Picoclaw Self Pen Testing

export function stableStringify(value, space = 2) {
  return JSON.stringify(sortDeep(value), null, space);
}

function sortDeep(value) {
  if (Array.isArray(value)) return value.map(sortDeep);
  if (!value || typeof value !== "object") return value;
  const out = {};
  for (const key of Object.keys(value).sort()) out[key] = sortDeep(value[key]);
  return out;
}

function add(findings, severity, code, title, evidence, recommendation) { findings.push({ severity, code, title, evidence, recommendation }); }
export function runPicoclawSelfPenTest(profile, _options = {}) {
  const findings=[]; const rt=profile?.posture?.runtime || {};
  if (rt.ui?.public_web_ui) add(findings,"critical","PUBLIC_WEB_UI_EXPOSED","Web UI appears bound publicly","public_web_ui=true or equivalent detected","Bind to localhost or enforce password auth + CIDR allowlist before exposure.");
  if (rt.ui?.auth_disabled) add(findings,"critical","WEB_UI_AUTH_DISABLED","Web UI auth appears disabled","auth_disabled=true or empty password marker detected","Require password/session auth for any gateway controller UI.");
  if (rt.tools?.unrestricted_workspace) add(findings,"critical","WORKSPACE_UNRESTRICTED","Tool workspace restriction appears disabled","restrict_to_workspace=false or sandbox=false marker detected","Enable workspace confinement and deny symlink/absolute-path escapes.");
  if (rt.risky_toggles?.allow_unsigned_mode) add(findings,"critical","UNSIGNED_MODE_ALLOWED","Unsigned or insecure verification mode appears enabled","allow_unsigned/skip_signature marker detected","Disable unsigned mode except short audited break-glass windows.");
  if (rt.mcp?.enabled) add(findings,"high","MCP_REVIEW_REQUIRED","MCP servers enabled","mcp marker detected","Review each MCP server as a separate trust boundary with least privilege and secrets isolation.");
  if (rt.tools?.enabled) add(findings,"medium","TOOLING_REVIEW_REQUIRED","Agent tools appear enabled","tools/code_execution/shell/filesystem marker detected","Require per-tool allowlists and operator approval for dangerous tools.");
  if (rt.scheduler?.enabled) add(findings,"medium","SCHEDULER_REVIEW_REQUIRED","Scheduler/persistence features appear enabled","cron/schedule marker detected","Inventory jobs and alert on new persistent actions.");
  if ((rt.secrets?.config_secret_markers || 0) > 0) add(findings,"high","PLAINTEXT_SECRET_MARKERS","Config contains secret-like markers",`${rt.secrets.config_secret_markers} marker(s) found`,`Move secrets to supported encrypted/secure storage and redact logs/exports.`);
  const enabledGateways = Object.entries(rt.gateways || {}).filter(([,v])=>!!v).map(([k])=>k);
  if (enabledGateways.length > 1) add(findings,"medium","MULTI_CHANNEL_AUTH_REVIEW","Multiple chat gateways appear enabled",enabledGateways.join(", "),"Pin immutable user IDs per channel and reject group/forwarded-message ambiguity.");
  return { summary: summarize(findings), findings };
}
function summarize(findings) { const out={critical:0, high:0, medium:0, low:0, info:0}; for (const f of findings) out[f.severity]=(out[f.severity]||0)+1; return out; }

#!/usr/bin/env node
import fs from "node:fs";
import { runPicoclawSelfPenTest } from "../lib/self_pen_test.mjs";
import { stableStringify } from "../lib/format.mjs";

const idx = process.argv.indexOf("--profile");
if (idx < 0 || !process.argv[idx + 1]) throw new Error("--profile is required");

const profile = JSON.parse(fs.readFileSync(process.argv[idx + 1], "utf8"));
const result = runPicoclawSelfPenTest(profile);
console.log(stableStringify(result));

{
  "name": "picoclaw-self-pen-testing",
  "version": "0.0.3",
  "description": "Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.",
  "author": "prompt-security",
  "license": "AGPL-3.0-or-later",
  "homepage": "https://clawsec.prompt.security/",
  "platform": "picoclaw",
  "keywords": [
    "security",
    "picoclaw",
    "posture-review",
    "read-only-audit",
    "mcp",
    "auth"
  ],
  "sbom": {
    "files": [
      {
        "path": "SKILL.md",
        "required": true,
        "description": "Skill documentation and operator guidance"
      },
      {
        "path": "README.md",
        "required": true,
        "description": "Quickstart overview"
      },
      {
        "path": "CHANGELOG.md",
        "required": true,
        "description": "Version history"
      },
      {
        "path": "lib/self_pen_test.mjs",
        "required": true,
        "description": "Local posture-review finding engine"
      },
      {
        "path": "lib/format.mjs",
        "required": true,
        "description": "Stable JSON formatter for deterministic output"
      },
      {
        "path": "scripts/self_pen_test.mjs",
        "required": true,
        "description": "Run posture-review checks on a profile"
      }
    ]
  },
  "picoclaw": {
    "emoji": "🦐",
    "category": "security",
    "requires": {
      "bins": [
        "node"
      ]
    },
    "runtime": {
      "required_env": [],
      "optional_env": [
        "PICOCLAW_HOME"
      ]
    },
    "capabilities": {
      "security_feed": false,
      "config_drift": false,
      "agent_self_pen_testing": true,
      "supply_chain_install_verification": false
    },
    "execution": {
      "always": false,
      "persistence": "Read-only/on-demand; no scheduler is installed.",
      "network_egress": "None"
    },
    "operator_review": [
      "This package is intentionally isolated so posture-review checks can be independently published or withheld.",
      "Treat findings as operator review guidance; do not auto-remediate without explicit approval."
    ],
    "triggers": [
      "picoclaw posture review",
      "picoclaw local security review",
      "picoclaw auth exposure review"
    ],
    "test_requires": {
      "bins": [
        "node"
      ]
    }
  }
}

import assert from "node:assert/strict"; import { runPicoclawSelfPenTest } from "../lib/self_pen_test.mjs";
const result=runPicoclawSelfPenTest({posture:{runtime:{ui:{public_web_ui:true,auth_disabled:true},tools:{enabled:true,unrestricted_workspace:true},mcp:{enabled:true},scheduler:{enabled:true},risky_toggles:{allow_unsigned_mode:true},secrets:{config_secret_markers:2},gateways:{telegram:true,discord:true}}}});
assert.ok(result.summary.critical>=4); assert.ok(result.findings.some(f=>f.code==="MCP_REVIEW_REQUIRED")); assert.ok(result.findings.some(f=>f.code==="MULTI_CHANNEL_AUTH_REVIEW")); console.log("self_pen_test.test.mjs PASS");