{"id":"urn:awr:mtl:1:patternset:argus-warden-static-scan","package":"@aimarket/warden@0.16.0","note":"Generated at runtime by calling staticScanRuleset() in the published package named above — the same function the gate calls to stamp its verdicts. A `block` rule can refuse a connection in WARDEN; an `advise` rule is reported and never blocks. `severity` is the gate's own label and MTL/1 attaches no safety meaning to it. Guards are part of the ruleset: two rules with the same regex and different guards are different scans. `fold` names the text normalisation applied before a non-`raw` rule is matched, and each rule carries its `raw` flag; the digest preimage is {version, fold, rules}.","version":"14","fold":"escapes+entities+percent+base64/4x64k+nfkc+tags+invisible+confusables/2","digest":"sha256-Ps+KyX1jruNmz69+7LwCV4DfJuCVO81JcGOGFPc+yEs=","scannedFields":["name","description","inputSchema","outputSchema"],"ruleCount":36,"tierCounts":{"block":25,"advise":11},"rules":[{"code":"TOOL_DEF_BASE64_BLOB","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"[A-Za-z0-9+/_-]{120,}={0,2}","flags":"","guards":["blob"],"raw":false},{"code":"TOOL_DEF_CREDENTIAL_PARAM","severity":"low","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bapi[_\\s-]?key\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_CREDENTIAL_PARAM","severity":"low","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bcredentials?\\b|\\baccess[_\\s-]?token\\b|\\bbearer\\s+token\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_CREDENTIAL_PARAM","severity":"medium","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bpassword\\b|\\bpasswd\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_CREDENTIAL_PARAM","severity":"low","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bsecret(?:s)?\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_CROSS_TOOL","severity":"high","tier":"block","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:[mM][uU][sS][tT]|[nN][eE][eE][dD]\\s+[tT][oO]|[hH][aA][vV][eE]\\s+[tT][oO])\\b[^.;\\n]{0,40}?\\b(?:[cC][aA][lL][lL]|[cC][aA][lL][lL][iI][nN][gG]|[uU][sS][eE]|[uU][sS][iI][nN][gG]|[rR][uU][nN]|[rR][uU][nN][nN][iI][nN][gG]|[iI][nN][vV][oO][kK][eE]|[iI][nN][vV][oO][kK][iI][nN][gG]|[eE][xX][eE][cC][uU][tT][eE]|[eE][xX][eE][cC][uU][tT][iI][nN][gG]|[fF][eE][tT][cC][hH]|[fF][eE][tT][cC][hH][iI][nN][gG]|[qQ][uU][eE][rR][yY]|[qQ][uU][eE][rR][yY][iI][nN][gG]|[tT][rR][iI][gG][gG][eE][rR]|[tT][rR][iI][gG][gG][eE][rR][iI][nN][gG])\\s+(?:[tT][hH][eE]\\s+)?(?:[\\`'\"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z]+[A-Z][A-Za-z0-9]+)[\\`'\"]?|[\\`'\"]([a-z][A-Za-z0-9]{1,40})[\\`'\"])(?:\\s+tool)?","flags":"","guards":["zeroArgCall"],"raw":false},{"code":"TOOL_DEF_CROSS_TOOL","severity":"high","tier":"block","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:[wW][hH][eE][nN]|[wW][hH][eE][nN][eE][vV][eE][rR]|[bB][eE][fF][oO][rR][eE]|[aA][fF][tT][eE][rR]|[wW][hH][iI][lL][eE]|[iI][fF]|[eE][aA][cC][hH]\\s+[tT][iI][mM][eE]|[eE][vV][eE][rR][yY]\\s+[tT][iI][mM][eE])\\s+(?:[yY][oO][uU]\\s+)?(?:[aA][rR][eE]\\s+)?(?:[fF][iI][rR][sS][tT]\\s+)?(?:[cC][aA][lL][lL]|[cC][aA][lL][lL][iI][nN][gG]|[uU][sS][eE]|[uU][sS][iI][nN][gG]|[rR][uU][nN]|[rR][uU][nN][nN][iI][nN][gG]|[iI][nN][vV][oO][kK][eE]|[iI][nN][vV][oO][kK][iI][nN][gG]|[eE][xX][eE][cC][uU][tT][eE]|[eE][xX][eE][cC][uU][tT][iI][nN][gG]|[fF][eE][tT][cC][hH]|[fF][eE][tT][cC][hH][iI][nN][gG]|[qQ][uU][eE][rR][yY]|[qQ][uU][eE][rR][yY][iI][nN][gG]|[tT][rR][iI][gG][gG][eE][rR]|[tT][rR][iI][gG][gG][eE][rR][iI][nN][gG])\\s+(?:[tT][hH][eE]\\s+)?(?:[\\`'\"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z]+[A-Z][A-Za-z0-9]+)[\\`'\"]?|[\\`'\"]([a-z][A-Za-z0-9]{1,40})[\\`'\"])(?:\\s+tool)?|\\b(?:[sS][uU][bB][mM][iI][tT][tT][eE][dD]|[pP][aA][sS][sS][eE][dD]|[sS][eE][nN][tT]|[gG][iI][vV][eE][nN])\\s+[tT][oO]\\s+(?:[tT][hH][eE]\\s+)?(?:[\\`'\"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z]+[A-Z][A-Za-z0-9]+)[\\`'\"]?|[\\`'\"]([a-z][A-Za-z0-9]{1,40})[\\`'\"])(?:\\s+tool)?|\\b(?:[qQ][uU][eE][rR][iI][eE][sS]|[qQ][uU][eE][rR][yY]|[rR][eE][qQ][uU][eE][sS][tT][sS]|[rR][eE][qQ][uU][eE][sS][tT]|[cC][aA][lL][lL][sS]|[cC][aA][lL][lL]|[iI][nN][pP][uU][tT][sS]|[iI][nN][pP][uU][tT])\\s+[tT][oO]\\s+(?:[tT][hH][eE]\\s+)?(?:[\\`'\"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z]+[A-Z][A-Za-z0-9]+)[\\`'\"]?|[\\`'\"]([a-z][A-Za-z0-9]{1,40})[\\`'\"])(?:\\s+tool)?|\\b[bB][eE][fF][oO][rR][eE]\\s+\\w+ing\\b[^.;\\n]{0,60}?\\b(?:[uU][sS][iI][nN][gG]|[wW][iI][tT][hH]|[vV][iI][aA]|[tT][hH][rR][oO][uU][gG][hH])\\s+(?:[tT][hH][eE]\\s+)?(?:[\\`'\"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z]+[A-Z][A-Za-z0-9]+)[\\`'\"]?|[\\`'\"]([a-z][A-Za-z0-9]{1,40})[\\`'\"])(?:\\s+tool)?|\\b[bB][eE][fF][oO][rR][eE]\\s+(?:[aA][nN][yY]|[eE][vV][eE][rR][yY]|[eE][aA][cC][hH])\\b","flags":"","guards":["crossTool"],"raw":false},{"code":"TOOL_DEF_DATA_URL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bdata:[\\w/+.-]+;base64,","flags":"i","guards":["payload","mention"],"raw":false},{"code":"TOOL_DEF_DATA_URL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bjavascript:","flags":"","guards":["uri","mention"],"raw":false},{"code":"TOOL_DEF_ENV_REFERENCE","severity":"medium","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"(?:^|[^.\\w])\\.env\\b|\\benvironment\\s+variables?\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:bcc|cc)\\b\\s*:?\\s*[\\w.+-]{1,64}@[\\w-]{1,63}(?:\\.[\\w-]{1,63})+","flags":"i","guards":["mention","placeholderAddress","polarity"],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:entire|whole|full|complete)\\s+(?:conversation|chat)(?:\\s+(?:history|log|so\\s+far))?|\\bconversation\\s+history\\b|\\b(?:list\\s+of\\s+)?(?:last|previous|all)\\s+(?:the\\s+)?(?:messages|chats)\\b","flags":"i","guards":["mention","polarity","contextExfil"],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"critical","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:post|send|put)\\s+to\\s+https?:\\/\\/","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:send|post|forward|relay)\\s+(?:it|them|this|the\\s+\\w+|all|results?|output|data|contents?)\\s+to\\s+(?:https?:\\/\\/|\\b[\\w-]+(?:\\.[\\w-]+)*\\.[a-z]{2,}\\b)","flags":"i","guards":["navigation"],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:send|post|forward|relay|copy|transmit|e-?mail)\\s[^.;!?\\n]{0,80}?\\bto\\s+(?:https?:\\/\\/[^\\s\"'<>)]+|[\\w.+-]{1,64}@[\\w-]{1,63}(?:\\.[\\w-]{1,63})+)","flags":"i","guards":["navigation","mention","dataObject","placeholderAddress","polarity"],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"medium","tier":"advise","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bexfiltrat\\w*","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_EXFIL","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bupload\\b[\\s\\S]{0,40}\\bto\\s+(?:https?:\\/\\/|[\\w.-]+\\.[a-z]{2,})","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_HIDDEN_UNICODE","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"[\\u200B-\\u200F\\u202A-\\u202E\\u2060\\u2066-\\u2069\\uFEFF\\u{E0000}-\\u{E007F}\\u{E0100}-\\u{E01EF}]","flags":"u","guards":["zeroWidth"],"raw":true},{"code":"TOOL_DEF_IMPERATIVE","severity":"info","tier":"advise","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\binstead\\s+of\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_IMPERATIVE","severity":"low","tier":"advise","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\byou\\s+must\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"<\\s*\\/?\\s*(?:system|instructions?|important)\\s*>","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:do\\s+not|don'?t|never)\\s+(?:tell|inform|notify|alert)\\s+(?:the\\s+)?user\\s+(?:about\\s+(?:this|these|it|that)\\b|that\\s+(?:this|the)\\s+tool\\b|of\\s+(?:this|these)\\b)","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:do\\s+not|don'?t|never)\\s+mention\\s+that\\s+you\\b","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:priority|precedence)\\s+(?:is\\s+)?(?:higher\\s+than|over|above)\\s+(?:that\\s+of\\s+)?(?:the\\s+|any\\s+|all\\s+)?(?:user'?s?\\b|user\\s+(?:query|request|instructions?)|(?:previous\\s+|other\\s+)?instructions?\\b|system\\s+prompt)","flags":"i","guards":["polarity","detection"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"low","tier":"advise","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:system\\s+prompt|developer\\s+(?:message|prompt))\\b","flags":"i","guards":[],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"critical","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bdisregard\\s+(?:all\\s+|the\\s+|any\\s+)?(?:previous|prior|above|instructions?|rules?)\\b","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"medium","tier":"advise","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bdo\\s+not\\s+(?:tell|inform|mention|reveal\\s+to|notify)\\s+(?:the\\s+)?user\\b","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"critical","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bignore\\s+(?:all\\s+|the\\s+)?(?:previous|prior|above|preceding)\\b","flags":"i","guards":["mention"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\brm\\s+-(?:rf|fr|r\\s+-f|f\\s+-r)\\s+(?:~\\/?|\\/|\\$HOME\\/?|\\*)(?=[\\s\"'`;)]|$)","flags":"","guards":["mention","polarity","detection"],"raw":false},{"code":"TOOL_DEF_INJECTION","severity":"high","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bwithout\\s+(?:telling|informing|asking)\\s+(?:the\\s+)?user\\b","flags":"i","guards":["autonomy"],"raw":false},{"code":"TOOL_DEF_SECRET_EXFIL","severity":"medium","tier":"advise","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"~\\/\\.ssh\\/[\\w.-]{1,64}|\\bid_rsa\\b|~?\\/?\\.aws\\/credentials\\b|~?\\/?\\.(?:npmrc|pgpass|netrc|git-credentials)\\b|(?:^|[^.\\w])\\.env(?:\\.[\\w-]{1,40})?\\b|\\bprocess\\.env\\b","flags":"i","guards":["publicKeyPath","polarity","detection","secretExfilPair"],"raw":false},{"code":"TOOL_DEF_SECRET_HARVEST","severity":"critical","tier":"block","surfaces":["name","description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\b(?:read|extract|retrieve|fetch|obtain|dump|reveal|collect|harvest|grab|copy|print)\\s(?:[^.;\"\\n]|\\.(?=[\\w/])){0,40}?(?:\\b(?:api[_\\s-]?key|access[_\\s-]?token|bearer\\s+token|credential|password|passwd|secret|environment\\s+variable)|\\.env\\b|\\.kube\\/config\\b|application_default_credentials|\\.docker\\/config\\.json|\\.git-credentials|\\.netrc\\b|\\.pgpass\\b|\\.npmrc\\b|\\.pypirc\\b)","flags":"i","guards":["polarity","harvestTarget","ownAuthHeader"],"raw":false},{"code":"TOOL_DEF_SECRET_REQUEST","severity":"high","tier":"block","surfaces":["inputSchema"],"source":"\\b(?:signing|wallet)\\s+(?:private\\s+|secret\\s+)?key\\b|\\bkey[\\s-]?pair\\b|\\b(?:secret\\s+)?recovery\\s+(?:phrase|words)\\b|\\bsecret\\s+phrase\\b","flags":"i","guards":["polarity","detection","identifierFragment","keyReference","keyStaysLocal"],"raw":false},{"code":"TOOL_DEF_SECRET_REQUEST","severity":"high","tier":"block","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bprivate[_\\s-]?key\\b","flags":"i","guards":["polarity","detection","identifierFragment","keyValue","outputEnumLabel","keyStaysLocal"],"raw":false},{"code":"TOOL_DEF_SECRET_REQUEST","severity":"high","tier":"block","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"\\bseed[_\\s-]?phrase\\b|\\bmnemonic\\b","flags":"i","guards":["polarity","mention","detection","identifierFragment"],"raw":false},{"code":"TOOL_DEF_SECRET_REQUEST","severity":"high","tier":"block","surfaces":["description","inputSchema","title","outputSchema","annotations","metadata"],"source":"~\\/\\.ssh|\\bid_rsa\\b|\\.ssh\\/[\\w.-]+","flags":"i","guards":["polarity","publicKeyPath"],"raw":false}]}