Kjell Tore Guttormsen
b3c47330e1
v8.1.0 S2. examples/malicious-skill-demo/evil-project-health/ (7 files, 30 Unicode Tag chars, a base64 exfil blob) is now one archive, evil-project-health.archive.json: rot13 text, every codepoint above U+007E stored as a number, sha256 of each retired file recorded. materialize.mjs writes it to a temp dir (CLI prints the path); run-demo.sh materializes and deletes it itself; the six scanner tests that scanned the tree use it. payload-trees.test.mjs asserts byte identity (mutation-checked). av-surface: b 8->6, c 1->0, d 2->1. Demo 13/13 before and after. All scanners report identical findings except git-forensics: it used to scan this repository's own history (21 findings, none about the demo) and now reports skipped in a temp dir, which git.test.mjs already accepts. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
62 lines
2.6 KiB
JavaScript
62 lines
2.6 KiB
JavaScript
// payload-trees.test.mjs — the materialized trees are byte-identical to the
|
|
// fixtures that used to sit on disk (sha256 measured before deletion, S1),
|
|
// and so are the encoded example archives (S2).
|
|
|
|
import { describe, it } from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { readFileSync, readdirSync } from 'node:fs';
|
|
import { join, relative, basename } from 'node:path';
|
|
import { createHash } from 'node:crypto';
|
|
import { PAYLOAD_TREES, materializeTree } from './payload-trees.mjs';
|
|
import { DEMO_ARCHIVE, readArchive, materializeArchive } from '../../examples/malicious-skill-demo/materialize.mjs';
|
|
|
|
function walk(dir) {
|
|
return readdirSync(dir, { withFileTypes: true, recursive: true })
|
|
.filter(e => e.isFile())
|
|
.map(e => join(e.parentPath, e.name));
|
|
}
|
|
|
|
describe('payload-trees: materialized bytes match the retired on-disk fixtures', () => {
|
|
for (const name of Object.keys(PAYLOAD_TREES)) {
|
|
it(name, () => {
|
|
const { dir, cleanup } = materializeTree(name);
|
|
try {
|
|
const written = walk(dir).map(f => relative(dir, f)).sort();
|
|
assert.deepEqual(written, Object.keys(PAYLOAD_TREES[name]).sort(), 'file set changed');
|
|
for (const [rel, { sha256 }] of Object.entries(PAYLOAD_TREES[name])) {
|
|
const got = createHash('sha256').update(readFileSync(join(dir, rel))).digest('hex');
|
|
assert.equal(got, sha256, `${name}/${rel} differs from the retired fixture`);
|
|
}
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
}
|
|
});
|
|
|
|
// S2 (2026-09-22): the example trees are encoded archives next to their
|
|
// examples; same check, sha256 measured from the retired on-disk files.
|
|
const EXAMPLE_ARCHIVES = {
|
|
'malicious-skill-demo/evil-project-health': DEMO_ARCHIVE,
|
|
};
|
|
|
|
describe('example archives: materialized bytes match the retired on-disk trees', () => {
|
|
for (const [name, archivePath] of Object.entries(EXAMPLE_ARCHIVES)) {
|
|
it(name, () => {
|
|
const { files } = readArchive(archivePath);
|
|
const { dir, cleanup } = materializeArchive(archivePath);
|
|
try {
|
|
assert.equal(basename(dir), basename(name), 'leaf directory name changed');
|
|
const written = walk(dir).map(f => relative(dir, f)).sort();
|
|
assert.deepEqual(written, Object.keys(files).sort(), 'file set changed');
|
|
for (const [rel, { sha256 }] of Object.entries(files)) {
|
|
assert.match(sha256, /^[0-9a-f]{64}$/, `${name}/${rel} has no recorded sha256`);
|
|
const got = createHash('sha256').update(readFileSync(join(dir, rel))).digest('hex');
|
|
assert.equal(got, sha256, `${name}/${rel} differs from the retired fixture`);
|
|
}
|
|
} finally {
|
|
cleanup();
|
|
}
|
|
});
|
|
}
|
|
});
|