{
  "attack_surface": [
    "script-supply-chain"
  ],
  "control_type": "positive",
  "corpus_id": "LF-CH-SCRX-0007",
  "difficulty": "intermediate",
  "expected_decision": "WARN",
  "ground_truth": "synthetic-generated",
  "layerfault_rule_expectations": {
    "candidate_rules": [
      "LF-ARCHIVE-SECURITY-MEMBER",
      "LF-CODE-SUBPROCESS"
    ],
    "expected_rules": [],
    "must_not_rules": []
  },
  "oracle_ids": [
    "LF-ORACLE-SCRX-0007"
  ],
  "related_cases": [],
  "repo_name": "script-python-capability-in-archive",
  "safe_fixture": true,
  "schema": 2,
  "severity": "medium",
  "techniques": [
    "python",
    "capability",
    "in",
    "archive"
  ],
  "transformations": []
}