{
  "llm": {
    "conf": 0.85,
    "grade": "hostile",
    "model": "Qwen/Qwen3.6-27B",
    "review": true,
    "outcome": "hostile",
    "interpretation": "Git history falsification and hook bypass"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-rc.1",
    "lvl": 100,
    "conf": 85,
    "mods": [
      {
        "cls": 0,
        "raw": 0.9999871,
        "rte": "az",
        "prob": 0.9999871
      }
    ],
    "prob": 0.85,
    "skip": [
      {
        "rte": "az/tar",
        "why": "unavailable"
      },
      {
        "rte": "az/tar",
        "why": "unavailable"
      }
    ],
    "files": [
      {
        "id": 0,
        "lvl": 100,
        "conf": 85,
        "prob": 0.8500000238418579,
        "type": "tar.gz"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.9999747276306152,
        "type": "batch"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00005728006362915039,
        "type": "json"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00003170967102050781,
        "type": "json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-02T23:58:28Z"
  },
  "path": "simalchaudhari-spin.tar.gz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy80000000zNI)t/{\u003cLk.2IxV\u003ex+v[NIcEAUhJV:4Nv-Y$dEjpWq)v\u003cAUidkvX\u003c9z8kE",
            "n": [
              {
                "c": 2,
                "d": "Archive parser reported errors",
                "i": "metadata/file/metrics::archive-parse-error",
                "o": 0,
                "z": 24,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 0
          }
        ],
        "mol": "O(Er)H(Po)",
        "sha": "79c5144b0f08ebac8884face34ca64c17fdfa405834e2e2a0751e675f2b02479",
        "path": "simalchaudhari-spin.tar.gz",
        "risk": 118,
        "size": 7186,
        "type": "tar.gz",
        "facts": {
          "metrics": {
            "file": {
              "size": 7186.0,
              "entropy": 7.96,
              "size_bytes": 7186.0
            },
            "parse": {
              "error_count": 1.0
            },
            "binary": {
              "overall_entropy": 7.96,
              "peak_region_bytes": 7168.0,
              "peak_region_entropy": 7.82
            }
          }
        },
        "traits": [
          {
            "id": "objectives/evasion/indicator-removal/history::git-history-falsification",
            "atk": "T1070.003",
            "conf": 0.9700000286102295,
            "crit": 5,
            "desc": "Git history falsification with hook bypass",
            "from": [
              {
                "off": 1165,
                "file": 1,
                "line": 24
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-log-last-commit-metadata--rx-1",
            "atk": "T1070.003",
            "conf": 0.8799999952316284,
            "crit": 1,
            "desc": "Regex component marker",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::system-clock-rewind",
            "atk": "T1070.003",
            "conf": 0.949999988079071,
            "crit": 4,
            "desc": "Rewinds system clock to prior time",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-current-branch-query",
            "atk": "T1070.003",
            "conf": 0.800000011920929,
            "crit": 3,
            "desc": "Queries current git branch",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-local-author-rewrite",
            "atk": "T1070.003",
            "conf": 0.8999999761581421,
            "crit": 4,
            "desc": "Rewrites local git author identity",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::timestamped-amend-rewrite",
            "atk": "T1070.003",
            "conf": 0.9300000071525574,
            "crit": 4,
            "desc": "Git amend with timestamp preservation",
            "from": [
              {
                "off": 773,
                "file": 1,
                "line": 14
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/script-host::cmd-exe-c-command",
            "conf": 0.8500000238418579,
            "crit": 3,
            "desc": "Execute commands via cmd.exe /c",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-log-last-commit-metadata",
            "atk": "T1070.003",
            "conf": 0.8799999952316284,
            "crit": 4,
            "desc": "Queries last git commit metadata",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-force-push-no-verify",
            "atk": "T1070.003",
            "conf": 0.949999988079071,
            "crit": 4,
            "desc": "Force pushes while bypassing hooks",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-amend-no-verify",
            "atk": "T1070.003",
            "conf": 0.949999988079071,
            "crit": 4,
            "desc": "Amends commit while bypassing hooks",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "kXjCszY\u0026$gw^Sc*AV^2Ear\u003eucy?W:cjT80{b%-U/zxHtPv@k:0fjMaGxk8Dgy\u0026r@eeIOw1eO5piwJ:TzA=2lbeO]unvqE$Jc0q/Cc2CjWc1FbIeOn{wzddJHb{^5ia$1/Zwn-PiwPP4*k#Q-\u0026lR*AJnMo4+k#Zoob{+?:w]zYjfj(sJwmYN\u003ezf4\u0026:ases1azCZoc)@IwwfrKnar\u003eDjBrCyrxcn=Xat2fQvru6zw]zZbvrs8qz!0i(iWD7yiWD7DiWD7Jat2fSz/PY6BuH]@v}l=hdiJetaAIaoawt71r9@0*o?!hUuSoP\u003emlI}yk)?jxAV^2Ear\u003eucy?W:cjT80{b%-U/zxHtPv@k:0fjMaGxk8Dgy\u0026r@eeIOw1eOn{wzddJHb{^QRcN*fGzY\u003cajBrBmyq=E9\u003epFBLPr9@P[sx4Bfb%.(Iz/M%Nw/@pdwO=6$B3gY\u0026b{+\u00261x(k4wcU417atmjEb4\u003eRiaz+$eat2q\u003ceIgNMA=2lbjTzy.zxZCSay]ykB7GCorz#s:uRS)YmlI}yk)?jxAV^2Ear\u003eucy?W:cjT80{b%-U/zxHtPv@k:0fjMaGxk8Dgy\u0026r@eeIOw1eOn{wzddJHb{=#ha$1/Zwn-PiwPP4{q:\u003cO\u003emnl6toG:WFk)?jxAV^2Ear\u003eucy?W:cjT80{b%-U/zxHtPxk8DgA+fzCAa9^dwGSMRvpAX^wP/UCwO95Qml%r?diJetaAIaoavxdbqBKtWuQvTRpd4Mnb{+?:wN/y(asfYEq=E9\u003epFBLPr9@3Vr7e8Qb${Q6r9@0*o?!hUuSoP\u003emi@pLv}Y^6b${Q6r9@0*o?!hUuSoD@r3.(.v}Y^6b#)(jqErf+o*{uJc).\u003e(mn^FYo*IuAb}fgjv}Y^6lulHLv}W[Cb%$WgqBKtWuQvTRpd4L#3uG^2avxdbqBKtWuQNgVmlI@cvru6b3uG^2avxdbqBKtWuSoP\u003emlI@sx(dAc3s)N!wGSo)k#Q-\u0026lR*AJnMo4+k#Zo03uQ00wGSo)k#Q-\u0026lR*AJnMo4@nLIS13t0ZXzY?CRBy=OpwO(y8A::05y\u003cvdkxKL^\u003ewN({9zY*u1k#Q-\u0026lR*AJnMo4+k#Zo0asfYEq=E9\u003epFBLPr9@P@o*{unxk8Dgv@Dl%x\u003eFLueO]unvqE6eB7GwAzEEx[asg2^mn^F/k$%=]3tj6{ay/tcw[+)2eIg^Sv{%f@B-Rbme[F)dx(1[rrz#s:uQWWPnLyAqxk8DgvpS)\u003ee^=l9BrC7izeB0eat2fNzdNP}at4BMa%/]Gq=E9\u003epFBLPr9@P[sx3N\u003cat2f.z.lczA+Pch3s)N!wGSo^rz(Z-pe\u003eN*k#Zo03uQ00wGSo^rz(Z-pe\u003eO1nLIS13t0ZXzY?CRBy=OnwPI%iA+e=7Bz\u0026oFlSE2Zmnu/?l{T^vb{jH3rz(Z-pe\u003eO1nLIS1ayPd#ay/tbAbo9cwGUz#wO#33y*?ybay/tbze18n3tj6{aAhEAxDO)Hw/#2jx\u003eIc$asfxPqC]}Ur9}%\u0026k#6^rb{j=\u003ezF}aIwPzG%C)V/Fv}Y^6z/b",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "echo"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "date"
            ],
            [
              "",
              "time"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "git"
            ],
            [
              "",
              "date"
            ],
            [
              "",
              "time"
            ],
            [
              "",
              "echo"
            ],
            [
              "",
              "git"
            ]
          ],
          "tgt": [
            "date",
            "echo",
            "git",
            "time"
          ],
          "metrics": {
            "ast": {
              "max_depth": 4,
              "call_count": 15,
              "node_count": 212
            },
            "file": {
              "size": 1222,
              "entropy": 5.17
            },
            "text": {
              "lines": 25,
              "top_char": 37,
              "digit_ratio": 0.01,
              "space_count": 129,
              "char_entropy": 5.17,
              "unique_chars": 53,
              "top_char_null": 0,
              "string_density": 0.04,
              "top_char_ratio": 0.07,
              "avg_line_length": 47.92,
              "max_line_length": 121,
              "last_line_length": 8,
              "whitespace_ratio": 0.13,
              "identifier_density": 2.36,
              "line_length_stddev": 33.46,
              "max_whitespace_run": 1,
              "normalized_string_count": 0.2,
              "normalized_unique_identifiers": 6.89
            },
            "binary": {
              "peak_region_bytes": 1222,
              "peak_region_entropy": 5.14
            },
            "source": {
              "batch.snapshot_concat_max_fanout": 0,
              "batch.seeded_snapshot_concat_loops": 0,
              "batch.unbounded_snapshot_concat_loops": 0
            },
            "strings": {
              "bytes": 18,
              "count": 1,
              "avg_length": 18,
              "max_length": 18,
              "avg_entropy": 3.39
            },
            "identifiers": {
              "count": 59,
              "unique": 32,
              "avg_length": 8.84,
              "max_length": 18,
              "min_length": 3,
              "avg_entropy": 2.27,
              "reuse_ratio": 0.54,
              "length_stddev": 5.69,
              "all_lowercase_ratio": 0.13,
              "all_uppercase_ratio": 0.25
            }
          }
        },
        "id": 1,
        "mol": "O₂(ErS)H(Po₃)",
        "path": "simalchaudhari-spin.tar.gz!!spin-5bf47b8e05c115a31fb428a9637eeaf8ec7b5e1b/temp_auto_push.bat",
        "pid": 0,
        "risk": 236,
        "sha": "23e37cf4e2a7d55ed107b3bc3eb7812a0e3d8f90b23b0c8f549d5c10d089a2c8",
        "size": 1222,
        "traits": [
          {
            "id": "objectives/evasion/indicator-removal/history::git-history-falsification",
            "atk": "T1070.003",
            "conf": 0.97,
            "crit": 5,
            "desc": "Git history falsification with hook bypass",
            "from": [
              {
                "file": 124
              }
            ],
            "uses": [
              3,
              4,
              8,
              14
            ],
            "spans": [
              [
                44,
                31
              ],
              [
                536,
                31
              ],
              [
                773,
                23
              ],
              [
                797,
                23
              ],
              [
                798,
                36
              ],
              [
                892,
                28
              ],
              [
                927,
                32
              ],
              [
                933,
                29
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/hidden-payload/worm::git-history-rewrite-repository-propagation",
            "atk": "T1195.002,T1070.003",
            "mbc": "B0024",
            "conf": 0.98,
            "crit": 5,
            "desc": "Stages content before a falsified force-push",
            "from": [
              {
                "file": 124
              }
            ],
            "uses": [
              0,
              11
            ],
            "spans": [
              [
                44,
                31
              ],
              [
                536,
                31
              ],
              [
                773,
                23
              ],
              [
                788,
                9
              ],
              [
                797,
                23
              ],
              [
                798,
                36
              ],
              [
                892,
                28
              ],
              [
                927,
                32
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-amend-no-verify",
            "atk": "T1070.003",
            "conf": 0.95,
            "crit": 4,
            "desc": "Amends commit while bypassing hooks",
            "spans": [
              [
                986,
                54
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-force-push-no-verify",
            "atk": "T1070.003",
            "conf": 0.95,
            "crit": 4,
            "desc": "Force pushes while bypassing hooks",
            "spans": [
              [
                1165,
                48
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-local-author-rewrite",
            "atk": "T1070.003",
            "conf": 0.9,
            "crit": 4,
            "desc": "Rewrites local git author identity",
            "spans": [
              [
                892,
                28
              ],
              [
                933,
                29
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-log-last-commit-local-date-query",
            "atk": "T1070.003",
            "conf": 0.88,
            "crit": 4,
            "desc": "Queries last commit local date",
            "spans": [
              [
                44,
                31
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-log-last-commit-metadata",
            "atk": "T1070.003",
            "conf": 0.88,
            "crit": 4,
            "desc": "Queries last git commit metadata",
            "from": [
              {
                "file": 124
              }
            ],
            "uses": [
              5
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::system-clock-rewind",
            "atk": "T1070.003",
            "conf": 0.95,
            "crit": 4,
            "desc": "Rewinds system clock to prior time",
            "spans": [
              [
                773,
                23
              ],
              [
                797,
                23
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::timestamped-amend-rewrite",
            "atk": "T1070.003",
            "conf": 0.93,
            "crit": 4,
            "desc": "Git amend with timestamp preservation",
            "from": [
              {
                "file": 124
              }
            ],
            "uses": [
              2,
              6,
              7
            ],
            "spans": [
              [
                44,
                31
              ],
              [
                773,
                23
              ],
              [
                797,
                23
              ],
              [
                798,
                36
              ],
              [
                986,
                54
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/command-mode::cmd-exe-c-command-text",
            "conf": 0.85,
            "crit": 3,
            "desc": "Contains cmd.exe /c command syntax",
            "spans": [
              [
                35,
                7
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/command-mode::windows-command-shell-invocation",
            "atk": "T1059.003",
            "conf": 0.94,
            "crit": 3,
            "desc": "cmd command-text invocation syntax",
            "spans": [
              [
                36,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::git-stage-all-changes",
            "conf": 0.94,
            "crit": 3,
            "desc": "Stages all Git changes",
            "from": [
              {
                "file": 124
              }
            ],
            "uses": [
              12
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::git-stage-all-script-command",
            "conf": 0.92,
            "crit": 3,
            "desc": "Script stages all Git changes",
            "spans": [
              [
                976,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/interpreter/shell::windows-shell-option-command",
            "conf": 0.9,
            "crit": 3,
            "desc": "Windows shell command with option",
            "spans": [
              [
                36,
                6
              ]
            ]
          },
          {
            "id": "objectives/evasion/indicator-removal/history::git-current-branch-query",
            "atk": "T1070.003",
            "conf": 0.8,
            "crit": 3,
            "desc": "Queries current git branch",
            "spans": [
              [
                536,
                31
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                1133,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                10,
                0
              ]
            ]
          }
        ],
        "type": "batch"
      },
      {
        "ctx": [
          {
            "b": "DKp(rarR\u003eKwPz\u003caz/c:War\u0026M[fFk46ed9HxarR\u003eIvrlj9b03\u0026J3lQDlarR^HaBsCrarR^HarR^HarR^Jy**^:y:7[.b4UUna$K6zarR^HarR^HarR^JBA}?pb03?\u003cB7/c3y:7zqarR^HarR^HarR^Hb5.KEb03\u0026[3lQDlarR^HarR^HarR^Har\u003erlzeAZ0wfK5Sb4C+oy-)zkBz#pZfe3\u003cEw)]*#Bs?0vzF0P}B-H]jx(v(wC4CY7wO-#cAbWEKwPS3dzFa2zy?W^fCT2!Rvp}.-eP+MBBrC@NvQTs\u003ea{]CnarR^HarR^HarV7-3lQDlarR^HarR^Har\u003eSozGQgFiV@+RarR^HarR^HarR^HarR^Hb4CLdzddr)b03?\u003cv%8*dazt\u003esAc15[fjXTavrDydeN@Zpw[+[2A::67z/dgJwPzo(y+xdnA4=ozBAzkmxlb.xx(n6rkw1.uxfwmbBy/JnaBCqMxD^^aarR^HarR^HarR!Ped9HxarR^HarR^HarR\u003eLx(mE1Cxj@?aBsCrarR^HarR^HarR^HarR^Jv@Dj3vqYQ1iV]RRB-IpvxMOunB2\u003e%cwmYvYB.(dKv@Dl%x\u003eINevruj4zz39zA:@V%e[5ZrflpYDBzkS9B1.-KzA?-Hvp}.-eP+MBBrC@Nv@k:23lQDlarR^HarR^HaBL^FarR^HarR^HarR^Hb5?NvvR/Q)o\u003c@cNxK#idiV}Tjed9HxarR^HarR^HarR\u003eEA+fr6zGGrex(v(kiV@+RarR^HarR^HarR^HarR^Hb64mrwNPy0iV]R:wP?T9a$K6zarR^HarR^HarR^HarR^JwN/y(b03\u0026UvqH0@ed9HxarR^HarR^HarR^HarR\u003euz!0{hb03\u0026UvqH0@ed9HxarR^HarR^HarR^HarR\u003ery\u0026sxab03\u0026*A=\u003e}A3lQDlarR^HarR^HarR^Har\u003e=kzE)SdiV]RSwN]H+vru6\u003ea$K6zarR^HarR^HarR^HarR^JB7/GoqE%#(wLD-SB75Y)b03\u0026UvqH0@3lQDlarR^HarR^HaBL^FarR^HarR^HarR^Hb64*zpJgz\u0026z/fRuiV@+RarR^HarR^HarR^HarR^Hb64*zpI}vqar\u003eAoy?d9$pJf(.a{]CnarR^HarR^HarV7tarR^HarR^HEf}8tarT}%Ee",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 929,
              "entropy": 3.85
            },
            "json": {
              "parsed_bytes": 929,
              "parse_limit_bytes": 76800
            },
            "binary": {
              "peak_region_bytes": 929,
              "peak_region_entropy": 3.85
            },
            "references": {
              "declared_count": 2,
              "unresolved_count": 0,
              "security_hold_count": 0,
              "unavailable_command_count": 0,
              "unresolved_extension_count": 0
            }
          }
        },
        "id": 2,
        "mol": "O(Xe)H₂(CmPo)Md₂(Pa₂Pm)",
        "path": "simalchaudhari-spin.tar.gz!!spin-5bf47b8e05c115a31fb428a9637eeaf8ec7b5e1b/.vscode/tasks.json",
        "pid": 0,
        "risk": 124,
        "sha": "e30804cc566371dce7961150bc2d56ca186625531a9e955cfc58adaed1a22b9e",
        "size": 929,
        "traits": [
          {
            "id": "objectives/execution/trigger/ide::vscode-concealed-remote-shell-autorun",
            "atk": "T1204.002,T1105,T1059,T1564.003",
            "conf": 0.99,
            "crit": 5,
            "desc": "Concealed folder-open task fetches and pipes a remote shell",
            "uses": [
              2,
              3
            ],
            "spans": [
              [
                30,
                76
              ],
              [
                590,
                51
              ],
              [
                876,
                21
              ]
            ]
          },
          {
            "id": "objectives/execution/trigger/ide::multi-os-folderopen-remote-shell",
            "atk": "T1195.002,T1105,T1059",
            "conf": 0.98,
            "crit": 4,
            "desc": "Folder-open task pipes remote shells on osx, linux, and windows",
            "uses": [
              8,
              11,
              12,
              13
            ],
            "spans": [
              [
                876,
                21
              ]
            ]
          },
          {
            "id": "objectives/execution/trigger/ide::vscode-task-concealment",
            "conf": 0.9,
            "crit": 4,
            "desc": "VSCode task with concealment properties",
            "uses": [
              4,
              5,
              8
            ],
            "spans": [
              [
                590,
                82
              ],
              [
                876,
                21
              ]
            ]
          },
          {
            "id": "objectives/execution/trigger/ide::vscode-task-generic-remote-shell",
            "atk": "T1204.002,T1105,T1059",
            "conf": 0.98,
            "crit": 4,
            "desc": "VS Code autorun fetches and pipes a remote shell",
            "uses": [
              6,
              8,
              9,
              15
            ],
            "spans": [
              [
                30,
                76
              ],
              [
                876,
                21
              ]
            ]
          },
          {
            "id": "metadata/package/config::task-reveal-never",
            "conf": 0.86,
            "crit": 3,
            "desc": "VS Code task suppresses terminal reveal",
            "spans": [
              [
                590,
                51
              ]
            ]
          },
          {
            "id": "metadata/package/config::tasks-echo-disabled",
            "conf": 0.9,
            "crit": 3,
            "desc": "VS Code task disables command echo",
            "spans": [
              [
                590,
                82
              ]
            ]
          },
          {
            "id": "metadata/package/config::vscode-task-shell-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "VS Code task uses shell execution",
            "spans": [
              [
                30,
                76
              ]
            ]
          },
          {
            "id": "metadata/package/files/dependency::node-modules-path",
            "conf": 1.0,
            "crit": 3,
            "desc": "File located under a node_modules directory"
          },
          {
            "id": "metadata/permission/activation::vscode-task-folder-open-activation",
            "conf": 1.0,
            "crit": 3,
            "desc": "VS Code task activates when folder opens",
            "spans": [
              [
                876,
                21
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::vscode-task-fetches-url-any-os",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "VS Code task fetches URL on any OS",
            "uses": [
              10
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::vscode-task-os-curl-wget-url",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "Per-OS task command fetches URL via curl"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::tasks-linux-curl-pipe-shell",
            "conf": 0.9,
            "crit": 3,
            "desc": "Linux task pipes curl into shell"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::tasks-osx-curl-pipe-shell",
            "conf": 0.9,
            "crit": 3,
            "desc": "OSX task pipes curl into shell"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::tasks-windows-curl-pipe-cmd",
            "conf": 0.9,
            "crit": 3,
            "desc": "Windows task pipes curl into cmd"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::vscode-task-os-pipes-shell",
            "atk": "T1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Per-OS VS Code task pipes into shell"
          },
          {
            "id": "micro-behaviors/process/create/shell/pipeline::vscode-task-pipes-shell-any-os",
            "atk": "T1059",
            "conf": 0.9,
            "crit": 3,
            "desc": "Any-OS VS Code task pipes into shell",
            "uses": [
              14
            ]
          },
          {
            "id": "objectives/execution/trigger/ide::tasks-command-vercel",
            "conf": 0.9,
            "crit": 3,
            "desc": "VS Code task command references Vercel hosting",
            "spans": [
              [
                145,
                57
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::data-access-verb-token",
            "conf": 0.88,
            "crit": 1,
            "desc": "Data-access verb token",
            "spans": [
              [
                625,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::repository-agent-command-directive",
            "conf": 0.88,
            "crit": 1,
            "desc": "Marks command word as an agent directive",
            "spans": [
              [
                145,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::repository-agent-directive-marker",
            "conf": 0.88,
            "crit": 1,
            "desc": "Marks text as an agent directive",
            "spans": [
              [
                31,
                0
              ]
            ]
          }
        ],
        "type": "json"
      },
      {
        "ctx": [
          {
            "b": "DKp(rarR\u003eux(4v4e[5)Az=p7/wG\u003ceTb5.79a$K\u0026\u0026fcAM6Bz(28Bzkk[y\u00261wtB76l6B0b7ey?mVgvp\u003cQ)AV!^kwmYN=C)UVparR\u003etwncd7AXqiyzFr@@A4UZtvpB4:wfK5Sw)]H%wH[@SfcAU%B75J]wPF#oxK@r6x(mT4vq(L@arR^JwN]H%z/NEOz/Pw\u0026A:-]hiV]R+w[Akratkw\u003cmq=Kyy?mVgCw?IjaA}\u003cmAbYJex9]+7arR\u003eux(4v4e[Goqy\u0026%o1b03\u0026[3lQDlarR^Hatkw\u003cnnhQCB0bQyzE)r?B8$=gC{3Zky?mVgw].*baARpdazbt7wGUMeAboDkwPwb2arR^HarR^JdK)87l@NC\u003eBz(hhb03\u0026*A=\u003e}A3lQDlarR^Har\u0026o+fk+YswNxp)wozZ1B0rT/BAhIn3lQDlaBL^FarR^Hb4Uq0Bz(gLBywSSx)KtmiV{geatkw\u003cq!p5(aAR43aAImywGV8katL6XAa9l/A%:3jarR\u003etwncd7AXp%xA=2lbpI%9tC4z\u003cUazb4#B7D)Bfe1ClB-.Lsvrui[vqG+9azbLjzddKcay/t2wGU]eaAH$mwQs+barR^JBy/Gfx(mu}e[]iBwOl3(By!#nAb](ex(4v4e{z2Ewn=Wkb03\u0026[3lQDlarR^Har\u003erjwfK5SDKp(rarR^HarR^HarR\u003eEvrufbiV]Rli:t]\u003ex(mE1Cxm1]q*ACawO\u003cjUtWg=Qwg?CrwG?E7arR^HarR!Ped9HxarR^HarR\u003eEz*b=kB7/c3y:7[.DKp(rarR^HarR^HarR\u003eEvrufbiV]Rli:t]\u003ex(mE1Cxm1]q*ACawO\u003cjUtWguAzE^WfB5l!0wPyZ.wO=f/tY}?OfKd\u003e4z*b=kB7/c3y+xpzwG?E7arR^HarR!P3lQDlaBL^FarR^Hb6mypze0(@y+xBtBy/99vru6\u003ee[wK9vrDydp\u0026ZF^x(4ukCwg@9z*cmDiV]Rlz/6u1zE:\u003e^A=k/lBrSmyarR^Hb6mypze0(@y+xBtBy/99vru6\u003ee]U\u0026Hw[=6)B1RoyzGQgFiV@+RarR^HarR^Hb1Du?noFw:lRH5}iV@+RarR^HarR^HarR^Hb5*$jxD/FWa$[7WAXy)ozzbToa{]CnarR^HarV7-3lQDlarR^Har\u003ci+w)]*#BrBH}wO=fbiV@+RarR^HarR^HarR^Hb5*$jxD/FWa$)ztzzbEcB7=:8arR^HarR^HEf}8tarV7-3lQDlar\u003e]sA=2JdvqEMgzGGD5A::63wg??wz!rZ1wPGFxB9F(\u0026aBsCrarR^HarR^Jm})6oBZ=EXoI3A?aBsCrarR^HarR^HarR^JAa9\u003c4b03?\u003cflItRfkLMpvqEPax(kOpxD^^aarR^HarR!Ped9HxarR^HarR\u003c@wObv[y\u0026*^#xK#0@b03\u0026[3lQDlarR^HarR^Har\u003e=kBz8\u003cVar\u0026EFx(kOkvrl9a3lQDlarR^HaBKOtarR!Ped9HxarR\u003eIwPzT4zEEulx(n37xl4B5wN)A7wObv[y\u0026\u0026G]z!rZ1wKyxNwncd1z/c:WaBsCrarR^HarR^JAb](ex(4v4b03\u0026[3lQDlarR^HarR^Har\u003cr\u0026BvZK-avw*]b03?\u003cwQ4{gBAn\u0026-B-RNRvRGZkxj@.pE0^5FCXIkvB0@X:B8\u0026{Iz!0i(fjFTkfk1@EaBFLVwQ4{gBAn\u0026$i:t]^A=kPhvqNbRx(4v4tWf^kBx\u00266Wx(mfXvQTs\u003ee[GosdiY9warR^HarR!Ped9HxarR^HarR\u003euvqG:?vpK7]b03\u0026[3lQDlarR^HarR^Har(2zzE^WfB0rT/b2Ai4wPyZ.wO=fbed9HxarR^HarR^HarR\u003eAx(n6rb03?\u003cl$G$sB.(dxq!P-Uy:7zqarR^HarR^HarR^Hb5.KEb03?\u003cl$G$sB.(dxq!P-Uy:6iearR^HarR!P3lQDlaBKPB",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1532,
              "entropy": 4.49
            },
            "json": {
              "parsed_bytes": 1532,
              "parse_lenient": 1,
              "parse_limit_bytes": 76800
            },
            "binary": {
              "peak_region_bytes": 1532,
              "peak_region_entropy": 4.53
            }
          }
        },
        "id": 3,
        "mol": "Md(Pa)",
        "path": "simalchaudhari-spin.tar.gz!!spin-5bf47b8e05c115a31fb428a9637eeaf8ec7b5e1b/.vscode/settings.json",
        "pid": 0,
        "risk": 1,
        "sha": "bd0a64049a7684a0d27c96c764fb4eb90e5e7660b846bcafbb72e183283f3925",
        "size": 1532,
        "traits": [
          {
            "id": "metadata/package/files/dependency::node-modules-path",
            "conf": 1.0,
            "crit": 3,
            "desc": "File located under a node_modules directory"
          },
          {
            "id": "micro-behaviors/data/llm/repository-directive::repository-agent-command-directive",
            "conf": 0.88,
            "crit": 1,
            "desc": "Marks command word as an agent directive",
            "spans": [
              [
                770,
                0
              ]
            ]
          }
        ],
        "type": "json"
      }
    ],
    "rev": "46112",
    "v": "8"
  }
}