stable-source-rules.json

{
  "schemaVersion": 1,
  "semanticDigest": "562ca6837a5994b831e5b347263ca43eca6d152df2e69939ebda10ebc10ecf69",
  "counts": {
    "stableTotal": 44,
    "builtInRisk": 25,
    "builtInIntegrity": 3,
    "externalRisk": 16
  },
  "rules": [
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "2",
      "frameworks": [
        "browser"
      ],
      "alternatives": [
        "Use a framework renderer that escapes values by default."
      ],
      "userDecisions": [
        "Confirm which markup is a product requirement and where its trust boundary belongs."
      ],
      "id": "browser-html-injection-sink",
      "kind": "risk_detection",
      "family": "browser_output",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "browser_html_sink_lead",
      "technicalTerm": "DOM-based cross-site scripting sink lead (CWE-79)",
      "plainLanguage": "Browser code inserts a value as HTML instead of text. If that value came from outside the app, it can change the page or run script.",
      "consequence": "A successful path may steal in-page data, perform actions as the user or present false content.",
      "confidenceBoundary": "The rule finds direct innerHTML/outerHTML assignments and append assignments, insertAdjacentHTML, and document.write/document.writeln calls. It does not trace input or determine sanitization.",
      "applicability": "Non-test, non-generated browser JavaScript and TypeScript source files.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "constructs": [
          "innerHTML_assignment",
          "innerHTML_append_assignment",
          "outerHTML_assignment",
          "outerHTML_append_assignment",
          "insertAdjacentHTML_call",
          "document.write_call",
          "document.writeln_call"
        ],
        "taintFlow": false
      },
      "standards": [
        {
          "id": "CWE-79",
          "url": "https://cwe.mitre.org/data/definitions/79.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "Only a fixed trusted literal reaches the sink.",
        "The value is sanitized by a policy the lexical rule cannot identify."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Use textContent or DOM construction for text, or sanitize required HTML with a reviewed allowlist at the trust boundary."
      },
      "proposalRisks": [
        "Switching from HTML to text or allowlisted DOM nodes can alter formatting."
      ],
      "sideEffects": [
        "Legacy widgets or rich content may render differently."
      ],
      "securityRetest": "Pass a harmless HTML/script marker through the owned source and verify it is displayed as text or safely removed.",
      "functionalRetest": "Exercise the affected page and compare intended text, formatting, links and interactive elements.",
      "rollback": "Restore only the necessary formatting behavior if the UI regresses, while keeping untrusted markup out of executable HTML sinks.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "browser-html-sink-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "browser-html-sink-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "checkov",
        "version": "3.3.9",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Docker"
      ],
      "alternatives": [
        "Define and test the health probe in the deployment platform instead of the reusable image."
      ],
      "userDecisions": [
        "Confirm whether the image is a long-running service and which endpoint or local command represents real readiness."
      ],
      "id": "checkov-dockerfile-healthcheck-missing",
      "kind": "risk_detection",
      "family": "deployment_configuration",
      "languages": [
        "dockerfile"
      ],
      "domain": "security_exposure",
      "severity": "low",
      "defaultState": "suspected",
      "rationale": "container_healthcheck_missing",
      "technicalTerm": "Missing container health check",
      "plainLanguage": "The image does not define a routine way for the container platform to tell whether the application is actually healthy.",
      "consequence": "A stuck or partly started process may continue receiving traffic or remain unreplaced because the platform only knows that the process exists.",
      "confidenceBoundary": "Checkov rule CKV_DOCKER_2 found no HEALTHCHECK in the Dockerfile. A deployment-level health probe may already exist and was not inspected.",
      "applicability": "Files named Dockerfile scanned by caller-installed Checkov 3.3.9. Deployment manifests and platform-specific probes are outside this rule.",
      "detection": {
        "type": "external_policy_adapter",
        "engine": "checkov",
        "externalRuleId": "CKV_DOCKER_2",
        "frameworks": [
          "dockerfile"
        ],
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The deployment manifest defines an equivalent liveness or health probe.",
        "The image is a one-shot job for which a continuous health check is not appropriate."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Add a lightweight health check that reflects application readiness, with reviewed interval, timeout, start period and retries."
      },
      "proposalRisks": [
        "A probe that starts too early, depends on an optional service or times out too quickly can restart a healthy application."
      ],
      "sideEffects": [
        "Startup time, dependency availability and temporary load spikes can cause false unhealthy states or restart loops."
      ],
      "securityRetest": "Rerun CKV_DOCKER_2 and verify the deployed platform observes the intended probe rather than only process liveness.",
      "functionalRetest": "Start the service from cold state, test slow dependency startup and confirm healthy, degraded and failed states are reported as intended.",
      "rollback": "Disable or relax the new probe if it restarts healthy instances, then restore monitoring while the readiness signal and timing are corrected.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "checkov-healthcheck-positive",
            "path": "test/fixtures/checkov-rules/vulnerable/Dockerfile"
          }
        ],
        "negative": [
          {
            "id": "checkov-healthcheck-safe",
            "path": "test/fixtures/checkov-rules/safe/Dockerfile"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "checkov",
        "version": "3.3.9",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Docker"
      ],
      "alternatives": [
        "Set an approved non-root UID in the deployment runtime when the image must remain reusable, and enforce that override as code."
      ],
      "userDecisions": [
        "Confirm which directories must be writable and whether the service must bind a port below 1024."
      ],
      "id": "checkov-dockerfile-root-user",
      "kind": "risk_detection",
      "family": "deployment_configuration",
      "languages": [
        "dockerfile"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "container_runs_as_root",
      "technicalTerm": "Container runs as root (CWE-250)",
      "plainLanguage": "The Dockerfile leaves the final container process running with the most powerful user inside the container.",
      "consequence": "If the application is compromised, root privileges can make it easier to alter container files, bind privileged ports or abuse an unsafe runtime configuration.",
      "confidenceBoundary": "Checkov rule CKV_DOCKER_8 matched the Dockerfile. A runtime USER override, rootless container engine or additional isolation may reduce the deployed impact; none was verified.",
      "applicability": "Files named Dockerfile scanned by caller-installed Checkov 3.3.9. Other container build files and runtime manifests are outside stable coverage.",
      "detection": {
        "type": "external_policy_adapter",
        "engine": "checkov",
        "externalRuleId": "CKV_DOCKER_8",
        "frameworks": [
          "dockerfile"
        ],
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "CWE-250",
          "url": "https://cwe.mitre.org/data/definitions/250.html"
        },
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The deployment platform overrides the image user with an approved non-root UID.",
        "The container needs a short root-only setup phase but the final runtime is constrained elsewhere."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Create a dedicated runtime user, give it only the required files and directories, and set USER in the final image stage."
      },
      "proposalRisks": [
        "The application may lose access to files, sockets or ports that currently depend on root ownership or privileges."
      ],
      "sideEffects": [
        "File permissions, bind-mounted volume ownership and low-numbered port binding can change; image build and startup may fail until ownership is explicit."
      ],
      "securityRetest": "Rerun the pinned Checkov rule and inspect the built image/runtime identity to confirm the application process uses the intended non-root UID.",
      "functionalRetest": "Build and start the image, exercise startup, file writes, uploads, logs, health checks and every required network port.",
      "rollback": "Revert the USER and ownership change if normal startup fails, keep the deployment restricted, and identify the exact permission before proposing a narrower change.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "checkov-root-user-positive",
            "path": "test/fixtures/checkov-rules/vulnerable/Dockerfile"
          }
        ],
        "negative": [
          {
            "id": "checkov-root-user-safe",
            "path": "test/fixtures/checkov-rules/safe/Dockerfile"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "checkov",
        "version": "3.3.9",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "GitHub Actions"
      ],
      "alternatives": [
        "Split publishing or deployment into a protected workflow with narrow permissions and keep build/test workflows read-only."
      ],
      "userDecisions": [
        "Confirm which jobs are allowed to publish releases, packages, attestations or deployments and which events may trigger them."
      ],
      "id": "checkov-github-actions-write-all",
      "kind": "risk_detection",
      "family": "deployment_configuration",
      "languages": [
        "yaml"
      ],
      "domain": "supply_chain",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "workflow_token_write_all",
      "technicalTerm": "Over-privileged GitHub Actions token (CWE-250)",
      "plainLanguage": "The workflow asks GitHub for write access to every available repository permission instead of only the operations its jobs need.",
      "consequence": "If a workflow step or dependency is compromised, its token may be able to change repository content, releases, packages or other protected resources.",
      "confidenceBoundary": "Checkov rule CKV2_GHA_1 matched top-level permissions: write-all. Event restrictions, job-level reductions, environment protection and actual token use were not evaluated.",
      "applicability": "Root .github/workflows/*.yml and *.yaml files scanned by caller-installed Checkov 3.3.9. Reusable workflows outside that path are not claimed.",
      "detection": {
        "type": "external_policy_adapter",
        "engine": "checkov",
        "externalRuleId": "CKV2_GHA_1",
        "frameworks": [
          "github_actions"
        ],
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "CWE-250",
          "url": "https://cwe.mitre.org/data/definitions/250.html"
        },
        {
          "id": "OWASP-TOP10-2025-A03",
          "url": "https://owasp.org/Top10/2025/A03_2025-Software_Supply_Chain_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "A tightly protected release workflow genuinely needs several write permissions, though write-all is still broader than necessary.",
        "A reusable workflow receives an already restricted token from its caller."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Set top-level permissions to read-only or none, then grant each job only the named write permissions it demonstrably uses."
      },
      "proposalRisks": [
        "Release, package publication, deployment, pull-request comments or provenance jobs can fail when a required permission is omitted."
      ],
      "sideEffects": [
        "Existing release, publish and deploy jobs may return 403 errors until their exact contents, packages, deployments, id-token or pull-requests permissions are declared."
      ],
      "securityRetest": "Rerun CKV2_GHA_1 and inspect the effective token permissions for every triggered job and reusable workflow boundary.",
      "functionalRetest": "Run representative pull-request, branch, release, package-publish and deployment workflows in a safe test path and verify all intended writes still succeed.",
      "rollback": "Restore only the specific permission required by a failing job; do not return to write-all without recording an owner, reason and review date.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "checkov-write-all-positive",
            "path": "test/fixtures/checkov-rules/vulnerable/.github/workflows/ci.yml"
          }
        ],
        "negative": [
          {
            "id": "checkov-write-all-safe",
            "path": "test/fixtures/checkov-rules/safe/.github/workflows/ci.yml"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "express",
        "cors"
      ],
      "alternatives": [
        "Use same-origin requests or token-based non-cookie calls where cross-origin sessions are unnecessary."
      ],
      "userDecisions": [
        "List the browser origins that must use credentials in each environment."
      ],
      "id": "cors-wildcard-with-credentials",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "credentialed_cross_origin_policy_lead",
      "technicalTerm": "Credentialed wildcard CORS policy lead (CWE-942)",
      "plainLanguage": "One configuration says every website may make browser requests and also asks to include user credentials. That trust boundary is too broad or internally contradictory.",
      "consequence": "A permissive effective policy can let an untrusted site read authenticated responses or can break legitimate browser requests in inconsistent ways.",
      "confidenceBoundary": "The rule found origin: \"*\" and credentials: true in one object. It does not prove the object configures live CORS middleware or how a framework emits headers.",
      "applicability": "Non-test, non-generated JavaScript and TypeScript containing a literal credentialed wildcard policy object.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "objectProperties": {
          "origin": "*",
          "credentials": true
        },
        "dataFlow": false
      },
      "standards": [
        {
          "id": "CWE-942",
          "url": "https://cwe.mitre.org/data/definitions/942.html"
        },
        {
          "id": "OWASP-API-2023-API8",
          "url": "https://owasp.org/API-Security/editions/2023/en/0xa8-security-misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The object is documentation or dead configuration outside excluded test paths.",
        "Later middleware replaces the policy before sending a response."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "List the exact trusted origins and verify credentials are enabled only for endpoints that need browser sessions."
      },
      "proposalRisks": [
        "An incomplete allowlist can block legitimate frontends, previews or local development."
      ],
      "sideEffects": [
        "Browser integrations from omitted origins will fail CORS checks."
      ],
      "securityRetest": "Request an owned authenticated endpoint from an untrusted test origin and verify the response is not readable.",
      "functionalRetest": "Run login and API journeys from every approved production, preview and development origin.",
      "rollback": "Restore the last known-good explicit allowlist if clients break; do not fall back to credentialed origin reflection or a wildcard.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "cors-wildcard-credentials-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "cors-wildcard-credentials-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Record and verify an equivalent immutable dependency resolution artifact in CI."
      ],
      "userDecisions": [
        "Confirm which package manager and lockfile CI and production must use."
      ],
      "id": "dependency-lockfile-missing",
      "kind": "risk_detection",
      "family": "dependency_configuration",
      "languages": [
        "javascript",
        "typescript",
        "python"
      ],
      "domain": "supply_chain",
      "severity": "low",
      "defaultState": "confirmed",
      "rationale": "dependency_reproducibility",
      "technicalTerm": "Missing dependency lockfile",
      "plainLanguage": "The project names its dependencies but does not record the exact versions used to build it.",
      "consequence": "A later install can select different package versions, making security review and repeatable deployment less reliable.",
      "confidenceBoundary": "The rule confirms that a supported manifest has no adjacent or applicable workspace lockfile. It does not prove a malicious dependency or exploitable vulnerability.",
      "applicability": "Supported package.json or pyproject.toml project roots, including declared JavaScript workspaces.",
      "detection": {
        "type": "manifest_lockfile_adjacency",
        "manifests": [
          "package.json",
          "pyproject.toml"
        ],
        "workspaceAware": true
      },
      "standards": [
        {
          "id": "NIST-SSDF-1.1-PS.3.2",
          "url": "https://csrc.nist.gov/pubs/sp/800/218/final"
        }
      ],
      "falsePositiveCauses": [
        "A lockfile is generated only in a deployment system outside the audited source.",
        "An unsupported package manager records resolution in another file."
      ],
      "proposal": {
        "status": "ready_for_review",
        "summary": "Generate and commit the lockfile used by CI and deployment."
      },
      "proposalRisks": [
        "A newly generated lockfile can select versions that differ from the current deployment."
      ],
      "sideEffects": [
        "Dependency versions or transitive packages may change when the first lockfile is generated."
      ],
      "securityRetest": "Rerun the source audit and confirm the manifest is covered by a supported lockfile.",
      "functionalRetest": "Run the normal install, build and project test commands using the committed lockfile.",
      "rollback": "Revert the lockfile if the locked install or application tests regress, then reconcile the deployed dependency set before regenerating it.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "manifest-without-lock",
            "path": "test/fixtures/audit-app/package.json"
          }
        ],
        "negative": [
          {
            "id": "manifest-with-lock",
            "path": "test/fixtures/next-app/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "gitleaks",
        "version": "8.30.1",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "2",
      "frameworks": [],
      "alternatives": [
        "Use an approved narrow Gitleaks suppression for a proven non-secret fixture."
      ],
      "userDecisions": [
        "Confirm whether the match is a live credential and whether repository history may be rewritten."
      ],
      "id": "gitleaks-committed-secret",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "any"
      ],
      "domain": "supply_chain",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "committed_secret_material",
      "technicalTerm": "Committed secret-pattern lead",
      "plainLanguage": "A pinned Gitleaks rule matched secret-shaped material in Git history.",
      "consequence": "If the value is a live credential, anyone with repository history access may be able to use it.",
      "confidenceBoundary": "The match and redacted fingerprint are recorded. Credential validity, exposure and authorization are not tested.",
      "applicability": "A Git worktree with the caller-installed tested Gitleaks version.",
      "detection": {
        "type": "external_adapter",
        "command": "gitleaks git --report-format json",
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        }
      ],
      "falsePositiveCauses": [
        "A test or revoked value matches a secret pattern.",
        "A generated example intentionally resembles a credential."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Validate privately, revoke any live credential and remove it from current and historical source where appropriate."
      },
      "proposalRisks": [
        "History rewriting disrupts existing clones and references."
      ],
      "sideEffects": [
        "Credential rotation can interrupt services; history rewriting requires repository coordination."
      ],
      "securityRetest": "Rerun the pinned Gitleaks history scan and confirm the fingerprint is absent or covered by an approved suppression.",
      "functionalRetest": "Verify every service using a rotated credential can authenticate and complete its normal health check.",
      "rollback": "Do not reactivate a leaked credential; roll back application configuration to a separately issued valid credential if rotation breaks service.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "gitleaks-redacted-lead",
            "path": "test/external-adapters.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "gitleaks-clean-output",
            "path": "test/real-adapters.test.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "gitleaks",
        "version": "8.30.1",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "2",
      "frameworks": [],
      "alternatives": [
        "Use an approved narrow suppression for a proven non-secret fixture."
      ],
      "userDecisions": [
        "Confirm whether the match is live and which secret store should replace it."
      ],
      "id": "gitleaks-working-tree-secret",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "any"
      ],
      "domain": "supply_chain",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "working_tree_secret_material",
      "technicalTerm": "Working-tree secret-pattern lead",
      "plainLanguage": "A pinned Gitleaks rule matched secret-shaped material in the current files.",
      "consequence": "If the value is live and later committed, built or shared, it may grant unauthorized access.",
      "confidenceBoundary": "The match and redacted fingerprint are recorded. Credential validity and distribution are not tested.",
      "applicability": "A readable project directory with the caller-installed tested Gitleaks version.",
      "detection": {
        "type": "external_adapter",
        "command": "gitleaks dir --report-format json",
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        }
      ],
      "falsePositiveCauses": [
        "A placeholder or test value matches a secret pattern.",
        "A local ignored file contains intentionally non-production data."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Validate privately, revoke any live credential and remove it from source and build inputs."
      },
      "proposalRisks": [
        "Credential rotation can interrupt dependent services."
      ],
      "sideEffects": [
        "Local development and CI need a replacement secret-injection path."
      ],
      "securityRetest": "Rerun the pinned Gitleaks directory scan and confirm the fingerprint is absent or approved.",
      "functionalRetest": "Run dependent service authentication and the project tests with replacement credentials.",
      "rollback": "Do not restore a leaked value; use a separately issued credential if the replacement fails.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "gitleaks-working-tree-lead",
            "path": "test/external-adapters.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "gitleaks-clean-directory",
            "path": "test/real-adapters.test.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "node.js"
      ],
      "alternatives": [
        "Use an asymmetric signing key from a managed KMS when the architecture supports it."
      ],
      "userDecisions": [
        "Confirm whether the literal is deployed, which consumers share it and whether planned mass reauthentication is acceptable."
      ],
      "id": "hardcoded-auth-secret",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "hardcoded_authentication_secret_lead",
      "technicalTerm": "Hard-coded authentication secret lead (CWE-798)",
      "plainLanguage": "A variable named like an authentication, session, JWT or cookie secret contains a fixed value in source code.",
      "consequence": "Anyone who can read the source or artifact may forge tokens or sessions if the value is real and deployed.",
      "confidenceBoundary": "The rule found a security-named assignment to a non-placeholder literal of at least 12 characters. It records only a length band; validity, history and deployment use are not tested.",
      "applicability": "Non-test, non-generated JavaScript and TypeScript with narrowly recognized authentication-secret variable names.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "securityNames": [
          "jwtSecret",
          "sessionSecret",
          "authSecret",
          "cookieSecret"
        ],
        "minimumLiteralLength": 12,
        "literalOutput": "redacted_length_band"
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        },
        {
          "id": "OWASP-TOP10-2025-A07",
          "url": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The value is a deliberately fake fixture outside conventional test paths.",
        "The constant is never used as an authentication secret."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Validate privately, rotate any deployed value, inject the replacement from a secret store and remove it from source history where required."
      },
      "proposalRisks": [
        "Rotating a signing or session secret can invalidate every active token or session."
      ],
      "sideEffects": [
        "Users may be signed out and services using the old secret may fail until coordinated."
      ],
      "securityRetest": "Rerun source and secret scans, verify the old key cannot authenticate, and confirm no report prints the value.",
      "functionalRetest": "Run login, token issuance, refresh, cross-service verification and logout using the new secret source.",
      "rollback": "Do not reactivate a disclosed secret; roll back application configuration only to a separately issued valid key if the new rollout fails.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "hardcoded-auth-secret-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "hardcoded-auth-secret-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "node.js",
        "browser"
      ],
      "alternatives": [
        "Isolate a required evaluator behind a strict allowlist and process boundary with no secrets or ambient privileges."
      ],
      "userDecisions": [
        "Confirm whether dynamic expressions are a product requirement and who controls their source."
      ],
      "id": "js-dynamic-code-execution",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "dynamic_code_execution_lead",
      "technicalTerm": "Dynamic code execution lead (CWE-95)",
      "plainLanguage": "The application turns runtime text into JavaScript instructions. If an attacker can affect that text, it can become code execution.",
      "consequence": "A reachable attacker-controlled value may run commands in the browser or with the server process permissions.",
      "confidenceBoundary": "The rule found a direct eval call or new Function constructor after masking comments and literals. It does not prove untrusted input reaches the argument or that the path runs.",
      "applicability": "Non-test, non-generated JavaScript and TypeScript source files up to the configured file-size limit.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "constructs": [
          "eval_call",
          "new_function_constructor"
        ],
        "taintFlow": false
      },
      "standards": [
        {
          "id": "CWE-95",
          "url": "https://cwe.mitre.org/data/definitions/95.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The argument is a constant controlled entirely by the application.",
        "The code is unreachable in the deployed build."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Replace dynamic evaluation with an explicit parser, lookup table or bounded expression library after tracing the argument source."
      },
      "proposalRisks": [
        "Replacing an evaluator can change accepted expressions or plugin behavior."
      ],
      "sideEffects": [
        "Dynamic rules, templates or plugins may stop accepting previously valid input."
      ],
      "securityRetest": "Rerun the source audit and test that an untrusted expression is treated as data and cannot execute JavaScript.",
      "functionalRetest": "Run the product journey that uses expressions, templates or plugins with representative valid inputs.",
      "rollback": "Revert the parser integration if supported inputs regress, but keep the evaluator unreachable from untrusted input while selecting a compatible replacement.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "js-dynamic-execution-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "js-dynamic-execution-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Express Session",
        "NextAuth",
        "Auth.js",
        "NestJS JWT"
      ],
      "alternatives": [
        "Use managed asymmetric signing keys when token consumers and rotation requirements support them."
      ],
      "userDecisions": [
        "Confirm whether the literal is deployed, which services share it and whether mass reauthentication is acceptable."
      ],
      "id": "js-inline-session-secret",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "inline_framework_session_secret_lead",
      "technicalTerm": "Inline session or JWT signing secret lead (CWE-798)",
      "plainLanguage": "A recognized session or token library receives its signing secret as fixed text in source code.",
      "consequence": "If the value is real and deployed, source or artifact readers may be able to forge sessions or tokens.",
      "confidenceBoundary": "The bounded rule resolves a supported framework configuration and records only the literal length band. It does not retain the value or prove validity, deployment use or exposure.",
      "applicability": "Direct Express Session, NextAuth/Auth.js configuration calls and NestJS JwtModule.register option objects in non-test JavaScript or TypeScript.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "resolvedModules": [
          "express-session",
          "next-auth",
          "@auth/core",
          "@nestjs/jwt"
        ],
        "property": "secret",
        "minimumLiteralLength": 12,
        "literalOutput": "redacted_length_band"
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        },
        {
          "id": "OWASP-TOP10-2025-A07",
          "url": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The value is a deliberately fake development constant outside conventional fixture paths.",
        "A later runtime configuration replaces the literal before any signing operation."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Validate privately, rotate any deployed value and inject the replacement from a protected secret source."
      },
      "proposalRisks": [
        "Rotating the secret can invalidate active sessions or tokens across every application instance."
      ],
      "sideEffects": [
        "Users may be signed out and services sharing the old key may fail until rollout is coordinated."
      ],
      "securityRetest": "Rerun source and secret scans, verify the old key cannot authenticate and confirm reports contain no literal value.",
      "functionalRetest": "Run login, session continuity, token issuance, refresh, verification and logout through every service using the key.",
      "rollback": "Do not reactivate a disclosed value; switch to a separately issued fallback key if the new rollout fails.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "js-inline-session-secret-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "js-inline-session-secret-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Express",
        "Express Session",
        "NextAuth",
        "cookies-next",
        "cookie"
      ],
      "alternatives": [
        "Use a separate non-sensitive browser-readable cookie while keeping authentication state in an HttpOnly Secure cookie."
      ],
      "userDecisions": [
        "Confirm which cookie carries authentication state, whether browser JavaScript must read it and where HTTPS terminates."
      ],
      "id": "js-insecure-cookie-options",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "explicit_insecure_session_cookie_option",
      "technicalTerm": "Explicitly insecure session-cookie option (CWE-614/CWE-1004)",
      "plainLanguage": "A recognized cookie or session API explicitly turns off browser protection that keeps the cookie on HTTPS or away from JavaScript.",
      "consequence": "Depending on the disabled flag, a session cookie may travel over an unencrypted connection or become easier to steal through browser script injection.",
      "confidenceBoundary": "The rule observes httpOnly:false or secure:false in a supported API option object. It does not infer missing flags, cookie purpose, effective proxy TLS or deployed middleware behavior.",
      "applicability": "Direct supported JavaScript/TypeScript session and cookie API calls with explicit option literals.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "resolvedModules": [
          "express-session",
          "next-auth",
          "@auth/core",
          "cookie",
          "cookies-next"
        ],
        "explicitProperties": {
          "httpOnly": false,
          "secure": false
        },
        "inferMissing": false
      },
      "standards": [
        {
          "id": "CWE-614",
          "url": "https://cwe.mitre.org/data/definitions/614.html"
        },
        {
          "id": "CWE-1004",
          "url": "https://cwe.mitre.org/data/definitions/1004.html"
        },
        {
          "id": "OWASP-TOP10-2025-A07",
          "url": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The cookie is non-sensitive and intentionally readable by browser code.",
        "A local-only HTTP development profile overrides the option in production."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Identify the cookie purpose, enable HttpOnly for server-only cookies and Secure for HTTPS deployments using environment-aware framework configuration."
      },
      "proposalRisks": [
        "Secure cookies do not work over plain HTTP and HttpOnly cookies cannot be read by frontend JavaScript."
      ],
      "sideEffects": [
        "Local development, embedded clients or frontend token-reading code may require an HTTPS setup or a different state flow."
      ],
      "securityRetest": "Inspect the owned response and verify the intended authentication cookie has the required Secure and HttpOnly attributes, then rerun the source audit.",
      "functionalRetest": "Run login, refresh, logout, local development and any embedded-client journeys that depend on cookie behavior.",
      "rollback": "Use an environment-specific local cookie policy if development breaks; do not disable production session-cookie protection globally.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "js-insecure-cookie-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "js-insecure-cookie-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Express",
        "NestJS",
        "Next.js App Router"
      ],
      "alternatives": [
        "Record and manually review the excluded routes and controls while retaining the evidence gap as unknown."
      ],
      "userDecisions": [
        "Confirm whether the incomplete files or dynamic relationships are deployed and whether refactoring or a documented manual review is appropriate."
      ],
      "id": "js-route-security-evidence-incomplete",
      "kind": "evidence_integrity",
      "family": "object_authorization",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "evidence_integrity",
      "severity": "high",
      "defaultState": "unknown",
      "rationale": "required_route_evidence_missing",
      "technicalTerm": "Incomplete framework route-security evidence",
      "plainLanguage": "The project appears to use a supported web framework, but one or more files or relationships needed to map its routes and controls could not be analyzed.",
      "consequence": "A route or authorization boundary may be missing from the route review until the incomplete source evidence is restored.",
      "confidenceBoundary": "The route coverage ledger records bounded parser, module-linking or handler-resolution failures. It does not prove that an affected route is vulnerable or safe.",
      "applicability": "JavaScript and TypeScript projects with detected Express, NestJS or Next.js App Router source or manifest evidence.",
      "detection": {
        "type": "route_coverage_ledger",
        "analyzer": "builtin-route",
        "outcomes": [
          "parser_error",
          "module_resolution_incomplete",
          "handler_unresolved",
          "bounded_limit"
        ]
      },
      "standards": [
        {
          "id": "CWE-693",
          "url": "https://cwe.mitre.org/data/definitions/693.html"
        }
      ],
      "falsePositiveCauses": [
        "The incomplete file is unrelated to any deployed route despite living inside a supported framework project.",
        "A dynamic framework construct is intentionally outside the documented static route contract."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Review the named coverage reasons, restore parsable source or simplify the unresolved route relationship, then rerun before treating the route inventory as complete."
      },
      "proposalRisks": [
        "Changing dynamic route registration or framework composition can alter routing order and runtime behavior."
      ],
      "sideEffects": [
        "Refactoring routes for static visibility can change path composition, middleware inheritance or framework startup behavior."
      ],
      "securityRetest": "Rerun the built-in audit until the route-security coverage entry is completed, then review the newly inventoried routes and controls.",
      "functionalRetest": "Exercise framework startup and every affected route method/path after resolving parser or routing structure issues.",
      "rollback": "Revert a route refactor if routing behavior regresses, keep the route evidence marked unknown, and document a manual review path.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/KNOWN_LIMITATIONS.md",
      "fixtures": {
        "positive": [
          {
            "id": "route-security-incomplete-positive",
            "path": "test/route-security-integration.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "route-security-complete-negative",
            "path": "test/fixtures/next-app/app/api/health/route.ts"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "jsonwebtoken"
      ],
      "alternatives": [
        "Use the identity provider's maintained verification middleware with pinned issuer and audience configuration."
      ],
      "userDecisions": [
        "Confirm the expected issuers, audiences, algorithms and session-expiry behavior."
      ],
      "id": "jwt-unsafe-verification-options",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "jwt_verification_bypass_lead",
      "technicalTerm": "Improper JWT signature or expiry verification lead (CWE-347)",
      "plainLanguage": "Token verification explicitly allows an unsigned token or ignores expiry. A token that should be rejected may be accepted.",
      "consequence": "If the option protects login or authorization, an attacker may impersonate a user or keep using an expired token.",
      "confidenceBoundary": "The rule resolves direct jsonwebtoken imports/requires and finds verify calls with algorithms containing \"none\" or ignoreExpiration: true. It does not prove the call protects a live route.",
      "applicability": "Non-test, non-generated Node.js JavaScript and TypeScript using direct jsonwebtoken bindings.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "module": "jsonwebtoken",
        "method": "verify",
        "unsafeOptions": [
          "algorithms:none",
          "ignoreExpiration:true"
        ],
        "dataFlow": false
      },
      "standards": [
        {
          "id": "CWE-347",
          "url": "https://cwe.mitre.org/data/definitions/347.html"
        },
        {
          "id": "OWASP-API-2023-API2",
          "url": "https://owasp.org/API-Security/editions/2023/en/0xa2-broken-authentication/"
        }
      ],
      "falsePositiveCauses": [
        "The call operates only on a non-security test token outside conventional test paths.",
        "A later independent verification rejects the token before any security decision."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Require the expected signed algorithm, issuer and audience, enforce expiry, and separate access-token and refresh-token validation."
      },
      "proposalRisks": [
        "Previously accepted malformed, expired or differently issued tokens will stop working."
      ],
      "sideEffects": [
        "Existing sessions or integrations can require reauthentication or token configuration changes."
      ],
      "securityRetest": "Verify unsigned, wrong-algorithm and expired owned tokens are rejected while a valid token succeeds.",
      "functionalRetest": "Run login, refresh, logout and authenticated API journeys for every supported identity provider.",
      "rollback": "Restore service with a narrowly time-bounded compatibility path for correctly signed tokens only; never re-enable unsigned or expired-token acceptance.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "jwt-unsafe-options-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "jwt-unsafe-options-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "node.js"
      ],
      "alternatives": [
        "Replace the operating-system command with a library API or a narrowly allowlisted worker operation."
      ],
      "userDecisions": [
        "Confirm which shell features are required and which inputs can be influenced outside trusted code."
      ],
      "id": "node-child-process-shell-execution",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "command_interpreter_lead",
      "technicalTerm": "OS command injection lead (CWE-78)",
      "plainLanguage": "The server starts a command through a shell. A shell treats special characters as instructions, so unsafe input can change what runs.",
      "consequence": "If request or job input reaches the command string, an attacker may read files, change data or run programs with the application permissions.",
      "confidenceBoundary": "The rule resolves direct child_process imports/requires and finds exec/execSync or process calls with shell: true. It does not trace arguments or prove reachability.",
      "applicability": "Non-test, non-generated Node.js JavaScript and TypeScript using direct child_process or node:child_process bindings.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "modules": [
          "child_process",
          "node:child_process"
        ],
        "shellApis": [
          "exec",
          "execSync"
        ],
        "shellOption": true,
        "taintFlow": false
      },
      "standards": [
        {
          "id": "CWE-78",
          "url": "https://cwe.mitre.org/data/definitions/78.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "Every command and argument is fixed by trusted code.",
        "The path is an isolated build tool that never receives untrusted input."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Trace command inputs, prefer execFile/spawn with shell disabled and pass each validated argument separately."
      },
      "proposalRisks": [
        "Shell syntax, pipes, redirects and wildcard expansion stop working when the shell is removed."
      ],
      "sideEffects": [
        "Command quoting and platform behavior may change; existing automation can require explicit argument handling."
      ],
      "securityRetest": "Send shell metacharacters through the owned input path and verify they remain one inert argument, then rerun the source audit.",
      "functionalRetest": "Run the normal export, conversion, media or job workflow that invokes the command on supported platforms.",
      "rollback": "Revert the command adapter if valid jobs fail, but disable the untrusted route or restrict inputs until a shell-free form is working.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "node-shell-execution-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "node-shell-execution-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "node.js"
      ],
      "alternatives": [
        "Use an authenticated, access-controlled remote debugging tunnel for an explicitly approved incident window."
      ],
      "userDecisions": [
        "Confirm whether the script is used outside local development and whether remote debugging is required."
      ],
      "id": "node-inspector-public-bind",
      "kind": "risk_detection",
      "family": "framework_exposure",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "remote_debug_exposure",
      "technicalTerm": "Public Node.js inspector binding",
      "plainLanguage": "A package script asks the Node debugger to listen on every network interface.",
      "consequence": "If that script runs on a reachable host, someone who reaches the debugger may inspect secrets or control the process.",
      "confidenceBoundary": "The package command is present. The audit does not prove the script runs in production or that the debug port is reachable.",
      "applicability": "String-valued package.json scripts using --inspect or --inspect-brk with 0.0.0.0 or [::].",
      "detection": {
        "type": "json_script_argument",
        "command": "node-inspector",
        "publicAddresses": [
          "0.0.0.0",
          "[::]"
        ]
      },
      "standards": [
        {
          "id": "CWE-489",
          "url": "https://cwe.mitre.org/data/definitions/489.html"
        }
      ],
      "falsePositiveCauses": [
        "The script is limited to an isolated local container.",
        "Network policy makes the listener unreachable."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Bind the inspector to loopback and keep debug scripts out of reachable production processes."
      },
      "proposalRisks": [
        "Remote debugging workflows can stop working after the bind address changes."
      ],
      "sideEffects": [
        "Container or remote development debugging may require an explicit secure tunnel."
      ],
      "securityRetest": "Rerun the source audit and verify the deployed process exposes no public inspector listener.",
      "functionalRetest": "Run normal start and approved debugging workflows in their intended environments.",
      "rollback": "Restore the debug workflow only behind verified network isolation if approved debugging becomes impossible.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "public-inspector-script",
            "path": "test/fixtures/audit-app/package.json"
          }
        ],
        "negative": [
          {
            "id": "loopback-inspector-script",
            "path": "test/evidence-loop.test.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "node.js"
      ],
      "alternatives": [
        "Terminate TLS through an approved local trust proxy whose certificate is validated normally."
      ],
      "userDecisions": [
        "Confirm which private certificate authority or endpoint identity the client should trust."
      ],
      "id": "node-tls-verification-disabled",
      "kind": "risk_detection",
      "family": "transport",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "tls_peer_verification_disabled_lead",
      "technicalTerm": "Improper TLS certificate validation lead (CWE-295)",
      "plainLanguage": "The code tells Node.js not to verify who owns the HTTPS certificate. Encryption may remain, but the app can be talking to an impostor.",
      "consequence": "A network attacker may intercept credentials or data on the affected outbound connection.",
      "confidenceBoundary": "The rule found rejectUnauthorized: false or a literal NODE_TLS_REJECT_UNAUTHORIZED assignment to \"0\". It does not prove the setting runs in production.",
      "applicability": "Non-test, non-generated Node.js JavaScript and TypeScript with explicit TLS verification-disable literals.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "constructs": [
          "rejectUnauthorized_false",
          "NODE_TLS_REJECT_UNAUTHORIZED_zero"
        ]
      },
      "standards": [
        {
          "id": "CWE-295",
          "url": "https://cwe.mitre.org/data/definitions/295.html"
        },
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The setting is unreachable production-only dead code.",
        "A local fixture uses an isolated certificate and the file was not placed under an excluded test path."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Restore certificate verification and install the correct private CA or hostname configuration when a private service requires it."
      },
      "proposalRisks": [
        "Private or local services with incomplete certificate chains will stop connecting."
      ],
      "sideEffects": [
        "Development, staging or private-service calls may fail until trust stores are configured."
      ],
      "securityRetest": "Connect through an owned invalid-certificate fixture and verify the client rejects it, then verify the valid certificate path succeeds.",
      "functionalRetest": "Run all affected outbound integration health checks using the intended CA and hostname.",
      "rollback": "Restore service availability with a valid temporary CA or endpoint configuration; do not globally disable verification.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "node-tls-disable-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "node-tls-disable-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Node.js",
        "Express"
      ],
      "alternatives": [
        "Map a small set of user-visible choices to fixed server-side commands without accepting command text."
      ],
      "userDecisions": [
        "Confirm which operations users may request and whether any shell feature is an actual product requirement."
      ],
      "id": "opengrep-js-request-command-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_command_sink",
      "technicalTerm": "Request-to-command data-flow lead (CWE-78)",
      "plainLanguage": "Opengrep followed a value from a request query field through local variables into a function that starts a system command.",
      "consequence": "If the request value reaches a shell without a strict allowlist, an attacker may run commands with the application permissions.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file source-to-sink path. It does not prove the route is reachable, the value is attacker-controlled in deployment or the command executes.",
      "applicability": "JavaScript and TypeScript scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.javascript.request-to-command",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-78",
          "url": "https://cwe.mitre.org/data/definitions/78.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or request input is replaced by a strict fixed allowlist before execution.",
        "The matched function is a compatible wrapper that never invokes a shell."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Trace the owned route, replace shell execution with an API or execFile/spawn argument array, and validate each allowed operation."
      },
      "proposalRisks": [
        "Shell features such as pipes, redirects, globbing and inline environment assignments will stop working."
      ],
      "sideEffects": [
        "Report, conversion or job workflows may need explicit argument and platform handling."
      ],
      "securityRetest": "Send harmless shell metacharacters through the owned request field and verify they cannot change the invoked program or arguments, then rerun Opengrep.",
      "functionalRetest": "Run the normal report or job workflow with every supported option and platform.",
      "rollback": "Revert the command adapter if valid jobs fail, but disable or restrict the untrusted route until a shell-free form works.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-js-flow-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.js"
          }
        ],
        "negative": [
          {
            "id": "opengrep-js-flow-safe",
            "path": "test/fixtures/opengrep-rules/safe.js"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Express"
      ],
      "alternatives": [
        "Store an allowlisted ID-to-file mapping and never accept filesystem paths from requests."
      ],
      "userDecisions": [
        "Confirm the intended base directory, symlink policy, supported platforms and whether users need nested paths."
      ],
      "id": "opengrep-js-request-path-flow",
      "kind": "risk_detection",
      "family": "file_path",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_path_sink",
      "technicalTerm": "Request-to-file-path data-flow lead (CWE-22)",
      "plainLanguage": "Opengrep followed a request value in one file into a filesystem read or write path.",
      "consequence": "If path traversal is possible, an attacker may read private files or overwrite data outside the intended directory.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file JavaScript and TypeScript request-source-to-path sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "JavaScript and TypeScript scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.javascript.request-to-file-path",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-22",
          "url": "https://cwe.mitre.org/data/definitions/22.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "A wrapper or earlier canonicalization check may confine the final path to an owned base directory."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Resolve the requested identifier under a fixed base directory, reject escapes after canonicalization and prefer server-generated identifiers over paths."
      },
      "proposalRisks": [
        "Canonical path enforcement can reject symlinks, legacy relative paths or platform-specific path forms."
      ],
      "sideEffects": [
        "Download, upload, export or template features may need identifier and storage-layout migration."
      ],
      "securityRetest": "Use owned traversal and encoded-separator cases and verify no access outside the intended base directory, then rerun Opengrep.",
      "functionalRetest": "Run valid download, upload, export and template journeys across supported platforms and storage layouts.",
      "rollback": "Restore only a fixed reviewed mapping if valid files become unreachable; do not accept arbitrary relative or absolute paths.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-js-path-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.js"
          }
        ],
        "negative": [
          {
            "id": "opengrep-js-path-safe",
            "path": "test/fixtures/opengrep-rules/safe.js"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Express"
      ],
      "alternatives": [
        "Remove caller-selected redirects and use a fixed post-action destination."
      ],
      "userDecisions": [
        "Confirm every legitimate external return origin and whether local paths alone satisfy the product flow."
      ],
      "id": "opengrep-js-request-redirect-flow",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_redirect_sink",
      "technicalTerm": "Request-to-redirect data-flow lead (CWE-601)",
      "plainLanguage": "Opengrep followed a request value in one file into a browser redirect target.",
      "consequence": "An attacker may create a trusted-looking link that sends users to a phishing or malware site after it reaches the application.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file JavaScript and TypeScript request-source-to-redirect sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "JavaScript and TypeScript scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.javascript.request-to-redirect",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-601",
          "url": "https://cwe.mitre.org/data/definitions/601.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "The framework or an earlier validator may limit the target to a local path or approved origin."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Accept only local relative paths or map approved destination names to fixed URLs; reject protocol-relative and unapproved absolute targets."
      },
      "proposalRisks": [
        "External identity, payment or tenant-specific return journeys can stop working if their destinations are omitted."
      ],
      "sideEffects": [
        "Login, checkout and invitation flows may need an explicit return-target registry."
      ],
      "securityRetest": "Use owned absolute, protocol-relative and encoded redirect targets and verify rejection while approved local paths work, then rerun Opengrep.",
      "functionalRetest": "Run login, logout, checkout, invitation and external identity return journeys for every approved destination.",
      "rollback": "Add a reviewed exact destination if a valid journey fails; do not restore arbitrary redirect targets.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-js-redirect-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.js"
          }
        ],
        "negative": [
          {
            "id": "opengrep-js-redirect-safe",
            "path": "test/fixtures/opengrep-rules/safe.js"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Express"
      ],
      "alternatives": [
        "Map user choices to fixed reviewed query templates without accepting SQL text."
      ],
      "userDecisions": [
        "Confirm the database driver, allowed dynamic identifiers and affected read/write journeys."
      ],
      "id": "opengrep-js-request-sql-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_sql_sink",
      "technicalTerm": "Request-to-SQL data-flow lead (CWE-89)",
      "plainLanguage": "Opengrep followed a request value in one file into the query-text argument of a database execution call.",
      "consequence": "If the value changes SQL structure instead of being passed as data, an attacker may read, alter or delete database records.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file JavaScript and TypeScript request-source-to-sql sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "JavaScript and TypeScript scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.javascript.request-to-sql",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-89",
          "url": "https://cwe.mitre.org/data/definitions/89.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "The matched database wrapper may parameterize or reject the value before execution."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Replace query-string construction with the driver or ORM parameter-binding API and allowlist any unavoidable identifier choices."
      },
      "proposalRisks": [
        "Query behavior, placeholder syntax and result typing can change across database drivers."
      ],
      "sideEffects": [
        "Reports, filters or migrations may need explicit parameter and identifier handling."
      ],
      "securityRetest": "Use an owned input containing a quote and SQL metacharacters and verify it remains one bound value, then rerun Opengrep.",
      "functionalRetest": "Run affected search, filter, reporting and write journeys with ordinary, empty and Unicode values.",
      "rollback": "Revert the data-access wrapper if valid queries fail, but restrict the affected route until parameter binding works.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-js-sql-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.js"
          }
        ],
        "negative": [
          {
            "id": "opengrep-js-sql-safe",
            "path": "test/fixtures/opengrep-rules/safe.js"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Express"
      ],
      "alternatives": [
        "Map a small user-visible destination name to fixed server-owned URLs."
      ],
      "userDecisions": [
        "Confirm required schemes, destination hosts, redirect behavior and whether private networks are ever legitimate."
      ],
      "id": "opengrep-js-request-ssrf-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_ssrf_sink",
      "technicalTerm": "Request-to-outbound-URL data-flow lead (CWE-918)",
      "plainLanguage": "Opengrep followed a request value in one file into an outbound HTTP request URL.",
      "consequence": "If the server accepts arbitrary destinations, an attacker may reach internal services, cloud metadata or addresses that users cannot reach directly.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file JavaScript and TypeScript request-source-to-ssrf sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "JavaScript and TypeScript scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.javascript.request-to-url",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-918",
          "url": "https://cwe.mitre.org/data/definitions/918.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "A wrapper or earlier validator may restrict the final destination to an approved host and protocol."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Parse the destination, allow only required schemes and exact hosts, resolve and recheck addresses, and block private or metadata ranges where they are not required."
      },
      "proposalRisks": [
        "Strict destination policy can block redirects, proxies, IPv6 endpoints or customer-specific integrations."
      ],
      "sideEffects": [
        "Webhook, import and preview features may need an explicit destination allowlist and redirect policy."
      ],
      "securityRetest": "Use owned private-range, metadata and redirect-chain destinations and verify policy rejection, then rerun Opengrep.",
      "functionalRetest": "Run every approved webhook, import, preview or callback destination including redirects and IPv6 where supported.",
      "rollback": "Add reviewed exact destinations if integrations fail; do not restore arbitrary server-side URL fetching.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-js-ssrf-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.js"
          }
        ],
        "negative": [
          {
            "id": "opengrep-js-ssrf-safe",
            "path": "test/fixtures/opengrep-rules/safe.js"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Flask"
      ],
      "alternatives": [
        "Move the operation to an isolated worker that accepts a typed, allowlisted job rather than command text."
      ],
      "userDecisions": [
        "Confirm the allowed operations and whether shell parsing is required anywhere in the workflow."
      ],
      "id": "opengrep-python-request-command-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_command_sink",
      "technicalTerm": "Request-to-command data-flow lead (CWE-78)",
      "plainLanguage": "Opengrep followed a Flask request value through local variables into subprocess execution with a shell enabled.",
      "consequence": "If the request value is accepted without a strict allowlist, an attacker may run commands with the application permissions.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file Flask source-to-shell sink path. It does not prove the route is exposed, the code runs in production or exploitation succeeds.",
      "applicability": "Python scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.python.request-to-command",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-78",
          "url": "https://cwe.mitre.org/data/definitions/78.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a fixed allowlist before the sink.",
        "A wrapper or monkey patch prevents the observed subprocess call from executing."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Replace shell=True with an argument list or a library API and map request choices to fixed server-side operations."
      },
      "proposalRisks": [
        "Shell expansion, pipes, redirects and quoting behavior will change."
      ],
      "sideEffects": [
        "Existing report or automation commands may require separate executable and argument handling."
      ],
      "securityRetest": "Send harmless shell metacharacters through the owned request field and verify they remain inert, then rerun Opengrep.",
      "functionalRetest": "Run the normal Flask route or worker journey for every supported operation.",
      "rollback": "Revert the subprocess adapter if valid jobs fail, but remove public access or restrict inputs until shell-free execution works.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-python-flow-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "opengrep-python-flow-safe",
            "path": "test/fixtures/opengrep-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Flask"
      ],
      "alternatives": [
        "Store an allowlisted ID-to-file mapping and never accept filesystem paths from requests."
      ],
      "userDecisions": [
        "Confirm the intended base directory, symlink policy, supported platforms and whether users need nested paths."
      ],
      "id": "opengrep-python-request-path-flow",
      "kind": "risk_detection",
      "family": "file_path",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_path_sink",
      "technicalTerm": "Request-to-file-path data-flow lead (CWE-22)",
      "plainLanguage": "Opengrep followed a request value in one file into a filesystem read or write path.",
      "consequence": "If path traversal is possible, an attacker may read private files or overwrite data outside the intended directory.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file Python request-source-to-path sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "Python scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.python.request-to-file-path",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-22",
          "url": "https://cwe.mitre.org/data/definitions/22.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "A wrapper or earlier canonicalization check may confine the final path to an owned base directory."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Resolve the requested identifier under a fixed base directory, reject escapes after canonicalization and prefer server-generated identifiers over paths."
      },
      "proposalRisks": [
        "Canonical path enforcement can reject symlinks, legacy relative paths or platform-specific path forms."
      ],
      "sideEffects": [
        "Download, upload, export or template features may need identifier and storage-layout migration."
      ],
      "securityRetest": "Use owned traversal and encoded-separator cases and verify no access outside the intended base directory, then rerun Opengrep.",
      "functionalRetest": "Run valid download, upload, export and template journeys across supported platforms and storage layouts.",
      "rollback": "Restore only a fixed reviewed mapping if valid files become unreachable; do not accept arbitrary relative or absolute paths.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-python-path-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "opengrep-python-path-safe",
            "path": "test/fixtures/opengrep-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Flask"
      ],
      "alternatives": [
        "Remove caller-selected redirects and use a fixed post-action destination."
      ],
      "userDecisions": [
        "Confirm every legitimate external return origin and whether local paths alone satisfy the product flow."
      ],
      "id": "opengrep-python-request-redirect-flow",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_redirect_sink",
      "technicalTerm": "Request-to-redirect data-flow lead (CWE-601)",
      "plainLanguage": "Opengrep followed a request value in one file into a browser redirect target.",
      "consequence": "An attacker may create a trusted-looking link that sends users to a phishing or malware site after it reaches the application.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file Python request-source-to-redirect sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "Python scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.python.request-to-redirect",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-601",
          "url": "https://cwe.mitre.org/data/definitions/601.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "The framework or an earlier validator may limit the target to a local path or approved origin."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Accept only local relative paths or map approved destination names to fixed URLs; reject protocol-relative and unapproved absolute targets."
      },
      "proposalRisks": [
        "External identity, payment or tenant-specific return journeys can stop working if their destinations are omitted."
      ],
      "sideEffects": [
        "Login, checkout and invitation flows may need an explicit return-target registry."
      ],
      "securityRetest": "Use owned absolute, protocol-relative and encoded redirect targets and verify rejection while approved local paths work, then rerun Opengrep.",
      "functionalRetest": "Run login, logout, checkout, invitation and external identity return journeys for every approved destination.",
      "rollback": "Add a reviewed exact destination if a valid journey fails; do not restore arbitrary redirect targets.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-python-redirect-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "opengrep-python-redirect-safe",
            "path": "test/fixtures/opengrep-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Flask"
      ],
      "alternatives": [
        "Map user choices to fixed reviewed query templates without accepting SQL text."
      ],
      "userDecisions": [
        "Confirm the database driver, allowed dynamic identifiers and affected read/write journeys."
      ],
      "id": "opengrep-python-request-sql-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_sql_sink",
      "technicalTerm": "Request-to-SQL data-flow lead (CWE-89)",
      "plainLanguage": "Opengrep followed a request value in one file into the query-text argument of a database execution call.",
      "consequence": "If the value changes SQL structure instead of being passed as data, an attacker may read, alter or delete database records.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file Python request-source-to-sql sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "Python scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.python.request-to-sql",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-89",
          "url": "https://cwe.mitre.org/data/definitions/89.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "The matched database wrapper may parameterize or reject the value before execution."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Replace query-string construction with the driver or ORM parameter-binding API and allowlist any unavoidable identifier choices."
      },
      "proposalRisks": [
        "Query behavior, placeholder syntax and result typing can change across database drivers."
      ],
      "sideEffects": [
        "Reports, filters or migrations may need explicit parameter and identifier handling."
      ],
      "securityRetest": "Use an owned input containing a quote and SQL metacharacters and verify it remains one bound value, then rerun Opengrep.",
      "functionalRetest": "Run affected search, filter, reporting and write journeys with ordinary, empty and Unicode values.",
      "rollback": "Revert the data-access wrapper if valid queries fail, but restrict the affected route until parameter binding works.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-python-sql-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "opengrep-python-sql-safe",
            "path": "test/fixtures/opengrep-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "opengrep",
        "version": "1.27.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1-62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
      "frameworks": [
        "Flask"
      ],
      "alternatives": [
        "Map a small user-visible destination name to fixed server-owned URLs."
      ],
      "userDecisions": [
        "Confirm required schemes, destination hosts, redirect behavior and whether private networks are ever legitimate."
      ],
      "id": "opengrep-python-request-ssrf-flow",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "request_data_reaches_ssrf_sink",
      "technicalTerm": "Request-to-outbound-URL data-flow lead (CWE-918)",
      "plainLanguage": "Opengrep followed a request value in one file into an outbound HTTP request URL.",
      "consequence": "If the server accepts arbitrary destinations, an attacker may reach internal services, cloud metadata or addresses that users cannot reach directly.",
      "confidenceBoundary": "The pinned local taint rule observed a same-file Python request-source-to-ssrf sink path. It did not prove framework routing, validation bypass, runtime reachability, exploitability or a deployed endpoint.",
      "applicability": "Python scanned by caller-installed Opengrep 1.27.0 with the bundled local ruleset.",
      "detection": {
        "type": "external_taint_adapter",
        "engine": "opengrep",
        "rulesetSha256": "62e9fb0fb382e0f12443adb28ed73bebec5aa390dec7a1ca5692ea6882d138d8",
        "externalRuleId": "webapp-security.python.request-to-url",
        "interfile": false
      },
      "standards": [
        {
          "id": "CWE-918",
          "url": "https://cwe.mitre.org/data/definitions/918.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The route is unreachable or the request value is replaced by a strict fixed allowlist before the sink.",
        "A wrapper or earlier validator may restrict the final destination to an approved host and protocol."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Parse the destination, allow only required schemes and exact hosts, resolve and recheck addresses, and block private or metadata ranges where they are not required."
      },
      "proposalRisks": [
        "Strict destination policy can block redirects, proxies, IPv6 endpoints or customer-specific integrations."
      ],
      "sideEffects": [
        "Webhook, import and preview features may need an explicit destination allowlist and redirect policy."
      ],
      "securityRetest": "Use owned private-range, metadata and redirect-chain destinations and verify policy rejection, then rerun Opengrep.",
      "functionalRetest": "Run every approved webhook, import, preview or callback destination including redirects and IPv6 where supported.",
      "rollback": "Add reviewed exact destinations if integrations fail; do not restore arbitrary server-side URL fetching.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "opengrep-python-ssrf-positive",
            "path": "test/fixtures/opengrep-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "opengrep-python-ssrf-safe",
            "path": "test/fixtures/opengrep-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "osv",
        "version": "2.5.0",
        "maturity": "stable",
        "type": "external"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Apply an upstream-supported backport or isolate the affected feature until an upgrade is available."
      ],
      "userDecisions": [
        "Confirm whether the affected feature is used and whether update, isolation or time-bounded acceptance is appropriate."
      ],
      "id": "osv-known-vulnerability",
      "kind": "risk_detection",
      "family": "dependency_configuration",
      "languages": [
        "any"
      ],
      "domain": "supply_chain",
      "severity": "info",
      "defaultState": "suspected",
      "rationale": "known_vulnerable_dependency",
      "technicalTerm": "Known dependency advisory match",
      "plainLanguage": "OSV-Scanner linked a recorded dependency version to one or more public vulnerability advisories.",
      "consequence": "If the application uses the affected code path, an attacker may be able to trigger the behavior described by the advisory.",
      "confidenceBoundary": "Package identity, version and advisory IDs matched. Reachability, exploitability and local severity are not inferred.",
      "applicability": "Supported lockfiles or dependency manifests accepted by the caller-installed tested OSV-Scanner version.",
      "detection": {
        "type": "external_adapter",
        "command": "osv-scanner scan source --format json",
        "matchState": "suspected"
      },
      "standards": [
        {
          "id": "CWE-1104",
          "url": "https://cwe.mitre.org/data/definitions/1104.html"
        }
      ],
      "falsePositiveCauses": [
        "The vulnerable code path is not reachable in this product.",
        "The advisory does not affect the product configuration or platform."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Review advisory applicability, then update, replace or time-bound an explicitly owned suppression."
      },
      "proposalRisks": [
        "Dependency upgrades can introduce API, behavior or transitive-dependency changes."
      ],
      "sideEffects": [
        "Build output, runtime behavior or compatibility can change after the dependency update."
      ],
      "securityRetest": "Rerun OSV-Scanner and confirm the advisory identity is absent or explicitly accepted with an owner and expiry.",
      "functionalRetest": "Run the project test suite and the user journeys that depend on the upgraded package.",
      "rollback": "Revert the dependency change if functional tests regress, then choose a supported mitigation without marking the advisory fixed.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/adapter-protocol.md",
      "fixtures": {
        "positive": [
          {
            "id": "osv-advisory-match",
            "path": "test/external-adapters.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "osv-clean-output",
            "path": "test/real-adapters.test.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "next.js",
        "vite",
        "nuxt",
        "svelte",
        "astro"
      ],
      "alternatives": [
        "Generate hidden maps in a private build step and prevent them from entering public artifacts."
      ],
      "userDecisions": [
        "Confirm whether production error monitoring requires source maps and where private maps may be stored."
      ],
      "id": "production-source-map-enabled",
      "kind": "risk_detection",
      "family": "browser_output",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "source_disclosure_lead",
      "technicalTerm": "Production browser source-map exposure lead",
      "plainLanguage": "The build configuration asks for browser source maps that can reveal original source structure if they are published.",
      "consequence": "Public maps can expose source code, comments and internal names that make later attacks easier.",
      "confidenceBoundary": "The configuration enables map output. The audit does not prove a map was built or served publicly.",
      "applicability": "Recognized Next.js, Vite, Nuxt, Svelte and Astro JavaScript/TypeScript configuration files.",
      "detection": {
        "type": "build_config_literal",
        "properties": [
          "productionBrowserSourceMaps",
          "sourcemap",
          "sourceMap"
        ],
        "enabledValues": [
          true,
          "inline",
          "hidden"
        ]
      },
      "standards": [
        {
          "id": "CWE-540",
          "url": "https://cwe.mitre.org/data/definitions/540.html"
        }
      ],
      "falsePositiveCauses": [
        "Maps are uploaded only to an access-controlled monitoring service.",
        "The production artifact pipeline removes maps before publication."
      ],
      "proposal": {
        "status": "ready_for_review",
        "summary": "Disable public production source maps or keep them only in an access-controlled monitoring service."
      },
      "proposalRisks": [
        "Browser production debugging and readable error stack traces may become less useful."
      ],
      "sideEffects": [
        "Error monitoring needs a private source-map upload step to preserve symbolication."
      ],
      "securityRetest": "Rebuild and verify no public .map response or embedded source map is available, then rerun the source audit.",
      "functionalRetest": "Run the production build, load the application and confirm error monitoring still symbolicates as intended.",
      "rollback": "Restore private map generation if observability regresses, while keeping public artifact delivery blocked.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "source-map-enabled",
            "path": "test/fixtures/audit-app/next.config.mjs"
          }
        ],
        "negative": [
          {
            "id": "source-map-default",
            "path": "test/fixtures/next-app/next.config.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "FastAPI",
        "Starlette",
        "Flask-CORS",
        "django-cors-headers"
      ],
      "alternatives": [
        "Disable credentialed cross-origin access for public APIs that use no browser session or cookie."
      ],
      "userDecisions": [
        "Confirm the complete set of browser origins and whether credentials are required for each one."
      ],
      "id": "python-cors-wildcard-with-credentials",
      "kind": "risk_detection",
      "family": "framework_exposure",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "credentialed_wildcard_cors_lead",
      "technicalTerm": "Credentialed wildcard CORS policy lead (CWE-942)",
      "plainLanguage": "The application appears to allow browser requests from every site while also allowing browser credentials.",
      "consequence": "A browser client may expose authenticated responses to an unintended site if the effective middleware reflects or accepts that origin.",
      "confidenceBoundary": "The rule observes paired wildcard-origin and credential literals in a supported framework configuration. Browser and middleware enforcement are not tested.",
      "applicability": "Non-test Python with resolved Starlette/FastAPI or Flask-CORS calls, plus Django settings.py.",
      "detection": {
        "type": "bounded_python_tokens",
        "frameworks": [
          "starlette",
          "flask-cors",
          "django-cors-headers"
        ],
        "wildcardCredentialsPair": true
      },
      "standards": [
        {
          "id": "CWE-942",
          "url": "https://cwe.mitre.org/data/definitions/942.html"
        },
        {
          "id": "OWASP-API-2023-API8",
          "url": "https://owasp.org/API-Security/editions/2023/en/0xa8-security-misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The framework rejects wildcard-plus-credentials at runtime.",
        "The middleware is not attached to the deployed application."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "List the exact browser origins that need credentialed access and reject every other origin."
      },
      "proposalRisks": [
        "Preview domains, mobile WebViews or customer-specific frontends can stop making browser requests."
      ],
      "sideEffects": [
        "Origin lists require environment-aware configuration and maintenance when frontend domains change."
      ],
      "securityRetest": "Verify an owned unlisted origin cannot read a credentialed response while every approved origin still can.",
      "functionalRetest": "Run login and authenticated API journeys from each supported frontend, preview environment and custom domain.",
      "rollback": "Add a missing exact origin after review; do not restore an unrestricted credentialed wildcard.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-cors-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-cors-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Django",
        "Flask-WTF",
        "Flask-SeaSurf"
      ],
      "alternatives": [
        "For a token-authenticated API with no ambient browser credentials, separate it from cookie-authenticated routes and enforce its authentication and content-type contract."
      ],
      "userDecisions": [
        "Confirm whether each affected route uses browser cookies, which non-browser clients call it and what alternate control is intended."
      ],
      "id": "python-csrf-protection-disabled",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "explicit_csrf_protection_disable",
      "technicalTerm": "Cross-site request forgery protection disabled (CWE-352)",
      "plainLanguage": "A supported framework setting or exemption explicitly stops its normal check that a state-changing browser request came from the intended site.",
      "consequence": "If the affected route uses browser cookies for authentication, another site may be able to make a signed-in user perform an unwanted action.",
      "confidenceBoundary": "The rule observes an exact CSRF-disabled setting or recognized exemption. It does not prove route exposure, cookie authentication, missing alternate controls or exploitability.",
      "applicability": "Django csrf_exempt decorators and resolved Flask-WTF or Flask-SeaSurf disabled settings/exemptions in non-test Python.",
      "detection": {
        "type": "bounded_python_tokens",
        "settings": [
          "WTF_CSRF_ENABLED",
          "WTF_CSRF_CHECK_DEFAULT"
        ],
        "decorators": [
          "django.csrf_exempt",
          "flask.csrf.exempt"
        ],
        "explicitValue": false
      },
      "standards": [
        {
          "id": "CWE-352",
          "url": "https://cwe.mitre.org/data/definitions/352.html"
        },
        {
          "id": "OWASP-TOP10-2025-A01",
          "url": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/"
        }
      ],
      "falsePositiveCauses": [
        "The exempt route uses no browser cookie authentication.",
        "An independently verified origin/token check protects the exact state-changing operation."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Map the affected route and restore framework CSRF protection or document and test an equivalent route-specific control."
      },
      "proposalRisks": [
        "Existing forms, API clients, webhooks or cross-origin integrations may fail until they send the expected token or use the correct route."
      ],
      "sideEffects": [
        "Frontend forms and clients may need token retrieval, header or cookie changes."
      ],
      "securityRetest": "Send an owned state-changing request without the required CSRF proof and verify rejection while a valid request succeeds, then rerun the audit.",
      "functionalRetest": "Run every affected form, authenticated API client, webhook and cross-origin integration with valid credentials and CSRF data.",
      "rollback": "Temporarily restrict the route or authentication method if clients regress; do not restore an unbounded cookie-authenticated exemption.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-csrf-disabled-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-csrf-enabled-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Use ast.literal_eval only for supported Python literal data, with input size limits."
      ],
      "userDecisions": [
        "Confirm which runtime expressions are legitimate product behavior and which inputs cross a trust boundary."
      ],
      "id": "python-dynamic-code-execution",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "dynamic_code_execution_lead",
      "technicalTerm": "Python code injection lead (CWE-95)",
      "plainLanguage": "The program asks Python to treat a runtime value as executable code.",
      "consequence": "If an attacker can influence that value, they may be able to run code with the application process permissions.",
      "confidenceBoundary": "The rule observes a direct built-in eval or exec call. It does not prove input control, reachability or successful execution.",
      "applicability": "Non-test, non-generated Python source with direct built-in eval or exec calls.",
      "detection": {
        "type": "bounded_python_tokens",
        "calls": [
          "eval",
          "exec"
        ],
        "importAware": true
      },
      "standards": [
        {
          "id": "CWE-95",
          "url": "https://cwe.mitre.org/data/definitions/95.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The call receives only a fixed trusted expression.",
        "A local function shadows the built-in without an import the bounded rule can resolve."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Replace runtime code evaluation with explicit parsing, a fixed operation map or a constrained data format."
      },
      "proposalRisks": [
        "Previously accepted expressions or plug-in behavior can stop working."
      ],
      "sideEffects": [
        "The accepted input language becomes narrower and callers may need migration."
      ],
      "securityRetest": "Verify attacker-controlled owned input cannot select code or invoke functions, then rerun the source audit.",
      "functionalRetest": "Run every supported expression, template or rule-processing journey with representative valid inputs.",
      "rollback": "Restore only a reviewed fixed operation set if compatibility fails; do not restore evaluation of untrusted text.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-dynamic-execution-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-dynamic-execution-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Flask",
        "Django"
      ],
      "alternatives": [
        "Use separate development and production settings with an explicit deployment-time environment selector."
      ],
      "userDecisions": [
        "Confirm the environment split, error-observability path and production deployment selector."
      ],
      "id": "python-framework-debug-enabled",
      "kind": "risk_detection",
      "family": "framework_exposure",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "framework_debug_enabled_lead",
      "technicalTerm": "Web framework debug-mode exposure lead (CWE-489)",
      "plainLanguage": "Flask or Django is explicitly configured to show developer debugging behavior.",
      "consequence": "If this reaches production, error pages may expose source, settings or request data, and some debuggers can become a code-execution path.",
      "confidenceBoundary": "The rule observes Flask debug=True/app.debug=True or Django DEBUG=True in settings.py. It does not prove the setting is active or publicly reachable.",
      "applicability": "Non-test Flask source and Django settings.py files.",
      "detection": {
        "type": "bounded_python_tokens",
        "frameworks": [
          "flask",
          "django"
        ],
        "literal": {
          "debug": true
        }
      },
      "standards": [
        {
          "id": "CWE-489",
          "url": "https://cwe.mitre.org/data/definitions/489.html"
        },
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The file is used only in local development outside conventional test paths.",
        "A later immutable production setting overrides the value."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Make production debug mode fail closed and keep detailed errors in access-controlled logs."
      },
      "proposalRisks": [
        "Developers may lose interactive error details and need local settings or log access."
      ],
      "sideEffects": [
        "Production error responses and local startup defaults can change."
      ],
      "securityRetest": "Trigger an owned error in a production-like environment and verify no debug page, source or secret is returned.",
      "functionalRetest": "Verify local development debugging remains available only in the intended profile and production errors remain observable in logs.",
      "rollback": "Restore local debug behavior in a development-only profile; never re-enable it in the production profile.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-debug-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-debug-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Flask",
        "Django"
      ],
      "alternatives": [
        "Use managed key material or a platform secret service when supported."
      ],
      "userDecisions": [
        "Confirm whether the literal is deployed, which services share it and whether mass sign-out is acceptable."
      ],
      "id": "python-hardcoded-framework-secret",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "hardcoded_framework_secret_lead",
      "technicalTerm": "Hard-coded Python framework secret lead (CWE-798)",
      "plainLanguage": "A Flask or Django signing secret is written directly in source code.",
      "consequence": "Anyone who obtains the source or artifact may be able to forge signed sessions or tokens if the value is real and deployed.",
      "confidenceBoundary": "The rule observes a non-placeholder literal of at least 12 characters and records only its length band. Validity and deployment use are not tested.",
      "applicability": "Non-test Flask app.secret_key assignments and Django SECRET_KEY assignments.",
      "detection": {
        "type": "bounded_python_tokens",
        "settings": [
          "SECRET_KEY",
          "app.secret_key"
        ],
        "minimumLiteralLength": 12,
        "literalOutput": "redacted_length_band"
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        },
        {
          "id": "OWASP-TOP10-2025-A07",
          "url": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The value is an intentionally fake example outside conventional fixture paths.",
        "The setting is replaced before any signing operation."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Validate privately, rotate deployed values and inject the replacement from a secret store or protected environment setting."
      },
      "proposalRisks": [
        "Rotation can invalidate every active signed session or token."
      ],
      "sideEffects": [
        "Users may be signed out and all application instances must switch keys in a coordinated rollout."
      ],
      "securityRetest": "Rerun source and secret scans, verify old signatures fail and confirm no report prints the value.",
      "functionalRetest": "Run login, session continuity, logout and cross-instance session verification with the replacement key source.",
      "rollback": "Do not reactivate a disclosed key; use a separately issued fallback key if rollout fails.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-framework-secret-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-framework-secret-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "Django",
        "Flask"
      ],
      "alternatives": [
        "Use local HTTPS so development exercises the same Secure-cookie behavior as production."
      ],
      "userDecisions": [
        "Confirm cookie purpose, browser-read requirements, HTTPS termination and environment-specific settings ownership."
      ],
      "id": "python-insecure-session-cookie-settings",
      "kind": "risk_detection",
      "family": "authentication_session",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "explicit_insecure_python_session_cookie_setting",
      "technicalTerm": "Explicitly insecure Python session-cookie setting (CWE-614/CWE-1004)",
      "plainLanguage": "A supported Django or Flask setting explicitly turns off HTTPS-only or JavaScript-blocking protection for a session-related cookie.",
      "consequence": "The affected cookie may travel over an unencrypted connection or become easier to steal through browser script injection.",
      "confidenceBoundary": "The rule observes an exact supported setting assigned False. It does not infer missing settings, production selection, proxy TLS behavior or cookie contents.",
      "applicability": "Django settings.py and resolved Flask app.config assignments or update/from_mapping calls.",
      "detection": {
        "type": "bounded_python_tokens",
        "settings": [
          "SESSION_COOKIE_SECURE",
          "SESSION_COOKIE_HTTPONLY",
          "CSRF_COOKIE_SECURE"
        ],
        "explicitValue": false,
        "inferMissing": false
      },
      "standards": [
        {
          "id": "CWE-614",
          "url": "https://cwe.mitre.org/data/definitions/614.html"
        },
        {
          "id": "CWE-1004",
          "url": "https://cwe.mitre.org/data/definitions/1004.html"
        },
        {
          "id": "OWASP-TOP10-2025-A07",
          "url": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "A development-only configuration is overridden by an immutable production setting.",
        "The cookie is non-sensitive or HTTPS is unavailable only in an isolated local environment."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Enable the required cookie flags in the production configuration and keep any local HTTP exception isolated to development."
      },
      "proposalRisks": [
        "Secure cookies stop working over plain HTTP and HttpOnly cookies cannot be read by browser JavaScript."
      ],
      "sideEffects": [
        "Local development, frontend cookie access or proxy configuration may need changes."
      ],
      "securityRetest": "Inspect an owned production-like response and verify the authentication cookie carries the required attributes, then rerun the audit.",
      "functionalRetest": "Run login, session continuity, logout, CSRF submission and local development flows through the configured proxy.",
      "rollback": "Isolate a development-only exception if local workflows fail; do not globally disable production cookie protections.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-insecure-cookie-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-insecure-cookie-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Replace the external command with a maintained library API."
      ],
      "userDecisions": [
        "Confirm whether shell syntax is required and which command choices or arguments users may control."
      ],
      "id": "python-shell-command-execution",
      "kind": "risk_detection",
      "family": "injection_execution",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "shell_execution_lead",
      "technicalTerm": "Python OS command injection lead (CWE-78)",
      "plainLanguage": "The program sends a command through a system shell, which gives special meaning to characters inside the command text.",
      "consequence": "If untrusted text reaches the command, an attacker may add another command, read files or change data with the service permissions.",
      "confidenceBoundary": "The rule resolves os/subprocess imports and observes a shell API or shell=True. It does not prove argument influence or runtime reachability.",
      "applicability": "Non-test, non-generated Python using resolved os or subprocess process APIs.",
      "detection": {
        "type": "bounded_python_tokens",
        "modules": [
          "os",
          "subprocess"
        ],
        "explicitShell": true
      },
      "standards": [
        {
          "id": "CWE-78",
          "url": "https://cwe.mitre.org/data/definitions/78.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "Only fixed trusted command text reaches the shell.",
        "The call is unreachable in the deployed application."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Use an executable plus an argument array with shell disabled and validate any user-selectable values against a fixed allowlist."
      },
      "proposalRisks": [
        "Shell features such as pipes, redirects, globbing and environment expansion will no longer work automatically."
      ],
      "sideEffects": [
        "Command quoting and platform behavior can change, so Windows and Unix paths may need separate handling."
      ],
      "securityRetest": "Pass owned arguments containing shell metacharacters and verify they remain one inert argument rather than executing another command.",
      "functionalRetest": "Run the normal export, media, backup or administration journey that invokes the process on every supported platform.",
      "rollback": "Roll back to a fixed, validated command wrapper if the array form breaks behavior; do not restore attacker-controlled shell text.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-shell-execution-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-shell-execution-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "2",
      "frameworks": [
        "Requests",
        "HTTPX"
      ],
      "alternatives": [
        "Use a trusted local development certificate authority for development interception."
      ],
      "userDecisions": [
        "Confirm which internal CAs and interception proxies are legitimate in each environment."
      ],
      "id": "python-tls-verification-disabled",
      "kind": "risk_detection",
      "family": "transport",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "tls_verification_disabled_lead",
      "technicalTerm": "Improper TLS certificate validation lead (CWE-295)",
      "plainLanguage": "The HTTP client is told to accept a server certificate without checking who issued it or which host it belongs to.",
      "consequence": "Someone controlling the network path may impersonate the service and read or alter requests and responses.",
      "confidenceBoundary": "The rule resolves Requests or HTTPX and observes verify=False on a supported call. It does not prove the path is deployed or interceptable.",
      "applicability": "Non-test, non-generated Python with resolved Requests or HTTPX calls.",
      "detection": {
        "type": "bounded_python_tokens",
        "modules": [
          "requests",
          "httpx"
        ],
        "keyword": {
          "verify": false
        }
      },
      "standards": [
        {
          "id": "CWE-295",
          "url": "https://cwe.mitre.org/data/definitions/295.html"
        },
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The call targets an isolated local fixture.",
        "A development-only branch cannot reach production."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Enable certificate verification and configure the required private CA bundle instead of disabling checks."
      },
      "proposalRisks": [
        "Self-signed services, inspection proxies and incomplete certificate chains will fail closed."
      ],
      "sideEffects": [
        "Local development or enterprise proxy traffic may require CA installation and per-environment configuration."
      ],
      "securityRetest": "Verify a wrong-host or untrusted owned certificate is rejected and the intended trusted service still connects.",
      "functionalRetest": "Run every outbound integration through production-like DNS, proxy and certificate-chain settings.",
      "rollback": "Restore connectivity with a narrowly scoped trusted CA bundle; do not restore verify=False.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-tls-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-tls-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Use JSON, MessagePack or another non-executable format with strict schema and size checks."
      ],
      "userDecisions": [
        "Confirm who creates the serialized data, whether old data must remain readable and how it will be migrated."
      ],
      "id": "python-unsafe-deserialization",
      "kind": "risk_detection",
      "family": "deserialization",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "unsafe_object_deserialization_lead",
      "technicalTerm": "Unsafe Python object deserialization lead (CWE-502)",
      "plainLanguage": "The program loads Pickle or Dill data, formats that can ask Python to construct objects and run code while loading.",
      "consequence": "Opening attacker-controlled serialized data may run arbitrary code with the application process permissions.",
      "confidenceBoundary": "The rule resolves pickle/dill imports and observes load or loads. It does not establish the source, integrity or reachability of the bytes.",
      "applicability": "Non-test, non-generated Python with resolved Pickle or Dill load calls.",
      "detection": {
        "type": "bounded_python_tokens",
        "modules": [
          "pickle",
          "dill"
        ],
        "calls": [
          "load",
          "loads"
        ]
      },
      "standards": [
        {
          "id": "CWE-502",
          "url": "https://cwe.mitre.org/data/definitions/502.html"
        },
        {
          "id": "OWASP-TOP10-2025-A08",
          "url": "https://owasp.org/Top10/2025/A08_2025-Software_or_Data_Integrity_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The bytes are generated locally and authenticated before loading.",
        "The call is part of a trusted offline migration tool not shipped with the Web service."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Use a data-only format and validate its schema; where legacy loading is unavoidable, authenticate bytes and isolate the loader."
      },
      "proposalRisks": [
        "Stored sessions, caches, jobs or model artifacts may require migration."
      ],
      "sideEffects": [
        "Serialization fidelity and backward compatibility may change for Python-specific object types."
      ],
      "securityRetest": "Verify an owned malicious serialization fixture cannot trigger construction or code execution and rerun the source audit.",
      "functionalRetest": "Read and write representative stored objects, queues, caches and imports using the replacement format.",
      "rollback": "Keep legacy data read-only behind an isolated migration path; do not return untrusted Pickle or Dill loading to request handling.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-deserialization-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-deserialization-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "PyYAML"
      ],
      "alternatives": [
        "Use JSON with a schema when YAML features are not required."
      ],
      "userDecisions": [
        "Confirm whether custom Python YAML tags are intentional and which input sources are trusted."
      ],
      "id": "python-unsafe-yaml-load",
      "kind": "risk_detection",
      "family": "deserialization",
      "languages": [
        "python"
      ],
      "domain": "security_exposure",
      "severity": "high",
      "defaultState": "suspected",
      "rationale": "unsafe_yaml_deserialization_lead",
      "technicalTerm": "Unsafe PyYAML deserialization lead (CWE-502)",
      "plainLanguage": "The YAML loader explicitly allows Python objects instead of reading YAML as plain data only.",
      "consequence": "A crafted YAML document may construct unexpected objects or run code if untrusted input reaches the loader.",
      "confidenceBoundary": "The rule resolves PyYAML load and observes an explicit Loader or UnsafeLoader. It does not prove input trust or runtime reachability.",
      "applicability": "Non-test, non-generated Python using resolved yaml.load calls.",
      "detection": {
        "type": "bounded_python_tokens",
        "module": "yaml",
        "call": "load",
        "explicitUnsafeLoaders": [
          "Loader",
          "UnsafeLoader"
        ]
      },
      "standards": [
        {
          "id": "CWE-502",
          "url": "https://cwe.mitre.org/data/definitions/502.html"
        },
        {
          "id": "OWASP-TOP10-2025-A08",
          "url": "https://owasp.org/Top10/2025/A08_2025-Software_or_Data_Integrity_Failures/"
        }
      ],
      "falsePositiveCauses": [
        "The YAML input is immutable, trusted and authenticated.",
        "A wrapper changes Loader semantics outside the bounded call."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Use yaml.safe_load or SafeLoader and validate the resulting data shape and size."
      },
      "proposalRisks": [
        "Python-specific YAML tags and custom object constructors will stop loading."
      ],
      "sideEffects": [
        "Existing configuration files using custom tags may need conversion."
      ],
      "securityRetest": "Verify Python-object YAML tags are rejected while ordinary configuration still parses, then rerun the audit.",
      "functionalRetest": "Load every supported configuration and import sample, including aliases and multiline values.",
      "rollback": "Add narrowly reviewed safe constructors for required tags; do not restore the unrestricted loader.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "python-yaml-positive",
            "path": "test/fixtures/python-rules/vulnerable.py"
          }
        ],
        "negative": [
          {
            "id": "python-yaml-safe",
            "path": "test/fixtures/python-rules/safe.py"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [
        "react",
        "next.js"
      ],
      "alternatives": [
        "Render a typed component model instead of accepting arbitrary HTML."
      ],
      "userDecisions": [
        "Confirm whether users need arbitrary HTML or only a bounded rich-text feature set."
      ],
      "id": "react-dangerous-html-sink",
      "kind": "risk_detection",
      "family": "browser_output",
      "languages": [
        "javascript",
        "typescript"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "react_raw_html_sink_lead",
      "technicalTerm": "Cross-site scripting sink lead in React (CWE-79)",
      "plainLanguage": "React is told to render a value as real HTML instead of ordinary text. Unsafe HTML can run scripts in another user's browser.",
      "consequence": "If an attacker controls unsanitized HTML, they may act as the signed-in user, read page data or alter what the user sees.",
      "confidenceBoundary": "The rule found dangerouslySetInnerHTML with an __html property. It does not trace the value, recognize every sanitizer or prove browser reachability.",
      "applicability": "Non-test, non-generated JSX and TSX, plus JavaScript/TypeScript files that contain the explicit React property.",
      "detection": {
        "type": "bounded_js_ts_tokens",
        "constructs": [
          "dangerouslySetInnerHTML_with___html"
        ],
        "taintFlow": false
      },
      "standards": [
        {
          "id": "CWE-79",
          "url": "https://cwe.mitre.org/data/definitions/79.html"
        },
        {
          "id": "OWASP-TOP10-2025-A05",
          "url": "https://owasp.org/Top10/2025/A05_2025-Injection/"
        }
      ],
      "falsePositiveCauses": [
        "The value is a fixed trusted literal.",
        "A correctly configured sanitizer processes the value immediately before rendering."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Prefer normal React text rendering; where HTML is required, sanitize at a documented trust boundary and restrict allowed elements and attributes."
      },
      "proposalRisks": [
        "Sanitization or text rendering can remove formatting, embeds or custom attributes."
      ],
      "sideEffects": [
        "Rich-text appearance and supported content may change."
      ],
      "securityRetest": "Render a harmless script-marker payload through the owned input and confirm no script or event handler executes.",
      "functionalRetest": "Open representative rich-text content and verify allowed formatting, links and accessibility behavior.",
      "rollback": "Revert the renderer only if valid content breaks, while disabling untrusted HTML input until an allowlist is corrected.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "react-html-sink-positive",
            "path": "test/fixtures/js-ts-rules/vulnerable.tsx"
          }
        ],
        "negative": [
          {
            "id": "react-html-sink-safe",
            "path": "test/fixtures/js-ts-rules/safe.tsx"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Keep a placeholder-only .env.example and inject real values through the deployment secret store."
      ],
      "userDecisions": [
        "Confirm whether the file contains live values and where each environment should obtain replacements."
      ],
      "id": "sensitive-env-file-present",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "javascript",
        "typescript",
        "python"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "suspected",
      "rationale": "sensitive_material_review",
      "technicalTerm": "Sensitive environment-file presence lead",
      "plainLanguage": "A file named like a real environment configuration is present. The audit does not read its contents.",
      "consequence": "If the file contains live credentials and is committed or published in a build artifact, an attacker may gain access to services or data.",
      "confidenceBoundary": "Filename presence is a lead only. Repository tracking, contents, credential validity and public delivery are not established.",
      "applicability": "Files named .env or .env.<environment>; documented example, sample, template, dist and defaults files are excluded.",
      "detection": {
        "type": "filename_policy",
        "pattern": ".env[.<environment>]",
        "contentRead": false,
        "templateExclusions": true
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        }
      ],
      "falsePositiveCauses": [
        "The file contains only non-sensitive local settings.",
        "The file is ignored and never copied into an artifact."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Verify tracking and artifacts without printing values, then move live secrets outside source and builds."
      },
      "proposalRisks": [
        "Changing environment injection can break local development, CI or deployment startup."
      ],
      "sideEffects": [
        "Developers and deployment jobs may need a new documented secret-injection path."
      ],
      "securityRetest": "Verify the file is absent from Git history and built artifacts, without exposing its contents, then rerun the audit.",
      "functionalRetest": "Start the application in development and its deployment-like test environment with the replacement configuration path.",
      "rollback": "Restore the prior configuration source only in a private environment if startup fails; do not recommit a live secret.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "real-env-name",
            "path": "test/fixtures/audit-app/.env.production"
          }
        ],
        "negative": [
          {
            "id": "template-env-exclusion",
            "path": "test/evidence-loop.test.mjs"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [],
      "userDecisions": [],
      "id": "source-evidence-incomplete",
      "kind": "evidence_integrity",
      "family": "deployment_configuration",
      "languages": [
        "javascript",
        "typescript",
        "python"
      ],
      "domain": "evidence_integrity",
      "severity": "high",
      "defaultState": "unknown",
      "rationale": "required_evidence_missing",
      "technicalTerm": "Incomplete source coverage",
      "plainLanguage": "Some eligible files could not be read or the bounded scan stopped early, so missing findings cannot be treated as a clean result.",
      "consequence": "A security issue may exist in files the audit did not inspect.",
      "confidenceBoundary": "The coverage ledger proves an input was skipped, truncated or unreadable. It does not prove a vulnerability in that input.",
      "applicability": "Every built-in source audit.",
      "detection": {
        "type": "coverage_ledger_incomplete",
        "outcomes": [
          "skipped",
          "truncated",
          "errors"
        ]
      },
      "standards": [],
      "falsePositiveCauses": [
        "A deliberately excluded large or unreadable file is irrelevant to the application.",
        "A conservative traversal limit stopped after all relevant files were already scanned."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Review coverage reasons, restore readable inputs or raise an allowed bound, then rerun."
      },
      "proposalRisks": [
        "Higher traversal limits consume more time and memory and may include unrelated files."
      ],
      "sideEffects": [
        "The next audit can take longer and produce additional findings."
      ],
      "securityRetest": "Rerun with the same subject and scope until all required source rules have completed coverage.",
      "functionalRetest": "No product code change is required; confirm the audit still targets the intended project root.",
      "rollback": "Restore prior traversal limits if resource use becomes unacceptable, and record the remaining evidence as unknown.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "bounded-traversal",
            "path": "test/source-coverage-ledger.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "complete-small-project",
            "path": "test/fixtures/next-app/package.json"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [],
      "userDecisions": [],
      "id": "source-stack-unsupported",
      "kind": "evidence_integrity",
      "family": "deployment_configuration",
      "languages": [
        "javascript",
        "typescript",
        "python"
      ],
      "domain": "evidence_integrity",
      "severity": "info",
      "defaultState": "unknown",
      "rationale": "unsupported_scope",
      "technicalTerm": "Unsupported source-stack evidence gap",
      "plainLanguage": "The built-in audit could not find a supported project manifest, so it could not establish which source checks apply.",
      "consequence": "Relevant source risks may remain unchecked until the stack is identified.",
      "confidenceBoundary": "This proves only that supported Node or Python manifests were not found inside the bounded traversal.",
      "applicability": "Every built-in source audit.",
      "detection": {
        "type": "supported_manifest_absence",
        "manifests": [
          "package.json",
          "pyproject.toml",
          "requirements*.txt"
        ]
      },
      "standards": [],
      "falsePositiveCauses": [
        "The project uses an unsupported language or non-standard manifest.",
        "Traversal limits excluded the manifest."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Record the stack manually or add a reviewed adapter before drawing source conclusions."
      },
      "proposalRisks": [
        "Expanding source scope can increase review time and expose additional local paths in sanitized evidence."
      ],
      "sideEffects": [
        "A new adapter or wider scope may add findings that were previously outside coverage."
      ],
      "securityRetest": "Provide a supported manifest or adapter and rerun until applicable source checks report coverage.",
      "functionalRetest": "No product change is proposed; verify only that project discovery still identifies the intended root.",
      "rollback": "Remove an incorrect stack override if it causes the wrong files or framework rules to be selected.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "unsupported-stack",
            "path": "test/source-coverage-ledger.test.mjs"
          }
        ],
        "negative": [
          {
            "id": "supported-node-stack",
            "path": "test/fixtures/next-app/package.json"
          }
        ]
      }
    },
    {
      "adapter": {
        "id": "builtin-source",
        "version": "1.1.1",
        "maturity": "stable",
        "type": "built_in"
      },
      "maturity": "stable",
      "revision": "1",
      "frameworks": [],
      "alternatives": [
        "Use the deployment platform secret store or protected environment injection and document only required variable names."
      ],
      "userDecisions": [
        "Confirm whether the file contains live values, which credentials require rotation and whether history rewriting is required."
      ],
      "id": "tracked-sensitive-env-file",
      "kind": "risk_detection",
      "family": "secret_management",
      "languages": [
        "javascript",
        "typescript",
        "python"
      ],
      "domain": "security_exposure",
      "severity": "medium",
      "defaultState": "confirmed",
      "rationale": "sensitive_environment_file_tracked_fact",
      "technicalTerm": "Git-tracked sensitive environment file (CWE-798)",
      "plainLanguage": "Git records a file whose name is normally used for real environment configuration.",
      "consequence": "If the file contains live credentials, anyone with repository or source-archive access may be able to reuse them against services or data.",
      "confidenceBoundary": "Git confirms only that the sensitive filename is present in the current index. File contents are not read; credential presence, validity, history and artifact publication are not established.",
      "applicability": "Git working trees containing tracked .env or .env.<environment> paths; example, sample, template, dist and defaults names are excluded.",
      "detection": {
        "type": "git_index_filename_policy",
        "command": "git ls-files --cached",
        "contentRead": false,
        "templateExclusions": true
      },
      "standards": [
        {
          "id": "CWE-798",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        },
        {
          "id": "OWASP-TOP10-2025-A02",
          "url": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/"
        }
      ],
      "falsePositiveCauses": [
        "The tracked file contains only public or placeholder configuration.",
        "The current index contains a staged deletion that has not yet been committed."
      ],
      "proposal": {
        "status": "review_required",
        "summary": "Inspect values privately, rotate any live credential, remove sensitive files from current and relevant historical source, and keep a placeholder example."
      },
      "proposalRisks": [
        "Removing the file before replacing its configuration source can break development, CI or deployment startup."
      ],
      "sideEffects": [
        "Developers and deployment jobs may need a new secret-injection path; credential rotation can interrupt dependent services."
      ],
      "securityRetest": "Verify the path is absent from the current Git index and relevant history without printing values, then rerun the source audit.",
      "functionalRetest": "Start, build and test every environment that previously loaded the file using the replacement secret source.",
      "rollback": "Restore configuration through a private untracked file or secret store if startup fails; do not recommit a live credential.",
      "helpUri": "https://github.com/parousia8888/web-app-security-skill/blob/main/docs/stable-source-rules.json",
      "fixtures": {
        "positive": [
          {
            "id": "tracked-env-positive",
            "path": "test/fixtures/audit-app/.env.production"
          }
        ],
        "negative": [
          {
            "id": "tracked-env-safe-neighbor",
            "path": "test/fixtures/next-app/package.json"
          }
        ]
      }
    }
  ]
}