scanner-lite-v1.0.0

## @prooflayer/scanner-lite v1.0.0

Lightweight, MIT-licensed MCP security scanner with full OWASP Agentic Top 10 coverage.

### Highlights

- **OWASP Agentic Top 10**: All 418 YAML rules + 33 JS rules tagged with ASI-01 through ASI-10
- **18 New Agent Rules**: Memory poisoning, inter-agent communication, cascading failures, trust exploitation, rogue agents
- **Runtime MCP Inspector**: Live JSON-RPC tool definition scanning with A-F grading
- **311 Tests**: 8 test files, 100% pass rate
- **GitHub Action Ready**: Composite action + reusable workflow
- **MIT Licensed**: ~104KB compressed, fully offline-capable, zero Python dependencies

### Installation

```bash
npm install -g @prooflayer/scanner-lite
```

### Quick Start

```bash
# Scan a file or directory
npx @prooflayer/scanner-lite scan ./src

# Inspect a live MCP server
npx @prooflayer/scanner-lite inspect -- node server.js

# Check package hallucination
npx @prooflayer/scanner-lite check-package rekat
```

### Competitive Advantage

| Feature | scanner-lite | AgentAudit-MCP |
|---------|-------------|----------------|
| License | MIT | AGPL-3.0 |
| Rules | 418 YAML + 33 JS | 12 regex |
| OWASP ASI | ASI-01 through ASI-10 | None |
| Tests | 311 (100% pass) | ~30 |
| Offline | Yes | No |
| Size | 104KB | 230KB |

### What's New

- OWASP Agentic Security Initiative complete coverage
- Runtime MCP inspector for live tool scanning
- 18 agent-specific detection rules
- Critical bug fixes (regex engine, Terraform detection)
- GitHub Action support

See [CHANGELOG](https://github.com/sinewaveai/agent-security-scanner-mcp/blob/main/CHANGELOG.md) for full details.