Privilege analyzer

const analysis = await kavach.analyzer.analyzeAgent(agentId);

console.log(analysis.overPrivileged);  // permissions broader than needed
console.log(analysis.unusedPermissions); // granted but never exercised
console.log(analysis.riskScore);       // 0-100 risk assessment
console.log(analysis.recommendations); // suggested permission changes

const report = await kavach.analyzer.scanAll();

for (const finding of report.findings) {
  console.log(`${finding.agentId}: ${finding.type} - ${finding.description}`);
}

const kavach = await createKavach({
  analyzer: {
    unusedThresholdDays: 30,  // flag permissions unused for 30+ days
    maxRecommendedDepth: 3,   // flag delegation chains deeper than 3
    wildcardWarning: true,    // flag wildcard permissions
  },
});