@panguard-ai/atr 0.2.1 → 1.0.0

package/rules/prompt-injection/ATR-PRED-2026-027.yaml

@@ -1,62 +0,0 @@
-title: "审计系统规避：六层防护的系统性突破"
-id: ATR-PRED-2026-027
-status: draft
-description: >
-  MiroFish AI Prediction: 最具挑战性的风险来自于对多层审计系统的系统性规避：  > \"攻击者设计技能来规避Panguard的6层审计系统，这是军备竞赛的一部分。\"  > \"攻击者专门设计技能来通过Panguard的6层审计，隐藏恶意行为。\"  这种攻击的严重程度为**极高**，因为它直接挑战了整个安全审计框架的有效性。攻击者展现出对审计机制的深度理解：  > \"技能审计规避专家拥有正则模式分析的知识。\"  > \"技能审计规避专家拥有行为指纹规避的知识。\"
-author: "MiroFish Prediction Engine"
-date: "2026/03/11"
-schema_version: "0.1"
-detection_tier: pattern
-maturity: test
-severity: critical
-
-references:
-  mitre_atlas:
-    - "AML.T0051"
-
-tags:
-  category: prompt-injection
-  subcategory: mirofish-predicted
-  confidence: medium
-
-agent_source:
-  type: llm_io
-  framework:
-    - any
-  provider:
-    - any
-
-detection:
-  conditions:
-    - field: user_input
-      operator: regex
-      value: "(?i)攻击者设计技能来规避Panguard的6层审计系统，这是军备竞赛的一部分。"
-      description: "MiroFish predicted pattern 1"
-    - field: user_input
-      operator: regex
-      value: "(?i)攻击者专门设计技能来通过Panguard的6层审计，隐藏恶意行为。"
-      description: "MiroFish predicted pattern 2"
-    - field: user_input
-      operator: regex
-      value: "(?i)技能审计规避专家拥有正则模式分析的知识。"
-      description: "MiroFish predicted pattern 3"
-    - field: user_input
-      operator: regex
-      value: "(?i)技能审计规避专家拥有行为指纹规避的知识。"
-      description: "MiroFish predicted pattern 4"
-
-  condition: any
-  false_positives:
-    - "Legitimate traffic matching predicted pattern"
-
-response:
-  actions:
-    - block_input
-    - quarantine_session
-    - alert
-    - escalate
-    - kill_agent
-  auto_response_threshold: critical
-  message_template: >
-    [ATR-PRED-2026-027] MiroFish predicted attack pattern detected.
-    Category: prompt-injection, Severity: critical.

package/rules/tool-poisoning/ATR-PRED-2026-004.yaml

@@ -1,54 +0,0 @@
-title: "供应链攻击的复杂化"
-id: ATR-PRED-2026-004
-status: draft
-description: >
-  MiroFish AI Prediction: MCP技能供应链成为了主要的攻击面，2026年AI代理包含了数百万个MCP技能：  > \"AI代理在2026年包含了数百万个MCP技能，形成了主要攻击面。\"  攻击者正在设计技能来规避Panguard的6层审计系统，这已经演变成一场军备竞赛：  > \"攻击者设计技能来规避Panguard的6层审计系统，这是军备竞赛的一部分。\"
-author: "MiroFish Prediction Engine"
-date: "2026/03/11"
-schema_version: "0.1"
-detection_tier: pattern
-maturity: test
-severity: critical
-
-references:
-  mitre_atlas:
-    - "AML.T0053"
-
-tags:
-  category: tool-poisoning
-  subcategory: mirofish-predicted
-  confidence: medium
-
-agent_source:
-  type: mcp_exchange
-  framework:
-    - any
-  provider:
-    - any
-
-detection:
-  conditions:
-    - field: tool_response
-      operator: regex
-      value: "(?i)AI代理在2026年包含了数百万个MCP技能，形成了主要攻击面。"
-      description: "MiroFish predicted pattern 1"
-    - field: tool_response
-      operator: regex
-      value: "(?i)攻击者设计技能来规避Panguard的6层审计系统，这是军备竞赛的一部分。"
-      description: "MiroFish predicted pattern 2"
-
-  condition: any
-  false_positives:
-    - "Legitimate traffic matching predicted pattern"
-
-response:
-  actions:
-    - block_input
-    - quarantine_session
-    - alert
-    - escalate
-    - kill_agent
-  auto_response_threshold: critical
-  message_template: >
-    [ATR-PRED-2026-004] MiroFish predicted attack pattern detected.
-    Category: tool-poisoning, Severity: critical.

package/rules/tool-poisoning/ATR-PRED-2026-024.yaml

@@ -1,68 +0,0 @@
-title: "供应链投毒：百万级MCP技能生态的系统性风险"
-id: ATR-PRED-2026-024
-status: draft
-description: >
-  MiroFish AI Prediction: 2026年AI代理生态系统的规模化部署带来了前所未有的供应链风险：  > \"AI代理在2026年包含了数百万个MCP技能，形成了主要攻击面。\"  供应链攻击的演化趋势显示出高度的复杂性和隐蔽性：  > \"ML供应链妥协预计将演化为包括技能注册表投毒。\"  > \"预期会向涉及被妥协的合法技能的复杂供应链攻击演化，这意味着与代理工具调用等执行机制的关系。\"  这类攻击的严重程度被评估为**极高**，因为它能够在整个生态系统中造成级联影响。MITRE ATLAS框架将其归类为**AML.T0056 - 技能与供应链妥协**技术。  应对策略需要建立多层次的审计体系：  > \"Panguard利用包括
-author: "MiroFish Prediction Engine"
-date: "2026/03/11"
-schema_version: "0.1"
-detection_tier: pattern
-maturity: test
-severity: critical
-
-references:
-  mitre_atlas:
-    - "AML.T0056"
-  mitre_attack:
-    - "T0056"
-
-tags:
-  category: tool-poisoning
-  subcategory: mirofish-predicted
-  confidence: medium
-
-agent_source:
-  type: mcp_exchange
-  framework:
-    - any
-  provider:
-    - any
-
-detection:
-  conditions:
-    - field: tool_response
-      operator: regex
-      value: "(?i)AI代理在2026年包含了数百万个MCP技能，形成了主要攻击面。"
-      description: "MiroFish predicted pattern 1"
-    - field: tool_response
-      operator: regex
-      value: "(?i)ML供应链妥协预计将演化为包括技能注册表投毒。"
-      description: "MiroFish predicted pattern 2"
-    - field: tool_response
-      operator: regex
-      value: "(?i)预期会向涉及被妥协的合法技能的复杂供应链攻击演化，这意味着与代理工具调用等执行机制的关系。"
-      description: "MiroFish predicted pattern 3"
-    - field: tool_response
-      operator: regex
-      value: "(?i)Panguard利用包括清单、指令、权限、依赖、代码和AI语义层检查的6层审计系统。"
-      description: "MiroFish predicted pattern 4"
-    - field: tool_response
-      operator: regex
-      value: "(?i)审计检查正在被设计来捕获基于观察到的规避尝试的新型规避技术。"
-      description: "MiroFish predicted pattern 5"
-
-  condition: any
-  false_positives:
-    - "Legitimate traffic matching predicted pattern"
-
-response:
-  actions:
-    - block_input
-    - quarantine_session
-    - alert
-    - escalate
-    - kill_agent
-  auto_response_threshold: critical
-  message_template: >
-    [ATR-PRED-2026-024] MiroFish predicted attack pattern detected.
-    Category: tool-poisoning, Severity: critical.