ktg-plugin-marketplace/plugins/llm-security/package.json
Kjell Tore Guttormsen 6252e55700 feat(llm-security): add /security ide-scan — VS Code / JetBrains extension prescan (v6.3.0)
New standalone scanner (prefix IDE) discovers installed VS Code extensions
across forks (Cursor, Windsurf, VSCodium, code-server, Insiders, Remote-SSH)
and runs 7 IDE-specific threat checks: blocklist match (CRITICAL),
theme-with-code, sideload (unsigned .vsix), dangerous uninstall hook (HIGH),
wildcard activation, extension-pack expansion, typosquat (MEDIUM).

Per-extension reuse of UNI/ENT/NET/TNT/MEM/SCR scanners with bounded
concurrency. Offline-first; --online opt-in. JetBrains discovery stubbed
for v1.1. 22 new tests (1296 total, was 1274).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17 16:23:35 +02:00

36 lines
810 B
JSON

{
"name": "llm-security",
"version": "6.3.0",
"description": "Security scanning, auditing, and threat modeling for Claude Code projects",
"type": "module",
"bin": {
"llm-security": "./bin/llm-security.mjs"
},
"files": [
"bin/",
"scanners/",
"LICENSE",
"README.md"
],
"homepage": "https://git.fromaitochitta.com/open/claude-code-llm-security",
"engines": {
"node": ">=18"
},
"scripts": {
"test": "node --test 'tests/**/*.test.mjs'",
"bump": "node scripts/bump-version.mjs"
},
"keywords": [
"claude-code",
"security",
"owasp",
"llm",
"plugin"
],
"author": "Kjell Tore Guttormsen",
"license": "MIT",
"repository": {
"type": "git",
"url": "https://git.fromaitochitta.com/fromaitochitta/claude-code-llm-security"
}
}