让开源，少一点语言距离。
npm包中文文档

@clear-capabilities/agentic-security-scanner

中文文档
0.195.31发布于 2026/11/09PolyForm-Internal-Use-1.0.0ES Module构建来源已验证近 30 天下载 1.1万

Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.

原始使用文档
中文原文

@clear-capabilities/agentic-security-scanner

The scan engine behind Agentic Security, an autonomous security assurance platform (a Claude Code plugin and CLI) that pairs deterministic analysis with security agents and never treats an incomplete scan as a clean one. See how it works and trust and limitations. The engine provides: SAST, SCA with function-level reachability and CISA KEV, secrets, IaC, prompt-injection and MCP/agent-tool audit, auth/authZ analysis, SBOM/AI-BOM, and compliance evidence.

npx @clear-capabilities/agentic-security-scanner scan .

Languages

JavaScript/TypeScript, Python, Java, Kotlin, Go, Ruby, PHP, C#, Rust, Haskell and Nix/NixOS.

  • Haskell (.hs, .lhs, .hs-boot, .hsc, Cabal and Stack): SAST, taint, web routes and auth, privacy lineage, dependency inventory and SBOM, verified fixes.
  • Nix and NixOS (.nix, flakes, NixOS and Home Manager modules): effective-configuration analysis, host hardening, secrets and build-trust checks, dependency inventory and SBOM, verified fixes.

Both are scanned with no compiler, no nix binary and no network. Each capability is reported supported only from measured evidence of its own kind, and blocked when it needs a tool the measurement did not have; the corpus behind the figures is synthetic, so they describe robustness over those shapes, not arbitrary real-world code. Read the Haskell guide, the Nix and NixOS guide, installing on NixOS and the support record.

The repository's Nix flake packages the scanner with agentic-security, agentic-security-mcp and agentic-security-lsp binaries, and ships NixOS VM tests (checks.<system>.nixos-host).

More

Full documentation, the plugin, and the IDE integrations are in the repository README. License: PolyForm Internal Use 1.0.0.

版本与发布记录

@clear-capabilities/agentic-security-scanner 共发布 136 个版本，首次发布于 2026/05/21；过去 12 个月发布了 136 个版本。最新版本附带 npm provenance 构建来源证明，可追溯到公开的 CI 构建记录。

版本发布日期距今
0.195.31latest2026/11/09今天
0.195.302026/11/09今天
0.195.292026/11/091 天前
0.195.282026/11/081 天前
0.195.272026/11/064 天前
0.195.262026/11/055 天前

关于 @clear-capabilities/agentic-security-scanner 的常见问题

@clear-capabilities/agentic-security-scanner 是什么？

Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.

如何安装 @clear-capabilities/agentic-security-scanner？

在项目目录运行 npm install @clear-capabilities/agentic-security-scanner，或使用 pnpm add / yarn add / bun add。它还提供命令行工具 as、agentic-security、agentic-security-lsp、agentic-security-mcp、agentic-security-diff、agentic-security-rule、agentic-security-audit、agentic-security-scanner、agentic-security-consistency，可以用 npx as 直接运行。

@clear-capabilities/agentic-security-scanner 支持 TypeScript 吗？

该包的 package.json 没有声明类型入口。需要类型提示时，可以在 npm 上查找社区维护的 @types/clear-capabilities__agentic-security-scanner 是否存在。

@clear-capabilities/agentic-security-scanner 支持 ESM 还是 CommonJS？

以 ES Module 形式发布，推荐使用 import 引入。在 CommonJS 项目中，Node.js 20.19+ / 22.12+ 可以直接 require() 不含顶层 await 的 ES Module，更早的版本需要改用动态 import()。

@clear-capabilities/agentic-security-scanner 需要什么版本的 Node.js？

package.json 的 engines 字段要求 Node.js >=24.0.0。版本不符时 npm 默认只给出警告，开启 engine-strict 后会拒绝安装。

@clear-capabilities/agentic-security-scanner 可以商用吗？

@clear-capabilities/agentic-security-scanner 使用 PolyForm-Internal-Use-1.0.0 许可。声明的许可为 PolyForm-Internal-Use-1.0.0，请阅读许可原文确认使用条件。以上为概括，不构成法律意见，请以许可原文为准。

@clear-capabilities/agentic-security-scanner 的下载量有多少？

根据 npm 官方下载统计，@clear-capabilities/agentic-security-scanner 在 2026/10/10 – 2026/11/08 这 30 天内被下载 11,499 次，日均约 383 次。下载量会把 CI 构建、镜像同步和作为其他包依赖的安装一并计入，适合横向比较热度，不能直接等同于使用人数。

@clear-capabilities/agentic-security-scanner 还在维护吗？

最新版本 0.195.31 发布于 2026/11/09（今天）；至今共发布 136 个版本，其中过去 12 个月发布了 136 个；首次发布于 2026/05/21。发布频率只是参考信号：功能稳定的工具可能很少需要更新，建议结合源码仓库的 issue 和提交记录判断。