fix(ea1): reject footnote-legend '*', bound pre-colon gap, detect YAML block-list and JSON wildcard grants

[yashrajp22]

Summary

Follow-up to #405 / #417 (and duplicate #438). #417 correctly bounded the EA1 wildcard-grant regex to a single line and a standalone *, but an execution-verified edge-case audit of the merged pattern found two remaining false-positive paths and three detection gaps. This PR fixes all five.

Fixes #444. Fixes #445. (Systemic paragraph-crossing across all 15 pattern files is tracked separately in #446 — out of scope here.)

Cases and how each is solved

False positives removed (#444)

Case 1 — footnote/legend text after a Tools: label.

Tools: * = requires authentication
Tools: * marks optional parameters

The (?!\*|\w) lookahead rejects ** and *word, but a standalone * followed by a space passed — both lines fired EA1/MEDIUM on benign docs.
Solution: a bare (unquoted) * now only counts when it ends the line, optionally closed by ] and/or a # comment. A real bare-scalar grant (tools: *, tools: [*], tools: * # allow all) has nothing else after the value; a footnote legend always does. Quoted forms ("*", '*') are unambiguous and keep matching anywhere on the line.

Case 2 — blank-line gap before the colon.

several tools

: * item

#417 bounded the whitespace after the colon, but \s*: before it still crossed newlines, so a markdown definition-list line two paragraphs later still bridged (matched text tools\n\n: * ).
Solution: [ \t]*: — the key and colon must share a line. No real YAML/JSON/TOML syntax breaks a line between key and colon.

Detection gaps closed (#445)

Case 3 — JSON quoted keys never matched.

"tools": ["*"]
"permissions": "*"

The old prefix required the colon directly after the key word, so the closing quote of a JSON key broke the match — despite JSON being the most common encoding for MCP/agent configs.
Solution: the key may be wrapped in optional quotes: ['\"]?(?:tools?|permissions?)['\"]?.

Case 4 — the idiomatic YAML block-list form never matched.

tools:
  - "*"

The block-sequence dash was never part of the pattern.
Solution: a second pattern matches a key followed by exactly one newline and a first list item that is a standalone wildcard. A blank line still breaks the match (the #405 cross-heading bridge cannot return), and the standalone-* lookahead keeps markdown lists (- **Read**, - *note*) out. Later items are intentionally out of scope until seen in practice — matching arbitrary positions across lines widens the false-positive surface.

Case 5 — wildcard not in first position of an inline list.

tools: ["search", "*"]

The old pattern required * immediately after [.
Solution: a quoted * anywhere inside same-line brackets now matches (\[[^\]\r\n]*['\"]\*['\"]). Quoted-only on purpose: markdown link/bold text inside [...] cannot satisfy it, and an unquoted * mid-list in YAML is an alias, not a wildcard.

Validation

• 46-case edge matrix executed against old/current/new patterns with the exact analyze() flags (re.IGNORECASE | re.MULTILINE): 20 genuine grant forms still detected (quoted/bracketed/bare/no-space/tab/CRLF/uppercase/comments/allowed_tools substring), 11 new detections, 15 false-positive classes rejected (including all EA1 wildcard-tool-access pattern crosses blank lines and matches markdown bold syntax Affected rule: EA1 "Unrestricted Tool Access" Affected file: src/skillspector/nodes/analyzers/static_patterns_excessive_agency.py, line 45 #405/fix(ea1): bound wildcard-tool-access match to a single line and a sta… #417 regression cases).
• pytest tests/ -m "not integration and not provider" — 2,963 passed, 14 skipped, 4 xfailed, 0 failures.
• 12 new tests in tests/nodes/analyzers/test_ea1_wildcard_line_boundary.py (footnote legend ×2, pre-colon gap, bare+comment, YAML block quoted/bare/zero-indent, JSON list/scalar key, inline not-first, markdown bold dash-list negative, blank-line-before-dash negative).
• ruff check and ruff format --check clean.

Risk

• Confidence stays 0.85 for both patterns; severity mapping unchanged.
• Known accepted non-detections (unchanged from current main): multi-line flow lists (tools: [\n "*"\n]) and wildcards in later block-list items.

[rng1995]

[SkillSpector Review]

Requesting changes: the new same-line list branch introduces an EA1 false positive when an explicit tool object has a nested argument value of "*"; the wildcard must be a top-level tool-list element. The focused suite passes, but this head has no hosted checks, and the feature commit also lacks the required DCO sign-off. Please add the nested-object regression, narrow the match, and rerun signed CI.

[rng1995]

[P1] Restrict the wildcard to a top-level tool-list element. The unrestricted [^\]\r\n]* scan treats any nested quoted star as the wildcard tool itself: valid JSON such as "tools": [{"name": "search", "arguments": {"glob": "*"}}] now emits EA1 even though the tool list explicitly contains only search. Match scalar list elements without descending into nested objects/arrays, and add this JSON case as a negative regression.