{
 "questions": {
  "risk_level": {
   "type": "score",
   "instructions": "How much harm can running this shell command as written cause?",
   "criteria": [
    "Safe. Ordinary read-only or routine command with no plausible path to data loss, privilege change, or system disruption.",
    "Low. A local change that is quick to undo, such as deleting a cache or build folder that regenerates.",
    "Moderate. Repairable without backups, with some effort: one config file or dotfile overwritten, permissions changed on a limited path, one service or one user's processes killed, shell history cleared, or a secret printed to the user's own terminal.",
    "High. Needs backups to recover a directory tree, project, or database; exposes secrets to others; runs unverified code; widens one account's privileges; or takes the machine or its network down until a reboot or manual cleanup.",
    "Critical. Destroys a whole disk, filesystem, operating system, system directory, or home folder, or gives root-level control to any local user or remote party."
   ]
  },
  "risky": {
   "type": "noul",
   "instructions": "Is this shell command risky to run as written?",
   "criteria": {
    "true": "Running it can destroy data, change permissions or privileges, expose secrets, or disrupt the system.",
    "false": "It is read-only or routine, with no plausible path to harm."
   }
  },
  "data_destruction": {
   "type": "noul",
   "instructions": "Does this command carry data destruction risk?",
   "criteria": {
    "true": "Recursive or forced deletion, truncation, or in-place overwrite of files and directories.",
    "false": "Nothing in the command matches data destruction."
   }
  },
  "device_overwrite": {
   "type": "noul",
   "instructions": "Does this command carry device overwrite risk?",
   "criteria": {
    "true": "Writing to a block device, formatting a filesystem, or rewriting a partition table.",
    "false": "Nothing in the command matches device overwrite."
   }
  },
  "overbroad_permissions": {
   "type": "noul",
   "instructions": "Does this command carry overbroad permissions risk?",
   "criteria": {
    "true": "Granting world access or removing protection recursively, for example chmod or chown applied broadly.",
    "false": "Nothing in the command matches overbroad permissions."
   }
  },
  "privilege_escalation": {
   "type": "noul",
   "instructions": "Does this command carry privilege escalation risk?",
   "criteria": {
    "true": "Gaining or widening root or another user's authority, including editing sudoers or setuid bits.",
    "false": "Nothing in the command matches privilege escalation."
   }
  },
  "remote_code_execution": {
   "type": "noul",
   "instructions": "Does this command carry remote code execution risk?",
   "criteria": {
    "true": "Fetching content from a network location and executing it unverified, for example a download piped into a shell.",
    "false": "Nothing in the command matches remote code execution."
   }
  },
  "unsafe_download_exec": {
   "type": "noul",
   "instructions": "Does this command carry unsafe download exec risk?",
   "criteria": {
    "true": "Installing or trusting unverified packages, repositories, or signing keys.",
    "false": "Nothing in the command matches unsafe download exec."
   }
  },
  "resource_exhaustion": {
   "type": "noul",
   "instructions": "Does this command carry resource exhaustion risk?",
   "criteria": {
    "true": "Unbounded process, memory, or disk growth, including fork bombs and runaway loops.",
    "false": "Nothing in the command matches resource exhaustion."
   }
  },
  "credential_exposure": {
   "type": "noul",
   "instructions": "Does this command carry credential exposure risk?",
   "criteria": {
    "true": "Printing, world-readable, or logged secrets, keys, tokens, or password material.",
    "false": "Nothing in the command matches credential exposure."
   }
  },
  "irreversible_config": {
   "type": "noul",
   "instructions": "Does this command carry irreversible config risk?",
   "criteria": {
    "true": "Editing critical system configuration or disabling protection such as a firewall.",
    "false": "Nothing in the command matches irreversible config."
   }
  },
  "history_log_tampering": {
   "type": "noul",
   "instructions": "Does this command carry history log tampering risk?",
   "criteria": {
    "true": "Clearing or disabling shell history, audit logs, or system logs.",
    "false": "Nothing in the command matches history log tampering."
   }
  },
  "network_disruption": {
   "type": "noul",
   "instructions": "Does this command carry network disruption risk?",
   "criteria": {
    "true": "Flushing routes or firewall rules, downing interfaces, or killing networking.",
    "false": "Nothing in the command matches network disruption."
   }
  },
  "signal_kill": {
   "type": "noul",
   "instructions": "Does this command carry signal kill risk?",
   "criteria": {
    "true": "Broad or forced process termination that can take down sessions or the system.",
    "false": "Nothing in the command matches signal kill."
   }
  },
  "shell_footgun": {
   "type": "noul",
   "instructions": "Does this command carry shell footgun risk?",
   "criteria": {
    "true": "Quoting, word-splitting, globbing, or redirection behavior that causes accidental damage.",
    "false": "Nothing in the command matches shell footgun."
   }
  },
  "reversible": {
   "type": "noul",
   "instructions": "Can an average user undo the effect of this command without backups?",
   "criteria": {
    "true": "The effect can be undone without backups, or there is no effect to undo.",
    "false": "Undoing the effect needs backups or is not possible."
   }
  },
  "requires_root": {
   "type": "noul",
   "instructions": "Does the harm from this command need root or sudo?",
   "criteria": {
    "true": "The command needs root or sudo to do its harm.",
    "false": "An ordinary user can run it with the same effect."
   }
  }
 }
}