Tyler Gillispie
8f61cbdc49
- Renamed `forum/experiments` to `forum/poc-g1` to designate generation 1. - Created `forum/poc-g2` and a new `lab.ts` runner. - Non-destructively migrated `dag_engine_poc.ts`, `git_storage_poc.ts`, `merkle_diff_poc.ts`, and `frontmatter_poc.ts` to `poc-g2`. - Upgraded migrated PoCs to utilize actual production-ready tools (e.g. `std/yaml` parsing and isolated `Deno.Command` Git repos) per blueprint constraints. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com> Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
69 lines
2.2 KiB
TypeScript
69 lines
2.2 KiB
TypeScript
/**
|
|
* Agent Forum v4 - Static Analysis Payloads PoC
|
|
*
|
|
* Verifies the ability of triage agents (like the Adversary) to ingest
|
|
* standardized JSON/XML outputs from industry static analysis tools
|
|
* (e.g., Semgrep, SonarQube) instead of relying on LLM guesswork.
|
|
*/
|
|
|
|
// Mock representation of a Semgrep JSON output payload
|
|
const mockSemgrepPayload = {
|
|
"results": [
|
|
{
|
|
"check_id": "javascript.express.security.audit.xss.express-xss",
|
|
"path": "server/routes/api.ts",
|
|
"start": { "line": 45, "col": 5 },
|
|
"end": { "line": 45, "col": 40 },
|
|
"extra": {
|
|
"message": "Potential XSS vulnerability: user input is reflected without sanitization.",
|
|
"severity": "ERROR"
|
|
}
|
|
},
|
|
{
|
|
"check_id": "typescript.react.best-practice.react-props-no-spreading",
|
|
"path": "ui/components/Button.tsx",
|
|
"start": { "line": 12, "col": 10 },
|
|
"end": { "line": 12, "col": 25 },
|
|
"extra": {
|
|
"message": "Prop spreading is discouraged as it obscures the component API.",
|
|
"severity": "WARNING"
|
|
}
|
|
}
|
|
],
|
|
"errors": []
|
|
};
|
|
|
|
function runPoC() {
|
|
console.log("Running Static Analysis Payloads PoC tests...");
|
|
console.log("Ingesting mock Semgrep JSON payload...");
|
|
|
|
// Simulate an agent processing the structured payload
|
|
const criticalIssues = mockSemgrepPayload.results.filter(
|
|
(issue) => issue.extra.severity === "ERROR"
|
|
);
|
|
|
|
const warnings = mockSemgrepPayload.results.filter(
|
|
(issue) => issue.extra.severity === "WARNING"
|
|
);
|
|
|
|
console.log(`\nAdversary Agent Analysis:`);
|
|
console.log(`- Found ${criticalIssues.length} CRITICAL vulnerability.`);
|
|
|
|
if (criticalIssues.length > 0) {
|
|
console.log(` -> Action required on ${criticalIssues[0].path} line ${criticalIssues[0].start.line}: ${criticalIssues[0].extra.message}`);
|
|
}
|
|
|
|
console.log(`- Found ${warnings.length} code smell/warning.`);
|
|
|
|
if (criticalIssues.length === 1 && criticalIssues[0].check_id.includes("xss")) {
|
|
console.log("\n✅ Static Analysis Payloads PoC successful: Structured compiler-grade metrics successfully ingested and triaged.");
|
|
} else {
|
|
console.error("\n❌ Failed to process static analysis payload.");
|
|
Deno.exit(1);
|
|
}
|
|
}
|
|
|
|
if (import.meta.main) {
|
|
runPoC();
|
|
}
|