| { | |
| "candidate_rules": [ | |
| "LF-SHELL-CURL-PIPE", | |
| "LF-SHELL-DOT-SOURCE" | |
| ], | |
| "corpus_id": "LF-CORPUS-SH-0001", | |
| "description": "Shell package with canary dynamic-code, dot-source, filesystem write, loopback curl-pipe, package-manager and native-load/environment patterns.", | |
| "expected_rules": [ | |
| "LF-SHELL-SEMANTIC-CREDENTIAL-ACCESS", | |
| "LF-SHELL-SEMANTIC-CURL-PIPE-SH", | |
| "LF-SHELL-SEMANTIC-DYNAMIC-CODE", | |
| "LF-SHELL-SEMANTIC-FILESYSTEM-WRITE", | |
| "LF-SHELL-SEMANTIC-NATIVE-LOAD", | |
| "LF-SHELL-SEMANTIC-PACKAGE-INSTALL" | |
| ], | |
| "generator": "packages.shell_chain", | |
| "ground_truth": "synthetic-generated", | |
| "must_not_rules": [], | |
| "repo_name": "shell-capability-chain", | |
| "repo_type": "model", | |
| "safety": "inert/canary-only", | |
| "schema": 1, | |
| "validation": { | |
| "kind": "verify-package", | |
| "target": "." | |
| } | |
| } | |