feat(ci): GitHub security pipeline (OWASP LLM Top 10 + secrets + LaTeX injection)

[datarian]

Summary

• Adds .github/workflows/security.yml — 5-job security pipeline triggered on every PR (open, synchronize, reopen)
• Adds .github/semgrep/llm-owasp.yaml — custom Semgrep rules for OWASP LLM Top 10 risks specific to a Claude Code plugin

Jobs

Job	Tool	Catches
Secret Scanning	Gitleaks v2	Hardcoded credentials across full PR commit history
npm Dependency Audit	npm audit	Vulnerable packages in resumes/web-builder (skips if not committed yet)
SAST	Semgrep auto + custom	TypeScript/React vulnerabilities + OWASP LLM Top 10; results go to GitHub Security tab as SARIF
LaTeX Injection	grep	\write18 and shell_escape in .tex templates (arbitrary shell execution)
Personal Data Leak	git ls-files	Hard-fails if PERSONAL_PROFILE.md, .backup. files, or compiled resumes are accidentally tracked

OWASP LLM Top 10 custom rules

• LLM01 Prompt Injection — string concatenation into prompt builders
• LLM02 Insecure Output Handling — innerHTML =, document.write, dangerouslySetInnerHTML
• LLM05 Supply Chain — preinstall/postinstall hooks in package.json
• LLM06 Sensitive Data — Anthropic/OpenAI/GitHub token patterns
• LLM08 Excessive Agency — eval(), new Function(), dynamic child_process.exec

Test plan

• Merge triggers the workflow on the next PR and all 5 jobs appear in CI
• GITLEAKS_LICENSE secret can be left unset (public repo — Gitleaks works without it)
• npm audit job shows as skipped until resumes/web-builder is committed
• LaTeX safety job passes on current templates (no \write18 present)
• PII check passes (profile files are gitignored)

🤖 Generated with Claude Code