`gjLldZddlmZddlZddlmZddlmZmZee e e e fZ hdZ d dZ d dZd d d Zy)u AST-level deep audit for skill Python files — opt-in diagnostic, not a security gate. Per SECURITY.md §2.4, Skills Guard is in-process heuristics ("useful — not boundaries"). This module is a separate opt-in diagnostic that flags dynamic import / dynamic attribute access patterns operators may want to eyeball when reviewing third-party skill code. Every pattern flagged here has legitimate uses; findings are hints for human review, not verdicts. CLI: ``hermes skills audit --deep`` ) annotationsN)Path)ListTuple>.venvvenv __pycache__ node_modulesc tj|}gGfddtj } |j |S#tttf$rgcYSwxYw#tttf$rYSwxYw)Nc>eZdZfdZfdZfdZfdZy)_scan_source..Vc|j}t|tjr0|jdk(r!j |j ddfnt|tjrb|jdk(rS|jrt|jdtjsj |j ddfnt|tjrm|jdk(r^t|jd k\rFt|jd tjsj |j d d f|j|y) N import_moduledynamic_importu@importlib.import_module() — loads arbitrary modules at runtime __import__rdynamic_import_computedz'__import__ with non-literal module namegetattrdynamic_getattrz'getattr with non-literal attribute name) func isinstanceast AttributeattrappendlinenoNameidargsConstantlen generic_visit)selfnodeffindingsrel_paths I/root/.hermes/venv/lib/python3.12/site-packages/tools/skills_ast_audit.py visit_Callz"_scan_source..V.visit_Call"s  A!S]]+/0I4;;8H!c!efAsxx(QTT\-A99Z ! cll%KOOXt{{tyy>Q&z$))A, /UOOXt{{] — dynamic attribute access) rvaluerrrslicer!rrr#)r$r%r'r(s r)visit_Subscriptz'_scan_source..V.visit_Subscript4se4::s}}5 :5&tzz3<<@4;; !T!VW   t $r+c |jD]Z}|jdk(s|jjds.j|jdd|jdf\|j |y)N importlib importlib.importlib_importzimport u# — enables dynamic module loading)namesname startswithrrr#)r$r%ar'r(s r) visit_Importz$_scan_source..V.visit_Import=stZZ ]66[(AFF,=,=l,KOOXt{{.V.visit_ImportFromDs] !rAK1<< #=4;;8J#(+Y!Z!\]   t $r+N)__name__ __module__ __qualname__r*r1r:r?)r'r(sr)Vr !s %$ % % %r+rC)rparse SyntaxError ValueErrorRecursionError NodeVisitorvisit RuntimeError)contentr(treerCr's ` @r) _scan_sourcerMsyy!!H(%COO(%T   $ Ok ^ 4 b J 5  O  s"AA,A)(A),BBc|jrI|jjdk7rgS |jdd}t ||j S|jsgSg}t|jdD]x}t|jjtzr* |jdd} |j|j}|j#t ||z|S#t$rgcYSwxYw#t$rYwxYw#t $r|j }YVwxYw)zScan a single .py file or recursively scan all .py under a directory. Returns a list of (file, line, pattern_id, description) tuples. Empty for non-Python paths, missing paths, or paths with no matching patterns. z.pyzutf-8replace)encodingerrorsz*.py)is_filesuffixlower read_textOSErrorrMr7is_dirsortedrglobsetparentparts _IGNORED_DIRS relative_toas_posixrFextend)pathrKoutpyrels r) ast_scan_pathreTs*  ||~ ;;   % 'I nnginHGGTYY// ;;= CTZZ'( / ryy - /  llGIlFG ..&//1C <-. / J) I     ''C s5D3DD% DD D"!D"%D=<D=c B|rd|nd}|s|dS|dt|dg}d}t|D]<\}}}}||k7r|}|jd||jd|d|d|>|jd |jd d j|S) z5Plain-text report (Rich-markup-free) grouped by file.zAST deep scan: z AST deep scanz. No dynamic import/access patterns detected.z z finding(s):Nz Lu — r<zA Note: diagnostic hints for human review, not security verdicts. )r"rXrjoin) r' skill_nameheaderlinescurrentr&linepiddescs r)format_ast_reportrpvs/9zl +F HII r#h- 5 6EG$X.84d <G LL2aS " uTF"SEv67 8  LL LLTU 99U r+)rKstrr(rqreturn List[Finding])rarrrrs)r<)r'rsrirqrrrq)__doc__ __future__rrpathlibrtypingrrrqintFindingr]rMrerpr+r)r{sC #  S#s" #@ 8vDr+