{
  "ml": {
    "v": "7",
    "id": 2936,
    "lvl": -1,
    "conf": 0,
    "prob": 0.00014973680663388222,
    "type": "crate",
    "version": "v18.18",
    "analyzed_at": "2026-09-13T19:03:39Z"
  },
  "path": "caliban-agent-core-0.12.0.crate",
  "raw": {
    "rev": "c7f7e",
    "files": [
      {
        "id": 2936,
        "ctx": [
          {
            "b": "abZyg000000@(+sy?Wu!zy]pfwO#Pwv@Dy0eIF!iga\u003emkv@=11wDq8g*MAJuM8gD}k7%*4oHRMwQ[nfWLb}O+qKb%TnxWlfX\u003c]kF[fn3A1p$RCwkYA:(=UZ[E.{z]}pt35FwR).KM^{TO?siiK{6LX@?5{\u003eD*Olj]MDU0T3#(Zt\u003cSs5Dq=D.3=/@+kFLp*=71yRYl[$ktVH9FZIIJ5aaqMVN)iRnKaak@p8J@JVhJ4Oueb3*k6M]E2.3s:\u003ePxrSvy]e\u003eMI43Mp5\u003ed\u0026NpOKhV!NZUWdED0VaSZH@R",
            "ln": 0
          }
        ],
        "mol": "O(C)H₅(Cm₆Db₂F₉OsPo₃)Md₂(Pa₃)",
        "pid": 2,
        "rel": "fetched",
        "sha": "6f8ae388b47217594e0a9bad22a50c94233bcff33975eb83ac4acd6b5b5a63b5",
        "via": "https://static.crates.io/crates/caliban-agent-core/caliban-agent-core-0.12.0.crate",
        "path": "pkg:cargo/caliban-agent-core@0.12.0",
        "risk": 51,
        "size": 212586,
        "type": "crate",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 212586,
              "entropy": 8
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 212586,
              "peak_region_entropy": 7.84
            }
          }
        },
        "ident": {
          "name": {
            "value": "caliban-agent-core",
            "source": "crate.name",
            "verified": false
          },
          "urls": [
            {
              "url": "https://github.com/caliban-ai/caliban",
              "kind": "repository",
              "source": "crate.repository"
            }
          ],
          "trust": "unsigned",
          "emails": [
            "john.ford2002@gmail.com"
          ],
          "authors": [
            {
              "name": "John Ford",
              "role": "author",
              "email": "john.ford2002@gmail.com",
              "source": "crate.authors"
            }
          ],
          "version": {
            "value": "0.12.0",
            "source": "crate.version",
            "verified": false
          },
          "identifier": {
            "value": "caliban-agent-core",
            "source": "crate.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/data/control-flow/loop::rust-collect-call",
            "conf": 0.85,
            "crit": 2,
            "desc": "Rust materializes an iterator with .collect()",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/tld::reserved-documentation-tld-url",
            "conf": 0.95,
            "crit": 3,
            "desc": "URL uses RFC 2606 reserved documentation TLD",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/os/event/library/tokio::tokio-namespace",
            "conf": 0.5,
            "crit": 3,
            "desc": "References the Tokio async runtime namespace",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/agent::ai-agent-unattended-execution-value",
            "atk": "T1059",
            "mbc": "B0022",
            "conf": 0.9,
            "crit": 1,
            "desc": "Unattended agent execution mode value",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::rust-test",
            "conf": 0.95,
            "crit": 3,
            "desc": "Rust test marker or harness",
            "from": [
              {
                "file": 4
              }
            ],
            "uses": [
              33,
              36
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/cwd::rust-current-directory",
            "conf": 0.88,
            "crit": 3,
            "desc": "Rust reads current directory",
            "from": [
              {
                "file": 19
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory",
            "conf": 1.0,
            "crit": 2,
            "desc": "File identified as a test by path or name",
            "from": [
              {
                "file": 34
              }
            ],
            "uses": [
              14,
              47
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-2",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/read::rust-read-to-string",
            "conf": 0.88,
            "crit": 3,
            "desc": "Reads a file into a Rust string",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-7",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/literal::localhost-source",
            "conf": 0.75,
            "crit": 2,
            "desc": "Source references the localhost hostname",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/direct::rust-qualified-process-command",
            "atk": "T1059",
            "mbc": "E1059",
            "conf": 0.95,
            "crit": 3,
            "desc": "Creates Rust command via qualified path",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-6",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/exec::rust-command-new-call",
            "atk": "T1059",
            "conf": 0.85,
            "crit": 3,
            "desc": "Constructs a Rust process command",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory-path",
            "conf": 1.0,
            "crit": 1,
            "desc": "File is in common test directory",
            "from": [
              {
                "file": 34
              }
            ]
          },
          {
            "id": "micro-behaviors/data/string/replace::rust-string-replacement-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Rust replaces matched string content",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "metadata/package/manifest/name::cargo-package-version",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package has version"
          },
          {
            "id": "metadata/package/testing/corpus::ssrf-category-label",
            "conf": 0.9,
            "crit": 3,
            "desc": "SSRF attack category label",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::rust-iter-call",
            "conf": 0.85,
            "crit": 2,
            "desc": "Rust creates an iterator with .iter()",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/runtime::is-test",
            "conf": 0.9,
            "crit": 2,
            "desc": "Test, spec, or fixture file",
            "uses": [
              6
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/direct::external-ipv4-http-endpoint",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.95,
            "crit": 3,
            "desc": "HTTP endpoint uses external IPv4",
            "from": [
              {
                "file": 2949
              }
            ],
            "uses": [
              30
            ]
          },
          {
            "id": "micro-behaviors/process/create/direct::rust-command-output",
            "atk": "T1059",
            "mbc": "E1059",
            "conf": 0.92,
            "crit": 3,
            "desc": "Rust Command captures child output",
            "from": [
              {
                "file": 19
              }
            ]
          },
          {
            "id": "metadata/file/string/cloud::cloud-instance-metadata-link-local-host",
            "conf": 0.88,
            "crit": 3,
            "desc": "Cloud instance metadata link-local address",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/rename::rust-fs-rename",
            "conf": 0.86,
            "crit": 3,
            "desc": "Renames a path with Rust fs::rename",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/os/env/access::rust-env-module-vars",
            "atk": "T1082",
            "conf": 0.9,
            "crit": 3,
            "desc": "Enumerates the Rust process environment",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::tests-path-basename",
            "conf": 1.0,
            "crit": 1,
            "desc": "Tests path basename"
          },
          {
            "id": "micro-behaviors/communications/http/url/external-ip::url-external-ip-script",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 1,
            "desc": "Source string contains a raw external-IP URL",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/open::rust-open-options",
            "conf": 0.88,
            "crit": 3,
            "desc": "Rust OpenOptions builder",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::command-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Command field or assignment key",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/llm::llm-refusal-phrase-corpus",
            "conf": 0.9,
            "crit": 3,
            "desc": "Contains common model-refusal phrases",
            "from": [
              {
                "file": 58
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/literal::http-ip-url",
            "conf": 0.95,
            "crit": 3,
            "desc": "Contains an external-IP HTTP URL",
            "from": [
              {
                "file": 2949
              }
            ],
            "uses": [
              26
            ]
          },
          {
            "id": "micro-behaviors/fs/path/temp::tmp-path-content",
            "conf": 1.0,
            "crit": 2,
            "desc": "Contains a /tmp/ or /var/tmp/ path",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-1",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::rust-test-attr",
            "conf": 0.9,
            "crit": 2,
            "desc": "#[test] attribute",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/crate::reqwest-crate",
            "conf": 0.7,
            "crit": 3,
            "desc": "References reqwest Rust HTTP library",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/file/profile/metrics::source-at-most-two-comments",
            "conf": 0.88,
            "crit": 1,
            "desc": "Source has at most two comments",
            "from": [
              {
                "file": 22
              }
            ]
          },
          {
            "id": "metadata/package/testing/harness/unit::rust-cfg-test",
            "conf": 0.9,
            "crit": 2,
            "desc": "#[cfg(test)] attribute",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/manifest/name::cargo-readme-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package declares readme"
          },
          {
            "id": "micro-behaviors/fs/file/create::rust-file-create",
            "conf": 0.86,
            "crit": 3,
            "desc": "Rust File::create call",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "objectives/command-and-control/remote-command/keywords::command-dup",
            "conf": 0.2,
            "crit": 1,
            "desc": "Command hook configuration key"
          },
          {
            "id": "objectives/command-and-control/remote-command/llm/action::llm-api-key-local-before-action",
            "conf": 0.88,
            "crit": 1,
            "desc": "Local prompt precedes secret action",
            "from": [
              {
                "file": 65
              }
            ]
          },
          {
            "id": "micro-behaviors/os/env/access::std-env-var",
            "conf": 0.86,
            "crit": 3,
            "desc": "Reads a Rust environment variable",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/config/accounts::unix-account-database-path-reference",
            "conf": 0.95,
            "crit": 3,
            "desc": "Unix account database path reference",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/write/direct::fs-write",
            "atk": "T1041",
            "conf": 0.85,
            "crit": 3,
            "desc": "Writes a file with Rust fs::write",
            "from": [
              {
                "file": 18
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/tasking::http-task-command-field-read",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.94,
            "crit": 1,
            "desc": "Reads structured task command field",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/file/string/file::tmp",
            "conf": 0.2,
            "crit": 1,
            "desc": "tmp keyword",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/manifest/name::cargo-license-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package declares license"
          },
          {
            "id": "metadata/package/testing/presence/harness::rust-tests-directory-path",
            "conf": 0.9,
            "crit": 1,
            "desc": "Path identifies Rust tests directory",
            "from": [
              {
                "file": 34
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-4",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::pipeline-terminates-in-shell",
            "atk": "T1027,T1059.004",
            "mbc": "B0032",
            "conf": 0.8,
            "crit": 3,
            "desc": "Pipeline terminates in a shell",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::rust-loop-statement",
            "conf": 0.8,
            "crit": 2,
            "desc": "Rust infinite loop statement (loop {})",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/file/read::rust-fs-read",
            "conf": 0.9,
            "crit": 2,
            "desc": "Rust reads a file into bytes",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/eval::shell-heredoc",
            "mbc": "E1059.004",
            "conf": 0.8,
            "crit": 2,
            "desc": "shell script heredoc"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::curl-pipe-shell-text",
            "atk": "T1059.004",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a curl- or wget-to-shell pipeline",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-or-declaration-file",
            "conf": 0.85,
            "crit": 1,
            "desc": "File is a test or type-declaration source file",
            "from": [
              {
                "file": 2988
              }
            ],
            "uses": [
              19
            ]
          },
          {
            "id": "metadata/file/profile/metrics::source-comment-bytes-over-300",
            "conf": 0.92,
            "crit": 1,
            "desc": "Source has over 300 comment bytes",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::command-field-key",
            "conf": 0.9,
            "crit": 1,
            "desc": "JSON-like object command field",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-3",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/lib/reqwest::rust-reqwest-client-builder",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.88,
            "crit": 3,
            "desc": "reqwest HTTP client builder",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/tasking::http-task-command-field",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 1,
            "desc": "Structured object contains a command field",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "metadata/lang/source::automatically-generated-source-marker",
            "conf": 0.85,
            "crit": 1,
            "desc": "Generated source provenance marker",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/data/source/property/read::rust-get-accessor-call",
            "conf": 0.85,
            "crit": 2,
            "desc": "Rust calls a .get() accessor",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/readdir::rust-read-dir",
            "atk": "T1083",
            "conf": 0.82,
            "crit": 3,
            "desc": "Enumerates a directory with Rust std::fs",
            "from": [
              {
                "file": 8
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/chmod/executable/mode::set-permissions-call",
            "conf": 0.84,
            "crit": 3,
            "desc": "Rust set permissions call",
            "from": [
              {
                "file": 38
              }
            ]
          },
          {
            "id": "metadata/package/manifest/name::cargo-repository-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package declares repository"
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/package/manifest/name::cargo-meaningful-description",
            "conf": 0.78,
            "crit": 2,
            "desc": "Cargo package has meaningful description"
          },
          {
            "id": "metadata/package/manifest/name::cargo-package-name",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package has name"
          },
          {
            "id": "micro-behaviors/data/serialize/json::result-field-key",
            "conf": 0.9,
            "crit": 1,
            "desc": "JSON-like object result field",
            "from": [
              {
                "file": 11
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ip/literal::direct-ip-http-client",
            "atk": "T1071.001",
            "conf": 0.95,
            "crit": 3,
            "desc": "Requests a direct-IP HTTP endpoint",
            "from": [
              {
                "file": 13
              }
            ],
            "uses": [
              30,
              44,
              61
            ]
          },
          {
            "id": "metadata/build/archive::archive-cargo-toml-entry",
            "conf": 0.9,
            "crit": 1,
            "desc": "Archive contains Cargo.toml"
          },
          {
            "id": "metadata/package/testing/presence/harness::archive-test-directory-member-path",
            "conf": 0.98,
            "crit": 3,
            "desc": "Archive ships a root-level test tree"
          },
          {
            "id": "objectives/command-and-control/beacon/network/http::direct-http-c2",
            "atk": "T1071.001",
            "mbc": "B0030",
            "conf": 0.95,
            "crit": 4,
            "desc": "Direct HTTP C2 infrastructure",
            "from": [
              {
                "off": 43906,
                "file": 2949,
                "line": 1155
              },
              {
                "file": 2988
              },
              {
                "off": 764,
                "file": 3001,
                "line": 19
              }
            ],
            "uses": [
              39,
              40,
              71
            ],
            "spans": [
              [
                0,
                41
              ]
            ]
          }
        ]
      }
    ]
  }
}