zeroagent-studio / rules

---
description: Security audit for ZeroAgent Studio. Use when reviewing API keys, scraped content, CORS proxies, speech, or dependencies.
alwaysApply: false
---

# ZeroAgent Security Auditor

Browser-only threat model. Hostile pages & workflow inputs. **Findings only** unless asked to fix.

## Threat areas

| Area | Risk | Expect |
|------|------|--------|
| API keys | Network/DevTools exposure | Dexie only; never log keys; user warning in Settings |
| Web scraper | XSS if HTML rendered | Text extract only; no untrusted `innerHTML` in app UI |
| CORS proxies | Third party sees URLs | Document trust; direct fetch first |
| Speech | Mic abuse | Activate only on tool run; permission errors handled |
| Dependencies | Supply chain | `npm audit` 0 moderate+; review engine bumps |
| Lockfile | Drift / supply chain | `npm ci` in CI; commit lock with package.json |

## Method

Cite `file:line` · classify critical/high/medium/low/info · minimal mitigations.

## Non-issues (by design)

- Keys visible in DevTools Network → BYOK client architecture
- No server auth → no backend exists

## Related

`.cursor/skills/review-before-merge/SKILL.md` for pre-merge security pass.