feat: add warlock v1

[sarahxsanders]

merge after this one is shipped https://github.com/PostHog/warlock/pull/27

the warlock is here. wiring this up as a git dependency for now, will swap to the npm package once its published

changes

• created scan-warlock.js - Node.js replacement for scan-prompt-injection.sh
• added pnpm scan:skills to scan built ZIPs and pnpm scan <file> to scan individual files locally
• updated CI workflows to use the new script
• added pnpm-workspace.yaml to allow warlock's build scipt to run on install
• added llm triage layer >:]

known limitations, going to address in a follow up

• git dependencies are slower than npm, this is just temp until we publish to npm. it's an easy swap

test

pnpm install
pnpm build
pnpm scan:skills                    # scan all built skill ZIPs
pnpm scan path/to/some/file.md      # scan a specific file

[github-actions]

🧙 Wizard CI

Run the Wizard CI and test your changes against wizard-workbench example apps by replying with a GitHub comment using one of the following commands:

Test all apps:

• /wizard-ci all

Test all apps in a directory:

• /wizard-ci basic-integration
• /wizard-ci misc
• /wizard-ci revenue

Test an individual app:

• /wizard-ci basic-integration/android
• /wizard-ci basic-integration/angular
• /wizard-ci basic-integration/astro

Show more apps

• /wizard-ci basic-integration/django
• /wizard-ci basic-integration/fastapi
• /wizard-ci basic-integration/flask
• /wizard-ci basic-integration/javascript-node
• /wizard-ci basic-integration/javascript-web
• /wizard-ci basic-integration/laravel
• /wizard-ci basic-integration/next-js
• /wizard-ci basic-integration/nuxt
• /wizard-ci basic-integration/python
• /wizard-ci basic-integration/rails
• /wizard-ci basic-integration/react-native
• /wizard-ci basic-integration/react-router
• /wizard-ci basic-integration/sveltekit
• /wizard-ci basic-integration/swift
• /wizard-ci basic-integration/tanstack-router
• /wizard-ci basic-integration/tanstack-start
• /wizard-ci basic-integration/vue
• /wizard-ci misc/quack-quack
• /wizard-ci revenue/stripe

Results will be posted here when complete.

[edwinyjlim]

STOKED