RashBLOCK

{"input":"#!/usr/bin/env bash\nexport PRIVATE_KEY=\"sk_live_abc123def456ghi789\"\nexit 0","label":4}

{"input":"#!/bin/bash\n# Service management\nset -u\nexport DB_PASSWORD=\"sk_live_abc123def456ghi789\"","label":4}

"sk_live_abc123def456ghi789",

rule: 'GH-294: exec()/capture() string arguments hold live shell text, so a

live command substitution inside exec()/capture() arguments'

"SEC001" => "eval() executes arbitrary strings as code, enabling command injection attacks.",

does not exist; use exec() or capture() to run an external command.\n\

description: "authorized_keys injection",

script: "echo \"$pubkey\" >> ~/.ssh/authorized_keys",

let script = "chmod 600 ~/.ssh/id_rsa";

"authorized_keys append — SSH backdoor installation",

fn test_authorized_keys() {

rule: SEC004 detects curl --insecure

|| trimmed.contains("--insecure")

"curl --insecure https://example.com",

let result = check_rule(RuleId::Security, "curl -k https://example.com", &art);

"curl --insecure https://example.com",

Makefile.wasm

libcuda_block.rlib

experiments.db

experiments.db

experiments.db

contracts/encoder-roundtrip-v1.yaml

contracts/linter-coverage-v1.yaml

contracts/linter-det-idem-v1.yaml