claude-flow-novice/.claude/skills/cfn-edit-safety/lib/hooks/security-scan.json

Claude Flow Novice - Advanced orchestration platform for multi-agent AI workflows with CFN Loop architecture Includes Local RuVector Accelerator and all CFN skills for complete functionality.

{
  "version": "1.4.0",
  "modes": {
    "basic": {
      "checks": [
        "SQL_INJECTION",
        "XSS_VULNERABILITY",
        "HARDCODED_SECRETS"
      ],
      "confidence_threshold": 70
    },
    "advanced": {
      "checks": [
        "SQL_INJECTION",
        "XSS_VULNERABILITY",
        "HARDCODED_SECRETS",
        "INSECURE_DEPENDENCIES",
        "POTENTIAL_RCE"
      ],
      "confidence_threshold": 85
    },
    "comprehensive": {
      "checks": [
        "SQL_INJECTION",
        "XSS_VULNERABILITY",
        "HARDCODED_SECRETS",
        "INSECURE_DEPENDENCIES",
        "POTENTIAL_RCE",
        "DEPRECATED_CRYPTO",
        "BUFFER_OVERFLOW"
      ],
      "confidence_threshold": 95
    }
  },
  "patterns": {
    "SQL_INJECTION": [
      "(SELECT|INSERT|UPDATE|DELETE).*['\"].*['\" ]UNION|['\"]\\s*(--|#)",
      "exec\\(.*sqlalchemy.*"
    ],
    "XSS_VULNERABILITY": [
      "innerHTML\\.\\s*=",
      "document\\.write\\(",
      "eval\\("
    ],
    "HARDCODED_SECRETS": [
      "password\\s*=\\s*['\"].*['\"]",
      "secret_key\\s*=\\s*['\"].*['\"]",
      "api_key\\s*=\\s*['\"].*['\"]{8,}",
      "token\\s*=\\s*['\"].*['\"]{16,}"
    ],
    "INSECURE_DEPENDENCIES": [
      "\"(version|dependencies)\":\\s*\"(<|>|<=|>=)?([0-9]+\\.){1,2}[0-9]+\""
    ]
  },
  "exclusions": [
    "/**/*.min.js",
    "/**/*.test.js",
    "/**/*.spec.js"
  ]
}