Function scanSkillDirectory

layers/foundation-scan.ts:782–815

(
  skill: Skill,
  llmContext: LlmCallContext | null,
  logger: LoggerLike,
  options: Required<FoundationScanConfig>,
)

async function scanSkillDirectory(
  skill: Skill,
  llmContext: LlmCallContext | null,
  logger: LoggerLike,
  options: Required<FoundationScanConfig>,
): Promise<Warning | null> {
  if (!skill.filePath) {
    logger?.warn(`[FoundationScan] skip skill without filePath: ${skill.name ?? "(unknown)"}`);
    return null;
  }

  const baseDir = skill.baseDir || path.dirname(skill.filePath);
  const textFiles = listTextFilesRecursively(baseDir);
  logger?.info(`[FoundationScan] scanning skill=${skill.name ?? "(unknown)"}, files=${textFiles.length}`);

  const { metadataSummary, warning: metadataWarning } = (options.detectMaliciousSkills.semanticDetection && llmContext)
    ? await scanSkillMetadata(skill, llmContext, logger)
    : { metadataSummary: "", warning: null as Warning | null };
  
  if (metadataWarning) {
    return metadataWarning;
  }

  for (const filePath of textFiles) {
    if (options.detectMaliciousSkills.semanticDetection && llmContext) {
      const warning = await scanSkillFile(skill, filePath, metadataSummary, llmContext, logger, options);
      if (warning) {
        return warning;
      }
    }
  }

  return null;
}

export async function detectMaliciousSkills(
  workspaceDir: string,