{ "llm": { "conf": 0.9933, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": 25, "prob": 0.99, "class": "hostile" }, "inject": true, "outcome": "hostile", "interpretation": "Penetration testing attack toolkit" }, "ml": { "v": "7", "eng": "2.10.0", "lvl": 12, "conf": 93, "mods": [ { "cls": 0, "raw": 0.9757338, "rte": "az", "prob": 0.9757338 }, { "cls": 0, "raw": 0.8143209, "rte": "az/whl", "prob": 0.8143209 } ], "prob": 0.99, "files": [ { "id": 0, "lvl": 12, "conf": 93, "prob": 0.9900000095367432, "type": "whl" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000012954075828019995, "type": "python" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000012546777725219727, "type": "python" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000013560056686401367, "type": "python" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000012308359146118164, "type": "python" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000010361273780290503, "type": "python" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000013033549294050317, "type": "python" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000011483828529890161, "type": "python" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.00001570582389831543, "type": "python" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000013152758583601099, "type": "python" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000018695989638217725, "type": "python" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000013083219528198242, "type": "python" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000018576780348666944, "type": "python" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.000013033549294050317, "type": "python" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000017335018128505908, "type": "python" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000015785297364345752, "type": "python" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.00001580516436661128, "type": "python" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.000014583270058210474, "type": "python" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.000014970700249250513, "type": "python" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.000018546978026279248, "type": "python" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.000021884838133701123, "type": "python" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.000017315149307250977, "type": "python" }, { "id": 31, "lvl": -1, "conf": 0, "prob": 0.000012755393981933594, "type": "python" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.00001541773417557124, "type": "python" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.000021229187041171826, "type": "python" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.000014652808204118628, "type": "python" }, { "id": 38, "lvl": -1, "conf": 0, "prob": 0.00001523892115073977, "type": "python" }, { "id": 40, "lvl": -1, "conf": 0, "prob": 0.000010212262168352026, "type": "python" }, { "id": 41, "lvl": -1, "conf": 0, "prob": 0.000014175971045915503, "type": "python" }, { "id": 42, "lvl": -1, "conf": 0, "prob": 0.000014762083992536645, "type": "python" }, { "id": 45, "lvl": -1, "conf": 0, "prob": 0.000021050373106845655, "type": "python" }, { "id": 46, "lvl": -1, "conf": 0, "prob": 0.000011702378287736792, "type": "python" }, { "id": 47, "lvl": -1, "conf": 0, "prob": 0.000015248854651872534, "type": "python" }, { "id": 49, "lvl": -1, "conf": 0, "prob": 0.000012000401511613745, "type": "python" }, { "id": 50, "lvl": -1, "conf": 0, "prob": 0.000011205673217773438, "type": "python" }, { "id": 51, "lvl": -1, "conf": 0, "prob": 0.000012626250281755347, "type": "python" }, { "id": 52, "lvl": -1, "conf": 0, "prob": 0.000010112921700056177, "type": "python" }, { "id": 53, "lvl": -1, "conf": 0, "prob": 0.000011801719665527344, "type": "python" }, { "id": 55, "lvl": -1, "conf": 0, "prob": 0.000010699033737182617, "type": "python" }, { "id": 56, "lvl": -1, "conf": 0, "prob": 0.000011722247108991724, "type": "python" }, { "id": 57, "lvl": -1, "conf": 0, "prob": 0.000019073486328125, "type": "python" }, { "id": 59, "lvl": -1, "conf": 0, "prob": 0.000013788540854875464, "type": "python" }, { "id": 61, "lvl": -1, "conf": 0, "prob": 0.000011791785254899878, "type": "python" }, { "id": 63, "lvl": -1, "conf": 0, "prob": 0.000013907750144426245, "type": "python" }, { "id": 64, "lvl": -1, "conf": 0, "prob": 0.00001617272755538579, "type": "python" }, { "id": 65, "lvl": -1, "conf": 0, "prob": 0.000012119610801164526, "type": "python" }, { "id": 67, "lvl": -1, "conf": 0, "prob": 0.000012566645636979956, "type": "python" }, { "id": 70, "lvl": -1, "conf": 0, "prob": 0.000012000401511613745, "type": "python" }, { "id": 71, "lvl": -1, "conf": 0, "prob": 0.00001333157251792727, "type": "png" }, { "id": 72, "lvl": -1, "conf": 0, "prob": 0.000010222196578979492, "type": "markdown" }, { "id": 74, "lvl": -1, "conf": 0, "prob": 0.000010331471457902808, "type": "python" }, { "id": 75, "lvl": -1, "conf": 0, "prob": 0.0009160141344182193, "type": "markdown" }, { "id": 76, "lvl": -1, "conf": 0, "prob": 0.000014096498489379883, "type": "markdown" }, { "id": 77, "lvl": -1, "conf": 0, "prob": 0.00001041094492393313, "type": "markdown" }, { "id": 78, "lvl": -1, "conf": 0, "prob": 0.000009367863640363794, "type": "markdown" }, { "id": 79, "lvl": -1, "conf": 0, "prob": 0.000016033649444580078, "type": "markdown" }, { "id": 80, "lvl": -1, "conf": 0, "prob": 0.00001290440559387207, "type": "markdown" }, { "id": 81, "lvl": -1, "conf": 0, "prob": 0.000012656052604143042, "type": "markdown" }, { "id": 82, "lvl": -1, "conf": 0, "prob": 0.000011732180610124487, "type": "markdown" }, { "id": 83, "lvl": -1, "conf": 0, "prob": 0.000009725491509016138, "type": "text" }, { "id": 84, "lvl": -1, "conf": 0, "prob": 0.000012218952178955078, "type": "markdown" }, { "id": 85, "lvl": -1, "conf": 0, "prob": 0.00001193086336570559, "type": "markdown" }, { "id": 86, "lvl": -1, "conf": 0, "prob": 0.000009884436622087378, "type": "markdown" }, { "id": 87, "lvl": -1, "conf": 0, "prob": 0.000011702378287736792, "type": "markdown" }, { "id": 88, "lvl": -1, "conf": 0, "prob": 0.00001239776611328125, "type": "markdown" }, { "id": 89, "lvl": -1, "conf": 0, "prob": 0.0000239411983784521, "type": "markdown" }, { "id": 90, "lvl": -1, "conf": 0, "prob": 0.000010540087714616675, "type": "markdown" }, { "id": 91, "lvl": -1, "conf": 0, "prob": 0.000012973944649274927, "type": "markdown" }, { "id": 92, "lvl": -1, "conf": 0, "prob": 0.000010281801223754883, "type": "markdown" }, { "id": 93, "lvl": -1, "conf": 0, "prob": 0.00001718600651656743, "type": "markdown" }, { "id": 94, "lvl": -1, "conf": 0, "prob": 0.00001329183578491211, "type": "markdown" }, { "id": 95, "lvl": -1, "conf": 0, "prob": 0.000009189049706037622, "type": "markdown" }, { "id": 96, "lvl": -1, "conf": 0, "prob": 0.00001239776611328125, "type": "markdown" }, { "id": 97, "lvl": -1, "conf": 0, "prob": 0.000015228986740112305, "type": "markdown" }, { "id": 98, "lvl": -1, "conf": 0, "prob": 0.000012964010238647461, "type": "markdown" }, { "id": 99, "lvl": -1, "conf": 0, "prob": 0.000012040138244628906, "type": "markdown" }, { "id": 100, "lvl": -1, "conf": 0, "prob": 0.000010222196578979492, "type": "markdown" }, { "id": 101, "lvl": -1, "conf": 0, "prob": 0.00000961621572059812, "type": "markdown" }, { "id": 102, "lvl": -1, "conf": 0, "prob": 0.000012944142326887231, "type": "markdown" }, { "id": 103, "lvl": -1, "conf": 0, "prob": 0.000012020270332868677, "type": "markdown" }, { "id": 104, "lvl": -1, "conf": 0, "prob": 0.00001152356435341062, "type": "markdown" }, { "id": 105, "lvl": -1, "conf": 0, "prob": 0.0000133514404296875, "type": "markdown" }, { "id": 106, "lvl": -1, "conf": 0, "prob": 0.000010112921700056177, "type": "markdown" }, { "id": 107, "lvl": -1, "conf": 0, "prob": 0.0026521384716033936, "type": "markdown" }, { "id": 108, "lvl": -1, "conf": 0, "prob": 0.000012685854926530737, "type": "markdown" }, { "id": 109, "lvl": -1, "conf": 0, "prob": 0.000015934308976284228, "type": "markdown" }, { "id": 110, "lvl": -1, "conf": 0, "prob": 0.000010162591934204102, "type": "markdown" }, { "id": 111, "lvl": -1, "conf": 0, "prob": 0.00003095467764069326, "type": "markdown" }, { "id": 112, "lvl": -1, "conf": 0, "prob": 0.000012288491234357934, "type": "markdown" }, { "id": 113, "lvl": -1, "conf": 0, "prob": 0.000012050072655256372, "type": "markdown" }, { "id": 114, "lvl": -1, "conf": 0, "prob": 0.000012507040992204566, "type": "markdown" }, { "id": 115, "lvl": -1, "conf": 0, "prob": 0.000021944442778476514, "type": "markdown" }, { "id": 116, "lvl": -1, "conf": 0, "prob": 0.000012069940567016602, "type": "markdown" }, { "id": 117, "lvl": -1, "conf": 0, "prob": 0.000012695789337158203, "type": "markdown" }, { "id": 118, "lvl": -1, "conf": 0, "prob": 0.00010409951210021973, "type": "markdown" }, { "id": 119, "lvl": -1, "conf": 0, "prob": 0.000013043482795183081, "type": "markdown" }, { "id": 120, "lvl": -1, "conf": 0, "prob": 0.00001327196787315188, "type": "markdown" }, { "id": 121, "lvl": -1, "conf": 0, "prob": 0.000012407700523908716, "type": "markdown" }, { "id": 122, "lvl": -1, "conf": 0, "prob": 0.000012328227057878394, "type": "markdown" }, { "id": 123, "lvl": -1, "conf": 0, "prob": 0.000011732180610124487, "type": "markdown" }, { "id": 124, "lvl": -1, "conf": 0, "prob": 0.000012189149856567383, "type": "markdown" }, { "id": 125, "lvl": -1, "conf": 0, "prob": 0.000011732180610124487, "type": "markdown" }, { "id": 126, "lvl": -1, "conf": 0, "prob": 0.00001327196787315188, "type": "markdown" }, { "id": 127, "lvl": -1, "conf": 0, "prob": 0.000013182560905988794, "type": "markdown" }, { "id": 128, "lvl": -1, "conf": 0, "prob": 0.000011732180610124487, "type": "markdown" }, { "id": 129, "lvl": -1, "conf": 0, "prob": 0.000012665987014770508, "type": "markdown" }, { "id": 130, "lvl": -1, "conf": 0, "prob": 0.000009924173355102539, "type": "markdown" }, { "id": 131, "lvl": -1, "conf": 0, "prob": 0.00001197059918922605, "type": "markdown" }, { "id": 132, "lvl": -1, "conf": 0, "prob": 0.000012238820090715308, "type": "markdown" }, { "id": 133, "lvl": -1, "conf": 0, "prob": 0.000011752049431379419, "type": "markdown" }, { "id": 134, "lvl": -1, "conf": 0, "prob": 0.000012228886589582544, "type": "markdown" }, { "id": 135, "lvl": -1, "conf": 0, "prob": 0.00016014774155337363, "type": "markdown" }, { "id": 136, "lvl": -1, "conf": 0, "prob": 0.000012745459571306128, "type": "markdown" }, { "id": 137, "lvl": -1, "conf": 0, "prob": 0.000020583471268764697, "type": "markdown" }, { "id": 138, "lvl": -1, "conf": 0, "prob": 0.00001796086689864751, "type": "markdown" }, { "id": 139, "lvl": -1, "conf": 0, "prob": 0.00002197424510086421, "type": "markdown" }, { "id": 140, "lvl": -1, "conf": 0, "prob": 0.000012248754501342773, "type": "markdown" }, { "id": 141, "lvl": -1, "conf": 0, "prob": 0.000011672575965349097, "type": "markdown" }, { "id": 142, "lvl": -1, "conf": 0, "prob": 0.00001041094492393313, "type": "markdown" }, { "id": 143, "lvl": -1, "conf": 0, "prob": 0.000018318494767299853, "type": "markdown" }, { "id": 144, "lvl": -1, "conf": 0, "prob": 0.00001284480094909668, "type": "markdown" }, { "id": 145, "lvl": -1, "conf": 0, "prob": 0.000011483828529890161, "type": "markdown" }, { "id": 146, "lvl": -1, "conf": 0, "prob": 0.000012020270332868677, "type": "markdown" }, { "id": 147, "lvl": -1, "conf": 0, "prob": 0.000014185905456542969, "type": "markdown" }, { "id": 148, "lvl": -1, "conf": 0, "prob": 0.000013450781807478052, "type": "markdown" }, { "id": 149, "lvl": -1, "conf": 0, "prob": 0.00001327196787315188, "type": "markdown" }, { "id": 150, "lvl": -1, "conf": 0, "prob": 0.000013401110663835425, "type": "markdown" }, { "id": 151, "lvl": -1, "conf": 0, "prob": 0.000013659398064191919, "type": "markdown" }, { "id": 152, "lvl": -1, "conf": 0, "prob": 0.000012089808478776831, "type": "markdown" }, { "id": 153, "lvl": -1, "conf": 0, "prob": 0.000011493762031022925, "type": "markdown" }, { "id": 154, "lvl": -1, "conf": 0, "prob": 0.000009864568710327148, "type": "markdown" }, { "id": 155, "lvl": -1, "conf": 0, "prob": 0.000008453925147478003, "type": "markdown" }, { "id": 156, "lvl": -1, "conf": 0, "prob": 0.000011722247108991724, "type": "markdown" }, { "id": 157, "lvl": -1, "conf": 0, "prob": 0.000011742115020751953, "type": "markdown" }, { "id": 158, "lvl": -1, "conf": 0, "prob": 0.0028311610221862793, "type": "markdown" }, { "id": 159, "lvl": -1, "conf": 0, "prob": 0.00003007054328918457, "type": "markdown" }, { "id": 160, "lvl": -1, "conf": 0, "prob": 0.0034909050446003675, "type": "markdown" }, { "id": 161, "lvl": -1, "conf": 0, "prob": 0.000011861324310302734, "type": "markdown" }, { "id": 162, "lvl": -1, "conf": 0, "prob": 0.000009636084541853052, "type": "markdown" }, { "id": 163, "lvl": -1, "conf": 0, "prob": 0.000009785096153791528, "type": "markdown" }, { "id": 164, "lvl": -1, "conf": 0, "prob": 0.000011692444786604028, "type": "markdown" }, { "id": 165, "lvl": -1, "conf": 0, "prob": 0.000012715657248918433, "type": "markdown" }, { "id": 167, "lvl": -1, "conf": 0, "prob": 0.0000118712587209302, "type": "markdown" }, { "id": 168, "lvl": -1, "conf": 0, "prob": 0.000012914340004499536, "type": "markdown" }, { "id": 169, "lvl": -1, "conf": 0, "prob": 0.000012248754501342773, "type": "markdown" }, { "id": 170, "lvl": -1, "conf": 0, "prob": 0.000012546777725219727, "type": "markdown" }, { "id": 171, "lvl": -1, "conf": 0, "prob": 0.000013470649719238281, "type": "markdown" }, { "id": 172, "lvl": -1, "conf": 0, "prob": 0.000013450781807478052, "type": "markdown" }, { "id": 173, "lvl": -1, "conf": 0, "prob": 0.00001191099454445066, "type": "markdown" }, { "id": 174, "lvl": -1, "conf": 0, "prob": 0.000009129445061262231, "type": "markdown" }, { "id": 175, "lvl": -1, "conf": 0, "prob": 0.000009606282219465356, "type": "markdown" }, { "id": 176, "lvl": -1, "conf": 0, "prob": 0.000012298424735490698, "type": "markdown" }, { "id": 177, "lvl": -1, "conf": 0, "prob": 0.000012238820090715308, "type": "markdown" }, { "id": 178, "lvl": -1, "conf": 0, "prob": 0.00001333157251792727, "type": "markdown" }, { "id": 179, "lvl": -1, "conf": 0, "prob": 0.000010391076102678198, "type": "markdown" }, { "id": 180, "lvl": -1, "conf": 0, "prob": 0.000012447436347429175, "type": "markdown" }, { "id": 181, "lvl": -1, "conf": 0, "prob": 0.0000095367431640625, "type": "markdown" }, { "id": 182, "lvl": -1, "conf": 0, "prob": 0.000009725491509016138, "type": "markdown" }, { "id": 183, "lvl": -1, "conf": 0, "prob": 0.000009894371032714844, "type": "markdown" }, { "id": 184, "lvl": -1, "conf": 0, "prob": 0.000014344851479108911, "type": "markdown" }, { "id": 185, "lvl": -1, "conf": 0, "prob": 0.00001827875712478999, "type": "markdown" }, { "id": 186, "lvl": -1, "conf": 0, "prob": 0.00001043081283569336, "type": "markdown" }, { "id": 187, "lvl": -1, "conf": 0, "prob": 0.000013768672943115234, "type": "markdown" }, { "id": 188, "lvl": -1, "conf": 0, "prob": 0.000010102987289428711, "type": "markdown" }, { "id": 189, "lvl": -1, "conf": 0, "prob": 0.00001247723866981687, "type": "markdown" }, { "id": 190, "lvl": -1, "conf": 0, "prob": 0.000009040038094099145, "type": "markdown" }, { "id": 191, "lvl": -1, "conf": 0, "prob": 0.000012387831702653784, "type": "markdown" }, { "id": 192, "lvl": -1, "conf": 0, "prob": 0.000010669231414794922, "type": "markdown" }, { "id": 193, "lvl": -1, "conf": 0, "prob": 0.00001424551010131836, "type": "markdown" }, { "id": 194, "lvl": -1, "conf": 0, "prob": 0.000019311904907226562, "type": "markdown" }, { "id": 195, "lvl": -1, "conf": 0, "prob": 0.000010679165825422388, "type": "markdown" }, { "id": 196, "lvl": -1, "conf": 0, "prob": 0.000009804964065551758, "type": "markdown" }, { "id": 197, "lvl": -1, "conf": 0, "prob": 0.000011712312698364258, "type": "markdown" }, { "id": 198, "lvl": -1, "conf": 0, "prob": 0.000013152758583601099, "type": "markdown" }, { "id": 199, "lvl": -1, "conf": 0, "prob": 0.000012526909813459497, "type": "markdown" }, { "id": 200, "lvl": -1, "conf": 0, "prob": 0.000014066696166992188, "type": "markdown" }, { "id": 201, "lvl": -1, "conf": 0, "prob": 0.000010401010513305664, "type": "text" }, { "id": 202, "lvl": -1, "conf": 0, "prob": 0.0000099639100881177, "type": "markdown" }, { "id": 203, "lvl": -1, "conf": 0, "prob": 0.000012268622413103003, "type": "markdown" }, { "id": 204, "lvl": -1, "conf": 0, "prob": 0.00010063251102110371, "type": "markdown" }, { "id": 205, "lvl": -1, "conf": 0, "prob": 0.000012367963790893555, "type": "markdown" }, { "id": 206, "lvl": -1, "conf": 0, "prob": 0.000010649363503034692, "type": "markdown" }, { "id": 207, "lvl": -1, "conf": 0, "prob": 0.000009944041266862769, "type": "markdown" }, { "id": 208, "lvl": -1, "conf": 0, "prob": 0.000010172526344831567, "type": "markdown" }, { "id": 209, "lvl": -1, "conf": 0, "prob": 0.000009655952453613281, "type": "markdown" }, { "id": 210, "lvl": -1, "conf": 0, "prob": 0.0001227756292792037, "type": "markdown" }, { "id": 211, "lvl": -1, "conf": 0, "prob": 0.000010073184967041016, "type": "markdown" }, { "id": 212, "lvl": -1, "conf": 0, "prob": 0.000011702378287736792, "type": "markdown" }, { "id": 213, "lvl": -1, "conf": 0, "prob": 0.000012407700523908716, "type": "markdown" }, { "id": 214, "lvl": -1, "conf": 0, "prob": 0.000010291735634382349, "type": "markdown" }, { "id": 215, "lvl": -1, "conf": 0, "prob": 0.000018040338545688428, "type": "markdown" }, { "id": 216, "lvl": -1, "conf": 0, "prob": 0.000008692343726579566, "type": "python" }, { "id": 217, "lvl": -1, "conf": 0, "prob": 0.00002138813397323247, "type": "python" }, { "id": 220, "lvl": -1, "conf": 0, "prob": 0.00001231829355674563, "type": "python" }, { "id": 221, "lvl": -1, "conf": 0, "prob": 0.000010738770470197778, "type": "python" }, { "id": 223, "lvl": -1, "conf": 0, "prob": 0.00001095732022804441, "type": "python" }, { "id": 224, "lvl": -1, "conf": 0, "prob": 0.00001237789820152102, "type": "python" }, { "id": 225, "lvl": -1, "conf": 0, "prob": 0.00001333157251792727, "type": "python" }, { "id": 227, "lvl": -1, "conf": 0, "prob": 0.000011752049431379419, "type": "python" }, { "id": 229, "lvl": -1, "conf": 0, "prob": 0.000018805265426635742, "type": "python" }, { "id": 230, "lvl": -1, "conf": 0, "prob": 0.00001247723866981687, "type": "python" }, { "id": 232, "lvl": -1, "conf": 0, "prob": 0.000012814998626708984, "type": "python" }, { "id": 233, "lvl": -1, "conf": 0, "prob": 0.000015685955077060498, "type": "python" }, { "id": 236, "lvl": -1, "conf": 0, "prob": 0.000011096398338850122, "type": "python" }, { "id": 237, "lvl": -1, "conf": 0, "prob": 0.00001099705696105957, "type": "python" }, { "id": 238, "lvl": -1, "conf": 0, "prob": 0.00001714626887405757, "type": "python" }, { "id": 239, "lvl": -1, "conf": 0, "prob": 0.00001757343670760747, "type": "python" }, { "id": 240, "lvl": -1, "conf": 0, "prob": 0.000017782052964321338, "type": "python" }, { "id": 241, "lvl": -1, "conf": 0, "prob": 0.00002528230288589839, "type": "python" }, { "id": 242, "lvl": -1, "conf": 0, "prob": 0.000016629695892333984, "type": "python" }, { "id": 244, "lvl": -1, "conf": 0, "prob": 0.00002031525036727544, "type": "python" }, { "id": 246, "lvl": -1, "conf": 0, "prob": 0.000010440747246320825, "type": "python" }, { "id": 247, "lvl": -1, "conf": 0, "prob": 0.000013192494407121558, "type": "python" }, { "id": 248, "lvl": -1, "conf": 0, "prob": 0.000011225541129533667, "type": "python" }, { "id": 249, "lvl": -1, "conf": 0, "prob": 0.000016649564713588916, "type": "python" }, { "id": 250, "lvl": -1, "conf": 0, "prob": 0.000012248754501342773, "type": "json" }, { "id": 251, "lvl": -1, "conf": 0, "prob": 0.000013440847396850586, "type": "markdown" }, { "id": 258, "lvl": -1, "conf": 0, "prob": 0.000012805064216081519, "type": "markdown" }, { "id": 283, "lvl": -1, "conf": 0, "prob": 0.000011185805306013208, "type": "markdown" }, { "id": 310, "lvl": -1, "conf": 0, "prob": 0.00001056989003700437, "type": "markdown" }, { "id": 314, "lvl": -1, "conf": 0, "prob": 0.000010500351891096216, "type": "markdown" }, { "id": 315, "lvl": -1, "conf": 0, "prob": 0.000010897715583269019, "type": "markdown" }, { "id": 316, "lvl": -1, "conf": 0, "prob": 0.00001107652951759519, "type": "markdown" }, { "id": 322, "lvl": -1, "conf": 0, "prob": 0.000011156002983625513, "type": "markdown" }, { "id": 327, "lvl": -1, "conf": 0, "prob": 0.000010718901648942847, "type": "markdown" }, { "id": 329, "lvl": -1, "conf": 0, "prob": 0.000011682510375976562, "type": "markdown" }, { "id": 331, "lvl": -1, "conf": 0, "prob": 0.000011612971320573706, "type": "markdown" }, { "id": 332, "lvl": -1, "conf": 0, "prob": 0.00001012285520118894, "type": "markdown" }, { "id": 333, "lvl": -1, "conf": 0, "prob": 0.000010629494681779761, "type": "markdown" }, { "id": 335, "lvl": -1, "conf": 0, "prob": 0.00000852346420288086, "type": "markdown" }, { "id": 338, "lvl": -1, "conf": 0, "prob": 0.000011136134162370581, "type": "pkg_info" }, { "id": 339, "lvl": -1, "conf": 0, "prob": 0.000009864568710327148, "type": "text" }, { "id": 341, "lvl": -1, "conf": 0, "prob": 0.000011195738807145972, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-12T16:50:00Z" }, "path": "swarmattacker-0.1.1-py3-none-any.whl", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MK\u00268lqO3.?Ge/7005M1000\u0026o0047Xv\u003eRq5zEWu%vrcc\u003cC4CY8x\u003e8lqAcWZIqe+mf5Q@]D7+=G.1:wE0psw#@g(@fOg3?qV)4s\u0026C\u0026\u003c.GhK6shWIqt167Uq9E}ubBKDc7bRN0}Sws[krn:/nhtQvcaU/{M=)", "ln": 0 } ], "mol": "K₃(AmLiTe₄)O₈(Er₅S₃C₃XeCa₃CoDyLa)H₈(Cm₃₆Cr₃Db₁₂F₈Os₉Po₁₄TiU₂)Md₃(LiPa₅)Th₂", "sha": "409f3e1a4e5e205ab007b979294c117719e9c95893185feb6363d8d6450eca47", "path": "swarmattacker-0.1.1-py3-none-any.whl", "risk": 838, "size": 2703572, "type": "whl", "facts": { "metrics": { "whl": { "native_extension_count": 0 }, "file": { "size": 2703572, "entropy": 7.99 }, "binary": { "peak_region_bytes": 2672640, "peak_region_entropy": 7.85 }, "archive": { "file_count": 342, "member_count": 342, "script_count": 106, "zip_bomb_ratio": 11.45, "compressed_size": 2648906, "directory_count": 0, "executable_count": 0, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.54, "hidden_file_count": 0, "uncompressed_size": 4867180, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 127, "rtlo_filename_count": 0, "format.regular_count": 342, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 342, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.deflate": 342 }, "consistency": { "cloned_summary": 0, "name_typosquat": 0, "self_dependency": 0, "metadata_identity_mismatch": 0 } } }, "ident": { "name": { "value": "swarmattacker", "source": "whl.distribution", "verified": false }, "trust": "unsigned", "emails": [ "zviadjolokhava@gmail.com" ], "authors": [ { "name": "Zviad Jolokhava", "role": "author", "email": "zviadjolokhava@gmail.com", "source": "whl.author" } ], "version": { "value": "0.1.1", "source": "whl.version", "verified": false } }, "traits": [ { "id": "metadata/package/manifest/ecosystem::pkginfo-version-field", "conf": 0.9, "crit": 1, "desc": "Declares Python package version", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/communications/http/upload::curl-post-data-binary-file", "conf": 0.9, "crit": 3, "desc": "curl POST sends named local file", "from": [ { "file": 258 } ] }, { "id": "micro-behaviors/process/create/subprocess::import-subprocess", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.95, "crit": 3, "desc": "Imports Python's subprocess module", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-perl", "conf": 0.88, "crit": 1, "desc": "Pipe to Perl interpreter token", "from": [ { "file": 151 } ] }, { "id": "micro-behaviors/process/fd/stdio::python-custom-stdio", "conf": 0.8, "crit": 3, "desc": "Python subprocess custom stdio streams", "from": [ { "off": 3553, "file": 9, "line": 53 }, { "off": 5127, "file": 15, "line": 146 }, { "off": 8124, "file": 18, "line": 212 }, { "off": 1992, "file": 19, "line": 60 }, { "off": 7624, "file": 229, "line": 231 }, { "off": 10987, "file": 239, "line": 301 }, { "off": 7386, "file": 240, "line": 169 } ], "uses": [ 6, 103 ] }, { "id": "metadata/package/testing/corpus::sqli-category-label", "conf": 0.9, "crit": 3, "desc": "SQL injection category label", "from": [ { "file": 30 } ] }, { "id": "micro-behaviors/process/fd/stdio::py-stdout-custom-stream", "conf": 0.75, "crit": 3, "desc": "Python redirects stdout to custom stream", "from": [ { "file": 239 } ] }, { "id": "micro-behaviors/communications/http/response-code::json-http-200-status", "atk": "T1190", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JSON event records HTTP 200 response", "from": [ { "file": 250 } ] }, { "id": "micro-behaviors/data/db/config::db-key-database", "conf": 0.85, "crit": 1, "desc": "Connection database key", "from": [ { "file": 18 } ] }, { "id": "metadata/package/error-handling::catch-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a catch error handler", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/auth::token-object-field", "conf": 0.93, "crit": 3, "desc": "OAuth token object member", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/os/env/vars/credentials::refresh-token-env-name", "conf": 0.94, "crit": 3, "desc": "OAuth refresh-token environment variable", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/headers::headers-auth", "atk": "T1071.001", "mbc": "C0002", "conf": 0.66, "crit": 3, "desc": "HTTP Authorization header", "from": [ { "file": 13 }, { "file": 29 } ], "uses": [ 131, 235 ] }, { "id": "objectives/discovery/network/scan/port::banner-grab", "atk": "T1046", "mbc": "E1046", "conf": 0.5, "crit": 1, "desc": "Banner grab keyword", "from": [ { "file": 234 } ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "from": [ { "file": 43 } ], "uses": [ 21, 242 ] }, { "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host", "conf": 0.88, "crit": 3, "desc": "Cloud instance metadata link-local address", "from": [ { "file": 244 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-shell-cwd-options", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Subprocess sets shell or working directory" }, { "id": "micro-behaviors/process/create/exec::python-asyncio-subprocess-call", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Python creates a subprocess through asyncio", "from": [ { "file": 240 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-randomized-sleep", "conf": 0.94, "crit": 3, "desc": "Python sleep interval includes random jitter", "from": [ { "file": 32 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-chatgpt", "conf": 0.8, "crit": 1, "desc": "ChatGPT identity reference", "from": [ { "file": 4 } ] }, { "id": "objectives/evasion/security-bypass/waf::recaptcha-name-reference", "conf": 0.9, "crit": 1, "desc": "References reCAPTCHA", "from": [ { "file": 147 } ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "from": [ { "file": 75 } ], "uses": [ 32, 219 ] }, { "id": "micro-behaviors/communications/http/url/php-endpoint::url-php-query-script", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "URL targets .php with query", "from": [ { "file": 45 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/exec::php-request-shell-execution-alt", "atk": "T1505.003", "mbc": "B0024", "conf": 0.99, "crit": 3, "desc": "PHP request passed to alternate shell function", "from": [ { "file": 137 } ] }, { "id": "well-known/tool/offensive/metasploit::console-marker", "conf": 0.99, "crit": 3, "desc": "Metasploit command-line launcher marker", "from": [ { "file": 216 } ] }, { "id": "micro-behaviors/communications/http/endpoints::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/temp::tmp-path-content", "conf": 1.0, "crit": 2, "desc": "Contains a /tmp/ or /var/tmp/ path", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/url/construction/template::url-angle-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds an angle-bracket placeholder", "from": [ { "file": 78 } ] }, { "id": "micro-behaviors/communications/http/request/resource-action::http-authorization-denial-status", "conf": 0.96, "crit": 3, "desc": "References HTTP 403 denial status", "from": [ { "file": 26 } ] }, { "id": "metadata/lang/source::automatically-generated-source-marker", "conf": 0.85, "crit": 1, "desc": "Generated source provenance marker", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/process/create/thread::python-thread-create", "conf": 0.65, "crit": 3, "desc": "Creates a thread in Python", "from": [ { "file": 57 } ] }, { "id": "third_party/SigBase/EXPL/Log4J/Callbackdomain/Iocs/Dec21", "conf": 0.9, "crit": 5, "desc": "Detects IOCs found in Log4Shell incidents that indicate exploitation attempts of CVE-2021-44228" }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/ui/dialog/prompt::python-input-literal-prompt", "conf": 0.85, "crit": 3, "desc": "Python input prompt with literal text", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/process/create/thread::python-daemon-thread", "conf": 0.8, "crit": 3, "desc": "Creates a daemon thread in Python", "from": [ { "file": 57 } ] }, { "id": "micro-behaviors/process/create/launch::app-execution", "atk": "T1106", "conf": 0.85, "crit": 3, "desc": "macOS application execution", "from": [ { "file": 15 } ], "uses": [ 44 ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stdout", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names (stdout)", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/header/accept::accept-json-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "Requests a JSON HTTP response", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/fs/lock/flock::python-fcntl-flock", "conf": 0.86, "crit": 3, "desc": "Uses fcntl.flock() for advisory file locking", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/communications/http/client/response-body::requests-response-body-access", "conf": 0.9, "crit": 3, "desc": "Reads a requests response body", "from": [ { "file": 29 } ], "uses": [ 69, 102, 196 ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-sh", "conf": 0.88, "crit": 1, "desc": "Pipe to sh interpreter", "from": [ { "file": 269 } ] }, { "id": "objectives/supply-chain/hidden-payload/xss-injection::html-event-handler-remote-fetch", "atk": "T1189,T1059.007", "conf": 0.98, "crit": 4, "desc": "HTML event handler fetches remote content", "from": [ { "file": 210 } ] }, { "id": "micro-behaviors/communications/socket/raw::raw", "atk": "T1011", "mbc": "C0001", "conf": 0.8, "crit": 3, "desc": "Create raw network sockets", "from": [ { "file": 229 }, { "file": 230 }, { "file": 233 } ], "uses": [ 144 ] }, { "id": "micro-behaviors/communications/http/request/client::request-python", "conf": 0.9, "crit": 3, "desc": "Sends an HTTP request with a Python client library", "from": [ { "file": 13 }, { "off": 11495, "file": 29, "line": 304 } ], "uses": [ 97, 310 ] }, { "id": "micro-behaviors/process/create/launch::open-command", "atk": "T1106", "conf": 0.75, "crit": 3, "desc": "open command execution", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-claude", "conf": 0.8, "crit": 1, "desc": "Claude agent identity reference", "from": [ { "file": 31 } ] }, { "id": "objectives/command-and-control/backdoor/tasking/command-polling::python-handler-command-field", "atk": "T1059.006", "mbc": "B0030", "conf": 0.96, "crit": 3, "desc": "Remote handler reads payload command", "from": [ { "file": 238 } ] }, { "id": "micro-behaviors/communications/ip/literal::http-ip-url", "conf": 0.95, "crit": 3, "desc": "Contains an external-IP HTTP URL", "from": [ { "file": 184 }, { "file": 187 } ], "uses": [ 247 ] }, { "id": "micro-behaviors/process/fd/stdio::stdin-string", "conf": 0.3, "crit": 2, "desc": "References standard input name (stdin)", "from": [ { "file": 17 } ] }, { "id": "objectives/credential-access/cloud/token/files::aws-config-dup", "atk": "T1552.001", "conf": 0.75, "crit": 3, "desc": "AWS credential directory reference", "from": [ { "file": 241 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-detached-session", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Python starts a detached subprocess session", "from": [ { "file": 239 } ] }, { "id": "micro-behaviors/communications/http/redirect::response-redirect-member-access", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Reads redirect target from response object", "from": [ { "file": 246 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords--docker", "conf": 0.86, "crit": 1, "desc": "References the Docker container engine", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/process/exit/handler::atexit-register", "mbc": "B0024", "conf": 0.85, "crit": 3, "desc": "Registers a Python process-exit handler", "from": [ { "file": 240 } ] }, { "id": "objectives/command-and-control/dropper/delivery/download-execute::powershell-hidden-bypass-encoded-command", "atk": "T1059.001,T1027,T1564.003", "mbc": "B0030", "conf": 0.99, "crit": 4, "desc": "PowerShell hidden bypass encoded command", "from": [ { "file": 107 } ] }, { "id": "micro-behaviors/fs/path/temp::unix-temp", "conf": 0.7, "crit": 2, "desc": "Unix /tmp/ path reference", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/request/result::http-post-client-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "HTTP POST client call", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/response-code::source-http-400-status", "atk": "T1190", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Compares HTTP response status property to 400", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/headers::ua-curl", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "curl User-Agent", "from": [ { "file": 224 } ] }, { "id": "micro-behaviors/crypto/hash/file::pinned-artifact-digest-constant", "conf": 0.9, "crit": 3, "desc": "Pins an expected SHA-256 digest constant", "from": [ { "file": 250 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-requires-dist", "conf": 0.9, "crit": 1, "desc": "Declares Python runtime dependencies", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/data/format/html::html-heading-tag", "conf": 0.85, "crit": 3, "desc": "Markdown contains an HTML h1 heading", "from": [ { "file": 210 } ] }, { "id": "micro-behaviors/data/encode/base64::import-base64", "conf": 0.9, "crit": 3, "desc": "Imports Python's base64 module", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/data/llm::llm-refusal-phrase-corpus", "conf": 0.9, "crit": 3, "desc": "Contains common model-refusal phrases", "from": [ { "file": 61 } ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 1, "desc": "JSON result or response field key", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::python-platform-branch", "atk": "T1082", "conf": 0.82, "crit": 3, "desc": "Python branches on OS platform", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/socket/netcat::nc", "conf": 0.9, "crit": 3, "desc": "nc command invocation" }, { "id": "micro-behaviors/communications/http/curl::python-curl-argv-list", "conf": 0.85, "crit": 3, "desc": "Python runs curl or wget argv list", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/communications/http/lib/requests::response-json-call", "conf": 0.85, "crit": 1, "desc": "Parses HTTP response body as JSON", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::subprocess-timeout-expired-text", "conf": 0.88, "crit": 1, "desc": "Subprocess TimeoutExpired reference", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/ui/terminal::ansi-erase-op", "conf": 0.86, "crit": 3, "desc": "ANSI erase-line/erase-screen sequence", "from": [ { "file": 19 } ] }, { "id": "metadata/package/testing/corpus::malicious-traffic-mix-declaration", "conf": 0.9, "crit": 3, "desc": "Declares a malicious/benign traffic mix", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/process/create/agent::codex-cli-command", "atk": "T1059", "mbc": "B0022", "conf": 0.88, "crit": 3, "desc": "Codex CLI command invocation", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::codex-auth-json", "atk": "T1552.001", "conf": 0.92, "crit": 3, "desc": "Codex OAuth credential store", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/fs/path/agent-artifacts/auth::codex-auth-artifact-path", "atk": "T1552.001", "conf": 0.94, "crit": 3, "desc": "Codex authentication artifact path", "from": [ { "file": 29 } ] }, { "id": "well-known/tool/detection/security-scanner::defensive-dangerous-command-doc", "conf": 0.92, "crit": 1, "desc": "Defensive dangerous command documentation", "from": [ { "file": 322 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--exit-code", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names (exit_code)", "from": [ { "file": 53 } ] }, { "id": "micro-behaviors/communications/http/token-auth::bearer-header-from-variable", "conf": 0.94, "crit": 3, "desc": "Builds Bearer authorization header from variable", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-sleep-call", "conf": 0.65, "crit": 2, "desc": "Pauses execution with a Python sleep call", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/crypto/library/keyword::encryption-algorithm-keyword", "conf": 0.5, "crit": 3, "desc": "Encryption algorithm keyword", "from": [ { "file": 67 }, { "file": 221 }, { "file": 236 } ], "uses": [ 183 ] }, { "id": "micro-behaviors/communications/http/llm::llm-reasoning-effort-parameter", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "LLM reasoning_effort request parameter", "from": [ { "file": 2 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-license-file", "conf": 0.9, "crit": 1, "desc": "Declares Python package license file", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/fs/directory/cwd::python-path-cwd", "conf": 0.9, "crit": 3, "desc": "Gets the current directory with Path.cwd", "from": [ { "file": 241 } ] }, { "id": "objectives/discovery/network/scan/port::scanning-vocabulary", "atk": "T1046", "mbc": "E1046", "conf": 1.0, "crit": 3, "desc": "Port or network scanning vocabulary", "from": [ { "file": 233 } ], "uses": [ 239 ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-tool-prompt-injection", "atk": "T1195.002", "conf": 0.96, "crit": 5, "desc": "Agent skill tool carries prompt injection", "from": [ { "file": 75 } ], "uses": [ 238, 314 ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-linux", "conf": 0.6, "crit": 2, "desc": "Linux platform string", "from": [ { "file": 15 } ] }, { "id": "well-known/tool/detection/llm-scanner::llm-scanner-context", "conf": 0.96, "crit": 3, "desc": "File is part of an LLM security scanner / firewall", "from": [ { "file": 75 } ], "uses": [ 273 ] }, { "id": "micro-behaviors/os/security/sandbox::browser-no-sandbox-flag", "conf": 0.9, "crit": 3, "desc": "Browser launch disables sandbox", "from": [ { "file": 217 } ] }, { "id": "micro-behaviors/process/create/agent::agent-function-tool-schema", "conf": 0.9, "crit": 3, "desc": "Agent function-tool registration schema", "from": [ { "file": 28 } ] }, { "id": "micro-behaviors/os/env/vars/credentials::python-env-get-call", "conf": 0.8, "crit": 1, "desc": "Python reads an environment variable", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::codex-home-auth-json", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "Codex home auth JSON reference", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/fs/path/application/config::claude-config-directory", "conf": 0.9, "crit": 3, "desc": "Claude Code config directory path", "from": [ { "file": 72 } ] }, { "id": "micro-behaviors/data/parse/command::python-shlex-command-split", "conf": 0.9, "crit": 3, "desc": "Python parses shell-like command words", "from": [ { "file": 241 } ] }, { "id": "metadata/library/automation::python-browser-automation-package", "conf": 0.9, "crit": 3, "desc": "Python browser automation package", "from": [ { "file": 338 } ], "uses": [ 194 ] }, { "id": "metadata/package/dependencies/declaration::pypi-http-client-dependency", "conf": 0.9, "crit": 3, "desc": "PyPI metadata declares an HTTP client dependency" }, { "id": "micro-behaviors/communications/http/client/httpx::httpx-client", "conf": 0.75, "crit": 3, "desc": "httpx.Client usage", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/request/httpx::httpx-post", "conf": 0.85, "crit": 3, "desc": "httpx.post call", "from": [ { "file": 29 } ] }, { "id": "objectives/lateral-movement/brute-force/ssh::scanner-keyword-1", "conf": 0.75, "crit": 3, "desc": "SSH scanner-related keyword reference", "from": [ { "file": 229 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::socket-dns-lookup", "conf": 0.8, "crit": 3, "desc": "Socket-based DNS lookup capability", "from": [ { "file": 241 } ], "uses": [ 101 ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-refresh-grant-type", "conf": 0.9, "crit": 3, "desc": "OAuth refresh_token grant type", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/dns/lookup/resolver::gethostbyname", "conf": 0.85, "crit": 3, "desc": "socket.gethostbyname() DNS lookup", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/communications/http/lib/requests::raise-for-status", "conf": 0.8, "crit": 1, "desc": "requests raise_for_status response check", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/process/fd/stdio::py-stderr-custom-stream", "conf": 0.75, "crit": 3, "desc": "Python redirects stderr to custom stream", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/http/llm::loopback-host-with-llm-port", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Loopback host with Ollama port or hostname", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/read/file::python-pathlib-read-text", "atk": "T1005", "mbc": "E1005", "conf": 0.8, "crit": 2, "desc": "Read text via pathlib", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/url/construction/template::url-dollar-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds a ${ } template placeholder", "from": [ { "file": 210 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-output-options", "atk": "T1059.006", "mbc": "C0017", "conf": 0.9, "crit": 3, "desc": "Python subprocess captures output streams" }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--returncode", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names (returncode)", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/http/download/curl::source-curl-output-option", "atk": "T1105", "conf": 0.9, "crit": 3, "desc": "curl output file source", "from": [ { "file": 88 } ] }, { "id": "micro-behaviors/communications/url/construction/template::url-encoded-angle-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds a percent-encoded \u003c\u003e placeholder", "from": [ { "file": 155 } ] }, { "id": "micro-behaviors/communications/http/user-agent::browser-mozilla-5-0", "conf": 0.7, "crit": 3, "desc": "References Mozilla/5.0 User-Agent prefix", "from": [ { "file": 217 } ] }, { "id": "micro-behaviors/data/serialize/json::result-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object result field", "from": [ { "file": 6 } ] }, { "id": "metadata/package/scripts/entrypoint::entry-points-file", "conf": 0.95, "crit": 1, "desc": "Python package contains an entry_points.txt file", "from": [ { "file": 339 } ] }, { "id": "micro-behaviors/data/format/json::json-command-field", "conf": 0.8, "crit": 1, "desc": "JSON command or task field key", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/download/curl::source-curl-insecure-option", "atk": "T1553.004", "conf": 0.92, "crit": 3, "desc": "curl disables TLS certificate verification", "from": [ { "file": 108 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-devnull", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python subprocess suppresses stdio", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/communications/url/reference::python-comment-url-reference", "conf": 0.9, "crit": 1, "desc": "Python comment contains a URL", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/format/html::repeated-zero-width-characters", "conf": 0.94, "crit": 3, "desc": "Repeated zero-width Unicode characters", "from": [ { "file": 315 } ] }, { "id": "objectives/discovery/network/scan/port::service-port-scan-automation", "atk": "T1046", "mbc": "E1046", "conf": 0.85, "crit": 3, "desc": "Automated service-port probing", "from": [ { "off": 417, "file": 221, "line": 24 }, { "off": 538, "file": 223, "line": 25 }, { "off": 914, "file": 227, "line": 31 }, { "off": 1904, "file": 232, "line": 58 }, { "file": 233 } ], "uses": [ 132, 215 ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443", "conf": 0.6, "crit": 1, "desc": "HTTPS service port number", "from": [ { "off": 1075, "file": 221, "line": 39 }, { "off": 1220, "file": 223, "line": 42 }, { "off": 2080, "file": 227, "line": 57 } ], "uses": [ 220, 311 ] }, { "id": "micro-behaviors/fs/path/application/config::claude-global-settings-path", "conf": 0.96, "crit": 3, "desc": "Claude Code global settings path", "from": [ { "file": 241 } ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/OBFUSC", "conf": 0.9, "crit": 5, "desc": "Detects obfuscated indicators in server logs that indicate an exploitation attempt of CVE-2021-44228" }, { "id": "objectives/evasion/security-bypass/waf::cloudflare-clearance-reference", "conf": 0.9, "crit": 1, "desc": "References Cloudflare challenge clearance", "from": [ { "file": 199 } ] }, { "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference", "conf": 0.95, "crit": 3, "desc": "Unix account database path reference", "from": [ { "file": 38 } ] }, { "id": "metadata/package/testing/corpus::lfi-category-label", "conf": 0.9, "crit": 3, "desc": "LFI attack category label", "from": [ { "file": 36 } ] }, { "id": "micro-behaviors/communications/http/headers::authorization-header-map-entry", "atk": "T1071.001", "mbc": "C0002", "conf": 0.88, "crit": 3, "desc": "Defines an HTTP Authorization header mapping", "from": [ { "file": 13 } ] }, { "id": "objectives/discovery/network/scan/port::port-scan", "atk": "T1046", "mbc": "E1046", "conf": 0.4, "crit": 1, "desc": "Port-scan keyword", "from": [ { "file": 232 } ] }, { "id": "micro-behaviors/fs/path/location::tilde-hidden-home-path", "conf": 0.9, "crit": 3, "desc": "References uncommon hidden home path", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/data/llm::llm-code-generation-language", "conf": 0.88, "crit": 3, "desc": "LLM prompt names a script language", "from": [ { "file": 55 } ] }, { "id": "micro-behaviors/communications/http/headers::bearer-header-from-token", "atk": "T1071.001", "mbc": "C0002", "conf": 0.93, "crit": 1, "desc": "Bearer header from token", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::common-service-port", "conf": 0.6, "crit": 3, "desc": "Common service port number", "from": [ { "file": 221 }, { "file": 223 }, { "file": 227 }, { "file": 232 } ], "uses": [ 121, 177 ] }, { "id": "metadata/package/testing/corpus::ssrf-category-label", "conf": 0.9, "crit": 3, "desc": "SSRF attack category label", "from": [ { "file": 30 } ] }, { "id": "objectives/evasion/masquerade/traffic::script-client-browser-header-pair", "atk": "T1071.001", "mbc": "B0030", "conf": 0.9, "crit": 3, "desc": "HTTP client sends browser User-Agent and Accept headers", "from": [ { "off": 60117, "file": 38, "line": 1327 }, { "off": 11721, "file": 217, "line": 379 } ], "uses": [ 112, 250, 290, 313, 315 ] }, { "id": "objectives/evasion/security-bypass/waf::aws-waf-name-reference", "conf": 0.9, "crit": 1, "desc": "References AWS WAF", "from": [ { "file": 26 } ] }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-hexdigest", "conf": 0.9, "crit": 3, "desc": "Computes a SHA-256 hex digest in Python", "from": [ { "file": 28 } ] }, { "id": "micro-behaviors/process/create/subprocess::run-ast", "atk": "T1059.006", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Calls subprocess.run to launch a process", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/process/create/shell/pipeline::curl-pipe-shell-text", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "References a curl- or wget-to-shell pipeline", "from": [ { "file": 158 } ] }, { "id": "metadata/package/documentation/agent-safety::quoted-ignore-prior-example", "conf": 0.96, "crit": 3, "desc": "Quotes an ignore-prior-instructions example", "from": [ { "file": 75 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-keywords", "conf": 1.0, "crit": 1, "desc": "Container runtime name literal present", "from": [ { "file": 15 } ], "uses": [ 186 ] }, { "id": "micro-behaviors/os/env/vars/credentials::python-environ-credential-keyword-filter", "conf": 0.9, "crit": 3, "desc": "Python environment access uses credential-named keys", "from": [ { "file": 33 } ], "uses": [ 307 ] }, { "id": "micro-behaviors/process/terminate/kill::python-process-kill-call", "conf": 0.9, "crit": 3, "desc": "Python calls a process kill method", "from": [ { "file": 240 } ] }, { "id": "micro-behaviors/communications/socket/raw::raw-socket-ref", "atk": "T1011", "mbc": "C0001", "conf": 0.7, "crit": 1, "desc": "Raw socket terminology", "from": [ { "file": 229 } ] }, { "id": "objectives/execution/condition/platform::has-os-check", "conf": 0.6, "crit": 1, "desc": "Checks for OS platform", "from": [ { "file": 15 }, { "off": 5749, "file": 47, "line": 94 }, { "file": 217 }, { "file": 236 } ], "uses": [ 86, 264 ] }, { "id": "micro-behaviors/data/string/search::compiled-python-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of Python regex patterns", "from": [ { "file": 38 } ] }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-glob-call", "conf": 0.84, "crit": 3, "desc": "Calls Python glob for file enumeration", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/process/lifecycle/auto-exec::asyncio-run-call", "conf": 0.85, "crit": 3, "desc": "Python asyncio.run call", "from": [ { "file": 16 } ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228" }, { "id": "micro-behaviors/os/clipboard/command::str-pbpaste", "conf": 0.7, "crit": 1, "desc": "pbpaste string", "from": [ { "file": 17 } ] }, { "id": "third_party/Sekoia/Technique/Csv/Dde/Exec/Regex", "conf": 0.9, "crit": 5, "desc": "Find .csv file exploiting DDE technique" }, { "id": "micro-behaviors/communications/http/request/client::async-response-stream-python", "conf": 0.85, "crit": 3, "desc": "Async Python response streaming", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/fs/path/location::home-config-documents-reference", "conf": 0.78, "crit": 3, "desc": "References config or document paths under home", "from": [ { "file": 241 } ] }, { "id": "metadata/package/manifest/ecosystem::pypi-license-metadata", "conf": 0.94, "crit": 2, "desc": "PyPI package declares license information", "from": [ { "file": 338 } ], "uses": [ 82, 298 ] }, { "id": "metadata/package/scripts/entrypoint::wheel-console-entrypoint", "conf": 0.9, "crit": 3, "desc": "Package declares a console-script entry point", "from": [ { "file": 339 } ], "uses": [ 114, 163 ] }, { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/ipc/mcp::browser-mcp-upload-label", "conf": 0.97, "crit": 3, "desc": "Browser MCP upload surface label", "from": [ { "file": 41 } ] }, { "id": "objectives/evasion/security-bypass/waf::hcaptcha-name-reference", "conf": 0.9, "crit": 1, "desc": "References hCaptcha", "from": [ { "file": 147 } ] }, { "id": "micro-behaviors/data/db/config::db-key-password", "conf": 0.85, "crit": 1, "desc": "Connection password key", "from": [ { "file": 46 } ] }, { "id": "objectives/execution/automation/agent::skill-offensive-tool-reference", "atk": "T1059", "conf": 0.92, "crit": 1, "desc": "Agent skill offensive tool reference", "from": [ { "file": 204 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::platform-system", "atk": "T1082", "conf": 0.7, "crit": 3, "desc": "Queries the OS with platform.system()", "from": [ { "file": 15 } ] }, { "id": "metadata/package/scripts/entrypoint::console-scripts-entry", "conf": 0.88, "crit": 1, "desc": "Declares Python console-script entry points", "from": [ { "file": 339 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-requires-python", "conf": 0.9, "crit": 1, "desc": "Declares supported Python versions", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/communications/http/oauth::refresh-token-snake-assign", "conf": 0.9, "crit": 3, "desc": "Snake-case OAuth refresh_token field assign", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/fs/read/file::file-read-content", "atk": "T1005", "mbc": "E1005", "conf": 0.6, "crit": 2, "desc": "Reads file content (Python)", "from": [ { "file": 14 } ] }, { "id": "micro-behaviors/fs/path/application/config::codex-global-hooks-path", "conf": 0.96, "crit": 3, "desc": "Codex global hooks path", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL", "from": [ { "file": 249 } ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-ruby", "conf": 0.88, "crit": 1, "desc": "Pipe to Ruby interpreter token", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/os/env/vars/credentials::python-api-key-env-read", "conf": 0.85, "crit": 3, "desc": "Python reads API key env vars", "from": [ { "file": 33 } ] }, { "id": "micro-behaviors/communications/http/curl::curl-command-remote-url", "conf": 0.85, "crit": 3, "desc": "curl command names a routable remote URL", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/communications/ip/parse::ip-network-from-cidr", "conf": 0.9, "crit": 3, "desc": "Builds an IP network object from CIDR", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/communications/http/url/php-endpoint::url-php-endpoint-script", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "URL targets .php endpoint", "from": [ { "file": 45 } ] }, { "id": "micro-behaviors/communications/http/browser-proxy::browser-url-relay-target", "atk": "T1041", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Browser relay target URL parameter", "from": [ { "file": 244 } ] }, { "id": "micro-behaviors/data/llm::non-system-role-marker", "conf": 0.72, "crit": 1, "desc": "LLM developer- or assistant-role value", "from": [ { "file": 31 } ] }, { "id": "micro-behaviors/data/db/config::db-key-user", "conf": 0.85, "crit": 1, "desc": "Connection user key", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::http-port-80", "conf": 0.6, "crit": 1, "desc": "HTTP service port number", "from": [ { "file": 227 } ] }, { "id": "micro-behaviors/process/create/subprocess::asyncio-create-subprocess-exec", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.85, "crit": 3, "desc": "asyncio subprocess execution call", "from": [ { "file": 240 } ] }, { "id": "micro-behaviors/fs/path/application/config::codex-absolute-config-directory", "conf": 0.9, "crit": 3, "desc": "Absolute Codex config directory path", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/process/create/launch::java-classpath-command-line", "atk": "T1059", "conf": 0.85, "crit": 3, "desc": "Runs Java class via classpath (java -cp)", "from": [ { "file": 105 } ] }, { "id": "objectives/evasion/security-bypass/anti-bot::python-antibot-evasion-claim", "conf": 0.95, "crit": 3, "desc": "Python claims anti-bot challenge bypass", "from": [ { "file": 217 } ] }, { "id": "objectives/evasion/security-bypass/llm/override::agent-skill-tool-prior-instruction-bypass", "atk": "T1562.001", "conf": 0.98, "crit": 5, "desc": "Agent skill tool attempts to override prior instructions", "from": [ { "file": 75 } ], "uses": [ 238, 314 ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "from": [ { "file": 67 } ] }, { "id": "micro-behaviors/communications/http/token-auth::access-refresh-token-pair", "conf": 0.94, "crit": 3, "desc": "Access and refresh token pair", "from": [ { "off": 11802, "file": 29, "line": 316 } ], "uses": [ 259, 289 ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-rglob-call", "conf": 0.84, "crit": 3, "desc": "Calls pathlib rglob for recursive enumeration", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/proc/container::runtime-engine-keywords", "conf": 0.86, "crit": 1, "desc": "Container engine name literal present", "from": [ { "file": 15 } ], "uses": [ 53 ] }, { "id": "objectives/evasion/security-bypass/access-list::agent-skill-access-list-bypass-claim", "atk": "T1562", "conf": 0.99, "crit": 4, "desc": "Skill claims access-list bypass", "from": [ { "file": 118 } ] }, { "id": "micro-behaviors/data/db/config::db-key-secret", "conf": 0.85, "crit": 1, "desc": "Connection secret key", "from": [ { "file": 38 } ] }, { "id": "micro-behaviors/os/env/vars/credentials::python-sensitive-env-read", "conf": 0.9, "crit": 3, "desc": "Python reads credential-named environment variable", "uses": [ 90, 307 ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "from": [ { "file": 220 } ] }, { "id": "micro-behaviors/data/decode/base64::base64-decoding", "conf": 0.95, "crit": 3, "desc": "Base64 decoding behavior", "from": [ { "file": 29 } ], "uses": [ 224 ] }, { "id": "micro-behaviors/data/manipulation::untrusted-content-data-boundary", "conf": 0.97, "crit": 3, "desc": "Content explicitly marked as untrusted data", "from": [ { "file": 165 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "from": [ { "file": 1 } ] }, { "id": "metadata/library/automation::pkginfo-playwright-dependency", "conf": 0.9, "crit": 1, "desc": "pkginfo Playwright dependency", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::ssh-credentials", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "SSH credential file paths", "from": [ { "file": 241 } ], "uses": [ 226 ] }, { "id": "micro-behaviors/communications/http/client/response-body::python-response-body-member-reference", "conf": 0.8, "crit": 1, "desc": "Python response body member access" }, { "id": "micro-behaviors/communications/http/browser-automation::authentication-token-name-literal", "conf": 0.9, "crit": 3, "desc": "Authentication token name literal", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/os/clipboard/command::python-pbpaste-subprocess-read", "atk": "T1115", "conf": 0.94, "crit": 3, "desc": "Python reads the macOS clipboard through pbpaste", "from": [ { "file": 17 } ] }, { "id": "well-known/lib/format/pyyaml::pyyaml-library-context", "conf": 0.98, "crit": 3, "desc": "PyYAML library context", "from": [ { "file": 12 } ], "uses": [ 295 ] }, { "id": "micro-behaviors/data/llm::llm-code-generation-verb", "conf": 0.88, "crit": 3, "desc": "LLM code-generation verb", "from": [ { "file": 47 } ] }, { "id": "micro-behaviors/os/env/vars/access::anthropic-base-url-variable", "conf": 0.85, "crit": 3, "desc": "Anthropic API base URL variable reference", "from": [ { "file": 33 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-markdown-description", "conf": 0.9, "crit": 1, "desc": "Declares Markdown package description", "from": [ { "file": 338 } ] }, { "id": "metadata/package/testing/corpus::server-attack-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple server-side attack-category labels", "from": [ { "off": 2607, "file": 30, "line": 57 }, { "off": 12791, "file": 31, "line": 316 }, { "off": 5693, "file": 36, "line": 124 }, { "off": 13903, "file": 38, "line": 303 }, { "off": 2868, "file": 45, "line": 57 }, { "off": 11542, "file": 47, "line": 196 }, { "off": 3038, "file": 244, "line": 68 } ], "uses": [ 126, 133, 243 ] }, { "id": "micro-behaviors/process/create/direct::process-launch-call-text", "conf": 0.92, "crit": 3, "desc": "Child-process launch capability", "from": [ { "file": 15 }, { "file": 17 }, { "file": 18 }, { "file": 19 }, { "file": 240 }, { "file": 242 } ], "uses": [ 270 ] }, { "id": "micro-behaviors/process/create/subprocess::python-bash-argv-launch", "atk": "T1059.006", "mbc": "E1059.006", "conf": 0.96, "crit": 3, "desc": "Python launches Bash with command-line arguments", "from": [ { "file": 18 } ] }, { "id": "objectives/evasion/security-bypass/waf::imperva-name-reference", "conf": 0.9, "crit": 1, "desc": "References Imperva or Incapsula", "from": [ { "file": 147 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stderr", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names (stderr)", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/data/llm::llm-code-generation-instruction", "conf": 0.92, "crit": 3, "desc": "LLM instruction requests source code", "from": [ { "file": 47 }, { "file": 55 } ], "uses": [ 130, 297 ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-browser-wallet-target", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Skill targets browser or wallet data", "from": [ { "file": 156 } ], "uses": [ 14, 236 ] }, { "id": "objectives/collection/stealer/ctf::ctf-flag-stealer-regex", "atk": "T1005", "conf": 0.95, "crit": 3, "desc": "CTF flag-format pattern in source", "from": [ { "file": 4 } ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "from": [ { "file": 75 } ], "uses": [ 21 ] }, { "id": "micro-behaviors/communications/http/header/retry-after::retry-after-header-name-reference", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "References the Retry-After header name", "from": [ { "file": 26 } ] }, { "id": "micro-behaviors/process/create/subprocess::subprocess-suppresses-stdio", "atk": "T1059.006", "mbc": "C0017", "conf": 0.94, "crit": 3, "desc": "Python subprocess stdio suppression", "from": [ { "file": 15 } ] }, { "id": "objectives/discovery/network/scan/port::port-ref", "atk": "T1046", "mbc": "E1046", "conf": 0.5, "crit": 1, "desc": "Port scanning terminology", "from": [ { "file": 232 }, { "file": 233 } ], "uses": [ 128 ] }, { "id": "micro-behaviors/process/create/launch::java-jar-command-line", "atk": "T1059", "conf": 0.85, "crit": 3, "desc": "Runs an executable JAR (java -jar)", "from": [ { "file": 91 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::open-a-app", "atk": "T1204.001", "conf": 0.8, "crit": 3, "desc": "macOS open -a application launch", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/timezone::python-local-timezone-query", "atk": "T1614.001", "conf": 0.92, "crit": 3, "desc": "Python queries local timezone", "from": [ { "file": 5 } ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-protocol", "conf": 0.6, "crit": 1, "desc": "References HTTPS service port 443", "from": [ { "file": 221 } ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotdir-ref", "conf": 0.6, "crit": 3, "desc": "Home-relative hidden directory path literal", "from": [ { "file": 225 } ] }, { "id": "third_party/SigBase/SUSP/EXPL/OBFUSC/Dec21", "conf": 0.9, "crit": 5, "desc": "Detects obfuscation methods used to evade detection in log4j exploitation attempt of CVE-2021-44228" }, { "id": "micro-behaviors/data/db/config::db-key-host", "conf": 0.85, "crit": 1, "desc": "Connection host key", "from": [ { "file": 38 } ] }, { "id": "micro-behaviors/data/decode/encoded/formats::python-urlsafe-base64-decode", "conf": 0.85, "crit": 3, "desc": "Python URL-safe Base64 decoder call", "from": [ { "file": 29 } ] }, { "id": "objectives/evasion/security-bypass/waf::datadome-name-reference", "conf": 0.9, "crit": 1, "desc": "References DataDome bot defense", "from": [ { "file": 199 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::ssh-dir", "atk": "T1552.001", "conf": 0.95, "crit": 2, "desc": ".ssh directory path", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/data/llm::llm-output-response-word", "conf": 0.86, "crit": 3, "desc": "LLM response output reference", "from": [ { "file": 19 } ] }, { "id": "micro-behaviors/communications/http/url/tld::reserved-documentation-tld-url", "conf": 0.95, "crit": 3, "desc": "URL uses RFC 2606 reserved documentation TLD", "from": [ { "file": 95 } ] }, { "id": "micro-behaviors/crypto/kdf/algorithm::pbkdf2", "conf": 0.75, "crit": 3, "desc": "PBKDF2 key-derivation reference", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "References multiple AI assistant products", "from": [ { "file": 57 } ], "uses": [ 19, 45 ] }, { "id": "micro-behaviors/communications/dns/label::python-dns-query-reference", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Python DNS resolution API reference", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/os/env/config::python-dotenv-load", "conf": 0.85, "crit": 3, "desc": "Python dotenv loading", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/http/response-code::source-http-429-status", "atk": "T1590", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Source checks for HTTP 429 rate-limit response", "from": [ { "file": 29 } ] }, { "id": "objectives/evasion/security-bypass/waf::akamai-name-reference", "conf": 0.9, "crit": 1, "desc": "References Akamai", "from": [ { "file": 120 } ] }, { "id": "micro-behaviors/communications/http/headers::auth-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 1, "desc": "Authorization header-name literal", "from": [ { "file": 13 } ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-wallet-store-target", "atk": "T1195.002", "conf": 0.96, "crit": 1, "desc": "Mentions wallet-related data terminology", "from": [ { "file": 156 } ] }, { "id": "objectives/execution/automation/agent::skill-offensive-capability", "atk": "T1059", "conf": 0.94, "crit": 4, "desc": "Agent skill offensive capability", "from": [ { "file": 204 } ], "uses": [ 161, 212 ] }, { "id": "objectives/supply-chain/trojanized/app/package::skill-tool-classic-prompt-injection", "atk": "T1195.002", "conf": 0.94, "crit": 3, "desc": "Skill tool emits prompt-injection phrases", "from": [ { "file": 75 } ] }, { "id": "metadata/file/string/security::port-network-scanning-phrase", "atk": "T1046", "mbc": "E1046", "conf": 0.75, "crit": 3, "desc": "References port or network scanning", "from": [ { "file": 233 } ] }, { "id": "metadata/package/testing/corpus::xss-category-label", "conf": 0.9, "crit": 3, "desc": "XSS attack category label", "from": [ { "file": 36 } ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names", "from": [ { "file": 2 } ], "uses": [ 36, 77, 109, 208 ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-config-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Agent-skill configuration marker", "from": [ { "file": 43 } ] }, { "id": "metadata/package/testing/corpus::rce-category-label", "conf": 0.9, "crit": 3, "desc": "RCE attack category label", "from": [ { "file": 36 } ] }, { "id": "micro-behaviors/communications/http/request/body::http-post-with-body-argument", "conf": 0.82, "crit": 3, "desc": "HTTP POST supplies a body argument" }, { "id": "micro-behaviors/communications/http/header/content-type::json-header", "conf": 0.9, "crit": 3, "desc": "References HTTP Content-Type application/json", "from": [ { "file": 29 } ] }, { "id": "metadata/package/manifest/ecosystem::pypi-basic-metadata", "conf": 0.95, "crit": 2, "desc": "PyPI package declares name, version, summary", "from": [ { "off": 42, "file": 338, "line": 3 } ], "uses": [ 0, 261, 298, 308 ] }, { "id": "micro-behaviors/communications/ip/literal::external-ipv4-http-url", "conf": 0.9, "crit": 1, "desc": "Text contains raw external-IP HTTP URL", "from": [ { "file": 184 } ] }, { "id": "objectives/evasion/security-bypass/waf::multi-vendor-antibot-solvers", "conf": 0.95, "crit": 3, "desc": "Package lists multiple anti-bot solver vendors", "from": [ { "file": 147 } ], "uses": [ 124, 135, 207, 225, 234 ] }, { "id": "objectives/supply-chain/trojanized/app/agent-skill-scanner::skill-prompt-injection-manifest-case", "atk": "T1195.002", "conf": 0.99, "crit": 5, "desc": "Agent skill manifest carries prompt injection", "from": [ { "file": 75 } ], "uses": [ 21, 238 ] }, { "id": "micro-behaviors/communications/http/request/client::http-version", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 2, "desc": "HTTP/1.x version string", "from": [ { "file": 38 } ] }, { "id": "micro-behaviors/data/serialize/json::command-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object command field", "from": [ { "file": 8 } ] }, { "id": "objectives/credential-access/browser/session-hijack::agent-skill-bundles-access-token", "atk": "T1539", "conf": 0.99, "crit": 3, "desc": "Skill text names an access-token field", "from": [ { "file": 76 } ] }, { "id": "micro-behaviors/data/llm::system-role-marker", "conf": 0.72, "crit": 1, "desc": "LLM system-role value", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/llm::llm-near-execution-verb", "conf": 0.92, "crit": 3, "desc": "LLM reference near execution verb", "from": [ { "file": 28 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::ssh-authorized-keys", "atk": "T1552.004", "conf": 0.6, "crit": 3, "desc": "SSH authorized_keys path", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/os/container/namespace::runtime", "conf": 0.9, "crit": 3, "desc": "Container runtime library usage", "from": [ { "file": 15 } ], "uses": [ 141 ] }, { "id": "micro-behaviors/communications/http/request/client::python-http-post-any", "conf": 0.8, "crit": 3, "desc": "Python HTTP POST method usage", "from": [ { "off": 11495, "file": 29, "line": 304 } ], "uses": [ 97 ] }, { "id": "metadata/file/profile/language::script-cyrillic", "conf": 0.8, "crit": 3, "desc": "Contains multiple standalone Cyrillic words", "from": [ { "file": 251 } ] }, { "id": "micro-behaviors/communications/http/token-auth::refresh-token-field-source", "conf": 0.92, "crit": 3, "desc": "Refresh token field in source", "from": [ { "file": 29 } ] }, { "id": "objectives/credential-access/dev-tools/ai::litellm-proxy-module-import", "atk": "T1552.001", "conf": 0.95, "crit": 3, "desc": "Imports LiteLLM proxy server module", "from": [ { "file": 33 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-summary-field", "conf": 0.9, "crit": 1, "desc": "Declares Python package summary", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/data/db/sql::information-schema-ref", "conf": 1.0, "crit": 3, "desc": "SQL information_schema reference", "from": [ { "file": 30 } ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/string::os-string-windows", "conf": 0.4, "crit": 2, "desc": "Windows platform string", "from": [ { "file": 15 } ] }, { "id": "objectives/command-and-control/backdoor/webshell/exec::php-request-shell-execution", "atk": "T1505.003", "mbc": "B0024", "conf": 0.99, "crit": 3, "desc": "PHP request parameter passed to shell execution", "from": [ { "file": 89 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/privilege/check::os-geteuid-root-check", "atk": "T1033", "conf": 0.9, "crit": 3, "desc": "Python compares the effective UID to root", "from": [ { "file": 229 } ] }, { "id": "micro-behaviors/data/format/json::map-command-result-schema", "conf": 0.94, "crit": 3, "desc": "Object exposes command and result JSON fields", "from": [ { "file": 53 } ], "uses": [ 65, 115 ] }, { "id": "objectives/impact/destroy/keywords::destroy-verb--code", "conf": 0.9, "crit": 1, "desc": "Destroy action targeting a codebase or project", "from": [ { "file": 40 } ] }, { "id": "micro-behaviors/process/create/subprocess::process-execution", "atk": "T1059.006", "conf": 0.8, "crit": 3, "desc": "Python launches a child process", "from": [ { "file": 15 }, { "file": 17 }, { "file": 18 }, { "file": 19 }, { "file": 240 }, { "file": 242 } ], "uses": [ 137 ] }, { "id": "micro-behaviors/data/db/sql::sql-quoted-tautology-payload", "conf": 0.92, "crit": 3, "desc": "Quoted SQL tautology payload literal", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/format/html::markdown-remote-image-source", "conf": 0.9, "crit": 3, "desc": "Markdown references a remote image", "from": [ { "file": 251 } ] }, { "id": "well-known/tool/detection/llm-scanner::owasp-llm-top-10-reference", "conf": 0.93, "crit": 3, "desc": "OWASP LLM Top 10 reference", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/fs/path/application/config::codex-config-directory", "conf": 0.9, "crit": 3, "desc": "Codex config directory path", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/url/construction/template::url-double-brace-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds a {{ }} template placeholder", "from": [ { "file": 332 } ] }, { "id": "micro-behaviors/communications/http/server/listener::apache-tomcat-phrase", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6, "crit": 3, "desc": "Apache Tomcat product name", "from": [ { "file": 36 } ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/format/log::apm-event-alert-field", "conf": 0.85, "crit": 3, "desc": "APM event alert or source field", "from": [ { "file": 26 } ] }, { "id": "micro-behaviors/time/sleep/interval::python-sleep-1s-plus-arg", "conf": 0.75, "crit": 1, "desc": "Python sleep waits at least one second", "from": [ { "file": 63 } ] }, { "id": "micro-behaviors/process/interpreter/python::python-inline-command", "atk": "T1059.006", "conf": 0.9, "crit": 3, "desc": "Python inline-command syntax", "from": [ { "file": 80 } ] }, { "id": "metadata/package/manifest/ecosystem::pypi-runtime-metadata", "conf": 0.94, "crit": 2, "desc": "PyPI package declares Python and dependencies", "from": [ { "off": 2198, "file": 338, "line": 43 } ], "uses": [ 61, 164, 298 ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/serialize/json::json-only-response-instruction", "conf": 0.9, "crit": 3, "desc": "Response constrained to JSON serialization", "from": [ { "file": 40 } ] }, { "id": "well-known/tool/offensive/payload-corpus::payloadsallthethings-reference", "conf": 0.9, "crit": 3, "desc": "PayloadsAllTheThings payload-library citation", "from": [ { "file": 36 } ] }, { "id": "metadata/package/error-handling::except-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a Python except handler", "from": [ { "file": 6 } ] }, { "id": "well-known/tool/detection/mcp-tool-auditor::mcp-tool-auditor-authorization-warning", "conf": 0.98, "crit": 3, "desc": "MCP Auditor authorization warning", "from": [ { "file": 38 } ] }, { "id": "micro-behaviors/communications/ipc/mcp::browser-mcp-download-label", "conf": 0.97, "crit": 3, "desc": "Browser MCP download surface label", "from": [ { "file": 217 } ] }, { "id": "metadata/package/testing/corpus::injection-category-labels", "conf": 0.9, "crit": 3, "desc": "Multiple injection attack-category labels", "from": [ { "off": 640, "file": 30, "line": 14 }, { "off": 22316, "file": 36, "line": 536 }, { "off": 13348, "file": 38, "line": 294 }, { "off": 7222, "file": 47, "line": 123 }, { "off": 699, "file": 64, "line": 17 }, { "off": 1116, "file": 248, "line": 36 }, { "off": 1800, "file": 249, "line": 41 } ], "uses": [ 5, 240 ] }, { "id": "micro-behaviors/communications/http/token-auth::access-token-field-source", "conf": 0.92, "crit": 3, "desc": "Access token field in source", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/communications/http/request/client::user-agent-header", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 2, "desc": "User-Agent header", "from": [ { "file": 217 } ] }, { "id": "micro-behaviors/communications/http/client/httpx::httpx-async-client", "conf": 0.95, "crit": 3, "desc": "Creates an asynchronous HTTP client with httpx", "from": [ { "file": 29 } ] }, { "id": "objectives/evasion/security-bypass/waf::turnstile-name-reference", "conf": 0.9, "crit": 1, "desc": "References Cloudflare Turnstile", "from": [ { "file": 147 } ] }, { "id": "micro-behaviors/data/llm::system-prompt-tag-marker", "conf": 0.82, "crit": 1, "desc": "LLM system-prompt format tag", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/fs/path/application/config::claude-skills-directory", "conf": 0.93, "crit": 3, "desc": "Claude Code skills directory path", "from": [ { "file": 72 } ] }, { "id": "well-known/lib/format/pyyaml::pyyaml-package-name", "conf": 0.98, "crit": 2, "desc": "PyYAML package name" }, { "id": "micro-behaviors/crypto/hash/digest::python-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs Python SHA-256 operation", "from": [ { "file": 28 } ] }, { "id": "micro-behaviors/data/llm::source-generation-directive", "conf": 0.92, "crit": 3, "desc": "Prompt requests generated source", "from": [ { "off": 17330, "file": 47, "line": 272 }, { "file": 55 } ], "uses": [ 130, 201 ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Declares Python Core Metadata version", "from": [ { "file": 338 } ] }, { "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation", "atk": "T1059.001,T1059.003", "conf": 0.94, "crit": 3, "desc": "Windows shell command-mode invocation syntax", "from": [ { "file": 107 } ] }, { "id": "third_party/SigBase/Certutil/Decode/OR/Download", "conf": 0.9, "crit": 5, "desc": "Certutil Decode" }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "from": [ { "file": 75 } ] }, { "id": "micro-behaviors/communications/ip/parse::ipv4-cidr-slash-24-or-wider", "conf": 0.9, "crit": 3, "desc": "IPv4 CIDR prefix /24 or wider", "from": [ { "file": 232 } ] }, { "id": "metadata/file/format/media::c2pa-generative-ai-source", "conf": 0.95, "crit": 3, "desc": "Asset declares AI-generated provenance", "from": [ { "file": 71 } ] }, { "id": "micro-behaviors/data/runtime/keywords::pipe-to-bash", "conf": 0.88, "crit": 1, "desc": "Pipe to bash interpreter token", "from": [ { "file": 194 } ] }, { "id": "micro-behaviors/communications/socket/connect::socket-module-import", "atk": "T1071", "mbc": "C0001", "conf": 0.6, "crit": 3, "desc": "Imports Python's socket module", "from": [ { "file": 241 } ] }, { "id": "micro-behaviors/fs/path/location::home-hidden-dotpath", "conf": 0.85, "crit": 3, "desc": "Hidden dot-entry under the home directory", "from": [ { "file": 29 } ] }, { "id": "micro-behaviors/os/env/vars/credentials::python-env-keyword-key", "conf": 0.88, "crit": 3, "desc": "Python getenv name contains KEY", "from": [ { "file": 33 } ] }, { "id": "metadata/package/manifest/ecosystem::pkginfo-name-field", "conf": 0.9, "crit": 1, "desc": "Declares Python package name", "from": [ { "file": 338 } ] }, { "id": "third_party/SigBase/EXPL/Shitrix/Exploit/Code/Jan20", "conf": 0.9, "crit": 5, "desc": "Detects payloads used in Shitrix exploitation CVE-2019-19781" }, { "id": "micro-behaviors/communications/http/request/httpx::httpx-get", "conf": 0.85, "crit": 3, "desc": "httpx.get call", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/ip/endpoint::https-port-443-transport", "conf": 0.6, "crit": 1, "desc": "TLS service port number", "from": [ { "file": 221 } ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "from": [ { "file": 2 } ] }, { "id": "objectives/evasion/masquerade/traffic::browser-html-accept-header", "atk": "T1071.001", "mbc": "B0030", "conf": 0.8, "crit": 1, "desc": "Browser HTML Accept header literal", "from": [ { "file": 217 } ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 263 ] }, { "id": "micro-behaviors/communications/http/request/client::http-versions", "conf": 0.75, "crit": 1, "desc": "HTTP protocol version strings", "from": [ { "file": 38 } ] }, { "id": "well-known/tool/offensive/payload-corpus::payloadsallthethings-upstream", "conf": 0.99, "crit": 3, "desc": "Swisskyrepo PayloadsAllTheThings upstream URL", "from": [ { "file": 316 } ] }, { "id": "micro-behaviors/os/env/vars/access::python-os-getenv-call", "conf": 0.92, "crit": 3, "desc": "Python reads an environment variable", "from": [ { "file": 4 } ] } ] }, { "id": 2, "mol": "H(Cm)", "sha": "d7bb8063d70adf94a409e4ecf87ce264cce703777c872c3b1445d57831d394f8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/config_schema.py", "risk": 2, "size": 9770, "type": "python", "depth": 1 }, { "id": 3, "mol": "H₂(DbF)", "sha": "6d0f167dd3cbbfafe1447dac2221b2728afe45c069ac96eec804d3d37f812bab", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/engagement.py", "risk": 3, "size": 26724, "type": "python", "depth": 1 }, { "id": 4, "mol": "O(Co)H₂(Cm₂Os₂)", "sha": "923fba7b56ff5d23fe0ce7f9a5d3123ead6797d70e524fe6f8d59544828935a9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/graph.py", "risk": 4, "size": 22588, "type": "python", "depth": 1 }, { "id": 5, "mol": "H(Os)", "sha": "b30bcf0162e796ec6448657731bfc3b7678d46de053e48844241730fe283294f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/live_output.py", "risk": 2, "size": 4133, "type": "python", "depth": 1 }, { "id": 6, "mol": "H(Db)", "sha": "ac60192792f2c0385c4f849009900478bc29c6346bef35bacb8f827d67765e73", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/state.py", "risk": 2, "size": 50712, "type": "python", "depth": 1 }, { "id": 9, "mol": "H(Po)", "sha": "cd5489b2a8c316eae55187a8900bdfc3e5196068e933f9ff7119d5d8e3f81256", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/banner.py", "risk": 2, "size": 4593, "type": "python", "depth": 1 }, { "id": 10, "mol": "H(F)", "sha": "13565652a844fd289f9eaeac0cc48550c7778f9fb6c098379f27edd4ac591de7", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/bench_discovery.py", "risk": 1, "size": 3369, "type": "python", "depth": 1 }, { "ctx": [ { "b": "a%FjcwPz\u003caB97#hBrGOkLp${=MOi!gBAh87xjSi5vrcd8azbLjaARpdayFO#CvtJeu%\u003e9^wO#0\u003ezddE2aAh48yH}Js3jo:CwGV5dzF9=%eN@ZpByw)3wPw]jx\u003e7{\u0026AV=+\u003ew{503i:^2Hv\u003eIncx!BHIx!A+ix\u003e7{=vR6B!xKAniB7/Go", "ln": 0, "col": 1, "line": 1 }, { "b": "wPF#dzxJs{vR6B!xL?f#yJzdrwO#0\u003euVG.0B.(eve]2DCzEu\u0026{vriM1az\u003eLaaA7\u003c0u%)CPzEWu!x\u003eevCHlrWab6d\u003cmBAITGiV{4ce?wa?woz{3BzkVhuVNzLatbo0EpcC9B8JgfayX]1v}YZ/A+^4z3u*03wnbK}ayPd#aARpdaARsmwGUYeB0bpcB95KBB-5szz/ozly?X67aARKmwPRP%AV/7laA8deaz2CjA^n!!FrQy.xK#DiwmY*(A+O#]aARpdas.CvzdK\u0026gB-5VWaAIDzwmYN*", "ln": 460, "col": 10, "line": 10 }, { "b": "z*c7F3lQDvc$cOawO#PsdJ)-9K%1TXaz\u003eLcyAN[lBp5vGwOkBYC{3Zky?mVgBzb98aAITyA+e=7vix2/A+cw3u)oJ8b4a!3B98CpzF78hwPw]cwfrprzY\u0026OkA::67z/d0hvrb{4B98bjy-)+fvpQH5A:-\u003cbAa9=#zGGYuaMv{oauBaSzEU.nuVGZ^", "ln": 1211, "col": 64, "line": 22 }, { "b": "vqfR2ayMymx(dA7BzbkdzE[6maAzQxe^.}!A+PSbB0a[iwGUA6z/6h#asHS9BzU#8u)3%xu%)O/D2vb1u)3%xu%)[]e]\u003eJxy***+u%\u003eAaw]zYjBzbkdB75]%3uxY^B8L}svriLLw{503i:^2Hv\u003eIncx!A[lzF0P}uVQscA+c\u003eAvrMi\u0026iV@JTwGT}", "ln": 1435, "col": 47, "line": 27 }, { "b": "zEEx[aAy[2wPF#oxK@q{B9RUkaAI*Cv\u003eF9ja%Ev3w].*baywF/B-.+DwNw^!x(d*cA=-BjzF\u003cxmvruj4zGuc(x(d*cA=-Blz/fVdCYW+ovHu*^AbP=sazL$ozvg8{AbP=saA8rdx(d*cA=-BBD2\u003cs8A=k!qAa9\u003c4y?Wu3x(d*cA=-B2vrue\u00263uQrliTM#LarUxnAbP=sazbb3BzIp}CW\u003er7BrBd(AbP=smriA!AYLr=boQ@Cvp%B=iV@rUay/tkwPw{MFrRf]z/ddbzFstSay]4@A:-G\u0026aARJAzF{Ulz!0M%zF6q0arR!sv@uy8auZ\u0026xz/fbear@1JD2NsQazCFaz/Pz[vrlH7x8", "ln": 1640, "col": 39, "line": 31 }, { "b": "wozZ1aAIDdboR8wwGV8aA=2JdvqE6fwPzr}v@@?wz^)^0A=$(2x(4H9C}J]EC4ApnwO#0\u003euUaa=diJ5pwft#cwPIA9BAh87xjRz{az\u003eLcyJyRdvqWi9wP?T9ay]hcvp%Q(wIb96wD", "ln": 1995, "col": 67, "line": 47 }, { "b": "xL?f#yJzdrwO#0\u003euVG.0B.(eve]2DCzEu\u003c83jm)#arTM[B8L(rwN(]}A=k!qBzbxfazbt7wHzKwy\u0026r/(BzkVhaAIDzx(\u003e.zaAITkvR/P#A+e((A+5#$B8@Exw/#hewEoL5arU/FwPxetaA}:AyIvW0ay]hbwN/?2A^n=Qze13hz/P[wi+AILv(!1c", "ln": 3124, "col": 35, "line": 82 }, { "b": "B-O-QefGaAy\u0026%qwxjVfkb4L?pvruj4zEmDedgdguarUliB7ExtarR^HarR^HA+funA=90{z/fa[arR^Hx\u003ewGeByxolB0bvsBrCpnasH2UefEzFnLyVTk#pc4iTM#LarR^HarUYoBAIRwawM\u0026)wEoL5arUlkBAhT/ay]g@BrAZ?DM)JMvruTkb03\u0026/ByxolBa1w", "ln": 4005, "col": 38, "line": 102 }, { "b": "A^n003s)ZWayxe2vpS.=vrTaGat2=1wnbK}txs[befFFqv@#0q3lQDlar\u00260NqE%oEaARpdazbt7wGY#!K%1duDTZM7v}Yj-wi7\u0026Wb6d\u003cmBAITGefDcEB-H]jx(v(@B0r?%EpcCn3jm)#arTP]wN]\u003c8Bzbkdw[=6)aA8cuw[=pbBrCQDzAw$UwP?T9aAy[8B7GzBavdb!x(!ufzF787x(4u6CxdztwPF#5zE:7%arR!EwPS6nzGu}xxK@rcwO2y8avdbWz/P(vAc9jmx(4u6x(+zqwPhNdBy!#9Bz\u0026pyByX%6AV!!dwftF)y\u00261envQS+Z3lQDlaARJABzbkdB7F][aAIDzvix2/wftL]zE+tgwnccdv{%m5BrC4kx\u003e7{3Bn", "ln": 4263, "col": 15, "line": 110 }, { "b": "CxdztwNxE^CpmJzwN]v.dgdguarR^HarUYoBAIRwaAIa9wmYoUarR^HBAhT/3lQDlarR^Hay[]5vivYQyiarhe]kDmwofere]\u003eJiwm6B\u0026CYUuBzEWP}x(mMDb6w0teJs}6dgdguarUluv}xR3asH#Cz/dg1q+{dRwN/T?wKQSWz/NxKpG6Y5A=k$EayPslwQ4YC3lQDlarR^HaAhvnzGEpsb6NEozFs03iV@3yx(4u\u003eaARJAAa9^dwGVtse]y", "ln": 4696, "col": 10, "line": 123 }, { "b": "x(!x6z!?HnA=\u003e}x3lQDlay/k0vqXaGwnbK}txs[befFFqv@#00jS]913lQDlazbLjayY4}azCZoB8M8vwN)i2zGG]kwPGpY3lQDlarR^Haz2CjA^n=\u003cayx28A=2l3x)Kt$wO#QgC{)lwBAh8bB6A9/wl*R\u003earR^HarR^Hx\u003ewG0zGG]AazC)tzF%Rtph+2YiTM#LarR^HarR^HarUfgwNPEXvRGvUauZ\u0026UzGG]A3lQDlaARgtBrAZ?yiarhe[x9wAc0Bqy?m3)efFUAwmYU2jU!Ded\u003cc3vzxYAgarR!GzeZQXaAe@Sx([2}B9h8bx)q4Be]#eEw[=Gjd\u003cc2*BzU$vdgdguarU(xBz8!sze.aCAaJ]nb6LjZaz2C2z!9N1xfvCYBy)9:a$jTyB0b6Q3lQDlarR^Haz9lIA+PSbd0f3BBsvLtarR^HarR!se[O{xB7=%J3lQDlarR^Har@1vB9RUkayX[]z/PziA+fiavpJ\u003c\u003e\u0026^^moB7F]9zeS%cy?j-1z!0\u003cgA+PA7asGS#x)a5tvQS+ZwN({5vrufie^-ZzarR^HarUPze[PfIzEU8be[O*lwO#AmdjCPDarR!BB1RGAAbn@)wHIUqA4AbJdgcy?wmYu}y\u0026r-)c[cn\u003cj%jxIv@${@BAe]PB98CdiTM#LarR\u003cLb2R#Xwft#cwGV8nx\u003c\u003eT=az\u003eLaayFP7vR6B!xKtE:iV@G=vruTkEpcCnax8\u0026.wod", "ln": 5687, "col": 36, "line": 148 }, { "b": "uVoB}xECqLeJ$pNvrufz3lQDlar\u00260Nq!Y=Nv{%y2y\u0026r*0azbt7wGU(4CYU6IzY\u0026B}vR6B!xKt^\u003eB9hqvB1RiGz/e@\u003ce*qF-3lQDlaAeC^aAg+hxECqparR^HA+funA=91se=", "ln": 8843, "col": 10, "line": 232 }, { "b": "arUluv}xR3awU{8A=M8siTM#LarR^HarU@zwO+(:arR^HarR^HA+funA=8jbarR!GA^oXMarR^HarR^Hw[b.2y+xsoz!0Mhw[iCnw[b.2y+wySlRy=PssBO1arR^HarR!Lx\u003eq9\u003e3lQDlazbt9vqG+9iTM#LarR^HarU=DC@=oParR^HarR^HarR!sv@uy8e[O{rv@0G8wgO\u003cnv@uy8e\u003e/5doj7W]dgdguarR^HarUluv}xR3awU{8A=M8siTM#", "ln": 10081, "col": 3, "line": 262 }, { "b": "B7F]9EJS-JazU\u003ekCoyQwaz(mxBrC47aAz3BA=(mxA::66wPw]nxKL==arR^HxKM6}aARpdaAITky?j:GOrCR=Or\u003evix\u003eg=$x(\u003e%Iu%[4$vruTkjX/{kwNF)*v@bZ+A=SvBxK@r6vrcco3jm)#arTS%wGU/cvpXwLL5\u003ehR\u0026!ARqvrMi8A=(nvaA.Nj", "ln": 11264, "col": 30, "line": 292 }, { "b": "wN/U0wm6d\u003ev@0FwiTM#LarR^HarUYoB9hqvB09Q*y\u0026r-)c[bGCarR^HarR!qB-H]jx(v)giV}%Ev@${@BAe]Pw]8x]Bx{1LaBwIzarR^HarR^Hx\u003ewGeByxolB0bgr", "ln": 11786, "col": 12, "line": 302 }, { "b": "z/cXfx(4v4aMv{oaz1$\u003exDR2gaz2!av@#KjaA8deaAzQxe^-ZzarU=DC@=oParR^HarR!sz/M$tazCZoy\u0026r%cuVH76Bs}ixz^\u003easdLC*NB9hqvB1Y0}yiarha$kLWarR^HarR^HarR^HBAhT/3lQDlarR^HarR^HarR^Haz(iyjS[X@B97\u0026jc[c=\u0026Bye)bx(dz*arR^HarR^HarR^HarR^HA=ldAjS[GXz/dgzz^^f$c#Z!VwNPaRBy/Ysc$Npaz!5", "ln": 13446, "col": 32, "line": 340 }, { "b": "aARpdazbt7wGU\u0026ix(dA7B97\u0026dwoe(czxJLfAV=MIxK#69e^-ZzarU=DC@=oParR^HarR!sz/M$tazCZoy\u0026r/(y*Ri]B9hqvB1R9wz^\u003easCW+PnuN^WyB8L@ja$kLWarR^HarR^HarR^HBAhT/3lQDlarR^HarR^HarR^Haz(iyjS[X@B97\u0026jc[c=\u0026Bye)bx(dz*arR^HarR^HarR^HarR^Hy?W=#B09Q*A4VfxvpS.!wQ5qBwO#0@wnb{]jTb2\u003cw?t$^dk2WXy?X0cx(mH6c[bGCarR^HarR^HarR!rCW\u003er7BrBvTmriA!AYKKIarR^HarR^HarR^HarR!pz/fVhzGPH$arR^HarR^HarR^HAaK5%w[=6)iV}%Ev@${@BAe]Pw]8x]Bx{1L", "ln": 13969, "col": 28, "line": 353 } ], "depth": 1, "facts": { "imp": [ [ "", "Path(__file__).resolve" ], [ "", "Path" ], [ "", "isinstance" ], [ "", "isinstance" ], [ "", "value.get" ], [ "", "value.get" ], [ "", "isinstance" ], [ "", "round" ], [ "", "float" ], [ "", "path" ], [ "", "p.exists" ], [ "", "SEED.items" ], [ "", "write_raw" ], [ "", "json.loads" ], [ "", "p.read_text" ], [ "", "print" ], [ "", "SEED.items" ], [ "", "data.items" ], [ "", "normalize_entry" ], [ "", "path" ], [ "", "p.parent.mkdir" ], [ "", "sorted" ], [ "", "normalize_entry" ], [ "", "json.dumps" ], [ "", "p.with_suffix" ], [ "", "tmp.open" ], [ "", "f.write" ], [ "", "f.flush" ], [ "", "os.fsync" ], [ "", "f.fileno" ], [ "", "os.replace" ], [ "", "read_raw().items" ], [ "", "read_raw" ], [ "", "read_raw().items" ], [ "", "read_raw" ], [ "", "read_raw" ], [ "", "results.items" ], [ "", "isinstance" ], [ "", "durations.get" ], [ "", "round" ], [ "", "float" ], [ "", "write_raw" ], [ "", "results.get" ], [ "", "results.pop" ], [ "", "path" ], [ "", "p.with_name" ], [ "", "lock_path" ], [ "", "lock.parent.mkdir" ], [ "", "os.open" ], [ "", "fcntl.flock" ], [ "", "fcntl.flock" ], [ "", "os.close" ], [ "", "record_lock" ], [ "", "load" ], [ "", "results.pop" ], [ "", "save" ], [ "", "path" ], [ "", "isinstance" ], [ "", "float" ], [ "", "logs_root.glob" ], [ "", "p.stat" ], [ "", "json.loads" ], [ "", "p.read_text" ], [ "", "consider" ], [ "", "row.get" ], [ "", "row.get" ], [ "", "local_results.glob" ], [ "", "p.stat" ], [ "", "p.read_text(encoding=\"utf-8\").splitlines" ], [ "", "p.read_text" ], [ "", "line.strip" ], [ "", "json.loads" ], [ "", "row.get" ], [ "", "row.get" ], [ "", "isinstance" ], [ "", "float" ], [ "", "per_file.items" ], [ "", "consider" ], [ "", "best.items" ], [ "", "scan_log_durations" ], [ "", "record_lock" ], [ "", "read_raw" ], [ "", "entries.items" ], [ "", "round" ], [ "", "float" ], [ "", "write_raw" ], [ "", "API" ], [ "", "FAIL" ], [ "", "OK" ], [ "", "Path" ], [ "", "classify" ], [ "", "contextlib" ], [ "", "fcntl" ], [ "", "json" ], [ "", "os" ], [ "", "pathlib" ], [ "", "src.benchmark_verdict" ], [ "", "sys" ] ], "mbr": [ "Path().resolve", "Path().resolve().parents", "_SEED.items", "_read_raw().items", "bench_dir.parent", "best.items", "contextlib.contextmanager", "data.items", "durations.get", "entries.items", "entry.duration_s", "entry.status", "f.fileno", "f.flush", "f.write", "fcntl.LOCK_EX", "fcntl.LOCK_UN", "fcntl.flock", "json.JSONDecodeError", "json.dumps", "json.loads", "line.strip", "local_results.glob", "lock.parent", "lock.parent.mkdir", "logs_root.glob", "os.O_CREAT", "os.O_RDWR", "os.close", "os.fsync", "os.open", "os.replace", "p.exists", "p.name", "p.parent", "p.parent.mkdir", "p.read_text", "p.read_text().splitlines", "p.stat", "p.stat().st_mtime", "p.stem", "p.suffix", "p.with_name", "p.with_suffix", "path().parent", "per_file.items", "results.get", "results.items", "results.pop", "row.get", "sys.stderr", "tmp.open", "value.get" ], "tgt": [ "Path", "Path().resolve", "_SEED.items", "_consider", "_lock_path", "_normalize_entry", "_read_raw", "_read_raw().items", "_record_lock", "_scan_log_durations", "_write_raw", "best.items", "data.items", "durations.get", "entries.items", "f.fileno", "f.flush", "f.write", "fcntl.flock", "float", "isinstance", "json.dumps", "json.loads", "line.strip", "load", "local_results.glob", "lock.parent.mkdir", "logs_root.glob", "os.close", "os.fsync", "os.open", "os.replace", "p.exists", "p.parent.mkdir", "p.read_text", "p.read_text().splitlines", "p.stat", "p.with_name", "p.with_suffix", "path", "per_file.items", "print", "results.get", "results.items", "results.pop", "round", "row.get", "save", "sorted", "tmp.open", "value.get" ], "funcs": [ [ "path", 3070 ], [ "_normalize_entry", 3460 ], [ "_read_raw", 4268 ], [ "_write_raw", 5167 ], [ "load", 6179 ], [ "load_durations", 6504 ], [ "save", 7169 ], [ "cycle", 8343 ], [ "_lock_path", 8834 ], [ "_record_lock", 9005 ], [ "record", 10323 ], [ "_scan_log_durations", 12127 ], [ "_consider", 13161 ], [ "backfill_durations_from_logs", 14943 ] ], "metrics": { "ast": { "op.add": 4, "op.bor": 9, "op.div": 4, "op.lor": 3, "op.land": 4, "max_depth": 17, "call_count": 86, "node_count": 2592, "member_count": 53, "max_array_len": 12, "op_density.add": 0, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.land": 0, "max_concat_chain": 2, "member_depth_max": 3 }, "file": { "size": 16000, "entropy": 4.72 }, "text": { "lines": 405, "top_char": 101, "max_ws_run": 18, "digit_ratio": 0.01, "space_count": 3638, "char_entropy": 4.72, "unique_chars": 92, "top_char_null": 0, "string_density": 0.16, "top_char_ratio": 0.07, "avg_line_length": 38.51, "max_line_length": 85, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.15, "last_line_length": 17, "whitespace_ratio": 0.25, "identifier_density": 1.25, "line_length_stddev": 27.53, "normalized_string_count": 3.23, "repeated_char_sequences": 46, "suspicious_string_ratio": 0.35, "suspicious_comment_ratio": 0.13, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 14.2 }, "binds": { "count": 45 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 5.23 }, "source": { "function_count": 14 }, "imports": { "count": 12, "stdlib_count": 5, "stdlib_ratio": 0.42, "third_party_count": 7, "third_party_ratio": 0.58 }, "strings": { "sql": 9, "bytes": 8357, "count": 65, "shell": 14, "very_long": 2, "avg_length": 128.57, "max_length": 1668, "avg_entropy": 3.04, "entropy_stddev": 1.1 }, "comments": { "chars": 1171, "count": 23, "lines": 23, "base64": 1, "high_entropy": 2, "to_code_ratio": 0.06 }, "functions": { "count": 14, "nested": 1, "density": 3.46, "avg_params": 0.86, "code_ratio": 0.75, "max_params": 3, "length_stddev": 15.47, "avg_name_length": 10.71, "no_params_count": 8, "avg_length_lines": 21.79, "max_length_lines": 64, "min_length_lines": 4, "avg_nesting_depth": 0.07, "max_nesting_depth": 1, "high_entropy_names": 2, "avg_param_name_length": 6.92 }, "identifiers": { "count": 506, "unique": 123, "avg_length": 6.33, "max_length": 28, "min_length": 1, "avg_entropy": 2.22, "reuse_ratio": 0.24, "length_stddev": 3.86, "sequential_names": 4, "single_char_count": 4, "single_char_ratio": 0.03, "high_entropy_count": 3, "high_entropy_ratio": 0.02, "all_lowercase_ratio": 0.89, "all_uppercase_ratio": 0.07, "double_underscore_count": 2, "underscore_prefix_count": 12 } } }, "id": 11, "mol": "H₂(DbF₂)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/bench_results.py", "pid": 0, "risk": 4, "sha": "00af49fe2efe683f79f0ec38caedf9580a9569f8816c36acd9d2300c75975355", "size": 16000, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 41, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 589, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 1259, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 11312, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 37, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 5965, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 3172, 0 ] ] }, { "id": "metadata/file/string/file::tmp", "conf": 0.2, "crit": 1, "desc": "tmp keyword", "spans": [ [ 1483, 0 ] ] }, { "id": "micro-behaviors/data/format/json::json-result-field", "conf": 0.8, "crit": 1, "desc": "JSON result or response field key", "spans": [ [ 528, 0 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-glob-call", "conf": 0.84, "crit": 3, "desc": "Calls Python glob for file enumeration", "spans": [ [ 13510, 14 ], [ 14033, 18 ] ] }, { "id": "micro-behaviors/fs/lock/flock::python-fcntl-flock", "conf": 0.86, "crit": 3, "desc": "Uses fcntl.flock() for advisory file locking", "spans": [ [ 10145, 11 ] ] }, { "id": "micro-behaviors/fs/read/file::python-pathlib-read-text", "atk": "T1005", "mbc": "E1005", "conf": 0.8, "crit": 2, "desc": "Read text via pathlib", "spans": [ [ 14149, 0 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields--stderr", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names (stderr)", "spans": [ [ 4498, 0 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "spans": [ [ 4311, 0 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-loads-call", "conf": 0.9, "crit": 3, "desc": "Parses JSON data with Python", "spans": [ [ 4760, 10 ] ] }, { "id": "micro-behaviors/process/create/subprocess::python-subprocess-io-fields", "atk": "T1059.006", "conf": 0.84, "crit": 1, "desc": "Process output/status field names", "uses": [ 12 ], "spans": [ [ 4498, 0 ] ] } ], "type": "python" }, { "id": 12, "mol": "K(Li)H(F)", "sha": "b5e2975fe55a5d66deb62d5f85d9101f361b1b8e02e24c11544befb213c24c00", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/bench_tags.py", "risk": 3, "size": 5635, "type": "python", "depth": 1 }, { "id": 13, "mol": "H₃(Cm₅F₂Po)", "sha": "10d3bd9775615b6835a93e6603287db65f34a8bf07e8132c614f36f5dc88fd4b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/codex_usage.py", "risk": 3, "size": 6441, "type": "python", "depth": 1 }, { "id": 14, "mol": "H(Cm)", "sha": "3a8be071705e8228b0f7c2303f6c4f02c7e91988dddd6fe25d6cb0d11e0674a2", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/config_store.py", "risk": 2, "size": 6790, "type": "python", "depth": 1 }, { "id": 15, "mol": "H₃(Os₂Po₅U)", "sha": "9164a6866cc692e1a1fcd1296e9901d8b7395cdea5bfdce4a1f7e7642211c6d3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/docker_boot.py", "risk": 5, "size": 9139, "type": "python", "depth": 1 }, { "id": 16, "mol": "H₂(OsPo)", "sha": "55c5177e1f6fa87c20bec95e205dc046845e14305c3b7cfaceeafab23cf260e1", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/oneshot.py", "risk": 2, "size": 27617, "type": "python", "depth": 1 }, { "id": 17, "mol": "H₂(OsPo₂)", "sha": "9206e88d1f0d5debd9b7b995e721825a05e3900425ac0ce9b4918e56c2aa57da", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/operator_input.py", "risk": 3, "size": 13301, "type": "python", "depth": 1 }, { "id": 18, "mol": "H(Po₃)", "sha": "f7333b0d4b3498022b31b3d41afbc093dbc923e6231d4532ba6aa401afdc4fda", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/runner.py", "risk": 2, "size": 8711, "type": "python", "depth": 1 }, { "id": 19, "mol": "H₆(CmDbF₂OsPo₅U)", "sha": "1ea67ebc8a6292b57ad60384a9e21e726471bff8e3595b787937bec0e719b4d5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/cli/tui.py", "risk": 8, "size": 63209, "type": "python", "depth": 1 }, { "id": 23, "mol": "O(Co)", "sha": "b9e4c547790959b52e9482daf78aa56a3aea8d30a72940f7b097eb0cef39b207", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/edges/routing.py", "risk": 2, "size": 18700, "type": "python", "depth": 1 }, { "id": 26, "mol": "H₂(Cm₂Db)", "sha": "b94c250dae8eb5f4c77427e919793ab579b60a1a37b43042bb11ba9cf3ef4a14", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/experimental/stealth/monitor.py", "risk": 2, "size": 2858, "type": "python", "depth": 1 }, { "id": 28, "mol": "H₄(CmCrDbPo)", "sha": "bfec18cbc3b78a1555601083ecf42c142dccf548bfb6f25f45ddd4c20d2f10d8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/callbacks.py", "risk": 4, "size": 44802, "type": "python", "depth": 1 }, { "id": 29, "mol": "H₆(Cm₁₄CrDb₄F₄OsPo)", "sha": "26a95740fd5a0a5217e60b9a085c55d468601f52e8cdec1dfa88172c40707a33", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/codex.py", "risk": 9, "size": 76145, "type": "python", "depth": 1 }, { "id": 30, "mol": "H(Db₃)Md(Pa)", "sha": "f9d69434efebb0752e38952bac48d5c8f8c7122c04cdb6b05d71a6f02c35b7bf", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/consolidate.py", "risk": 4, "size": 26466, "type": "python", "depth": 1 }, { "id": 31, "mol": "H(Os)Md(Pa)", "sha": "c3f75cbb0ac144ca9d47b00b0110ec6dc69176ad85e13d4cdfdd2487bf0ecee9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/digest.py", "risk": 2, "size": 24598, "type": "python", "depth": 1 }, { "id": 32, "mol": "H₂(OsTi)", "sha": "f285af10bdfde9db91ec4f0b59744ed5480b8d14e3cce82238d99612578a8e17", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/hibernation.py", "risk": 3, "size": 6324, "type": "python", "depth": 1 }, { "id": 33, "mol": "O(Ca)H₃(Cm₂F₃Os₂)", "sha": "3105127ddc0f6818785274c986f1e6b093a16bfd1e70cfcf86765ce15813de74", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/llm/provider.py", "risk": 4, "size": 13274, "type": "python", "depth": 1 }, { "id": 36, "mol": "K(Te)Md(Pa)", "sha": "65244be735eb4c62017301976c0b83cfb047059e08ac76469dbd91cc2224facb", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/crawl_policy.py", "risk": 3, "size": 28574, "type": "python", "depth": 1 }, { "id": 38, "mol": "K(Te₂)O(Co)H₄(Cm₂Db₂FOs)Md(Pa)", "sha": "d9bb883474d2f693426d800d2e700ec7a96e059ea3c72c7a27655ce2644ce5f8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/planner.py", "risk": 9, "size": 188687, "type": "python", "depth": 1 }, { "id": 40, "mol": "H(Db)", "sha": "dc92d9d53c9435254d6d6abe10b8f71eb0cc8672844c5fbc957b9abde5efab32", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/report.py", "risk": 2, "size": 5729, "type": "python", "depth": 1 }, { "id": 41, "mol": "H₂(Cm₂Db₃)", "sha": "5c24ab4599dc6e9d27b421de795fdfb969e52e5af2811503a5ded3c7567dbad0", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/summarizer.py", "risk": 5, "size": 48318, "type": "python", "depth": 1 }, { "id": 42, "mol": "K(Te)H₂(CmOs)", "sha": "3d9373690f8eb9541a019590fe6241fe5708a017c7235c8fa0719b65d6a05feb", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/web_search.py", "risk": 3, "size": 13553, "type": "python", "depth": 1 }, { "id": 45, "mol": "H₃(CmDb₄F)Md(Pa)", "sha": "27cc29e8fa48382c16b0168d8639c33b81f34def5b5f4591dd4b9c25b8286ec9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/hypotheses.py", "risk": 7, "size": 32327, "type": "python", "depth": 1 }, { "id": 46, "mol": "H(Os)", "sha": "2bc38ca6746b144df921348c895df0a5c63c0c11f86193addc2eb132766f82f8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/prompt_builder.py", "risk": 2, "size": 16778, "type": "python", "depth": 1 }, { "id": 47, "mol": "H₂(Db₂F)Md(Pa)", "sha": "22b5ce27279ecefd8b7a4a5101c7aded2d08d7ac7569659c3e12a08f58bb32d3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/system_prompt.py", "risk": 4, "size": 36738, "type": "python", "depth": 1 }, { "id": 49, "mol": "H(Db)", "sha": "9074ae0edd956a9b020da58a9bd3889a6191ed101ea9f12025ef9db65066005c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/worker/findings.py", "risk": 2, "size": 4037, "type": "python", "depth": 1 }, { "id": 50, "mol": "H(Db)", "sha": "f9147412979d0ed1b9d11111338d16616e07c09b58b5593ae0403a2b691ac0cd", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/worker/salvage.py", "risk": 2, "size": 3612, "type": "python", "depth": 1 }, { "id": 51, "mol": "K(Te)H(Os)", "sha": "c624bc9bfda6f82f3839aac0486591feba112d07d962c1d0fe2cb56c709521ad", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/worker/seed_context.py", "risk": 2, "size": 16483, "type": "python", "depth": 1 }, { "id": 52, "mol": "H(Cm)", "sha": "929f8f76acc4fceca42944c0dd412922efa521155907c692aced932d0a534341", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/worker/skill_runner.py", "risk": 2, "size": 59187, "type": "python", "depth": 1 }, { "id": 53, "mol": "H(Db₂)", "sha": "43af7b229208ed18a3b68c7a9711c346b72a05db6d173587bbb260acf21b07eb", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/nodes/base/worker/tool_attempts.py", "risk": 3, "size": 11704, "type": "python", "depth": 1 }, { "id": 55, "mol": "H(Db)", "sha": "ef38390a22c5772d947db345a1e6aa379094e5b1d290696ca7c84ba661ff8619", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/observability/__init__.py", "risk": 2, "size": 3240, "type": "python", "depth": 1 }, { "id": 56, "mol": "H(Db)", "sha": "27ffe0c0a664d584fe62db6e916a6b38ff75f16a757b93816bf3390389dfacfe", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/observability/decision_parser.py", "risk": 2, "size": 3918, "type": "python", "depth": 1 }, { "id": 57, "mol": "H₅(CmDb₂OsPoU)", "sha": "a8690c057ae727d0ed385d385ac156b7246a27730f4e4b3ae5f5cc0c6d1501dd", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/observability/live.py", "risk": 6, "size": 108909, "type": "python", "depth": 1 }, { "id": 59, "mol": "H(Os)", "sha": "28d3f0b9e725f0b8ddc3e2cda16c8519c4f049aee008f3a0e2a49fa109dc842a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/observability/writers.py", "risk": 2, "size": 24845, "type": "python", "depth": 1 }, { "id": 61, "mol": "H(Db)", "sha": "56a2f63986313c908f921f123eb258a3d586e924c90a8f388242d57822c0192c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/refusals/detect.py", "risk": 2, "size": 3331, "type": "python", "depth": 1 }, { "id": 63, "mol": "H(Cm)", "sha": "96a6a8fde15d9e2ff05f4604f2e9b34728f23cd85157bdedd07dad9ffcabceca", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/refusals/retry.py", "risk": 2, "size": 20096, "type": "python", "depth": 1 }, { "id": 64, "mol": "H(Db₂)Md(Pa)", "sha": "b08aa1604392293602c098da2d67918dfb36a96c346507f9f0d7e9920b845a36", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/refusals/salvage.py", "risk": 3, "size": 14713, "type": "python", "depth": 1 }, { "id": 65, "mol": "H(Db)", "sha": "10484872b3cc4400a2c67b70bcfc564235aca4eba0c3bdfdd77d68b7b81cae67", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/refusals/vocabulary.py", "risk": 2, "size": 7382, "type": "python", "depth": 1 }, { "id": 67, "mol": "H(Db)", "sha": "4d79600ea51005037a9c301fa37fe5a1ebee7b1b9eea9b172d72e145fc761b46", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/reporting/content.py", "risk": 2, "size": 21477, "type": "python", "depth": 1 }, { "id": 70, "mol": "H(Os)", "sha": "5fdc68d3017b320082e71c5d0515451da0634c783bb7fad8053db06013374db6", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/reporting/pdf_report.py", "risk": 2, "size": 34875, "type": "python", "depth": 1 }, { "ctx": [ { "b": "Ibl@q4gj0X0000dnK#lE000h9000c.2M:#a03^5yY-n4vr+2M8so5tfr+=+]vGlxd9+]?mwmExlve{(t5p:-XSSk2FArxYaAa5.D0avL", "ln": 0, "col": 1, "line": 1 }, { "b": "xk8D@y/tm{A:@VWD2NttmRD)=A5]T9v%fFsAcbOxz/PFzzE[3kv@C)?B1.6rxk8D@y\u0026:JqA:@W5D2NsFBAg/7zE)uAy?EWbx([39x\u003e6\u003eGwnbFDw)]g\u003ex(v)bv\u003e@1ie[n*qC4CYowN]s}xK#7%BttK9hz3QweIG7ZfFCKwfGH)wtb2Rqv@#B6zG)1dgh{UOCvtP8A=2l9yH}3eB-7VbB-7-2Cw7M9Z\u0026Rs=gbZZrh.uZwr4{0!fFCKwfJ[CR3:%!)zdiFB07*{FzdEb", "ln": 2904, "col": 185, "line": 6 } ], "depth": 1, "facts": { "metrics": { "png": { "a_entropy": 0, "chunk_count": 24, "trailing_bytes": 0, "idat_chunk_count": 21, "text_chunk_bytes": 0, "chunks_after_iend": 0, "compression_ratio": 0.29, "unknown_chunk_count": 1 }, "file": { "size": 1365906, "entropy": 7.99 }, "image": { "width": 1454, "height": 1082, "channels": 3, "b_entropy": 4.18, "g_entropy": 4.22, "r_entropy": 4.62, "edge_density": 0.02, "pixel_entropy": 4.35, "histogram_flatness": 0.54 }, "binary": { "peak_region_bytes": 1344402, "peak_region_entropy": 7.84 } } }, "id": 71, "mol": "Md", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/reporting/assets/swarm-logo.png", "pid": 0, "risk": 1, "sha": "0bf03b6bb2a840c4e5e356afc8045a953fc439b80c8440377d43cda731649e5e", "size": 1365906, "traits": [ { "id": "metadata/file/format/media::c2pa-generative-ai-source", "conf": 0.95, "crit": 3, "desc": "Asset declares AI-generated provenance", "spans": [ [ 2968, 23 ] ] } ], "type": "png" }, { "id": 72, "mol": "H(F)", "sha": "3e8ba1ca5bdc1fdd614e892b30da185762107103ffed766139f750240e2a30b7", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/README.md", "risk": 2, "size": 3545, "type": "markdown", "depth": 1 }, { "id": 74, "mol": "H(Os)", "sha": "44b11713d3f215fff60ad41a84d42a2a80f8b46422d84bea5f310b350cf77b43", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/usage.py", "risk": 2, "size": 6377, "type": "python", "depth": 1 }, { "ctx": [ { "b": "eIeKYzEEx[iV}\u003cBePUGkB-IhrC)X7[B7ol8Acb/jzAn[uB7DFrxK#67By/Jnx(mMaoIwejvQS+ZwN(]}wNPX6A+fqmx(n0awmV)cwNV=\u003cAbYScv{%E[z/fRs\u0026^^mownc6}v@@\u00264zE:(7zE^E4wN/*8Ab](lAc9jpzFA-)BzkVhefFXox(4m0wNPv}efG1VB97#gePt-Gze:Oty?m3\u003cvp%d5aARKuy+od9y?$kcx\u003e?6^yIvW0efE?Rm\u003eFj?A=uexaAhmkB8L@gzF7HywO\u003e)/wmPy(xdXgzvpJ\u003c\u003evruQ1v@3cpaA8yAAclmOxKL^?y?W^1aA?)zzE)\u0026%vRGT)BzkrcasInwzE^s0wN({2vrcb", "ln": 0, "col": 1, "line": 1 }, { "b": "dj=P.B-qqoC}AJtvqfQ4A+PPgB08(Fz!9A}aAz4ax(!xpx\u003equpazbt9wPS6jwGUG3A=t@qvjr-IvqYP#pGG?Xp-@C9o^0zNA3c\u003e?ay/tkwPzi(wIb8)z*2YjB0b18By!%7x(v(iAb](awPGyBygg*)vSD3*yANO8D2dzcwftY5vSC)$C}p7LzE^E4wN/*lx(mV%v@#B6zxK4mA=l8kxDRCswPxwjz/fVqz!%l3wftA3v%8T1zGG}JayPd#ay/7[x(mG)", "ln": 361, "col": 340, "line": 3 }, { "b": "aARTjwncd1z/f01aA?)zzxJC9vrlH3B1N!KeIdqps-nB9vrb{4vqWhNnIr+ho^1H*v%8*aBA]0IAaJJ[vqGU0Bs[Xsz/{7ypFKO^azbL4B-OWtB0b7ezE^E0xcpS2wc#))AboDbBn", "ln": 581, "col": 560, "line": 3 }, { "b": "xcqzfvqx:(B8$]lazCZooIwejvQS+ZwN(]}wNPX6A+fqmwO\u003e)/wmPmZazCZoBzbkdByxi5wPP5swNV0PAbYScv{%E[z/dfm3rgXIayYnizE^f@C{3NcBA.qczxHAyzGx]uBZ]Jcz/d3EvqYP#dR8$fvjAylB0bNrwGUF]zGG]cy-)}kvqx:(B8@D", "ln": 692, "col": 10, "line": 7 }, { "b": "3nBdQdK[wtA+n-\u0026wGU?#AbYJexdtw(aw39PzGGP8C{3WwwPA5sv}Yp*zE)SbBzb98azbg@woe(nz!\u0026{4B0bNyaARpd3lQDlzeS@@y-}./LPTEHvrrS3z*i/Qw[=6)aA.Ttz^^fcay]z2B.$YcBrCTEzeAZ4x)KuhefE?Rm\u003c8qWA=uexefF[FB.tAa3lQDlx(m)jBAn#QBz(8laA8yAAclnzefG1VB97#gaAhvtze:OtBy/rdy*?A%aAg+fvqPN$wPz\u0026A3nKjRdK[zrB-RTRvScybwmoI7ay]hcv@DK4A^ob:iV{?4By/Gfx(mF", "ln": 1163, "col": 14, "line": 17 }, { "b": "w/#hewGU\u0026dwmYN1v{%l$v{%g\u0026aARKuy\u0026.cIw]zZ1wGV8kz!{LavqG+33lQDlCwhejayPwlvpK7:AXg^mz/YGcayPq6B.$YcBAnNkzE:(1xK$W?aA}HgBzblaay]zmzGx]uwNPA#B7]JcA%:3jaAH$ex([6nwGV8dwO\u003c4bh7*13dO\u003eheAclmOxKL^?", "ln": 1727, "col": 28, "line": 27 }, { "b": "3uZA3AV/jgB8$=5wGUA0wft]7BAIRwayMyfz!9A}aAz4mAbPSnwIb90z/ozlw]zYju[U@cx!J$fvrt)d3sCJgf!W3Pze:r5BzkVhB6{KwB98ClvqPZ@xcpbKmiDeVwn(E3zGG}JayPd#av*DXAa\u00269xayG5eByxo9z/b]6wO#3MwPI{3xjUE6avx/", "ln": 2380, "col": 70, "line": 41 }, { "b": "BrCTmA+e*1B7/GlB1wCLAV!gDmJ=[*x()]rz/dclCw7YjwGV8aCYU6qD2NhkB0bvex)a5gBy/Ysazbt7By/GlayPd#aAIWCw)]gXazC.mx\u003eg=$BzbkdzeS@@yZKV\u003czGGDmBs)", "ln": 3542, "col": 40, "line": 64 }, { "b": "v@0i3zGG!tBzbj)arUSzz/6DnayPslz^)^0A=$(kx(v(w3jn15axAS3zE)\u0026%vRGT)BA]0sy*?yawPFg=bo[AQl${WMv@@\u0026jA=k/lBrCpnygQ)%x(v\u003e@ra]?=B-RbmcVZzEwPI{3xjSi1BAq2fw/$P4zGGr3zGu{Ax\u003eIs4A+cwjA+fAdz/{azx(n0lA=\u003e(lx(v)gayPd#aMv{Ga{@meayMyfz/PziB9g@ly?j-cC4CYmx\u003eg^caw^8%vR3Wax([2hv@bN{B7]bbvqYP#zeS@@A=91yvrc6\u003czGG}X3uG{0xkzchB7/GlaA8BmA=L(8wPGyBA=k=9ay]4[y*?u)BzkVhB1wCED2NXzxK#p1v{%f@w].r%x(mMm3t19+z!9N1xd[gjw{5f8vruj4zy=]EB.(eleO[\u003ckxlvS}wGV5rx()\u0026#wPGyBvpTK)A=UVfx\u003c\u003e*2B9h8bx)sige^.}gbo[s5zE^E4wN/*8Ab](lAc9jpzFA-)BzkVh3rgXIaz\u003eL6x\u003e7\u003c}B-OWt", "ln": 4158, "col": 61, "line": 76 }, { "b": "Bz#wAe*abbwGVbpwPw]cB0bNrwGVegv@#B4efF?GBrCWswGUA6BywV{wPxygra]#!azC)tBzbkdxLz9)wPI@Bx(d/$v@@\u00266y*?yaayX[(vrDT5azC{uvTh{3B8$]layPekazC.jB-X:rx(4)5ATDk]Abol1wft#jaARpday/7[BrC4hCRfsgbo[AQ", "ln": 4716, "col": 23, "line": 90 }, { "b": "wO=p7wPw]jz!%b$C}HjowPz\u003cgzEA(XBAy@3yJyQDl{TN1B98XzwHPeMC4\u003e#sBZY92Dsp]fz/cWCb6!9HayPq4azCZovixS1zE^i{CP[N/3uy63wI4\u003eqvr\u003cyDxl4z", "ln": 4935, "col": 46, "line": 95 }, { "b": "Cw7M9az\u003eXbz/QaCx(+zrxKL{)wg/03A=kz#B2\u003eA/Ab]VgBrC\u003cEB-FQszFsibvqE62zGx]uBZ]Jcz/fR6C4CY6vruj2a$K\u0026XCw7AbaA}yqwGV8dwGUP0A=VsBCw?IjB0b:DBS+:lCoz0Cwmo:cefF$AAaJE1eP+U", "ln": 5367, "col": 1, "line": 104 }, { "b": "v}YB:aAIamC4CXCB7]e@aMwcsax8ipmL2VNo*?]5vpJ!UB8@(Px(n37A=br43lQEjwPz%dv}u=\u003evS=:6e^:fMl3mo/ePLAuwmY^)wftP6vp%d)atj\u003cKw].r%wPF#rxM0", "ln": 6878, "col": 21, "line": 134 }, { "b": "v@#B6zxKjyBS+g5zxJB$y?$ZDmSiq\u0026wNP7Zed9Hxxk8K2az$R8wH[%yB-ICtB7D)BAa9=}zdN*2A=S=OvqYP#vqWi0CWUDdy?j-0vqG:ja%or}BywS{x(^%0B0bNr", "ln": 9475, "col": 45, "line": 181 }, { "b": "B98CBv@#B6zGvAMmSJA:az#awaA8cuD2E*Fvrb{4l{TN0ayPdgk$Jhyx([2hzF{UrwPI%lx\u003e8m0z/fRGavy6+w[=p5ayYQsA+fiaD1?eear\u003citp9r$PBzk]fa$^mgeG=Jzx(XrrvqGU7vruj4zyNW\u0026u%dz\u003cayPo", "ln": 10231, "col": 45, "line": 196 }, { "b": "wGSxBv{%g\u0026ayGn4zE^9=zddc{u)6VcBz8!az!abRjAC^?By/q@Ab](lAcan/efDcGwPRA}3lQDlxMOuniXJd8vrlJzbQ^ehBrAkFByM$yvrlHlwgnYNar\u003e(HzeAZ4x)KtkBzbxfay]z2B.$YcBrA\u003eAl\u003c+4Vaz2!fx(4)ivru66B-Rbmaw+T3aARJAvruQ1v/", "ln": 12278, "col": 12, "line": 223 }, { "b": "A+eW2wGUM3Aa\u0026W3x(+*FvpS)QarR!HA+w%3v%GQFA+fi3vrrSlxK@q%x(W={Bzk]fefFLBvqPM#x(\u003eFaB0a[lBzbPkx)Ku3efG1Tx()\u0026#aARpd3lQDlw]zZbvrrRun(FIXfiHOnoFoHxoERIn", "ln": 12494, "col": 53, "line": 226 }, { "b": "Aaa3dz^^f0wQ5fgz!TrmaMv{o3lQE4wObH\u003eB7Gznzfo]waz\u003eLev}W0bxK@q@z/fSrA=\u003e(lx(v(uaz#atayPtjB.#8tx(v)gayO.$B-X:uBs)[Lax9x2A3e\u003ebayMyi", "ln": 17722, "col": 53, "line": 325 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 18106, "entropy": 4.86 }, "text": { "lines": 331, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 2527, "char_entropy": 4.86, "unique_chars": 93, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "top_char_ratio": 0.09, "ascii_art_lines": 1, "avg_line_length": 53.7, "max_line_length": 585, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.14, "last_line_length": 19, "whitespace_ratio": 0.16, "line_length_stddev": 42.51 }, "binary": { "peak_region_bytes": 17408, "peak_region_entropy": 5.08 } } }, "id": 75, "mol": "K₂(AmTe)O₃(ErS₂Xe)Md(Pa₂)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ai-security/SKILL.md", "pid": 0, "risk": 242, "sha": "7ae7a73a11c7dac527a5be3a9ef3e03df5996a5ddf3cd96f80dbf7895ecaa404", "size": 18106, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 740, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 107, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 1211, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 2428, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 1775, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 4764, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 22 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/documentation/agent-safety::quoted-ignore-prior-example", "conf": 0.96, "crit": 3, "desc": "Quotes an ignore-prior-instructions example", "spans": [ [ 4285, 29 ] ] }, { "id": "micro-behaviors/data/llm::system-prompt-tag-marker", "conf": 0.82, "crit": 1, "desc": "LLM system-prompt format tag", "spans": [ [ 12310, 0 ] ] }, { "id": "micro-behaviors/data/llm::system-role-marker", "conf": 0.72, "crit": 1, "desc": "LLM system-role value", "spans": [ [ 1337, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::skill-tool-classic-prompt-injection", "atk": "T1195.002", "conf": 0.94, "crit": 3, "desc": "Skill tool emits prompt-injection phrases", "spans": [ [ 4286, 28 ] ] }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "spans": [ [ 0, 8 ] ] }, { "id": "well-known/tool/detection/llm-scanner::owasp-llm-top-10-reference", "conf": 0.93, "crit": 3, "desc": "OWASP LLM Top 10 reference", "spans": [ [ 425, 16 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "uses": [ 7, 8 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 6 ], "spans": [ [ 0, 22 ] ] }, { "id": "objectives/evasion/security-bypass/llm/override::agent-skill-tool-prior-instruction-bypass", "atk": "T1562.001", "conf": 0.98, "crit": 5, "desc": "Agent skill tool attempts to override prior instructions", "uses": [ 12, 16 ], "spans": [ [ 0, 22 ], [ 4286, 28 ] ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "uses": [ 15 ], "spans": [ [ 0, 31 ], [ 4, 30 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "uses": [ 15 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/app/agent-skill-scanner::skill-prompt-injection-manifest-case", "atk": "T1195.002", "conf": 0.99, "crit": 5, "desc": "Agent skill manifest carries prompt injection", "uses": [ 12, 15 ], "spans": [ [ 0, 31 ], [ 4, 30 ], [ 4286, 28 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-tool-prompt-injection", "atk": "T1195.002", "conf": 0.96, "crit": 5, "desc": "Agent skill tool carries prompt injection", "uses": [ 12, 16 ], "spans": [ [ 0, 22 ], [ 4286, 28 ] ] }, { "id": "well-known/tool/detection/llm-scanner::llm-scanner-context", "conf": 0.96, "crit": 3, "desc": "File is part of an LLM security scanner / firewall", "uses": [ 14 ], "spans": [ [ 425, 16 ] ] } ], "type": "markdown" }, { "id": 76, "mol": "K(Am)O₂(CaXe)Md(Pa)", "sha": "2ff32e64d695638029e8222e593258321c516b7757e18f96d30d251219484847", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/auth-testing/SKILL.md", "risk": 4, "size": 20359, "type": "markdown", "depth": 1 }, { "id": 77, "mol": "Md(Pa)", "sha": "dca63f83fb88626cebb82ae97c941db307a79a015ce1050af66eee3ed257085c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/auth-testing/references/jwt-key-selection-abuse.md", "risk": 2, "size": 4273, "type": "markdown", "depth": 1 }, { "id": 78, "mol": "H(Cm)Md(Pa)", "sha": "4dedc91b52880197ae789565c8c729859cc048a21676f30cc6d4d2e9107e6a21", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/auth-testing/references/jwt-signature-attacks.md", "risk": 3, "size": 5116, "type": "markdown", "depth": 1 }, { "id": 79, "mol": "O(Ca)H(Cm)Md(Pa)", "sha": "906a35c5d9d3ae8195e96e6965640992dc5c537c7702c65b7d5aa021912f5273", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/auth-testing/references/oauth-redirect-uri-bypasses.md", "risk": 3, "size": 4670, "type": "markdown", "depth": 1 }, { "id": 80, "mol": "H(Po)Md(Pa)", "sha": "8a709bef868e2e94b0bcaa05c978ae72f151efa84a40cb85293e8be3390f5a7e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/auth-testing/references/saml-assertion-attacks.md", "risk": 3, "size": 6927, "type": "markdown", "depth": 1 }, { "id": 81, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "9c783a136db168ed9d2107e510214b7b9c83370e39e26c3ed0274932aa28c63b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/basic-exploitation/SKILL.md", "risk": 3, "size": 6829, "type": "markdown", "depth": 1 }, { "id": 82, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "09a18e1a2bbe40b5b76a732529a3cf78a92774c22add6890aadfe727008f7b79", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/bfla/SKILL.md", "risk": 3, "size": 12926, "type": "markdown", "depth": 1 }, { "id": 83, "mol": "Md(Pa)", "sha": "45c2a54e0e53262e4b655c295cd6b1dc16cd9a402f7e1cd6440240ea37cc071c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/bfla/references/actuator-endpoints.txt", "risk": 1, "size": 704, "type": "text", "depth": 1 }, { "id": 84, "mol": "H(Cm)Md(Pa)", "sha": "69621e4fe25d159b666e19c1f119f993b0b154bcb14df8aeab67d16ea199cc9b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/bfla/references/management-interfaces.md", "risk": 2, "size": 5645, "type": "markdown", "depth": 1 }, { "id": 85, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "57d92d776f78289d60af295fc6821d0ce1096310b3ecaa46cc0830d715fad0c2", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/bug-identification/SKILL.md", "risk": 3, "size": 19578, "type": "markdown", "depth": 1 }, { "id": 86, "mol": "Md(Pa)", "sha": "c27802074be268da7062a5c9c704fbe134a8cab7e4fc320a65032c24eac724d2", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/bug-identification/references/signal-to-class.md", "risk": 2, "size": 10055, "type": "markdown", "depth": 1 }, { "id": 87, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "f27b7678b0b9240a98da3764fd1faea1dde282e20fb5bb8c993fee3642dc2824", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/business-logic/SKILL.md", "risk": 3, "size": 15543, "type": "markdown", "depth": 1 }, { "id": 88, "mol": "H(Cm)Md(Pa)", "sha": "504f3ef796255db3d27536e99ed52536cca18c78ce0914be0cc120b918d2fb41", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/business-logic/references/resource-exhaustion.md", "risk": 3, "size": 5075, "type": "markdown", "depth": 1 }, { "id": 89, "mol": "K(Am)O₂(CXe)Md(Pa)", "sha": "67e49b5f6736cbf2d0bf33ec8bf90aa5a2c0ab93a1229239df1ce80a984d8e50", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/chain-ssrf-to-rce/SKILL.md", "risk": 4, "size": 7535, "type": "markdown", "depth": 1 }, { "id": 90, "mol": "O(Ca)H(Cm)Md(Pa)", "sha": "ded7781dda2040602ea833c268129c27f28c0e1686aedc1ff5e42474278117f5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/chain-ssrf-to-rce/references/cloud-metadata-ssrf.md", "risk": 4, "size": 4415, "type": "markdown", "depth": 1 }, { "id": 91, "mol": "H(Po)Md(Pa)", "sha": "ecdc43a05183ebfbb9fd66c20f8590669b15f3f50dd123cbf91a72ecfe0b6aad", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/chain-ssrf-to-rce/references/deserialization-rce.md", "risk": 2, "size": 4843, "type": "markdown", "depth": 1 }, { "id": 92, "mol": "Md(Pa)", "sha": "fa5a511c83d651c938dbeff73722afaa4c8f390d744bce207fb538644147895c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/chain-ssrf-to-rce/references/ssrf-filter-bypass.md", "risk": 2, "size": 3706, "type": "markdown", "depth": 1 }, { "id": 93, "mol": "O(C)Md(Pa)", "sha": "07fc354a979ecb31cf6ecf8ce3c49f69e6961efe9e1b6050530ad5d6128d6e56", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/chain-ssrf-to-rce/references/ssrf-internal-service-rce.md", "risk": 3, "size": 5388, "type": "markdown", "depth": 1 }, { "id": 94, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "f0da9f19aefbc7454537d84f345b4ee6ab0582662c84407e077ba1cf061bfe18", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/cors/SKILL.md", "risk": 4, "size": 11617, "type": "markdown", "depth": 1 }, { "id": 95, "mol": "H(Cm₂)Md(Pa)", "sha": "f557e00c85b3e4ba64007537cc38f57fed93cc6093dd854299441a1e72b0ca98", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/cors/references/exploitation-and-bypasses.md", "risk": 4, "size": 7537, "type": "markdown", "depth": 1 }, { "id": 96, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "7397b41e839df262ae61fe532a7fe0038cb2654e834a5af4aa880a2c9aac1441", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crash-analysis/SKILL.md", "risk": 3, "size": 14554, "type": "markdown", "depth": 1 }, { "id": 97, "mol": "K(Am)O(Xe)H(Cm₂)Md(Pa)", "sha": "0c89f6a5a085180c7c3e758df3fbaff97242a04afcaa2e625f985cf0004b405c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crlf/SKILL.md", "risk": 4, "size": 11902, "type": "markdown", "depth": 1 }, { "id": 98, "mol": "H(Cm₂)Md(Pa)", "sha": "e0c45ac2650ba2c38e0b185207ea44fb8f775284a995c63d29601bdd6981deaf", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crlf/references/payloads-and-bypasses.md", "risk": 3, "size": 5992, "type": "markdown", "depth": 1 }, { "id": 99, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "e67418ee5948c565f209d8db6d88a0024d872b37753771e3e5bdf51a82966f7e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crypto/SKILL.md", "risk": 3, "size": 7088, "type": "markdown", "depth": 1 }, { "id": 100, "mol": "Md(Pa)", "sha": "3caf06111135412e6c8b00b4e6c1b7ba1e2b324293b00e32146dbc207c26d9ef", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crypto/references/php-type-juggling.md", "risk": 2, "size": 5779, "type": "markdown", "depth": 1 }, { "id": 101, "mol": "Md(Pa)", "sha": "61176c3ff91e5ead378c2023c265d76b4b81250c7c7db59ad56076df52ddaa98", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/crypto/references/predictable-tokens.md", "risk": 2, "size": 7015, "type": "markdown", "depth": 1 }, { "id": 102, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "7361b312b673ddd2401cb39146d71d71e166297db364eb03dc5d6f7b70b773db", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/csrf/SKILL.md", "risk": 4, "size": 16606, "type": "markdown", "depth": 1 }, { "id": 103, "mol": "H(Cm)Md(Pa)", "sha": "08efe4c52f642756120681524b76c8aeadf63d50167e9b01834407743076341f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/csrf/references/clickjacking-poc.md", "risk": 3, "size": 6190, "type": "markdown", "depth": 1 }, { "id": 104, "mol": "H(Cm)Md(Pa)", "sha": "bbc9959539cbfc1a52fc92e52565357c1eaba8acf55e54bfdda39a5656c58fdc", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/csrf/references/poc-payloads.md", "risk": 3, "size": 12429, "type": "markdown", "depth": 1 }, { "id": 105, "mol": "K(Am)O(Xe)H₂(CmPo)Md(Pa)", "sha": "d308c4a2e8ce9162c209e3ed6b66ef36640b82b022533e65fbfc77afb5ce4f72", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/SKILL.md", "risk": 5, "size": 20571, "type": "markdown", "depth": 1 }, { "id": 106, "mol": "Md(Pa)", "sha": "562274a5c91e36a3fe385a20ecda24adb6704ab9a1f944103aaaa100a86deb37", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/java-rmi-jmx.md", "risk": 2, "size": 4319, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boRnMz/YGgx\u003c\u003e*2fcCKYz/YGgx\u003c\u003e*gzE)]jv@Dj3vqYP#v@Dp3vScg2aMv{oawV@/zxJ1Kmnt(^D2E*FxKM6}ay/tcw[=p5wN(](awc6=viwuPygQ)%nP5G\u0026Bw)p4wNPA#z/M%Mpdnb8ltpsCA^pb)A=2lbBy/FCr+Vb?q/(C\u0026wIlU%z/dg5mn$yJx(mYevqYP#zE)x\u0026aARpdaz2!av@@\u0026avpT1ZBrCpnC5H(0BzkVhazbLjavF$6efE?TmjYN1AV/ylC5}tdy?%B=l2puWv@Dj3vqYQ%ayPtjB.$Xjv0M*iB7GxavqEMhvrb-#c}W]\u003evjrsqAV!+nB8MbhA+O@#e[Gosu)3\u003cIpdnbhaA8cu", "ln": 0, "col": 1, "line": 1 }, { "b": "zddr{y?mcfaxJO(A3e.nwPA5szfoVpx!sBByH}xaoLFx!CPZHmzeAZ0wi758u%)wKvrl8?boPV]zGQg+ayX=2wI#v%CxdbhaAIDzBzbkdxjks-wPPqvaz2!ev\u003c2z}BAnNkaAImmxkzc4Bz\u003e@azxJC5vqfP^lRP%icT{I9xDO)vau?a{fjXTqflyYyfekdkf!+jmg+HQrg=d3Catt#af^^q{hz^Mxc#:ivzGGFkcNA*Yar\u00266#o**fFD(#)bB7El^at4^\u003edgf/#C3#HByghc9D2)[BwPzG[y+xEhAV^./zeBieB3\u003c\u003eZy?m9#x(v)ghxThMvrl98eN]]IwN/y(ef)Lug\u003c%:#vQTs?hz=%pwpn\u0026LvQTs\u003eeg\u003eN:a%o5(Aaa3dz^^feB7Gw0u%)vHmSiq\u0026s7#L.z*cmBByxi5wPR#oB-Rapp\u0026yL?A-lT.y?$k4eK:L!z!9A\u0026lVl*UvqYQ-asHj", "ln": 566, "col": 32, "line": 9 }, { "b": "f/zY]aBCqvvrl0rg:1w]fD.FXarR^KaAg+gBy=OezGG!teK:L!ayX[#z*8L6vrM64eOXZmaBe3DB7GxavqEMhvr9FTz/6ufzGwf-y\u00260V)BzkVhB2k1A3lQDnAbP@iA=U]9y?$.nCX50Hph+2wat3UqnnhQBwO@Rxph-@KeK:[}v\u003c19-Aa9*eat331v\u003c0)2hz!AkmLM!+a%o5(Aaa3dz^^feB7Gw0u%)vH3l{=rn)#)KaMv{oavF$6atj\u003cdr8=WpADL#bBrCHxvpKa+B08(KB-5szxK#l@azbtdB95\u0026ru%)wKvrl8?boPPDod+71y\u003cvMOzF{Ulx\u003c#9\u003eA^n^BwO2y-wfx(ZLPT{=z*2YkaAz44wkuVHwN/*gdiJtCaAz44v}YB:3tK0)vivdpvr9GoB8MbhA+O@#e]1*naxqrkl@3V6a]", "ln": 1067, "col": 18, "line": 20 }, { "b": "C3#HByghc9D2)[BwPzG[y+xEhAV^./zeBieB3\u003c\u003eZy?m9#x(v)gg:0#LzdB+xv\u003c2Vgy\u0026slcB-nDGqBa5Ce]LftBs}xzC4z\u003c8ygho]at4tpAV/TGz/YGgx\u003c\u003e*gyghc9lVl*Uz/fR-z!%l3v@#B6zGvSSb4CF2atmjEv}xX5B-.tlat4.Ry?3)-xK@qrB8U@fBrAeEazt\u003esA5]T9bVl{6l[Sy^B963Jx)a5vviw#53sEmH3jn15awc6=viBMWLPTBQB-.gqBzbkdv}Yp+zxKdpwO@Sbx\u003c#9\u003eA+P9aayPq4aA.NqzF%-p3r7[:vr\u0026#bC4CYtay/7[x(k5czGG!tviv)VA=rQ4zGG]wwmY^7Cw?Ijy?W%jefF\u003eGwGUC\u003cB7El^ayYe9vJYS3AV/gjzE\u003e\u003cou%)wKvrl8?w]zYjxcp]aavoTFzC$jWy?$*GlU{WQB-I4olVl*Uz/fR.wNPF0BzkMjf^5\u00264zeBieB3\u003c\u003eZy?m9#x(v)gf^6ZdarT3\u0026zeBieB3\u003c\u003eZy?m9#x(v)gg5", "ln": 1812, "col": 3, "line": 34 }, { "b": "eQ5)gaz24@zWH2[zE\u003c}OazC.nA=\u003e]7AXqDUBp8z-u\u003cY\u003eDwGTxoqY])+vR6u#Bzb98azbtdwPF#6vpK6}zEEx[B0bNrwGVhnA+/xbxcpX$vqfQ4c$2eExKLQ)j$X%rvqYQte]LftBs}xzC4C5ge^.}gboPP!C3#JMFrRfGq:}(.atdnmv}xZ7r+Vb?", "ln": 2614, "col": 16, "line": 48 }, { "b": "y\u0026%qwawM?$o*Ib?B-82bB8@Eiq=D4Zmpe$Vr.l4RuRJ%*nkzSpB7GxnwPze=CwhejayMylwN/:(Bs)[cq/(}#vp%c]By/o8azbUjz6i}lwGTJyo?VWsz!abO3n0w/y?WD#Bs?MFwmV)8Bz(hdxjSjBHlrV!ygho]CRiPpv}xZlr+Vb?q/(C\u0026wNDT7", "ln": 2950, "col": 31, "line": 56 }, { "b": "as^^wawc6=vixF$ygQ)%u)3\u003e9A.!wPlm%(yu)6xdayE.%B4FU-k}T=xu[0YJra]#!azC)tBzbkdwmY*[A+O@#x)Kifx(v(iAa9\u003c4e^:fMq!o#)wPxwzx\u003eg=$B98tvvp%c]\u0026!AQsC42ifwGU/cz!\u003czpy?WV@ayGw3y\u0026%qLa$V]0sun3osxFVHu)3\u003ea", "ln": 3122, "col": 76, "line": 60 }, { "b": "ayMyfvqGT/x(wcnawtf?p-%^\u0026w[u16vqE6cwPz%9AV/EqvrrSjwPS6nzGu}ezxIw)AboDbBrC7fvrlF%ygho]at48xaz\u003eLcB7!##B7F\u0026lyghc9zddEaxKLZ#wN^uczE^DloHIfyqE%DswPz%9AV/4qBz%n]fekdkf!+jmg+HQCi503ufc-]gAboDbBrAp]i5}r\u003caw${9aA?glx\u003c\u003e[33tK0)vivdiA3f1aA=U]5y\u0026:e$e]1*naz\u003eLcB7!##", "ln": 4411, "col": 11, "line": 87 }, { "b": "A=tYav\u003c1xxpFJ3OxK@rcx(mYewQ5f9v@#=yaz0fre*aNBu)G\u0026tAaJAgu{F*VAaJA1C42ifwErx{x(n3bzF782BrC0mn[qyvqG3+TwPQHXAbmgbwO(y5vru74nO@A.aA}HqB7DF4wmoN*q/u/0v}wzzzdN8$x(:R?y?c%[iXJcvfFk7le?]gng=^uEi5@SXCYmFqx()-naw=GXAV/NuBz8!9ay/j@B8@{Dz/Z2mzF77.r8=WpB7GxnwPw]izxH[)fFC9^3l{=rn)#)KaMv{oawc6LyJBAiaAhmnD2mFuAa\u0026@}awbNdp9p@}vrt{!x(mDgaA}KwxM53nayMx+pddU@B7GxnwPwbIvpK7]z/cXwx([2hp\u0026ye}zeTDlxLy%0rc-B]av]{UwnC%$xcqbgasHSezEE0\u003cwKH9wvrDydrc-B%zF7vDu)6xd3sDa\u003eB8L}}D2Ns^zF0/{diJ5ev}xR3B0a)lu%s*qv@bN{B53dXwJ?p?aBtZ[e}42kaA}\u003cmAbYxeeN-Wuvr?", "ln": 4695, "col": 21, "line": 92 }, { "b": "wIdzjAcJMlboP]Rm[#GvaxAh/Ct\u0026P(By^GQD2E*Fzfo]waAIWAAbo!xBzbkdy?m3\u003cwN({2vpJ$+zE(ELC{4iEaz\u003e?gBrC0mC42i3wfsPjlKF9Wz/YGgx\u003c\u003e*gwQ4=e", "ln": 9461, "col": 59, "line": 181 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 11217, "entropy": 5.47 }, "text": { "lines": 218, "top_char": 101, "max_ws_run": 10, "digit_ratio": 0.04, "space_count": 1214, "char_entropy": 5.47, "unique_chars": 99, "top_char_null": 0, "escape_density": 0.01, "lines_over_200": 1, "top_char_ratio": 0.07, "avg_line_length": 50.45, "max_line_length": 214, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.11, "hex_escape_count": 1, "last_line_length": 70, "long_token_count": 1, "whitespace_ratio": 0.13, "line_length_stddev": 34.17, "repeated_char_sequences": 2 }, "binary": { "peak_region_bytes": 11217, "peak_region_entropy": 5.49 } } }, "id": 107, "mol": "O(C)H(Po₂)Md(Pa)Th", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/payloads-java-dotnet.md", "pid": 0, "risk": 258, "sha": "d62d1389352add7e4b0ac021241c624fd4c17c53f2f6fee1c4a056490f1be007", "size": 11217, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 161, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 152, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 2662, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 64, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 189, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 2998, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 3170, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 37 ] ] }, { "id": "micro-behaviors/process/create/launch::java-classpath-command-line", "atk": "T1059", "conf": 0.85, "crit": 3, "desc": "Runs Java class via classpath (java -cp)", "spans": [ [ 4475, 8 ] ] }, { "id": "micro-behaviors/process/create/launch::java-jar-command-line", "atk": "T1059", "conf": 0.85, "crit": 3, "desc": "Runs an executable JAR (java -jar)", "spans": [ [ 776, 9 ] ] }, { "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation", "atk": "T1059.001,T1059.003", "conf": 0.94, "crit": 3, "desc": "Windows shell command-mode invocation syntax", "spans": [ [ 1163, 20 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/download-execute::powershell-hidden-bypass-encoded-command", "atk": "T1059.001,T1027,T1564.003", "mbc": "B0030", "conf": 0.99, "crit": 4, "desc": "PowerShell hidden bypass encoded command", "spans": [ [ 1163, 53 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 37 ] ] }, { "id": "third_party/SigBase/Certutil/Decode/OR/Download", "conf": 0.9, "crit": 5, "desc": "Certutil Decode", "spans": [ [ 1940, 33 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/Callbackdomain/Iocs/Dec21", "conf": 0.9, "crit": 5, "desc": "Detects IOCs found in Log4Shell incidents that indicate exploitation attempts of CVE-2021-44228", "spans": [ [ 4823, 30 ] ] } ], "type": "markdown" }, { "id": 108, "mol": "H(Cm₂)Md(Pa)", "sha": "351a51fd36da402164ccddc6c85bf09d1a2d2bca37ae8af3081119a52cf66934", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/payloads-node.md", "risk": 3, "size": 4460, "type": "markdown", "depth": 1 }, { "id": 109, "mol": "O(C)Md(Pa)", "sha": "136e013e5b6a4e68629bb8af13f5b6efda7300c89e5232ee59613de21ad35705", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/payloads-php-python.md", "risk": 3, "size": 7033, "type": "markdown", "depth": 1 }, { "id": 110, "mol": "Md(Pa)", "sha": "7dd8705023f930cdc584d2aec640e216635b86605f32682b8c29d1778c121d5b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/payloads-ruby.md", "risk": 2, "size": 5300, "type": "markdown", "depth": 1 }, { "id": 111, "mol": "O(C)H₂(Cm₂Po)Md(Pa)", "sha": "2221e1fb277d3f2c7be5998f8df3fb35203238af8c8f7acde53e1d084ca936ba", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/deserialization/references/recent-cve-recipes.md", "risk": 4, "size": 3771, "type": "markdown", "depth": 1 }, { "id": 112, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "3e29dbf4fdaf9b5c551e4dbfbef79cb54332e914a34d1a05a477a72a48a018d3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/edr-evasion/SKILL.md", "risk": 3, "size": 17732, "type": "markdown", "depth": 1 }, { "id": 113, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "2cc6db026af3dea6b8d9527e4decc1265d70912666609b601b8c69e65cde84b1", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/error-handling/SKILL.md", "risk": 3, "size": 3665, "type": "markdown", "depth": 1 }, { "id": 114, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "5fa12d22cf89c4d9f48e80d042715e0ce9b8cf2d51f141b24978651d44c37e77", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/exploit-dev-course/SKILL.md", "risk": 3, "size": 9557, "type": "markdown", "depth": 1 }, { "id": 115, "mol": "K(Am)O₂(CXe)Md(Pa)", "sha": "71d0a13f0567e2b5ace34d1c7213c5219af957b93c419d981d5e00a5782c1984", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/exploit-development/SKILL.md", "risk": 4, "size": 17226, "type": "markdown", "depth": 1 }, { "id": 116, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "2836a5474986fb4436f123f26e6e32994cea551622686d2f00c0e66417fadf1d", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/exploration/SKILL.md", "risk": 3, "size": 4827, "type": "markdown", "depth": 1 }, { "id": 117, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "9f76a8c0c83eac08cf8bc481d81c63e4fb7aaa678780f7a7dbbf13a0224d2847", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/framework-fastapi/SKILL.md", "risk": 3, "size": 8580, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "eIeKYzEEx[iV@3PvqPO1z/PRBzE))hyi6.)wPIv4x(Ffdz/dPUrDzZ]Cw7M9aARpdaAR4jxjVfcx(+z9awMG?Bv]EOvq{g4x\u003e7N[x(v(i\u0026^^morc-B]q!6\u0026ZAc9i$z!9Aiyi7IfA:-/@Cw?IqaA}KwxDQ@gvrb[1efF[CAaK8way]4[z/Podz/P[Iaz(4cB.\u003eGbavF^LayPd#az(mqBzkYgwGV8nvqZd9z/P@vasG=Wr8ta*s7L\u0026tz!0M]BsXLKx\u003e8g4B7Gxnx\u003e7Z}efFO6p^VV:avy6\u003cwPz\u0026mpgXG*n(Er.AaJJ[w[+-$vruQ1v@0idB-I85", "ln": 0, "col": 1, "line": 1 }, { "b": "aAhd9D1ReoB-7.jwQ5fjB9hImdj#-vwObH]wO#0?ePkJyC{3)uz*c2ewm]D@Bzb98aA?)zzE)\u0026%vRGT)BA]DFy*?yaaAIsjy\u00261env@DmaB.(dxCw7M9aAz46z/fD3x(!u7zEWl2w[=c}wPz:gx(n3lawMG?Bv]E:3n0?Y3jn12pgXG*n(D67q/(CTyB%QDwN/B^x\u003e5ocwPI%czF78czF%-nwN]B+azbLjawMG?Bv]EOvq{g4x\u003e7N[x(v)ge^.}+xLzJgB8bGay-)CkasX\u003cYwObH]wO#0?ePkJyC}7o^\u0026^^mox(\u003eFhvriMezY\u0026B@xjU$5uUK4Ue*abbwErx)vqY%]AV!!dwftq\u003cBzk]faA?)zzE)\u0026%vRGT)BA]DFy*?w", "ln": 799, "col": 773, "line": 3 }, { "b": "wPI%dB1.3wzF0P}u[rBdlVl\u003cOx\u003eHvQA=#ebwNE5iu[M2dC3(C8x(4v4e^:fMu{FQvB98erfly(Fz/*8qwPzffaAy[jwGU/6ze19azF78ox([2hu{EUax(E3+A=l5wyY", "ln": 2701, "col": 6, "line": 52 }, { "b": "e*9C5zdN*5z!6#cx(!ufzF6q0ayEDmB7E\u003c:vrb[1u)6VbwO@Six\u003c$))zFa2kxKM6}azC{ux(+zsxK@qhf^77xzE^E0xd:JyayEDhBZ/f3v\u003c\u0026^laz\u003eXivpS!*vix5*B-Rnmxcp\u00266z^)c\u003eayEGTBzaf!vrb)^aARJAB8bGe3lQE5zF0*cv}xH*zGE2X", "ln": 4419, "col": 50, "line": 108 }, { "b": "vpJ!YwmYU2vqG+9aA8BmA=L(8x(mL\u003carU-EA+P39wPw]aBZYr3B0bWvBz8!owPzT4B8#5swGU]ewPGEh3l{=uaxz]!x\u003egT]x(v(=x(ESawQ5fgz!Trm3jnmjs7(q\u0026wO=74BrC4rAa9*edK)E^eG!CBxLzN1y?W%jiV@J+B.a@6Cwhejz/{dAu$Ks$vRGvFz/eS\u0026x(){5x(!xcwi7\u0026PA=\u003e@3aMv{oaz2!tA:Yp$aAhvtAaK6ix\u003equdB7]D4zGGYuaAITBx(F35wftu7BrCBeC{3^eC4z!9wO2:4Ab](bwPI{7wftub3lQE5vrcf#wPw]gx\u003eg:\u003cwP}N6wGSSGx(n37A:@W1Bz(hve^:fMo\u003e!V\u0026x(mMau{EXpAaHBCdiH=q", "ln": 5134, "col": 36, "line": 125 }, { "b": "yH}Pgxjk)[Cvt=raMv{o3lQE0kVI(pm%elXwohc3zfo]wayX[8wQ5fgx\u003e7\u003e0e^:fMl3mo.wO#Q7v{%E[z/cXdwObH]A+e=7w].*bayF\u003e\u003ezE^M{lVl\u003cWwN/*@z/e@9", "ln": 8116, "col": 50, "line": 215 }, { "b": "azL?ezFs03aAzyszf3?wxK#C@arU-sz/](bzyoJGvpJ!UB8@@veG!B^q/#L\u003cv@=o)wLD-SB75Y)c[eKDxKL^?y?mTdaAz4fD1?eeaA8cuv@Dm5wN/*@z/ddywP?T3ayL", "ln": 8320, "col": 43, "line": 219 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 12124, "entropy": 5 }, "text": { "lines": 313, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0, "space_count": 1462, "char_entropy": 5, "unique_chars": 92, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "top_char_ratio": 0.08, "avg_line_length": 37.73, "max_line_length": 900, "non_ascii_ratio": 0.02, "empty_line_ratio": 0.18, "last_line_length": 18, "whitespace_ratio": 0.15, "line_length_stddev": 54.51 }, "binary": { "peak_region_bytes": 12124, "peak_region_entropy": 5.12 } } }, "id": 118, "mol": "K(Am)O₂(ErXe)Md(Pa)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/framework-nestjs/SKILL.md", "pid": 0, "risk": 43, "sha": "88ef883ef324a8d84ab6c695a9879216473979ee46ccb471499b236cfc5f903a", "size": 12124, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 49, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 161, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 847, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 4467, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 976, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 117, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 1002, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 27 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "spans": [ [ 0, 0 ] ] }, { "id": "objectives/evasion/security-bypass/access-list::agent-skill-access-list-bypass-claim", "atk": "T1562", "conf": 0.99, "crit": 4, "desc": "Skill claims access-list bypass", "spans": [ [ 5230, 16 ] ] }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "uses": [ 8, 9 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 27 ] ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "uses": [ 12 ], "spans": [ [ 0, 36 ], [ 4, 35 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "uses": [ 12 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] } ], "type": "markdown" }, { "id": 119, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "773d26c12d1f6b5c736ee9130650fbafc11844d83b6306d99b10ac77fc544a79", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/framework-nextjs/SKILL.md", "risk": 3, "size": 9244, "type": "markdown", "depth": 1 }, { "id": 120, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "e91fcc16a0c2c387635183b07701d455e89fa149b9b2d112a903df0e5014e9d0", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/fuzzing/SKILL.md", "risk": 4, "size": 19868, "type": "markdown", "depth": 1 }, { "id": 121, "mol": "H(Cm)Md(Pa)", "sha": "fc0f82472fc276307c661435f32ada2b45db4c15962d0461f0a34a3dc3fe747e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/fuzzing/references/hidden-parameters.md", "risk": 2, "size": 7516, "type": "markdown", "depth": 1 }, { "id": 122, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "f56aebd7f3262d79f623231f7333bcee39446d3527ef5ec06ef19795371a9ae8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/fuzzing-course/SKILL.md", "risk": 3, "size": 11367, "type": "markdown", "depth": 1 }, { "id": 123, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "69f393cb9e9c64f7f94bf1c13375521e6cc72bf567b383d47091f24f4815df7b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/graphql/SKILL.md", "risk": 3, "size": 17246, "type": "markdown", "depth": 1 }, { "id": 124, "mol": "Md(Pa)", "sha": "f713dd27d8b93ff4fcaa4157f0200fec84b8abbf421c5c0f9690019bf76885a0", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/graphql/references/payloads.md", "risk": 2, "size": 8235, "type": "markdown", "depth": 1 }, { "id": 125, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "772b5847a17205c0135e5f2ea33925980e9cbed87d21dcdc231f6ef22740f5c7", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/idor/SKILL.md", "risk": 3, "size": 19925, "type": "markdown", "depth": 1 }, { "id": 126, "mol": "H(Cm₂)Md(Pa)", "sha": "f13b99e7d26ab59ad77c6d2f23d20ae5b87e716c4c8eed416625a17231497b0c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/idor/references/computed-identifiers.md", "risk": 3, "size": 4337, "type": "markdown", "depth": 1 }, { "id": 127, "mol": "H(Cm₂)Md(Pa)", "sha": "205d8b83fe750ed2768bc5c2008b6b5fc13ab8f812f8c2367932b13767532519", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/idor/references/enumeration-recipes.md", "risk": 3, "size": 3987, "type": "markdown", "depth": 1 }, { "id": 128, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "d032e4571ebca50f58851f5b99c53dc99ad9f5a8b38df0bc18f0c314727a0160", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/information-disclosure/SKILL.md", "risk": 3, "size": 15793, "type": "markdown", "depth": 1 }, { "id": 129, "mol": "H(Cm₂)Md(Pa)", "sha": "b3e646f1199d055424ffb07c494c74a1c083f79f8e10e560e4e51f48c7c1064a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/information-disclosure/references/dvcs-extraction.md", "risk": 3, "size": 3386, "type": "markdown", "depth": 1 }, { "id": 130, "mol": "Md(Pa)", "sha": "710b5705156a2dcef768590df4ad36561cbef111136355719120bd34a7ebd190", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/information-disclosure/references/iis-machinekey.md", "risk": 2, "size": 2637, "type": "markdown", "depth": 1 }, { "id": 131, "mol": "H(Cr)Md(Pa)", "sha": "e2ee9c620f007523970d63e19a208641853245fcb1a9193b0d9495415b32f8e1", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/information-disclosure/references/orm-leak.md", "risk": 2, "size": 3202, "type": "markdown", "depth": 1 }, { "id": 132, "mol": "H(Cm)Md(Pa)", "sha": "b1a0feaff0aa0f931a4ac73d42a650606d6e05f4b46a014e816a1731c9c54e41", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/information-disclosure/references/secret-detection.md", "risk": 2, "size": 2357, "type": "markdown", "depth": 1 }, { "id": 133, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "b36707c06da32d1e79494689fe121070fa3a031a9d399f4bae3e7c7745112238", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/initial-access/SKILL.md", "risk": 3, "size": 14403, "type": "markdown", "depth": 1 }, { "id": 134, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "f0bb4c5997e4b0456cffab3a66b2320c52f25f7b08e9414b7e627d888c77e5a3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/input-validation/SKILL.md", "risk": 3, "size": 5636, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boPuLrV\u003c4rw]zZbB.\u003eFex(mV%v@#B6zxJB$Byx07xlv=d\u0026^^mopJf(.axI95pc6IaaA.:pAXg^tzGG]qy\u00260V[aA?gfB.8Xvz/)gzBZ/i4BrC^wy?$kgvru73ayX[8wn=Wfy\u0026r-)wN({4AV!}rAbP=swN(](B09?GrXEMGq=\u003ed\u003cx(n9jx\u003e7Y%By/rdy*?A%B1wCRB7GwzB7GDnx(i", "ln": 0, "col": 1, "line": 1 }, { "b": "az+$eB1wCzz/fV9v@%wuwNP9(wQ5fjA==vNar\u003eumCw.knvpQH3wPhNdBrSdRvqYP#z/xo9wN(]$zxJvgB8VehvpTB)wO2%avq{e)3l{=rs7(e=wGUYeaz++nwPFg=ra]#!azC)tviv4vBz(hhwgwZozG6-ueP$Msx\u003egT]x(v(iw]7[1efF?GBrC0mwnc6}v@%qywPI*ezGxwiz/fbsaxi2=3u/\u0026]B.8Xvz/)gzBZ/i4Brz#uaz$R8wH[%jwmPZ(B8@(PzF%SdefF+qvR6vbaAR48diJtCaA}\u003cuBAz8iaA?spvQTv)z3\u003c#{Bz\u0026pgay!#0y-)UdayMxWq=ULN", "ln": 182, "col": 183, "line": 1 }, { "b": "y?j-hxK@q{AbV}jwO#71vru74az+FdwPxyCs7(e.ayMyox\u003e8m0z3\u003ei2wO#MiBzb98azbt7wGUY8avQJ+wO-FxawuGUA+e3Uw[+:^atj\u003ccz/oo8wGT]+wO2$8ayPd#ayMy5wO=f9B97\u0026hBAm!kx([2hvixf2A=2@nvixVjx\u003eI6\u0026AX5tPxK@rcAb]I#wohA}wPP5azF9W3wGUMcvqH6{By/Iox(\u003e%Ira]?=Cv+j\u003cA+frhz/fScaARJAD2E?CaAz4kB.bSoaA.:FvqG-", "ln": 456, "col": 29, "line": 7 }, { "b": "ayLQ\u003cvrcj3wPI]nvrc77xL?s5x\u003e5o7A:-D]wGV8kaAhvtC4z!cC42ifvruj4zAw$Jx()]eBzbkdl{%D^v@bN{B0bgmaARpd3ta0\u0026wnb{]aARJAv@DmdwQbzjze-][Bs[X9z/M$vwObH]wO#0?aA8dlC@=otu%)vHj.5ttD)ZNmay!?@v\u003c-A=fBy6zrzs\u003e@d\u003e@F5v@k+7cOE?fv{%g-cM$=f3oZc{h7JfNwpb:TlM/(Ey?1?ok}\u0026TeA=(ngy?$).D).](oFf\u003c(y+ew3wO$HCoDW?Ny?28eCX5lCk)?1cu\u003cWlpvRf+7v{%E[z/cXtxKM09wmYv:vruMkzEEm5wGU=1D3sgEwftF#y\u0026\u003cleB08(LBzkMcaAz4jz/P}Kz/fxpdlm!/aw^8\u0026w[=Gjvrc77xL?s5x\u003e5oczY\u0026.cwmV)9xK@r5wNP9(v}Yp\u003eiV}/[k%W!5d)=M?lm\u003eL(lQJhgzdF2wfjMbmvqGBawQ4=laWGGyeD", "ln": 2655, "col": 69, "line": 65 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 3519, "entropy": 5.07 }, "text": { "lines": 88, "top_char": 101, "max_ws_run": 10, "digit_ratio": 0.01, "space_count": 500, "char_entropy": 5.07, "unique_chars": 82, "top_char_null": 0, "escape_density": 0.06, "lines_over_200": 1, "top_char_ratio": 0.09, "avg_line_length": 38.99, "max_line_length": 261, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.22, "hex_escape_count": 2, "last_line_length": 63, "whitespace_ratio": 0.17, "line_length_stddev": 38.09, "repeated_char_sequences": 1 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.42 } } }, "id": 135, "mol": "Md(Pa)Th", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/input-validation/references/csv-formula-injection.md", "pid": 0, "risk": 110, "sha": "c68f86f3dc4913e6768f3c148e9d31cb5c90b8a080e223e5b9f7e7d38edbff60", "size": 3519, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 351, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 230, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 504, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 2758, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 571, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 282, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 38 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 6 ], "spans": [ [ 0, 38 ] ] }, { "id": "third_party/Sekoia/Technique/Csv/Dde/Exec/Regex", "conf": 0.9, "crit": 5, "desc": "Find .csv file exploiting DDE technique", "spans": [ [ 2783, 5 ] ] } ], "type": "markdown" }, { "id": 136, "mol": "H(Cm)Md(Pa)", "sha": "289c691f7ef6020e7f79d8a8751533de1f2fe206db673970e6b820e5bd404be4", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/input-validation/references/encoding-bypass-and-redos.md", "risk": 3, "size": 6649, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "eIeKYzEEx[iV@cOB7F\u003c7A+c?mx(4ujB-qenvpTA^wmY*(A+PGmx(v(Iau?v:arTW9wJy@lB7DFdzGxx0B-I4Bw[=6)eP(2Gz^^f$aA}HgzxJ$hv@DlcB7/GoB0bNrwGUA2Abok#vruj4zxJv$v}xR3B0a)lw[=6)azbUjz6i}lwGVbpwPw]4zE:7%aAITyA+fqmz/M$wwPz%9B0bgsayX+?yB*PpzE:(ixK@r8vRPE:Bzk]fazC.pz!%PdB0bHCzF\u003cfaxcpY5wmWqmxjVgbx(mMaB98tvwN(][z/fVdzGDjdaAz4hwmY^)wgO\u003cwAV/ylvpT7\u0026xcqnbA=#2mazbt7wPF#oxMw3lxj@AfxKM09x(n33yH]avq!Y(ZvqH0Caxi2=ay/k0vrb}2BrCQxB-.tnxcqnfxkRc]B0a[iwGUy*arUomA+#}yx([2hwO#11D2NsqzfoVpx(EH3Bt4lAA=0ysvrt{2vqYP#vqWi4zG6-uaA7\u003cmBA}?pazbt7wH[%xAV!!dC{3ZkwO+)1z/M$tvrb^[wPRH7az$R8wN(b\u003caz++cwGUN", "ln": 0, "col": 1, "line": 1 }, { "b": "wPI%cxjk)@z/cXsByxo5ed9HxzF%RtzdN:2x(mMaB8bGay-)Xqz/6DnB1OO5z*2Yjvp%djavy6\u003cwPz\u0026mwQ5rdzGxJgzxHOPo?w5Fatj\u003cOvp%p:eN\u003c0EwGUDcAa9*eefF[Iy\u003cxVfz/^alx(4v43lQDtm[Dfoqy\u0026}!ni{c8ax8rheQ7]JxF1pnA+PGmdj=P.wPz%9AXhuDwmV({CX7xcBzkVhaAg+hxMCpACv+kaB7/c3y\u0026.cIe[/unv}f7\u003eB09aUe{hkDAXq6zx=]5oarU(tvG", "ln": 1386, "col": 82, "line": 17 }, { "b": "BrCWJAaJM5x(n3hayPdgz/Px5zEENhaARgtBrCgfwO+)1x(+z0q=tj\u0026zF%RtBzbxfj0m@sarU/Ey-)UpaAg+hxDRn5A:-/@By/FnBzb98aA8dlC{4csvpTB4B7GxnwPw]9x(4v4aA}KwxDRhhaA.:pAV!$dy?j-kA+PSqwO@S8B0adCnH#06vrue\u0026", "ln": 2040, "col": 45, "line": 24 }, { "b": "FrQyHB-.qnA+P\u0026dBzkVhayPd#aA?gfx\u003egT]x(v(izfo]waztXfwftq\u003cA=l2uaz2.cA^n^GBy/zz3jn15awVDYwN/*@C4C.4f!KN#dOTt\u003caA.Ttz^^f0B9hInvpJ\u003e\u0026", "ln": 2828, "col": 59, "line": 37 }, { "b": "3lQE2vpK7=A=l8rwg.LmvJY-lvruTkayP85z*cmBvpJ!UB8@EkwOb\u003e3wGV57vqWh$z/6DfwPRH8i%)8MAa9*eCw?IjePt-GBy!%7wN(](A:@=%C4C.qvTh{3B8@EBv{]", "ln": 6411, "col": 57, "line": 112 }, { "b": "x(mS)asHSaB-.LeAb]JewO#3=w[=6)u)49Bu$1h1z^M{(AaJ]$uUj1*wND@fw]zYjp!jzmmO(/i3n0w^q=1O\u0026awbNeaz2Lnx)9{3wO#QhaA}HgA+cwmB-qqrA=+(6j0m9^qY]E(wNWo4z/ff3xj8\u003c7zY\u0026RevpB4:3lQEjv@=p5BrCdtwN/\u003e8x(v\u003e", "ln": 6756, "col": 10, "line": 122 }, { "b": "e[/unv}f7\u003eB6{bmx([2hu{Oslrc-B]atbo0atdtHvpJ!UB8$Z@arUStB-OWlzxJUhy?W=#ayEq@Aa\u003chkAa9*eBzbYqc)Sd\u0026mo0Fsv\u003c+Lhj3L]pj0m{PwNWo4z/ff3xj8\u003c7xKL#\u0026arUYoeOe*dvR/Q%aARpdayDVKv@Dl%x\u003eH/@xKL^?y?mSfAboVrayPdgx(m:3zE\u003c}Rq=1PCz!abCavctSayD*nBywV?wPI{2fiyLnePkUYs3/RTaAhmnD1Q@iBrB#", "ln": 7070, "col": 29, "line": 127 }, { "b": "u[MIxzd1FtayD*yxMO90aA.Ttz^^f0A=(nv3lQE0jrVpdbv#ahv\u003c2n#wizbJwfJcFeK0L+c$vgjzddr)az2!ev\u003c@KsATA{iu{2O:eHa$Ev@co#wGUP0y?k:Ne?O!f", "ln": 7460, "col": 33, "line": 133 }, { "b": "aAy[hwO=SmA+c?jxK$W?B0bNrwEoL5xKL%}j0nx.y\u0026\u003cxgvrcDjB-qenvpTB4xKM6}ay/tbAbP/iBy=N-rafAXaARp9BrCa9w[ty)az$R4C4z16azC.nwOl3$BA]0sxK$W?B1N!KaxyrwB7]o8vruTjwGU!$CY48lB2\u003eBPCYW$maA.Nyx\u003eIr{wftL%", "ln": 11366, "col": 43, "line": 211 }, { "b": "fd[\u003ege?O!fe?Z^Tv\u003eR!fB8#Lou[rBdw[=6)zEEx[jUHw*v\u003eR!fB8#Lou[qTcaxqrkeOe*fz!9A\u0026ayD/Ob@f6+e*Sn+e?OC9w]})eb@f7NxK#0@e]UGyu[rB2pd2vhayFCVvruQ1", "ln": 12300, "col": 15, "line": 234 }, { "b": "p\u0026ZF:wPI{bzF78jvpJ\u003e\u00263n0w#wPq\u003c7B95Kpx(4u6x(dY#wnbE]wO=Smvp\u003cQ)AV/Hzy\u0026r-)ayYFnayX[]z/Pzik#]9YavwK{3lQE3z/6DfwPRH8e^:fMrb#X=xjV9axK$Q}C{3O", "ln": 12788, "col": 5, "line": 243 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 17155, "entropy": 5.01 }, "text": { "lines": 347, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 2393, "char_entropy": 5.01, "unique_chars": 96, "top_char_null": 0, "top_char_ratio": 0.08, "avg_line_length": 48.44, "max_line_length": 100, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.1, "last_line_length": 27, "whitespace_ratio": 0.16, "line_length_stddev": 26.87 }, "binary": { "peak_region_bytes": 15107, "peak_region_entropy": 5.18 } } }, "id": 137, "mol": "K(Am)O₂(CXe)Md(Pa)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/insecure-file-uploads/SKILL.md", "pid": 0, "risk": 4, "sha": "0968a893d5c0a0a79fcaae90c44a4709d5b16ce23515dedf5ea128d970594705", "size": 17155, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 98, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 143, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 283, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 11414, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 6804, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 347, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 2088, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 32 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "spans": [ [ 0, 0 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/exec::php-request-shell-execution-alt", "atk": "T1505.003", "mbc": "B0024", "conf": 0.99, "crit": 3, "desc": "PHP request passed to alternate shell function", "spans": [ [ 7134, 15 ] ] }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "uses": [ 8, 9 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 32 ] ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "uses": [ 12 ], "spans": [ [ 0, 41 ], [ 4, 40 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "uses": [ 12 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] } ], "type": "markdown" }, { "id": 138, "mol": "O(C)H(Po)Md(Pa)", "sha": "0817e895c47ff2a2b4dcd64237818f34a2eb219ce4450f8bf5e3aa75f03b61e3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/insecure-file-uploads/references/bypass-payloads.md", "risk": 4, "size": 5350, "type": "markdown", "depth": 1 }, { "id": 139, "mol": "O(C)H₂(CmPo₂)Md(Pa)", "sha": "b0fddd727ce1b4310e8079b8e5e01c68f55449e710a98425274169b43c4b4c5b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/insecure-file-uploads/references/server-and-processor-rce.md", "risk": 5, "size": 10105, "type": "markdown", "depth": 1 }, { "id": 140, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "f3f25a4e64c097e065a3898fa319e541b7415a0ecbf73bda63d8b8577e9d1c45", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/keylogger-arch/SKILL.md", "risk": 3, "size": 15345, "type": "markdown", "depth": 1 }, { "id": 141, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "38b6b376c368c0982c7b2c532eb7b7f683fc367c86970fba065eb92dad4924e5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/lfi/SKILL.md", "risk": 3, "size": 13152, "type": "markdown", "depth": 1 }, { "id": 142, "mol": "Md(Pa)", "sha": "2eef101063fc6c554946f064c39b2b3933c28ab59c669d7dfe178a4504b7c11a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/lfi/references/client-side-path-traversal.md", "risk": 2, "size": 4946, "type": "markdown", "depth": 1 }, { "id": 143, "mol": "O(C)H(Cm)Md(Pa)", "sha": "b38a32a1190c7599cb4143131bdc788e05abb9695e56be297d32c618eec5ca0a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/lfi/references/php-wrappers-and-lfi2rce.md", "risk": 3, "size": 9304, "type": "markdown", "depth": 1 }, { "id": 144, "mol": "H₂(CmPo)Md(Pa)", "sha": "a688b01041ea163335de9b3109cceefb75ef3642857cf936aca61a8bed084388", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/lfi/references/traversal-and-targets.md", "risk": 3, "size": 6530, "type": "markdown", "depth": 1 }, { "id": 145, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "05400ee02c80bada7fb0c06e1d477a3bfb8878cb00bbc55efb98f8fb56796e92", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/mass-assignment/SKILL.md", "risk": 3, "size": 11991, "type": "markdown", "depth": 1 }, { "id": 146, "mol": "H(Cm₂)Md(Pa)", "sha": "4c928292d256f2a2f5e724a33d1d586d80aeb60057f078fa9377038623e23bac", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/mass-assignment/references/php-external-variables.md", "risk": 3, "size": 5102, "type": "markdown", "depth": 1 }, { "id": 147, "mol": "K(Am)O₂(ErXe)Md(Pa)", "sha": "95097d56ef508924aaf2301c61d3a090a4b4196668b51cc50f6923682012d289", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/mitigations/SKILL.md", "risk": 4, "size": 20144, "type": "markdown", "depth": 1 }, { "id": 148, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "286ec34accf30e2428a9dca501c0ff19291ee1b0e39ac2732a48957507f54ec2", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/nmap/SKILL.md", "risk": 3, "size": 4710, "type": "markdown", "depth": 1 }, { "id": 149, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "cec95984f97c564311e3efac6a0479ac4154f67b5fcba7ca10ff270d7c125adf", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/open-redirect/SKILL.md", "risk": 4, "size": 13114, "type": "markdown", "depth": 1 }, { "id": 150, "mol": "K(Te)H(Cm₂)Md(Pa)", "sha": "427a86bb7b5ea8818c2dd5280b0cdcd68921166f5fd5a928b1d35be421294c23", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/open-redirect/references/payloads-and-discovery.md", "risk": 3, "size": 10809, "type": "markdown", "depth": 1 }, { "id": 151, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "5e588c85649d63d9e985eaeb2e01d070fde9da72027a933868b401c9862abceb", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/parameter-pollution/SKILL.md", "risk": 4, "size": 18407, "type": "markdown", "depth": 1 }, { "id": 152, "mol": "H(Cm)Md(Pa)", "sha": "0651415466f78bd7cf463d71964ccc9eecb977882372b7695a88e1f400f8d9e8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/parameter-pollution/references/client-side-hpp.md", "risk": 2, "size": 4955, "type": "markdown", "depth": 1 }, { "id": 153, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "f59bf1468714104f4c00d186bc4c252649f0787895cfdbaceef2941b2d398826", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/prototype-pollution/SKILL.md", "risk": 3, "size": 13471, "type": "markdown", "depth": 1 }, { "id": 154, "mol": "Md(Pa)", "sha": "5a7b0e474488fb5d4b0be7431cdedf891e4dfe6878daabe9a7d4a058c778c038", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/prototype-pollution/references/gadgets-and-rce.md", "risk": 2, "size": 5452, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boPu(AcT3OvrlK4aAhvtBz(nDAaHehz!%ljBzkVhaARgoBs?iAAclmBy?Wv0vrcSo\u0026^^mopJf(.axI95pc6Iyz/)govrMi8viwfvfhuB@wGU\u00263A+w@az/M$hz/*8jwg.+eBz8!rx(mYevqYP#zE)x\u0026aARpdaz2!av@@\u0026ewQbztxKL\u003c\u003eB0b7kAV^$MpFJ3wz!9M[B1wCNB.bPsaAITBx(mN8efE}\u003coDW}/vp%B*zGG}JayPd#aARpdazbt7By/FAvTh{3B8@EEvrc6\u003czGG}b3rgXIax7{8oIv6Qwftu1wo/qczV", "ln": 0, "col": 1, "line": 1 }, { "b": "A=SvlwPRG[BzkVhaA8pev@bZ$ayPd#aARpdaz\u003eXgxjSVox(mYeBzbl7A^onWra]#!azbt7wGUYd3uP@)aAz44wo/+Gz.k{pB97$oB98CpzF78dx\u003c#9\u003eA^onWp?:APaARpdaAIj8AaHelxKM09zddJ@xK#lcBzbkdB7]JcefG1BzE:(7BsW=vxK#67v@Dl%x(X5kBzbkdCxdztwGU!$zE^r?aA8cuvqWigzGor8vru6\u003eaA7.7wN/*8CwhejayDQAEjl^\u003cwPI%jA9$p93pw-HC4CMkx(v(ivR6v]Crc\u003cOBy/JnAbYhcx(+zsxK@rezFs9kwGU?#A+/lbaAhvtAaK6iC{89%LPTEHz/oYdayMykvqYQ]z6i.8", "ln": 243, "col": 23, "line": 3 }, { "b": "aBd)Fay!?$aAzQxawbM-az0fre*aNBzF%5%aw$T8oDU#hwP?G#aAImmyBGO$u%)wSA%+YLygQ)%e]U\u0026HBz(nDAaHUzwPI%jA3dp^b5?Epy\u0026%\u0026hwfIvRvRPE:Bs{{cAb](sz^M\u003cQb6myqBz#gyt{8oMb5?Epy\u0026%\u0026hwfIvRvRPE:Bs{{cAb](sz^M\u003c7Bn", "ln": 2150, "col": 33, "line": 59 }, { "b": "EpafuarR^HarR^HD)0DvB8V5nB7DF7vrcy5wPF#4l1szoB8@{2z/fVqz!}0]CYmOxwI3C:vpS}\u0026B2\u003eBQz/o2aD\u003cUlzv0:88uVp47Bz\u003eI[b075{B97\u0026jB-O-/h8c!kEp9", "ln": 3329, "col": 43, "line": 81 }, { "b": "A:q)*A=l5rBA}?pt%h[svp%c#voWkWzGx]uBZ]JiA:q)*A=l5rBA}?pu0zk+wPz*fA:p?py?mTec]0dTxMOunB2\u003e%cC4\u003eDdx(bFAy?bhux\u003eIsaA6EYpAb](sz^M\u003c7Ab]JkwO#PTwObv[y\u0026?ppuVp47Bz\u003eI[e[!WhwnC*MvRNJ5uVp47Bz\u003eI[e[wKfwOkB[wMi8UxjVfFb@m]5zd+IyA:{+vzE)\u003cez/O0Hy?mTec]0d%gERTUu%\u003crGbo[r#z/ff3A=2lbx(v(iB8CYhAaKblc#%DFayO(7wPw]4zH0vszG6-uayO.$C4A9f3pwSzwO#PwB7]e@asH@waARpdaAg+4wGUG3zGx-jwHO:uAV/BmA=#2mePUSpwGSynzxJvgy\u0026r/(y-)RlwmV)7wPd", "ln": 4486, "col": 37, "line": 120 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 5168, "entropy": 5 }, "text": { "lines": 135, "top_char": 116, "max_ws_run": 30, "digit_ratio": 0.01, "space_count": 577, "char_entropy": 5, "unique_chars": 80, "top_char_null": 0, "lines_over_200": 1, "top_char_ratio": 0.08, "ascii_art_lines": 1, "avg_line_length": 37.28, "max_line_length": 219, "non_ascii_ratio": 0, "empty_line_ratio": 0.25, "last_line_length": 82, "long_token_count": 1, "whitespace_ratio": 0.14, "line_length_stddev": 38.3, "repeated_char_sequences": 9 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 5.01 } } }, "id": 155, "mol": "H(Cm)Md(Pa)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/prototype-pollution/references/payloads.md", "pid": 0, "risk": 3, "sha": "0c28491861979f96682f43d4278cfd88881fe4106101f7e78c35e830ff578a77", "size": 5168, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 121, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 112, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 354, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 71, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 142, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 439, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 291, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 41 ] ] }, { "id": "micro-behaviors/communications/url/construction/template::url-encoded-angle-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds a percent-encoded \u003c\u003e placeholder", "spans": [ [ 4550, 126 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 41 ] ] } ], "type": "markdown" }, { "id": 156, "mol": "K(Am)O₂(SXe)Md(Pa)", "sha": "eab625b4fc0a6eeabf46ff9c771c20ae4bc578725af36c641e4de0415ec74d8c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/race-conditions/SKILL.md", "risk": 4, "size": 17144, "type": "markdown", "depth": 1 }, { "id": 157, "mol": "H(Cm₂)Md(Pa)", "sha": "d524122007d56febcaded7dccc5bab1e442246c5b99ffab73117bb430c653d85", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/race-conditions/references/execution-harnesses.md", "risk": 3, "size": 10033, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "eIeKYzEEx[iV@DMwEq%VB7ol8Acb/jzAn[7eEAQyrDz.jaxrF]aAy$6aA}HgzxJ$hv@DlcB7/GoB0bNrvrrSmB7Gwmx(m)jBrC7iB.\u003eOhA+eV?xDQ.aB7GxnwPxwzx\u003eg=$v@C)?eOffrv%8)cz/cXpA+Px8Bzk]f3lQE1zE:(ixK@r8vRPE:Bzk]fazC)tBz\u0026pvA=lbjay/tbzddr)aA8oyv@C)?az2!ev%8)cz/cXozxK4mwGV86A+w%9e^-Zzq!Y(ZvqH0CavG{+Aa9\u0026#xDRkhaAg+fvqPN$wPv", "ln": 0, "col": 1, "line": 1 }, { "b": "AV/BCAbYSsaA8oyx(mK0B.bD2wGUy*arU=qze:r1By=OoBAh8kxd+r5AaJ]fBzbxfaAIsjy?$kaz/M$izE^Z8x(n3laARp9BrC7izGx@qwGV59A+O@#x)Ku3aA7.7wN/?6asHYcB7El^ayYe9vSJVazvdHev@Dp3x\u003equpaztF1wmYT3w[+*)wofpAr+Vb?q/(C\u0026wH[%xAV^UAnG.FXwnbQ@aARp9", "ln": 968, "col": 77, "line": 13 }, { "b": "A=2Jdx(!xgv\u003c2YjBz#wAay]g#w]/87wOb\u003e3wGUA0C{4fwwO=fn3lQD/vqf:8CwhejiV{.8B8Jgix(!l4ByO#by?vxjazC.mwN/\u003e6wI4Idy?khvAboD3wofpAB8#CqefG1PA+l\u003cBwmY*[A+O@#x)Kifx(v(ix(k5jvrb^)y?mA9Cw7M93lQEkxK@rc", "ln": 1720, "col": 34, "line": 21 }, { "b": "v}u=%B0ayWqBS.\u003cA+eV\u0026x(mL\u003carUogy?mVgy?WV@atmqFv\u003eR!fB8#LoaA}KwxDRhhaA}\u003cuBy=OkAV!!kBz\u0026:Ez^^f0Aa9\u003c4azC)toH.O@z/M$tvruf9BAg/kwPz\u003c2y-}./LPU0+", "ln": 2301, "col": 81, "line": 27 }, { "b": "av]Ehp-@L1q=Cv(l3vfXwftYbBZ#Q)lQ-bpA+Px8Bzk]fB0bQyBzkLlD2E*FxKM6}ayMy5z/ff3A=2w#3lQDlz/Pn@y?kjagCf!1dOjeZzGGP8C{4ixwGU!$zFa92xjS-pB-8qnzdLgDiV@0OA=k$vzdN^fvp%d)efF$AB8V5nB7CX3arU=uze0)2", "ln": 3301, "col": 3, "line": 48 }, { "b": "boP=Fq=B8NdNW3gdK)F4u#y44z/oAlA3czOCw7]6zd$BKCRiADBywV{wPxzBy?c{a3mWI@r8=WzdMOXWv%8*dazt\u003esAc15[fjw%AvpK7:AXqDIwg]hRxM4%lzEEx[dps+n3l{=uawWc4AclmOvQTs?wc$.sA+e:5iV}/(x\u003efqFzEEx[at41-Cw7]6ze0xg3pO\u0026xz!9A\u0026iV}/(c#0iNxM4%lzEEx[dstPkB7El^u[I=[bo[siB.\u003e@bA:-A\u003ey?X0pay/j@B8$]l3jn15bl", "ln": 4658, "col": 3, "line": 82 }, { "b": "c$41mx(n38u[rBdxjVf@zGGnnaA}HgzxJt3wmcJ]A%:3jw[=76wPzu)e^:fMrDzZ]u#{07eN@fhz/M$dv@k:0fjOxjCxdbhAaK6haARJAA+eV?xDRzgwGV5cwO=fn3jnmjmrS9Xx(v(sdMN[*axJk\u003cBy/JjvpJ\u003c\u003efcA?Qq-V4ebZS9Lq*\u002648ayDDxtY.u3efFs.u[rBdDT*Gaeh7NRv\u003eR!fB8#LoEpaVmeG!2hyH}xaB8U@fBAzkmxf3", "ln": 5436, "col": 37, "line": 107 }, { "b": "y?j.#B.LV5x(mMAayFRvx//=!wig[Vvi/q\u0026e^:fMlsB}Dhz=K$Byw/[A=Tn:u$A?YzY\u003c1cD2dzcwfumxvQTs?hz=KdwfumxB7!@l3n0x4x(4r\u0026vrb)3xkzG}iV}/-kr?v=kr\u003cljff.V=ff.WxB3z(%asH-dBrAkFByM$yvrh", "ln": 5696, "col": 9, "line": 114 }, { "b": "hAtd@ayGzbz^^G%u[I^raw^02wPyZ.wO=fzayE=fssvxMwQ5qHmq=QNwnb{]t@\u003e2Dr7n\u00261m}D^vBAh8kxdc$Kz/f-fA=+OFi.1ddz9?VLwI#wzBAh8kxdbw+e?5j#u[I^raxJn{wn=WkawUp4r3lm7vp%p(xf4eyv}xX5B-.tlat4.Ry?3)-xK@qrB8U@fBrAeEazt\u003esA5]T9CRj8Owg}z6vpKj[u[I=[s7(e.ayMygvqf)@ayEoBwmcJkayGNtx\u003egP]x(+zex(4)5A+e=jaAIa9ayGk3w[u0]zEWm0fjO{qzddr)eOP9qwN/*@z/dgAwmb:Rz/M$xxK@q$CYWImwmYo]zF}aFAa9l/atj\u003cDA:-D?atj\u003cVx(4r\u003eatj\u003cJwQ2sJaARKqwO%8jy\u0026%qifcCjLy\u003cxVfz/=s}D2NhkB0bpkvSC)$C}p7DA+xJiwO#Pwx(mV%v@#B6zxKalv@#TfB1wC4pe-oBxKL{kvTfLnxKL{7wQ4*3y+cYqzE:8=zdm6!wmYp6A=l8xwD", "ln": 5911, "col": 50, "line": 117 }, { "b": "f\u003c(KPu}K%Bh*3(gu)3\u003enzY\u0026\u003egvSC)$C{3TeAc0DX3n0w)pddU@fcA}Rk#nXlxKLQ)B08(8z!y[9xK#0@ePV2Vy?k4rCw7M9az+$myJTPqayPq4aAz44v}YpWy?kjaeG^-9xeAL2wO=f9z^)s3B7nT2x(v(IayDEwbZTuCCv+!Qyjf#gx/W\u003e0e}4aU3lQE0bZQ!-iYX\u003ccEi:e2iXtk$bZRNkeO6nPDPBhtx)\u00263UwmoBrfe4M5BzLFvvsqJm3lQE0bZTnKDU48ri.\u0026EInj=MDiXtk$wna7Se?RMWe*9-6ygQ)%azCZou@.nVAXfN\u0026wO#P$efFs#wObH]wPzff3lQE0ss(*Tx!rv%A=U@kzEt1rvqZuky\u0026r%0wN(]%wNPaXAXnF7z/M$xxK@q#B.\u003e\u003epl@3Vjz/fxpay/tcw[=p53lQEcz/oAlAc0MMwO#VyB7F\u003c4wPP5aCXgVaefF1WmLe7{Aa9*eaAIaoefFwswft]hxlv=qn\u003e}=CaAIToA4AbMwN#h\u003eayGk3w[u0]zEWk", "ln": 7194, "col": 13, "line": 145 }, { "b": "A=k?Fwg}swayEMjpdv/Bax7Zday[}[x(4u#vqPM#A=k(ru[qTcayFbpr3i[ra$sY+asXG-asXHOz/o.uv%8*dazt\u003esA5]T9CRj8Owg@1qD$3J9xD*?nayFblrZ*yG3n0wIdNO2\u003cBZ#RiwPRu\u003evrt{cdJ)-3LPTvEBAzE.fe24riw96Ag+HHviw96Ag+SVNBy/JnfkUoxvj=1#Byu?pvqNVswN/\u003e6x([RLv@=c\u003ewO#Q7vqH0ru\u003cX20w]zYjnKl5[v@=c\u003eB2$HmlR[)Uao", "ln": 9553, "col": 25, "line": 209 }, { "b": "A=br4y\u003cvSu3l{=uax8chazC.dwN/*@z/cYSHlrVSlQ.s?eG=I)o)GVmoE.IMayFbpoHRrFasxooAa\u003chkB9R?GwO\u0026?vuQ)K:tvQ}/j3L[Raw2scpASCkr7oCMmiA%hC42zACxXl:xMO9cflp!VAa\u003chru][Yraxp*0asHSlx\u003c$B^D2)$wB.28\u003eB9R*VB8LCe\u0026!AQsu#{QmuUaE[v{*-r3n0wIdO$58Bz2S9q=cjrdJ*c1e\u0026b1biV}/$pF+gpc@SMdmf", "ln": 9888, "col": 25, "line": 214 }, { "b": "aA?EcaA}\u003cuBywS{wGVbmy\u0026r-)aA8oyp/QEQ3n0xdELir{B7^jnB-.qnA+P\u0026hwm6a-D2)voc#iyteN\u0026dfwN(]Zq+et\u00263n0xdfj/lnfjP3vzz2DMjz[OAwJ\u003cGAc$vpozxJ-", "ln": 10344, "col": 41, "line": 227 }, { "b": "zE)ugy*?i]BZX]]ayYRnvrlH3B1N!bbo[sIz/Z1LvpJ!UB8}V}eG=I)p\u0026Zn[x(4u[wGUM9v{%gZBzkVhdK(O2FrRf:B9h2iat4zqj0mE4nKKXgx(mv1x\u003equEay!\u00260vpx", "ln": 12948, "col": 11, "line": 286 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 15596, "entropy": 5.21 }, "text": { "lines": 349, "top_char": 101, "max_ws_run": 7, "digit_ratio": 0.02, "space_count": 1955, "char_entropy": 5.21, "unique_chars": 100, "top_char_null": 0, "escape_density": 0.04, "top_char_ratio": 0.08, "avg_line_length": 43.69, "max_line_length": 117, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.16, "hex_escape_count": 6, "last_line_length": 32, "whitespace_ratio": 0.15, "line_length_stddev": 30.72 }, "binary": { "peak_region_bytes": 9216, "peak_region_entropy": 5.47 } } }, "id": 158, "mol": "K(Am)O₂(CXe)H₂(CmPo₂)Md(Pa)Th", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/rce/SKILL.md", "pid": 0, "risk": 330, "sha": "c58c20fa9dba8839b9410f7a0a68b6cabb5a169756814cebc8f34c13de07237e", "size": 15596, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 135, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 131, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 62, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 3349, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 1027, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 1768, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 1016, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 14 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/communications/http/curl::curl-command-remote-url", "conf": 0.85, "crit": 3, "desc": "curl command names a routable remote URL", "spans": [ [ 4722, 25 ] ] }, { "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation", "atk": "T1059.001,T1059.003", "conf": 0.94, "crit": 3, "desc": "Windows shell command-mode invocation syntax", "spans": [ [ 5500, 6 ] ] }, { "id": "objectives/command-and-control/backdoor/webshell/exec::php-request-shell-execution", "atk": "T1505.003", "mbc": "B0024", "conf": 0.99, "crit": 3, "desc": "PHP request parameter passed to shell execution", "spans": [ [ 9952, 13 ] ] }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "spans": [ [ 0, 8 ] ] }, { "id": "micro-behaviors/process/create/shell/pipeline::curl-pipe-shell-text", "atk": "T1059.004", "conf": 0.9, "crit": 3, "desc": "References a curl- or wget-to-shell pipeline", "spans": [ [ 9617, 25 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "uses": [ 8, 9 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 14 ] ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "uses": [ 15 ], "spans": [ [ 0, 23 ], [ 4, 22 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "uses": [ 15 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "third_party/SigBase/Certutil/Decode/OR/Download", "conf": 0.9, "crit": 5, "desc": "Certutil Decode", "spans": [ [ 6039, 33 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/OBFUSC", "conf": 0.9, "crit": 5, "desc": "Detects obfuscated indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 7348, 9 ] ] }, { "id": "third_party/SigBase/SUSP/EXPL/OBFUSC/Dec21", "conf": 0.9, "crit": 5, "desc": "Detects obfuscation methods used to evade detection in log4j exploitation attempt of CVE-2021-44228", "spans": [ [ 7322, 10 ] ] } ], "type": "markdown" }, { "id": 159, "mol": "O(C)H₂(Cm₂Po₂)Md(Pa)", "sha": "dc74f9bdfcaef5cd3ccb843a23ad263c6c6fc1c1d84a51191d0d52880b88cba9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/rce/references/command-injection.md", "risk": 4, "size": 7659, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boPS%z*c7JlSMR#Cv+kaqBr\u003e}A+e-{AaK8kc#:iBwozy7flQ]EB7]MgaMwcsaz2!av@@\u0026lwPq\u003c7B95\u0026N\u0026^^mopJf(.axI95pc6IrwN/T@azbt9xjVa5A+PAkB0a)lAb](cBZ]Ioz/M$zwPz\u003caz/cXbwO=peefE.^ayMyawNPaXAXzxuA:-/@By/FnB7]Jcaz\u003eLev}YB{aA8deaA7\u003cmBzblbwGUG0vrlH7v\u003c2n{vqfR23jo^OwGV8dx(+zvxK#67vQTd(wPxCEwPz\u003caz/djEvruf9A+e:0zxJ?9zdN=hvix-oy\u0026i*8vpB4:ay/tbAbPS9zGEGNmpxXtaz2CjA^n^wB0a)lB7Gf1eN@ZpByw)3wN({7wN/B[wJyfxxK#i}aARJAx(mV%v@%mABzbkdy?X05A:-=bBy/JnazC.jB-YeSvqYP#Bzbkdv@Dl%x(X5kz/Pn@y?kjwlVl\u003cOx(X5kCwhejayMyjB.LAeawUp4r4\u0026ucze0)2aA8pev@bZ0lpBvtqBH}3zH0vBwP?T9B7DFnxK#0@e*abbwGV5fx(4PdvSb!5ayP8bwNPa{azth8aARpdazkn6wPzG{awuY^", "ln": 0, "col": 1, "line": 1 }, { "b": "y?mSfc$1Yrxk5@bx(kNNe[nKdu[rBddLt^Qu[rBwz/66cx(dB5ayD*vy*XXmBzb98aAIHgCw.EAlsB}Gaz2!pz/P@vaAz4kB.bSoazts{wmY!5azC.nzY\u003cdnwEr0^C4\u003e#nzF-%5Bs[X4az\u003eL1x\u003e5n$B-7Yhx(v(vwmYv!zFsibz/cXpA+e\u0026%CPZxx", "ln": 677, "col": 13, "line": 10 }, { "b": "FrRf:rDz.(eKs2XzGGnqayEMPz!\u003c5#u[rBdqE%DKA+fo0ayP85aA}:AyC2@3u%)wKvrl8?boP\u003cax\u003eqxez/Pn@y?j-3x(XopiV@JUzdLqfwO+!2ay/tcw[=p5B0b4swN/\u003e8x(v(iCwhejaz#9uv{%g\u0026vQS+ZazC.9A:Yq+B-IpvePS3^nfx9RB7Gwzl1:+DBugJ)diJ%WiY?:Katmhrzzc6EwO2*6hx\u003cnSBAzE.fe3o\u003cqB:ePfjOTeeN\u0026BiflqkzBAITi3l{V?k#Q-9v@Dl%x(X4$v%8*dat4TSeL40drDz.(eKs2XzGE]Zc[co=auzPjj0lh0B8\u0026{yx(kOlB-IpvxMOuniXJd8vrlJyBzLFvbQ^tAB98qdzdLduazt\u003esA5]T9r6:zLmn${Ixk5@bx(kOBByxolA%-m0aw#=Vwftq6w[=5", "ln": 912, "col": 27, "line": 12 }, { "b": "iV]?1aBtj(jafgkwN/y(j0n9AxM2%PfjFTkfjOBjatmqFv\u003eR!fB8#Loa%pMvBz%n]fh$knm[3xgv}PHcvRGZkB97\u0026jB-N)$u%\u003csux\u003c$))zF78hvrcB2AV!?lxlbgzlSMScgb7Bt", "ln": 1342, "col": 23, "line": 22 }, { "b": "ay/tbzddr)aARJAu#{c}wPe+Iu)5(}wft#dzdK\u0026ixK@rbwPI*ezGxwuaA8oyxKM6}azC{uCxdztwGUz7B-7]kB.8XewNPaXAXnFgBzblaax9x5B-.WiqBr\u003e}w)]K\u003cy?WE4aARJAzddxax\u003ewGhwPz\u003caz/cXmvru0)wPG)Pq./{Ug=l{rfF\u003eWgd0fcp", "ln": 2308, "col": 21, "line": 38 }, { "b": "qCniLvrufiefE\u003eDeIG7qfd!\u003eif^4(Lc3}l%e}4aIw]zZ1wN(]]z/]J9wI4FpvqH6{BzkVhazCZovixV2xcqway\u0026%qre^.}gboPx{B-p=9xjUQ:z/drM\u0026^^moA+fc0wPv", "ln": 2534, "col": 25, "line": 40 }, { "b": "A+frhz/fSc3s!j0y-\u003erJasy\u0026ABz%n]fh$knm[3xgkxe\u0026eB7GwBAa9*eCw?Ijct)mewM{DogJmnNByf61zE^s0u0yO$Aa9*eBzbYqct)mewM{DogI{MvyJTP4j.XBNzEEx[to#3XBA}?p", "ln": 2958, "col": 56, "line": 48 }, { "b": "y\u0026r%0wN)xbzxJ+lCp^=Ox)7RwB7GwA3jn15avx\u003c+A+P+vk$16.fcB23Bw(WTy?mSf\u0026^^moAa9\u003c4eP=2wC4CYnvqE6dwO(y5vru66CxdztwGSx*rZ!O}fFLNtf/.fLf!0CprC(k/Bzbl6Bzkk[By!#navdbTflRqLfd[\u003egC5Rtufjk]AA::c5A=UV9aAz44v}YB{ayMx?wPzPfBy/rdy*?A%azth3wnC*$aARp9BrC^Fx(){cayPdgB-qenvpS}WawL\u003c5uRTx(lQ.t\u003ez/oAdvrccaw[=6)efG4FwO@S0aAIa7z/f8dA+flkwPI@oA+fc0wPz\u0026mx(\u003eGSFrRg4z/{7yBy/rdy*?A%aAITBx(mMaA=(nvayPslp?sV-e^.}[u%)CLB7+[9ax9w[A3c\u003e@aA}\u003cuBy=O6aARgiAbn%8wGUF\u003eA=MCtzF78lxK@q@z/6u1zE:\u003erB7GDmayPdgwO#VlC42zxaARpdzxJ$hzE^s0B0bgsdgfNcA+(\u003cIB095Iasy\u0026ABz#pZfe3o\u003cqB:ePflRqLfd[\u003egC5Rtufk$\u0026IByw#sB7ol8AccdOzE[33z7Y^zcM(U3arSmbasx].lTJ?(mn=e?e?O!fe?X?ffk+uyB7nS{wPxCyz/P@dy+G)wze:r1By/IDCQBQ=nfxoPq:T[!pFKnCiV}]Way2l@at2fQvrt{2cV%DCj.O}VA5]T9CQvJDBzLIKtp1wOBy/rdy*?A%e]ClAd0[oOpEv=rb@dz\u003cCX7wkb@dk\u0026wf\u0026#^dj3=pb@dAcdj3=pc3g+WwO#3\u0026AWSv.w]8uFCQA?yax9w[A3c[%aAz4hwmY^7x(\u003cX(B-IpvePS3^yAL0rBAzFyiXJc=k#Hiwr4\u0026Alzz9Q{flRqLB1.GJA=+-afl/9]zepNxeL40ipe:I!rz#s:iV{4cfd[\u003ege?O!{wPS06vqGH}fk$\u0026IByw#sBy/rdy*?A%B1.+=3sEmH3t%#@y?mr6B7/obB0bNoze:r1By/Iow]zYjBzbxfavxf#j0n3KzF0Q6z6izmAbP/uA+cw9x(XopaA}KwxDQY2BZ]l0x=]0Hazt\u003esA4+ZAwPGHWfFLNvlSMScgb7ByeIPmAi594hvqP**e^.}gboPV#xeAJ", "ln": 3461, "col": 84, "line": 54 }, { "b": "z*2YkaARpdaAImmyANUevpJ$ZB0a(#n\u003e}=CeN@jdvpB4:az+$exjV9o3jn15boP{bwPe+DaMv{oay/tcw[=p5as!NDx(mM{A=u5kzGE1Ax\u003c\u0026c2z/oAlAc0cIl@3V6v{%g\u0026vQS+ZefF?Gaw$M}azC.9A:Zy7u%)vHbZTozwna8vwmoBrfe1O$ygho]i^b7PB7]MgEj^T7z!\u0026{4j$Z+ZB963Ry?bhcEf}lDyhNM@i=5tnA5]T9bZTPTB2[5AC401DwO#3%A^YM5Bz\u003e@azAYW\u003evrlJyBzLFvvsnFdDUNCex/Z6vvq[mXfc\u003e)Tz/Z1}vqPO7e\u003cak]yH}xEe]LftBs}VKwg}wt3m6$kzE^DxwnVDHfe1O$xM4%lpgn0JEj^T7z!\u0026{4j$Z+ZB963Ry?d@3u%)vHrDz.-B.\u0026gpz/oAlA3e}cD2\u003e9IzY\u0026+iBy/Giz!@\u003c7wJy@wygho]i^b7PB7]Mgu[rBdygho]i=x7EefFtizGX6kk#{oUrZ/[+nL-8?efFtwD2(2YvrM6iC4CM4z/Pkp3sEK=B97e=zdN9aayF.#v@2T@i+98CByw)3wPyvMu[rBdCv+kAA=k(rl${WHefFtfB-7-awJBstzF0P}i+hXLAa9*eCw?Iju[I=[bo[AQq/(O\u0026atL80FrRf/CXgVaaz2ClaAIa7A+fulaAITBvqfv/Bn", "ln": 4631, "col": 87, "line": 74 }, { "b": "uQm4Dmn)b(ogr0ie\u003cak]yH}xEe]LftBs}VKwi8C3i5@T2Ef%v\u0026u\u003cWk=bo[sfBy/zlgA+XcLPT3[mLwp-zH35jB95KlD2NhkB0b7kA=2\u003eud0GuozxJsjDUNCex/YSAx(+zay\u0026r*0wN({1x(){bvqG+9dgfD\u003cu\u003cXfabZRNkeOYXVDPBhtzHA^SiYX\u003c6Ei:e2iXt5]iWx5kiXtx2bZRNkeP2[YDPBhtx)\u00262}fgX(qr5#-\u0026i5@T2Ef}lDbZTuCCv+!QyhNM@El5T2y\u0026sJeAYOkTx)\u00262}fgX(qr5#-\u0026i5@T2Ef}lDy9Xdxz=ZH\u003ci.\u003cjlx^w4Fp\u0026G#^iY.WIfe2\u003c(q=C!jgDmxFvsnFdDUNCex/WI^y\u0026sJeAYO2+bZTuCCv+!Qwpm(iDU^RAwPx?JEl62mnkAe-iX-AIiwj/?3m6%zDU48ri.\u003c9UiXt8{zE^DbDU48ri.\u003c9UiXryvbZT9uB#\u0026xbpc6$yEpM=9bZT9uB#\u0026xbpc6%/Ej)lApG7jCvsnF\u003cu%\u003crGbo[AQq/(O\u0026at+k2FrRf*B.\u003e\u003epqBr\u003e}c#T0tC{4rAwO@Siv@Dr$ayP85z*cmBBzbkdwQ5fgz!TqoB7GxnwPxjbq/(C=wfu2layMykz!Bi7awbx%nG-7=A=#2maARp9BrCQnBAIRwB0a)lA+e\u0026]A+fb#wGU]2ygQ)%aARpdawbWeaz+$8woe(4zE:(gB-8mMaw=#\u003czGE1yxK@r5zV", "ln": 5350, "col": 56, "line": 90 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 6725, "entropy": 5.43 }, "text": { "lines": 116, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.04, "space_count": 726, "char_entropy": 5.43, "unique_chars": 99, "top_char_null": 0, "lines_over_200": 1, "top_char_ratio": 0.08, "avg_line_length": 56.97, "max_line_length": 306, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.2, "last_line_length": 75, "long_token_count": 2, "whitespace_ratio": 0.13, "line_length_stddev": 50.33 }, "binary": { "peak_region_bytes": 5701, "peak_region_entropy": 5.4 } } }, "id": 160, "mol": "H(Cm₂)Md(Pa)Th", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/rce/references/cve-rce-recipes.md", "pid": 0, "risk": 219, "sha": "5575d4abb7c08bc3d684730fb41262585b46d9e3bf183e7a1072be79b47a5471", "size": 6725, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 316, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 340, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 725, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 2356, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 4249, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 372, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 194, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/communications/http/curl::curl-command-remote-url", "conf": 0.85, "crit": 3, "desc": "curl command names a routable remote URL", "spans": [ [ 1043, 61 ] ] }, { "id": "micro-behaviors/communications/http/download/curl::source-curl-insecure-option", "atk": "T1553.004", "conf": 0.92, "crit": 3, "desc": "curl disables TLS certificate verification", "spans": [ [ 3855, 10 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 25 ] ] }, { "id": "third_party/SigBase/EXPL/Shitrix/Exploit/Code/Jan20", "conf": 0.9, "crit": 5, "desc": "Detects payloads used in Shitrix exploitation CVE-2019-19781", "spans": [ [ 3589, 4 ], [ 3927, 9 ], [ 3980, 10 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/Soft", "conf": 0.9, "crit": 5, "desc": "Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 4759, 13 ], [ 4908, 12 ] ] }, { "id": "third_party/SigBase/EXPL/Log4J/CVE/2021/44228/Dec21/OBFUSC", "conf": 0.9, "crit": 5, "desc": "Detects obfuscated indicators in server logs that indicate an exploitation attempt of CVE-2021-44228", "spans": [ [ 5478, 9 ], [ 5629, 15 ] ] }, { "id": "third_party/SigBase/SUSP/EXPL/OBFUSC/Dec21", "conf": 0.9, "crit": 5, "desc": "Detects obfuscation methods used to evade detection in log4j exploitation attempt of CVE-2021-44228", "spans": [ [ 5636, 10 ], [ 5646, 10 ], [ 5657, 10 ] ] } ], "type": "markdown" }, { "id": 161, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "461abb3821450f85ab595803320f0b641253baa333d1bf2343d7585df11b8e66", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/recon/SKILL.md", "risk": 3, "size": 15968, "type": "markdown", "depth": 1 }, { "id": 162, "mol": "Md(Pa)", "sha": "c09319d81fb77ca066a90bc0cac06e551de4355ea4b9a97ef9fd9d7022c248f5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/recon/references/passive-sources.md", "risk": 2, "size": 3142, "type": "markdown", "depth": 1 }, { "id": 163, "mol": "Md(Pa)", "sha": "03b2b51ecdba042d6499ef36753dc9e8e8d5035f3883657a15eb250e5f14b6d4", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/recon/references/vhost-discovery.md", "risk": 2, "size": 5407, "type": "markdown", "depth": 1 }, { "id": 164, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "ade34e62af7531b663fc0c361c5d466222f5da24ecabdeac18a45355fb8e2f07", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/recon-ports/SKILL.md", "risk": 3, "size": 8031, "type": "markdown", "depth": 1 }, { "id": 165, "mol": "K(Am)O(Xe)H(Db)Md(Pa)", "sha": "70d1083f01d7feeeece9c364a2ccd6062d9011c18879519a34ef61b2d6c1e8f5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/reporting/SKILL.md", "risk": 4, "size": 3532, "type": "markdown", "depth": 1 }, { "id": 167, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "57c0034ef2c090eeb7172c7c7f1abd1b54b51b03e33eaf8d33d3da0aa7684576", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/request-builder/SKILL.md", "risk": 3, "size": 5477, "type": "markdown", "depth": 1 }, { "id": 168, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "070b8ca57f81501eea4fc442e85dec71a465da26d588f9dc9a063d7426324786", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/request-smuggling/SKILL.md", "risk": 4, "size": 16948, "type": "markdown", "depth": 1 }, { "id": 169, "mol": "H(Cm)Md(Pa)", "sha": "026a44f6c3723959b4ac1b2cf913d20ed7366240e4eca53dcc666e1f0f323c9a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/request-smuggling/references/client-side-desync.md", "risk": 3, "size": 4783, "type": "markdown", "depth": 1 }, { "id": 170, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "907ef4a7ad29ff6e5673d9e6fa6f6a84b6bd7bc85b25720ab29a8b59b7b7bb9f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/scan-mode-deep/SKILL.md", "risk": 3, "size": 11688, "type": "markdown", "depth": 1 }, { "id": 171, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "c2751dc8729b6f7fa8866a06c7aac1e9b90f3f3959d339b79933d6bc0927a7ae", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/scan-mode-quick/SKILL.md", "risk": 3, "size": 6238, "type": "markdown", "depth": 1 }, { "id": 172, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "7ab8cc632edd38da2c0996eb2fb1dd0df171cdd5be80da53c2378deada410670", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/scan-mode-standard/SKILL.md", "risk": 3, "size": 4761, "type": "markdown", "depth": 1 }, { "id": 173, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "84ff3e071dadda011fc5046809427fc27508d708bcf2df8fc9abc05d229099fc", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/session-mgmt/SKILL.md", "risk": 3, "size": 7187, "type": "markdown", "depth": 1 }, { "id": 174, "mol": "H(Cm₂)Md(Pa)", "sha": "8bc0f54d0bbe525429b5934c844b88a4090b83e0a8a7ad52852b7cdc018f0c12", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/session-mgmt/references/account-takeover-flows.md", "risk": 4, "size": 3985, "type": "markdown", "depth": 1 }, { "id": 175, "mol": "Md(Pa)", "sha": "b7a796403cad62d4640b2f4c12d921e9271a634891911facdec3e753a7f0cc29", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/session-mgmt/references/email-and-collision-payloads.md", "risk": 2, "size": 2153, "type": "markdown", "depth": 1 }, { "id": 176, "mol": "H(Cm)Md(Pa)", "sha": "06be17a18540a36114c86287cbc075e125046fb5a2a6b50bb5b974abbfc0dc77", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/session-mgmt/references/websocket-session-handling.md", "risk": 3, "size": 3506, "type": "markdown", "depth": 1 }, { "id": 177, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "e98132a04b2130fb329ac9e181471fb49f33920f34654be65197305f1df19bbf", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/shellcode/SKILL.md", "risk": 3, "size": 15420, "type": "markdown", "depth": 1 }, { "id": 178, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "88462359ffe89642e0111800d971ae44358ce6eb46516db4a02bcca7f8207137", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/SKILL.md", "risk": 4, "size": 18644, "type": "markdown", "depth": 1 }, { "id": 179, "mol": "Md(Pa)", "sha": "935467e0219202c8598375f9f04e3977781d214280f5b9a0a25990672315c86c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/references/nosql-payloads.md", "risk": 2, "size": 5436, "type": "markdown", "depth": 1 }, { "id": 180, "mol": "H(Cr)Md(Pa)", "sha": "21e8cc574767115166551cd90317b880fc2e6c737626654ac6dbb8b586bd0434", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/references/orm-leak.md", "risk": 2, "size": 5144, "type": "markdown", "depth": 1 }, { "id": 181, "mol": "Md(Pa)", "sha": "6e724286f598ef64ca71230fd466f91157ad2bddba1ae67e661e8bdcfa1013c9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/references/payloads.md", "risk": 2, "size": 6956, "type": "markdown", "depth": 1 }, { "id": 182, "mol": "Md(Pa)", "sha": "1ef55c0ec5f2d39ceb7254caf1a9c4da6de807662d76107454f1c2298e274889", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/references/techniques.md", "risk": 2, "size": 7353, "type": "markdown", "depth": 1 }, { "id": 183, "mol": "Md(Pa)", "sha": "dad33f77968d12ca15bb166b8c962eba768e1715e7a9410809dba15c673e655b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/sqli/references/xpath-ldap-injection.md", "risk": 2, "size": 6546, "type": "markdown", "depth": 1 }, { "id": 184, "mol": "K(Am)O(Xe)H(Cm)Md(Pa)", "sha": "3da429c066a0f5f811e4525207d1d0b183cc8a7c67a729e901b89e71261bfa70", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/SKILL.md", "risk": 4, "size": 19229, "type": "markdown", "depth": 1 }, { "id": 185, "mol": "O(C)H(Cm₂)Md(Pa)", "sha": "dfc72d39cdd6a282ba93cde792049cb83583dd7f83f84076b5184d3301a7fca5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/advanced-gadgets.md", "risk": 4, "size": 6941, "type": "markdown", "depth": 1 }, { "id": 186, "mol": "Md(Pa)", "sha": "96dca6f4e41589990a0e2b0988daf3886e51d94448adf360193f56e96deff9c6", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/bypass-payloads.md", "risk": 2, "size": 3770, "type": "markdown", "depth": 1 }, { "id": 187, "mol": "O(Ca)H(Cm₃)Md(Pa)", "sha": "19b98d0a47dc1d98162c7032e025e0aa098e006a27f0d8bc71ba7d1114d90dea", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/cloud-metadata-catalog.md", "risk": 5, "size": 5585, "type": "markdown", "depth": 1 }, { "id": 188, "mol": "Md(Pa)", "sha": "25ab50e20d4e65cc5c3e803f306ddd6e894e6fb4741bce0b41f497fee6a9d27e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/dns-rebinding.md", "risk": 2, "size": 3363, "type": "markdown", "depth": 1 }, { "id": 189, "mol": "H(Cm)Md(Pa)", "sha": "8c9efa2697f1afb0347533a8f4493444f4892fce0f74f35f96c992484b52e043", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/reverse-proxy.md", "risk": 2, "size": 3920, "type": "markdown", "depth": 1 }, { "id": 190, "mol": "H(Cm)Md(Pa)", "sha": "49520c070c7ecde5b09bfd20176d80a014de4c124a9b3050768d10fbf414a81d", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssrf/references/svg-pdf-headless.md", "risk": 3, "size": 4940, "type": "markdown", "depth": 1 }, { "id": 191, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "b695dce83490901b9f015327c337f623ea353daf1178ee0c7a3b6a6979b5e6dc", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/SKILL.md", "risk": 3, "size": 18836, "type": "markdown", "depth": 1 }, { "id": 192, "mol": "Md(Pa)", "sha": "5ed9e4bb7d4632341d70bfc3e5541b0516491978e9a385a2c16cdbfff0b9fcd9", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/references/detection-fingerprinting.md", "risk": 2, "size": 3716, "type": "markdown", "depth": 1 }, { "id": 193, "mol": "H(Cm₂)Md(Pa)", "sha": "588a8144ea91e2fb9c7b5579e1d83223c9a0b6c61f785af5e34730714e922639", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/references/java-engines.md", "risk": 3, "size": 6346, "type": "markdown", "depth": 1 }, { "id": 194, "mol": "O(C)H(Po)Md(Pa)", "sha": "b633cd9c8226d13039a9c9128441fac6d29d607bd598387bca47e990ef9074de", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/references/node-dotnet-other-engines.md", "risk": 4, "size": 7883, "type": "markdown", "depth": 1 }, { "id": 195, "mol": "Md(Pa)", "sha": "55db894c9ea6484ae6fbacf50dc3e5aa3356a79043cf00a66c5f1b5ed5edca0a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/references/python-engines.md", "risk": 2, "size": 5502, "type": "markdown", "depth": 1 }, { "id": 196, "mol": "Md(Pa)", "sha": "4e78e03395862da23cfbee35ff908bf77cb5e76bba5bb3a002713d832fbccf24", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/ssti/references/ssi-esi-latex.md", "risk": 2, "size": 5904, "type": "markdown", "depth": 1 }, { "id": 197, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "d4e0c534a3ed663fd83161b1c459eb62bde76c0360b19f432d52fb882cbf9b95", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/subdomain-takeover/SKILL.md", "risk": 3, "size": 11207, "type": "markdown", "depth": 1 }, { "id": 198, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "e9ba9568a5961085b3424379a3610864226e934ac40481f53656056c5d433d09", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/vuln-classes/SKILL.md", "risk": 3, "size": 11701, "type": "markdown", "depth": 1 }, { "id": 199, "mol": "K(Am)O₂(ErXe)Md(Pa)", "sha": "be595307e5b1f4c5fbeda9e6be599f900fac3bb79c0044252b22f00083f43dad", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/waf-bypass/SKILL.md", "risk": 4, "size": 15224, "type": "markdown", "depth": 1 }, { "id": 200, "mol": "K(Am)O(Xe)H(Cm₂)Md(Pa)", "sha": "6ccc78e40c43491d80ef18291a153f4a6da3eead07032f9eb9ec23a9fac5426f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/web-cache/SKILL.md", "risk": 4, "size": 14499, "type": "markdown", "depth": 1 }, { "id": 201, "mol": "Md(Pa)", "sha": "02f3e059824c48225583e0b360c69eae3a51e3b216ca760d52488d4a9d7440d8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/web-cache/references/unkeyed-headers.txt", "risk": 2, "size": 17088, "type": "text", "depth": 1 }, { "id": 202, "mol": "Md(Pa)", "sha": "b53f0baf33b4230701e2acbf812efcc0eefcfc52eccaff5bd472753afb3daf25", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/web-cache/references/wcd-and-poisoning.md", "risk": 2, "size": 7737, "type": "markdown", "depth": 1 }, { "id": 203, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "c5e5a19c2878aeb522bfecd7ae3b1f0b0be19ccbfdb7e4c63e95dc8e51efa4d4", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/windows-boundaries/SKILL.md", "risk": 3, "size": 8717, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "eIeKYzEEx[iV@SXzE^WfB1IlyBzkw@BzkVhA%=C?B7ol8Acb/jzAn[rwObH]wO#0?ay]z2B.$YcBrCHtaxJn{wn=WkaAIa7B-IhrC{3%rBzkw@BzkVhB0fE)LPSv.p+i.Pq+Q7uavwQ*efEqGr3iOXzGGDaax8@Zwn=Vmq/(CTyALnMnKux9efEkCm\u003et=InK\u003erOp/6?dc@s@5By!%7wN(]WA=kD0B8@D$x\u003eIa3dj=PjrZPCfaxy*catj\u003c8A+e=)zGGP3y-(k\u003cvrb)faAIydA=-BjAbV}fz/fT", "ln": 0, "col": 1, "line": 1 }, { "b": "B1wCTxKM09vruQ1v@3cdx(\u003eFsBz(btefF.Cz*c7wvTh{3B8@Ely*?yawPGyBvqYP#xM58qvqWh@BAy@3yH}Jew[=c}wPz:gx(n3laA}HgBzblaayMy9x)a69aAR4jxjVfcxKL%8wNP7Zaz2C0vR/Q^e*aenwN(])C{43ExK#ibB8bGay\u0026Z.yxK#5", "ln": 271, "col": 242, "line": 3 }, { "b": "v}Yp+zGvAMqE%DKA+fb#wI4?ry\u003cve.FrRf]z/^ajx(!l4ByO#}wg!iveIdqpra]#!aAIsjy?$kdB0a)ldK]EIw[u0]zEWl2v{%E/y\u0026r%ewHYeLw]zYjs7#L.z*cmBwQ5fgz!Tqoze19axjk)@z/fRGaw3U$x(:R$z^^f/wftubaA8vnwPw]myIvQ3B0bNrvrrSfwO2x{Bz\u0026pxwNPT#zxJv%z/{dAdTbMmBrCpsazCZoBzbkdCvt+DaA8cuvg37IzE^WfB0bNkA+w%9aMv{oaz2!py\u0026s3feO5BoefF[IB960BCYmFqx()^9x(v(uavOW@ff@RYwP?H6x(v(uavojbrZXFYyH}K7wO.Y$z/PQ", "ln": 443, "col": 414, "line": 3 }, { "b": "eP2izx\u003eH\u003c@x(v(iBywS{wHYeL\u0026^^moz/fbeA=ldAAaK5jze19axjk)@z/d9GCwhejaz\u003eX1xKL^)B8rDJCw7AbazC{8arR!FBz(btefFwswftV9z*c7wvTh{3B8@Ely*?yawPGEhga\u003cX0dN[b\u0026xjVa5A+PAkx(mMkdJ)-3LPTNRAV!}4v}W04x([64", "ln": 1133, "col": 9, "line": 17 }, { "b": "wN/G#\u0026^^moByxi5wPPqvaAImfzEETfA+cwbvrl98zfo]waz\u003eLev}W0bxK@q@vqG:5B7]-ccVZ).D($^Cm\u003eFg}Aa9*eaA?EcaA?gfx\u003ee/8B-YiVA=k\u0026dePUSszEETf", "ln": 5184, "col": 78, "line": 38 }, { "b": "wgobNrDz.ZazbLjayG2bvrlGxwQ4=]asICFBz8^{B-6G^p/6?mefFwsBzkP2y\u003cfrdwH[%9x(mE1Cxj({wObH\u003ewmY^laBCqiB7GxdvqYP#oJakQqY]Q[zeZQCze0\u003c3yHIshayGn4yJTVlB749\u003cy\u0026r%8zG639B9zLywohccefEkVePt-Gv}x.5aAR4eAaK67zF783C{3Kaze0(gzddm8vrb{iaBCq9z^^f0vixS9xkRo\u003eeN\u0026\u003cAeP#nMzE)\u0026%vR/P#yH}K7wO-G1A+PYdAV=+%sX\u00266^aMv{oayG52ze0K3C3(\u003czu@x@\u003ez/PzEg*?\u003cSu$T1\u003cC3(:wvqYP#v@bZ+AV!:Up/p7Rmn)bqp\u0026ZF@wN/*@z/e@9w].*b", "ln": 8224, "col": 264, "line": 43 }, { "b": "u#6s]zE)SugghTQwPRAmj0nS=x(Fboz/cXrwNP9(vpJ!UB8@EoA=k!qzF%zAx(do\u003ewGSyne[DTTB7/c3y?4x]wGVh9y?):5xcp=gAbP=sB0bNyaAz4mz!%PdayE(YvpP", "ln": 10958, "col": 134, "line": 48 }, { "b": "B-Rbmy*?i(ayYnizE^f@C}p7Qz/^agazULezE)Sbz/fbsdK(MpzEWl2D2E*FxKM6}aAzglxdU!AarR^Py?ml[BzkP2By/olaA8oyC4\u003ewclrN8+l[6lPp!S0CB0bNBx)ai0y\u00261wtv@bZ+A+e=laxiw)vrrR*p!S0uB0a(#arR!sx(4)5AV/praA}Hk", "ln": 20804, "col": 15, "line": 135 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 22867, "entropy": 5.19 }, "text": { "lines": 168, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.02, "space_count": 3194, "char_entropy": 5.19, "unique_chars": 102, "top_char_null": 0, "lines_over_200": 33, "lines_over_500": 14, "top_char_ratio": 0.07, "ascii_art_lines": 4, "avg_line_length": 135.11, "max_line_length": 806, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.15, "last_line_length": 55, "whitespace_ratio": 0.15, "line_length_stddev": 188.28, "repeated_char_sequences": 11 }, "binary": { "peak_region_bytes": 14336, "peak_region_entropy": 5.45 } } }, "id": 204, "mol": "K(Am)O(Xe)Md(Pa)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/windows-mitigations/SKILL.md", "pid": 0, "risk": 40, "sha": "b819b82b09260cf297ea314755d604329b25d17ad9bceec13778bcf63e6dd806", "size": 22867, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 631, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 319, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 593, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 20852, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 531, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 1181, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 491, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 30 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter-fields", "conf": 0.86, "crit": 1, "desc": "Agent skill frontmatter fields", "spans": [ [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-md-basename", "conf": 0.95, "crit": 1, "desc": "Agent skill markdown file name", "spans": [ [ 0, 0 ] ] }, { "id": "objectives/execution/automation/agent::skill-offensive-tool-reference", "atk": "T1059", "conf": 0.92, "crit": 1, "desc": "Agent skill offensive tool reference", "spans": [ [ 8320, 0 ] ] }, { "id": "well-known/app/ai/knowledge/agent-skills::skill-definition-file", "conf": 0.98, "crit": 3, "desc": "Agent Skills SKILL.md definition file", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/package/config::agent-skill-frontmatter", "conf": 0.9, "crit": 2, "desc": "Agent skill manifest frontmatter", "uses": [ 8, 9 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 7 ], "spans": [ [ 0, 30 ] ] }, { "id": "objectives/execution/automation/agent::skill-definition-marker", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "Declares an executable agent skill", "uses": [ 12 ], "spans": [ [ 0, 39 ], [ 4, 38 ] ] }, { "id": "objectives/supply-chain/trojanized/app/package::agent-skill-context-marker", "atk": "T1195.002", "conf": 0.84, "crit": 1, "desc": "Explicit agent-skill marker", "uses": [ 12 ], "spans": [ [ 0, 0 ], [ 4, 0 ] ] }, { "id": "objectives/execution/automation/agent::skill-offensive-capability", "atk": "T1059", "conf": 0.94, "crit": 4, "desc": "Agent skill offensive capability", "uses": [ 10, 14 ], "spans": [ [ 0, 39 ], [ 4, 38 ], [ 8320, 8 ] ] } ], "type": "markdown" }, { "id": 205, "mol": "K(Am)O₂(ErXe)Md(Pa)", "sha": "8960eb2ab0b04a202799a45911f2e2b26bd792f37e3e59f32f47fa63913bc5b0", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/SKILL.md", "risk": 4, "size": 20040, "type": "markdown", "depth": 1 }, { "id": 206, "mol": "Md(Pa)", "sha": "ca7d55e503214dabb9f1d8e915e2fb993c01378cd2e35b43f088c5e5cf484789", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/angularjs-csti.md", "risk": 2, "size": 4132, "type": "markdown", "depth": 1 }, { "id": 207, "mol": "Md(Pa)", "sha": "7fb7acb61465a99319512c89008703268a85155013e51935e4c05d132378001a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/bypass-arsenal.md", "risk": 2, "size": 8393, "type": "markdown", "depth": 1 }, { "id": 208, "mol": "Md(Pa)", "sha": "8a6c28b56b723a1b87c5ac574b56cd1481647d56b191e14fe6efe031bd961d36", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/css-injection.md", "risk": 2, "size": 4446, "type": "markdown", "depth": 1 }, { "id": 209, "mol": "Md(Pa)", "sha": "010ea37f42c43500dc7e42e3833c496cda027d73bd16dec6f4478b784458da9c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/dom-clobbering.md", "risk": 2, "size": 3973, "type": "markdown", "depth": 1 }, { "ctx": [ { "b": "boQ8!qY]^\u003eAa9l#aw=#zB0fE)LPS+vwO@R(njuomawbMPwQ4=@B-.tozxJUmayP8bwNPa{aAhvtC4CLlvqYP#D2E*FzE)x\u0026ayMy5z/x$NAa9*fwGT//lM*F:vrrS5wO(v6B98ChBy/Iov@Dl{A+fu7azCXivpKy4d0fxywO%ehz/oA9wIn1hxjSV8z/fVdzGE1jCXgVaefF.tD2dziefEqUqBSlWz!\u0026{4aARpdw]]NDx(n37A=7", "ln": 0, "col": 1, "line": 1 }, { "b": "z*2Yjy*?PuaAhmtBs?MzvqVA?wO#Q7z/dfImrSl.D30.lzF783wO=peazC)tBzbkdA=(nqvpB4:ay/t2wGUP6AV/Eqz/YFvaAhdtB0b4sw[=67C42A9vqZgde^.}gboP(}Abn@)wGUw?y?mTec]0eUaA}KwxDRwaz/xntA+fA9vqGT}xcqelz/okgw[=pbBp8z-u$:U0yZJpCv@=p5BuThMzGx-jwId!qxddqev%8T1zGEHwz/5]%zz2BqzEW9%c)z]la$kcOz/f5[BsquEzu", "ln": 368, "col": 68, "line": 4 }, { "b": "3oSxtA+PGmk5K}Qaw3AUxjSFue]#5yjTaMYBz%n]fh\u003e+Hff-@fa$EFFv{%gLBz(hdxjSYdwPQH=wO\u0026?yvpJ!UB8$Ygz!\u0026{4cN?ehB7ol8AcanJjAC1Mx(FeTwP?G#c$djovKJQcm(+r{s21J2zC+K!gFhQ%m]:F0yiTYbs7t(MgFhyUq!f/Snk:UwDt^$2Du-y!r.uB\u003er.u$5rZwljgef=2x(^]\u003cm(+r{s21J2zC+KVgc6I^ghH+#lVV%lC%MQI", "ln": 1516, "col": 76, "line": 23 }, { "b": "wHF*oA4Aw7z/oA9wJzg\u003ebX5CJtYK7!a$kO@w[bT}B7D:Bw]GgXau@3%u%)vHu%)wKvrl8?A=\u003e\u0026pat4RRzxHJxxMOunwfrGEePrW6i4#D$arR^HarR^HboR5sA=#1pBzbkdv@Dg1wN/?2AV=\u003ePA+e-(x)a5gxLzNf3sEmH3jn15ax9w[vqE5#B.\u003e\u003epvrDW9wO#Q7v{%E\u003cwft\u00261xjSh}z/fVdzGE0HA+eV\u0026aAz4mAbPSnwH[%nCXgVaayX=2wI#v]3sEmHygho]B7ol8Ac8Cgvr9GnxMumNwP]n0o?X91Bz$b?ADL\u0026lBsnO13v3l8e]LSFwNPa{B97\u0026jwN/yZzF9Jzw{503BzkVhc[fG=x\u003ew=rxMt.CwNPa{q/(C\u0026wJ-gkdshyAazbhbv}U", "ln": 2047, "col": 58, "line": 32 }, { "b": "B.90-aAz4ke]$Pwwge(*3taA#v@#B6zxJR3zE^M{c[fGIarU\u0026oAV/ExyH}xDBzbxfe]\u003eJAAbPSnwMik=Bs}AsByO#jfk+inwJ.kEB8\u003e\u003epaA?gfB.9YWc%Q%DdiZz]tqozB3lQEmvr9G2j-j?PaxRuinow@)qE%\u0026\u003cwPI@wdlwUZe]LYuzyu(Kz/Z1F", "ln": 2654, "col": 76, "line": 49 }, { "b": "v@Diidlv(+3oP$.v@=p5BuQ4tu%\u003crGbo[s7wQe9gxj\u003e^@asIeCwI4.jzE\u003evwB7Gf1ePLAtz*2\u0026jxcp]9vp%c]BAh8dxjV9j3sEmHxMO9c3oS3txcqnov)b5Vz/fcbA=k$YcUdd9B.$YcBs}GHyH}^gA+frkj.w?Ov@#B6zyx6BDUc\u0026hv}WnmxMOuniXJc+qDtCnyDS\u003c(q/)4]zF7OlA=k!ZxKL{Gz!9AcwIegux\u003e7*9dsA:?xLzJuA+f9aC4A6Jj10i0u%)vH3l{=rmQZ7zaz+$ex(k5iC4CYgvr\u0026$zv{%s#B-I4ov@=c\u003ewO#Q7vqH0laMv{oazb+jy-)Cfy?W=#azbLjz3\u003cVUu$:U0yZJpCBA}Xlj#$-zy***+xM4Y$wPAccz!%uji^kmKBy/\u003e.flqkXy?k^)B7ol8AcaoOz!0{bwO#O", "ln": 2873, "col": 42, "line": 53 }, { "b": "y***+q/(C\u0026wHICsy?$UuB.\u003e\u003eBcOv28e?O!fe?.3Vxk8lhdlv(Ez!0{bwO#PxvSb!5e[]ivwPysvo?WX]jzlDkp\u00266YKB7DFgz!A^4aARJAv@Dmbx(n68jtgw5k0iB}A=10uB7GxfvqPNpauTvQAclmBBA}?pjTUt.CYUq%p*[A^Cw?IjiV{L0zG6-uaAR)FwJ.zWvrlHlz/Pwok0iK%AclmBC42ifwJ.zZBZ/i4BsehMD2NsTcV:At", "ln": 3744, "col": 20, "line": 69 }, { "b": "z*cnlAV==xwPRA}aARsmx(mMj3sEmHygho]B7ol8Ac8B%z/fSray/7@v@1[VA=:C)A49}lDUc\u0026hv}Wn#xMOuniXJd5z!0i(xM4%liWx5\u003eEpaQMzeS@@iWeDWeN@ZtB0u2Ye{7=rzyu[ZjWajewPP5ej.eFvB.$YcBs}6zwNPW(mqMKLwO#Prb57[ba$kP/e]#5yjZ.@BBz%n]fh\u003e+Hfk$SyxfQuNA=:C\u0026DVjyvjaeLtEld^Fz/NmxwPP5ejUO%ijtwJzfGS#0d/", "ln": 5109, "col": 51, "line": 92 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 7093, "entropy": 5.39 }, "text": { "lines": 132, "top_char": 101, "max_ws_run": 10, "digit_ratio": 0.02, "space_count": 450, "char_entropy": 5.39, "unique_chars": 98, "top_char_null": 0, "lines_over_200": 3, "top_char_ratio": 0.07, "avg_line_length": 52.73, "max_line_length": 472, "non_ascii_ratio": 0, "empty_line_ratio": 0.11, "last_line_length": 3, "long_token_count": 6, "whitespace_ratio": 0.08, "line_length_stddev": 62.85, "repeated_char_sequences": 1 }, "binary": { "peak_region_bytes": 6069, "peak_region_entropy": 5.47 } } }, "id": 210, "mol": "O₂(SCa)H₂(CmDb)Md(Pa)", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/impact-pocs.md", "pid": 0, "risk": 44, "sha": "a9f3f0e666643c1c0be8574546f1fa122a4a5deaa2ecda053e88e3da0a4c7fa6", "size": 7093, "traits": [ { "id": "metadata/file/profile/language::lang-english--atom-1", "conf": 0.8, "crit": 2, "desc": "English function-word token \"the\"", "spans": [ [ 416, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-2", "conf": 0.8, "crit": 2, "desc": "English function-word token \"and\"", "spans": [ [ 64, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-3", "conf": 0.8, "crit": 2, "desc": "English function-word token \"that\"", "spans": [ [ 94, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 434, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-6", "conf": 0.8, "crit": 2, "desc": "English function-word token \"with\"", "spans": [ [ 489, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-7", "conf": 0.8, "crit": 2, "desc": "English function-word token \"this\"", "spans": [ [ 2702, 0 ] ] }, { "id": "metadata/package/config::agent-skill-directory-member", "conf": 0.95, "crit": 3, "desc": "File inside an agent skill directory", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/communications/url/construction/template::url-dollar-placeholder", "conf": 0.94, "crit": 3, "desc": "URL embeds a ${ } template placeholder", "spans": [ [ 5173, 21 ] ] }, { "id": "micro-behaviors/data/format/html::html-heading-tag", "conf": 0.85, "crit": 3, "desc": "Markdown contains an HTML h1 heading", "spans": [ [ 3808, 4 ] ] }, { "id": "objectives/credential-access/browser/session-hijack::agent-skill-bundles-access-token", "atk": "T1539", "conf": 0.99, "crit": 3, "desc": "Skill text names an access-token field", "spans": [ [ 1580, 12 ] ] }, { "id": "objectives/supply-chain/hidden-payload/xss-injection::html-event-handler-remote-fetch", "atk": "T1189,T1059.007", "conf": 0.98, "crit": 4, "desc": "HTML event handler fetches remote content", "spans": [ [ 2969, 55 ] ] }, { "id": "metadata/package/config::agent-skill-tool-file", "conf": 0.96, "crit": 3, "desc": "Executable file belonging to an agent skill", "uses": [ 6 ], "spans": [ [ 0, 25 ] ] } ], "type": "markdown" }, { "id": 211, "mol": "Md(Pa)", "sha": "b7d32bd009d7fe8f42c39bc6ee3641d92fe383271f3709b03b3ad9963651fe8b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xss/references/sink-contexts.md", "risk": 2, "size": 7699, "type": "markdown", "depth": 1 }, { "id": 212, "mol": "K(Am)O(Xe)Md(Pa)", "sha": "dc11469bb3874c931ff4dae375a85c504cd97b3e1fb01dbb09cca453f7f48663", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xxe/SKILL.md", "risk": 3, "size": 15000, "type": "markdown", "depth": 1 }, { "id": 213, "mol": "H(Po)Md(Pa)", "sha": "ded352aac57c0bdb99916526df90ba729b94fa6a1870f7936228b8b903274d27", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xxe/references/engine-and-local-dtd.md", "risk": 2, "size": 7609, "type": "markdown", "depth": 1 }, { "id": 214, "mol": "Md(Pa)", "sha": "912e7eb8d50e37649ac5cf25915e57f0f213a65fe0822581dabfad49205654b4", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xxe/references/payloads.md", "risk": 2, "size": 10908, "type": "markdown", "depth": 1 }, { "id": 215, "mol": "O(C)H(Po)Md(Pa)", "sha": "1ee7197304742b720d2b4f10dc8beea7fbeb5bb336cd99e829e1c6f175c8d370", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/skills/xxe/references/xslt-injection.md", "risk": 4, "size": 7708, "type": "markdown", "depth": 1 }, { "id": 216, "mol": "K(Te)", "sha": "e514259ce42eaedbbda707100d417a79e24f8fd16bd293ae040495e10eb9e6ac", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/__init__.py", "risk": 2, "size": 1068, "type": "python", "depth": 1 }, { "id": 217, "mol": "O(Er₂)H₂(Cm₄Os₂)", "sha": "bfe7395462b96d2846617eefb4fc579953434954018fa4a085ba5f62eab1e67a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/crawler.py", "risk": 6, "size": 29066, "type": "python", "depth": 1 }, { "id": 220, "mol": "H(Cm)", "sha": "b4e7d1e2140c5859190d51d179a81eb7470fc6b313b783d2a118ee109c7636f6", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/sqlmap.py", "risk": 2, "size": 4924, "type": "python", "depth": 1 }, { "id": 221, "sha": "1633c737fa02b17ad4327b0280e09d0f512179b28e42b2c9dab6724787c0ca2d", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/sslscan.py", "risk": 2, "size": 1409, "type": "python", "depth": 1 }, { "id": 223, "sha": "a6cc37a08375d3c77c661af68c37d6725a12b4c79a5165d6eb16dc360a6bb09b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/testssl.py", "risk": 2, "size": 1578, "type": "python", "depth": 1 }, { "id": 224, "mol": "H(Cm)", "sha": "7a04e7749d09f84ab816e7e32166f6e8848cb292ba34cc4352578cb87bb4d7e0", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/url.py", "risk": 2, "size": 10141, "type": "python", "depth": 1 }, { "id": 225, "mol": "H₂(DbF)", "sha": "cf9af6d0dd5788b67de9ec76f1819f6b449c1ed97c5d45d89916890705e2b39c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/wordlists.py", "risk": 2, "size": 6945, "type": "python", "depth": 1 }, { "id": 227, "sha": "a1f9c8f91c126306504e00825dae711e0d81b0db32c21f607b4c291e7571839a", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/auth/hydra.py", "risk": 2, "size": 3448, "type": "python", "depth": 1 }, { "id": 229, "mol": "O(La)H₃(CmOsPo)", "sha": "60f32f5561eb9a4fc083f4fe60f4cadfdf05be59a9c6da1fcf250117cf891b30", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/nmap/_engine.py", "risk": 4, "size": 10712, "type": "python", "depth": 1 }, { "id": 230, "mol": "H₂(CmDb)", "sha": "656d8803d47f05957e3b95cb1c510e24d9e257de130a50f745ac792b7a4dd4ee", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/nmap/_errors.py", "risk": 3, "size": 2439, "type": "python", "depth": 1 }, { "id": 232, "mol": "O(Dy)H(Cm)", "sha": "edc106aefe8d1e958d7437afe0aaa50c57ba35763d4f10d64d31760a5408f5e5", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/nmap/discovery.py", "risk": 2, "size": 2944, "type": "python", "depth": 1 }, { "id": 233, "mol": "O(Dy)H(Cm)Md", "sha": "3c77b59f88da221ab5802476cc91cf4162582ebf343f76715de889a9f55ef4b6", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/nmap/ports.py", "risk": 3, "size": 5121, "type": "python", "depth": 1 }, { "id": 236, "sha": "226ac038bf53f035490e8307555008548ccec493d5bd79bc739a028f2a81389f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/nmap/vuln.py", "risk": 1, "size": 4632, "type": "python", "depth": 1 }, { "id": 237, "mol": "K(Te)H(Cm)", "sha": "11fad8354a88839cc4d1a0ec6694934ad00ab13c803336a0f1e671ee1514484f", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/__init__.py", "risk": 3, "size": 2317, "type": "python", "depth": 1 }, { "id": 238, "mol": "O(C)H(Os)", "sha": "7dfc812689d2ca6986b58ab4824d8d4328c5e6451173e12f5695fa657043b8f7", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/_common.py", "risk": 3, "size": 10013, "type": "python", "depth": 1 }, { "id": 239, "mol": "K(Te)H₃(CmOsPo₂)", "sha": "1b97b4afea156ac03507180ef63d6c554dac904ad5da2be2798b1585db140569", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/bash.py", "risk": 5, "size": 18758, "type": "python", "depth": 1 }, { "id": 240, "mol": "H(Po₆)", "sha": "8eb663e668acb06e6ba9530edc9f8d48fb6d371cdeecc59e29d20d9b3fca07ed", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/manager.py", "risk": 4, "size": 18024, "type": "python", "depth": 1 }, { "id": 241, "mol": "O(Ca)H₃(Cm₄DbF₄)", "sha": "7e73f3bf0a40d5d93d1b99445a6cbb0dd42ba49fbbcfa61d3a178967fb50aa19", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/safety.py", "risk": 8, "size": 18168, "type": "python", "depth": 1 }, { "id": 242, "mol": "K(Te)H₃(CmOsPo₂)", "sha": "249c229349568596d4f01594b85c4543e34321982452094b76553017d77e7270", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/shell/tmux.py", "risk": 5, "size": 14442, "type": "python", "depth": 1 }, { "id": 244, "mol": "K(Te)H₂(Cm₃F₃)Md₂(Pa)", "sha": "c647ab9eb2b7175ec21029cfe53529dcfc88cce6a380e4d1bbee7008b1434452", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/codex_search.py", "risk": 5, "size": 19000, "type": "python", "depth": 1 }, { "id": 246, "mol": "H(Cm)", "sha": "b2b56fe4863d1b854be363e09fb3969277c3f8a3b73c8ee0e68d307bd0b13471", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/fetch_page.py", "risk": 2, "size": 2220, "type": "python", "depth": 1 }, { "id": 247, "mol": "H(Cm)", "sha": "e8b80527b19e379e5600d161ac037883040a194cb9ed710943cbcaaa3022a1f1", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/gobuster.py", "risk": 2, "size": 3767, "type": "python", "depth": 1 }, { "id": 248, "mol": "Md(Pa)", "sha": "64a9049d61b0e556cc052e932ede2bddd2ae1e89090d2e0edc49cb117fff5d09", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/nikto.py", "risk": 2, "size": 1668, "type": "python", "depth": 1 }, { "id": 249, "mol": "K(Te)H(Cm₂)Md(Pa)", "sha": "9c56473bf8d9589b8a7c155172dcdef4219c02f3d65091356579ee839ca4622d", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/sources.py", "risk": 4, "size": 5819, "type": "python", "depth": 1 }, { "id": 250, "mol": "H₂(CmCr)", "sha": "a247a9b3bafda542bae5084554ffd66c9ae567a401914a4046c7b8956ceab03e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/SOURCES_external.json", "risk": 2, "size": 35965, "type": "json", "depth": 1 }, { "id": 251, "mol": "H(Db)Md", "sha": "7a3242d7373e9a6d66be111e2f2d8ef6e9c4750ca0914d5d76de2c2b4dbb8e49", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/can-i-take-over/README.md", "risk": 2, "size": 85049, "type": "markdown", "depth": 1 }, { "id": 258, "mol": "H(Cm₃)", "sha": "95ce78f41de188b5897c8b5bb9eb80f7ccd7a13f25083ee5ff5c7d00efc1a217", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/gtfobins/curl.md", "risk": 1, "size": 1160, "type": "markdown", "depth": 1 }, { "id": 283, "mol": "H(Po)", "sha": "963350fd61f9fb024682406c58f8068a8d9ff335612f809acf78b968009ef478", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/gtfobins/python.md", "risk": 2, "size": 2506, "type": "markdown", "depth": 1 }, { "id": 310, "mol": "H(Cm)", "sha": "50d8441acde1165b60f78a54613077a1fb22b64ccc74cfe4c0be883030c379c1", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/csrf/05-Testing_for_Cross_Site_Request_Forgery.md", "risk": 2, "size": 13315, "type": "markdown", "depth": 1 }, { "id": 314, "mol": "H(Cm)", "sha": "d29b520bf7fc52255d73df7b5d597cd34e0da6b27fe28f549c1c84642e8cc392", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/information-disclosure/04-Review_Old_Backup_and_Unreferenced_Files_for_Sensitive_Information.md", "risk": 2, "size": 18756, "type": "markdown", "depth": 1 }, { "id": 315, "mol": "H(Db)", "sha": "a131b1ac0f1a04f45269c69c4134bc22b33813aeaf8ca2781c6fc1834b3d304e", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/insecure-file-uploads/09-Test_Upload_of_Malicious_Files.md", "risk": 2, "size": 15563, "type": "markdown", "depth": 1 }, { "id": 316, "mol": "K(Te)", "sha": "98b0305c389ce0ef1617a74c7b74adde5903c2139a955fb09bc8c965ab492936", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/lfi/01-Testing_Directory_Traversal_File_Include.md", "risk": 2, "size": 10728, "type": "markdown", "depth": 1 }, { "id": 322, "mol": "H₂(CmPo)", "sha": "f06a20ba9078378108f9e21015e7b3a9f0eed2dc651f0afaa786223ade82749c", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/rce/12-Testing_for_Command_Injection.md", "risk": 2, "size": 14404, "type": "markdown", "depth": 1 }, { "id": 327, "mol": "K(Te)", "sha": "dee5d22f2b803f514ce2af4a126907fd6e9af5e0e7490146960226e628645998", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/sqli/05-Testing_for_SQL_Injection.md", "risk": 2, "size": 44793, "type": "markdown", "depth": 1 }, { "id": 329, "mol": "K(Te)", "sha": "92312ce77de3d3d57bdbac5b9a5d2a7a7b0165718cfc4fe7e2d2d389df80b53b", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/sqli/05.7-Testing_for_ORM_Injection.md", "risk": 2, "size": 5399, "type": "markdown", "depth": 1 }, { "id": 331, "mol": "K(Te)", "sha": "2c3171ae8f57928e7055b433c25ab38d07c0c6e28183f8dd24e917207cf25738", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/ssrf/19-Testing_for_Server-Side_Request_Forgery.md", "risk": 2, "size": 5873, "type": "markdown", "depth": 1 }, { "id": 332, "mol": "K(Te)H(Cm₂)", "sha": "840b161f29bac77bf6caf3c66771fa64aeb55698edd6ee01ef8b91a8417c4ec8", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/ssti/18-Testing_for_Server-side_Template_Injection.md", "risk": 3, "size": 6296, "type": "markdown", "depth": 1 }, { "id": 333, "mol": "H(Cm)", "sha": "d8a4c215d35cfd7e619a17d79008f0b197937320978450e20cc3af229a5f45c3", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/subdomain-takeover/10-Test_for_Subdomain_Takeover.md", "risk": 2, "size": 7110, "type": "markdown", "depth": 1 }, { "id": 335, "mol": "H(Cm)", "sha": "e6b4f587063428cb5cc1526b16d748d5d366d4e847bd4cf2eb1cc76f75833654", "path": "swarmattacker-0.1.1-py3-none-any.whl!!src/tools/web_recon/corpus/wstg/xss/01-Testing_for_Reflected_Cross_Site_Scripting.md", "risk": 2, "size": 14153, "type": "markdown", "depth": 1 }, { "id": 338, "mol": "Md₂(LiPa)", "sha": "88eb8f55965b33550483c45dc7e0a0935c2c2754b1b422904b423534dd5b5aba", "path": "swarmattacker-0.1.1-py3-none-any.whl!!swarmattacker-0.1.1.dist-info/METADATA", "risk": 3, "size": 19235, "type": "pkg_info", "depth": 1 }, { "id": 339, "mol": "Md(Pa)", "sha": "8f4f481e0f982c65fe5f1b93d914a6755fbbed29b167a781fbd76ebfeaddb217", "path": "swarmattacker-0.1.1-py3-none-any.whl!!swarmattacker-0.1.1.dist-info/entry_points.txt", "risk": 1, "size": 68, "type": "text", "depth": 1 }, { "id": 341, "mol": "Md(Re)", "sha": "a47d4864e012a6055833593cd114ef44b76e2d7b3862c6ba62e4f5460d5f081b", "path": "swarmattacker@0.1.1.registry.json", "risk": 1, "size": 2064, "type": "registry", "depth": 1 } ], "omitted_files": 220, "rev": "c7f7e", "v": "8" } }