ubon/dist/rules/ai/index.js

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

"use strict";
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.aiRules = void 0;
const AI001_1 = __importDefault(require("./AI001"));
const AI002_1 = __importDefault(require("./AI002"));
const AI003_1 = __importDefault(require("./AI003"));
const AI004_1 = __importDefault(require("./AI004"));
const AI005_1 = __importDefault(require("./AI005"));
const AI006_1 = __importDefault(require("./AI006"));
const AI007_1 = __importDefault(require("./AI007"));
const AI008_1 = __importDefault(require("./AI008"));
/**
 * AI rule pack — patterns specific to LLM-powered apps (RAG, agents, MCP,
 * streaming endpoints). Pattern-only rules (AI001, AI004) are picked up by
 * the generic SecurityScanner pattern-runner; AI002/AI003/AI005/AI006/AI007/AI008
 * carry metadata only and are detected by the dedicated AIScanner.
 */
exports.aiRules = {
    AI001: AI001_1.default,
    AI002: AI002_1.default,
    AI003: AI003_1.default,
    AI004: AI004_1.default,
    AI005: AI005_1.default,
    AI006: AI006_1.default,
    AI007: AI007_1.default,
    AI008: AI008_1.default
};
//# sourceMappingURL=index.js.map