}`

146 : undefined,

147 });

148 }

149 return findings;

150}

151/**

152 * Run ATR engine checks against a parsed skill manifest.

153 *

154 * Evaluates:

155 * 1. Skill instructions via scanSkill (all rules fire) + llm_input (recovers

156 * single-pattern prompt-injection rules scanSkill's FP gate suppresses)

157 * 2. Skill description via the same dual path

158 * 3. MCP tool descriptions (if present in metadata) as tool_call events

159 *

160 * Returns a CheckResult compatible with the Skill Auditor pipeline.

161 */

162export async function checkWithATR(manifest, cloudRules) {

163 // Dynamic import — gracefully handle missing dependency

164 let ATREngine;

165 try {

166 const atr = await import('@panguard-ai/atr');

167 ATREngine = atr.ATREngine;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/checks/atr-check.jsView on unpkg · L165

168 }

169 catch {

170 return {

171 status: 'info',

172 label: CHECK_LABEL,

173 findings: [],

174 };

175 }

176 try {

177 const rulesDir = resolveRulesDir();

178 // Optional: behavioral fingerprinting for drift detection

179 let fingerprintStore;

180 try {

181 const { SkillFingerprintStore } = await import('@panguard-ai/atr');

182 fingerprintStore = new SkillFingerprintStore();

183 }

184 catch {

185 // SkillFingerprintStore not available in this version

Source & flagged code

1 flagged · loading source

dist/checks/atr-check.jsView file

165package = @panguard-ai/panguard-skill-auditor; repositoryIdentity = panguard-ai; dependency = @panguard-ai/atr L165: try { L166: const atr = await import('@panguard-ai/atr'); L167: ATREngine = atr.ATREngine;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/checks/atr-check.jsView on unpkg · L165

Findings

1 High2 Medium3 Low

HighCopied Package Dependency Bridgedist/checks/atr-check.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/checks/atr-check.jsView file

Lines 145-185javascript

145 ? `Matched: ${match.matchedPatterns.slice(0, 3).join(', ')}`

146 : undefined,

147 });

148 }

149 return findings;

150}

151/**

152 * Run ATR engine checks against a parsed skill manifest.

153 *

154 * Evaluates:

155 * 1. Skill instructions via scanSkill (all rules fire) + llm_input (recovers

156 * single-pattern prompt-injection rules scanSkill's FP gate suppresses)

157 * 2. Skill description via the same dual path

158 * 3. MCP tool descriptions (if present in metadata) as tool_call events

159 *

160 * Returns a CheckResult compatible with the Skill Auditor pipeline.

161 */

162export async function checkWithATR(manifest, cloudRules) {

163 // Dynamic import — gracefully handle missing dependency

164 let ATREngine;

165 try {

166 const atr = await import('@panguard-ai/atr');

167 ATREngine = atr.ATREngine;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/checks/atr-check.jsView on unpkg · L165

168 }

169 catch {

170 return {

171 status: 'info',

172 label: CHECK_LABEL,

173 findings: [],

174 };

175 }

176 try {

177 const rulesDir = resolveRulesDir();

178 // Optional: behavioral fingerprinting for drift detection

179 let fingerprintStore;

180 try {

181 const { SkillFingerprintStore } = await import('@panguard-ai/atr');

182 fingerprintStore = new SkillFingerprintStore();

183 }

184 catch {

185 // SkillFingerprintStore not available in this version