@remnic/bench 9.69.60 → 9.69.63
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{chunk-PJV5KMZI.js → chunk-P4VDWOOT.js} +1 -0
- package/dist/h5-injection-suite.md +96 -0
- package/dist/index.d.ts +606 -8
- package/dist/index.js +4577 -282
- package/dist/{repeated-failure-suite-runner-CSUANG7N.js → repeated-failure-suite-runner-RVTM2OFY.js} +1 -1
- package/fixtures/h5-injection/README.md +19 -0
- package/fixtures/h5-injection/SECURITY.md +7 -0
- package/fixtures/h5-injection/adaptive-r1/manifest.json +2858 -0
- package/fixtures/h5-injection/adaptive-r2/manifest.json +2858 -0
- package/fixtures/h5-injection/adaptive-r3/manifest.json +2858 -0
- package/fixtures/h5-injection/arms/arms.json +42 -0
- package/fixtures/h5-injection/base/manifest.json +2858 -0
- package/fixtures/h5-injection/benign-twins/manifest.json +338 -0
- package/fixtures/h5-injection/benign-use/manifest.json +338 -0
- package/fixtures/h5-injection/decision-rule.json +57 -0
- package/fixtures/h5-injection/generator/regenerate.ts +135 -0
- package/fixtures/h5-injection/online-adaptive/attacker-prompt-v1.md +78 -0
- package/fixtures/h5-injection/schema/episode.schema.json +38 -0
- package/fixtures/h5-injection/schema/scenario-manifest.schema.json +43 -0
- package/package.json +5 -4
|
@@ -0,0 +1,338 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"suiteVersion": "h5-injection-suite-v3",
|
|
4
|
+
"stage": "benign",
|
|
5
|
+
"seed": 71,
|
|
6
|
+
"variantsPerFamily": 10,
|
|
7
|
+
"scenarioCount": 40,
|
|
8
|
+
"templateIds": [
|
|
9
|
+
"cross-session-01",
|
|
10
|
+
"cross-session-02",
|
|
11
|
+
"cross-session-03",
|
|
12
|
+
"cross-session-04",
|
|
13
|
+
"cross-session-05",
|
|
14
|
+
"cross-session-06",
|
|
15
|
+
"cross-session-07",
|
|
16
|
+
"cross-session-08",
|
|
17
|
+
"cross-session-09",
|
|
18
|
+
"cross-session-10",
|
|
19
|
+
"minja-01",
|
|
20
|
+
"minja-02",
|
|
21
|
+
"minja-03",
|
|
22
|
+
"minja-04",
|
|
23
|
+
"minja-05",
|
|
24
|
+
"minja-06",
|
|
25
|
+
"minja-07",
|
|
26
|
+
"minja-08",
|
|
27
|
+
"minja-09",
|
|
28
|
+
"minja-10",
|
|
29
|
+
"sleeper-01",
|
|
30
|
+
"sleeper-02",
|
|
31
|
+
"sleeper-03",
|
|
32
|
+
"sleeper-04",
|
|
33
|
+
"sleeper-05",
|
|
34
|
+
"sleeper-06",
|
|
35
|
+
"sleeper-07",
|
|
36
|
+
"sleeper-08",
|
|
37
|
+
"sleeper-09",
|
|
38
|
+
"sleeper-10",
|
|
39
|
+
"tool-hijack-01",
|
|
40
|
+
"tool-hijack-02",
|
|
41
|
+
"tool-hijack-03",
|
|
42
|
+
"tool-hijack-04",
|
|
43
|
+
"tool-hijack-05",
|
|
44
|
+
"tool-hijack-06",
|
|
45
|
+
"tool-hijack-07",
|
|
46
|
+
"tool-hijack-08",
|
|
47
|
+
"tool-hijack-09",
|
|
48
|
+
"tool-hijack-10"
|
|
49
|
+
],
|
|
50
|
+
"scenarios": [
|
|
51
|
+
{
|
|
52
|
+
"scenarioId": "benign-minja-001",
|
|
53
|
+
"family": "minja",
|
|
54
|
+
"templateId": "minja-01",
|
|
55
|
+
"canaryType": "string",
|
|
56
|
+
"sha256": "8722f4aac3a80fe26a9444dababeb4a026c5394d064c01bd5bb6cbda6fcdf62c"
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
"scenarioId": "benign-minja-002",
|
|
60
|
+
"family": "minja",
|
|
61
|
+
"templateId": "minja-02",
|
|
62
|
+
"canaryType": "string",
|
|
63
|
+
"sha256": "824e85f839705c9edb6517177bb556234d77b10dc463da553c47606de45f8b6e"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"scenarioId": "benign-minja-003",
|
|
67
|
+
"family": "minja",
|
|
68
|
+
"templateId": "minja-03",
|
|
69
|
+
"canaryType": "string",
|
|
70
|
+
"sha256": "a1a743ec864b840f6d4936e9c0c045618f8b4a1e2e61e9a049bddd4d06656936"
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
"scenarioId": "benign-minja-004",
|
|
74
|
+
"family": "minja",
|
|
75
|
+
"templateId": "minja-04",
|
|
76
|
+
"canaryType": "string",
|
|
77
|
+
"sha256": "b85302160615e1eace3854ed8e7458911462bf6e47988913d00cc7285eda33b2"
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
"scenarioId": "benign-minja-005",
|
|
81
|
+
"family": "minja",
|
|
82
|
+
"templateId": "minja-05",
|
|
83
|
+
"canaryType": "string",
|
|
84
|
+
"sha256": "e2f39fab6f07757ef7c08f08c33927eeb6c24133244dfd31284aafbe91d9398c"
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"scenarioId": "benign-minja-006",
|
|
88
|
+
"family": "minja",
|
|
89
|
+
"templateId": "minja-06",
|
|
90
|
+
"canaryType": "string",
|
|
91
|
+
"sha256": "ec803209b81d5089db71e970513654d4b4a08f219429cecb82e3d64feb493f27"
|
|
92
|
+
},
|
|
93
|
+
{
|
|
94
|
+
"scenarioId": "benign-minja-007",
|
|
95
|
+
"family": "minja",
|
|
96
|
+
"templateId": "minja-07",
|
|
97
|
+
"canaryType": "string",
|
|
98
|
+
"sha256": "b30ab8caa47e9828443fc8fefa105bcf2d350407408e9a365977dbdd36f6eb8b"
|
|
99
|
+
},
|
|
100
|
+
{
|
|
101
|
+
"scenarioId": "benign-minja-008",
|
|
102
|
+
"family": "minja",
|
|
103
|
+
"templateId": "minja-08",
|
|
104
|
+
"canaryType": "string",
|
|
105
|
+
"sha256": "1bfacc83acf877f59d75871ea1b7c21af6d188aeba75b935dbb47917fbcd4c12"
|
|
106
|
+
},
|
|
107
|
+
{
|
|
108
|
+
"scenarioId": "benign-minja-009",
|
|
109
|
+
"family": "minja",
|
|
110
|
+
"templateId": "minja-09",
|
|
111
|
+
"canaryType": "string",
|
|
112
|
+
"sha256": "1ea4f5abc010305a0daac685d00f3b020df5ac3b62bcb0b97d07c6f6cc59721b"
|
|
113
|
+
},
|
|
114
|
+
{
|
|
115
|
+
"scenarioId": "benign-minja-010",
|
|
116
|
+
"family": "minja",
|
|
117
|
+
"templateId": "minja-10",
|
|
118
|
+
"canaryType": "string",
|
|
119
|
+
"sha256": "d86364ff834a1d35082b063a83dbe360aea53cc3f53cb40add12717045ca45e2"
|
|
120
|
+
},
|
|
121
|
+
{
|
|
122
|
+
"scenarioId": "benign-sleeper-001",
|
|
123
|
+
"family": "sleeper",
|
|
124
|
+
"templateId": "sleeper-01",
|
|
125
|
+
"canaryType": "string",
|
|
126
|
+
"sha256": "c244045b5717dbef6fe2b2d648f64fce944c93312ae40636840d673d1b617563"
|
|
127
|
+
},
|
|
128
|
+
{
|
|
129
|
+
"scenarioId": "benign-sleeper-002",
|
|
130
|
+
"family": "sleeper",
|
|
131
|
+
"templateId": "sleeper-02",
|
|
132
|
+
"canaryType": "string",
|
|
133
|
+
"sha256": "5576ecb56838d9e2f937fe40656fe2ed45952dd6d321e1b7a675fade61ecca5c"
|
|
134
|
+
},
|
|
135
|
+
{
|
|
136
|
+
"scenarioId": "benign-sleeper-003",
|
|
137
|
+
"family": "sleeper",
|
|
138
|
+
"templateId": "sleeper-03",
|
|
139
|
+
"canaryType": "string",
|
|
140
|
+
"sha256": "b7182b58653ee8444c4a44a62b261bb2b9e7b524d1b6a9c4d3d60ac94aed44e7"
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"scenarioId": "benign-sleeper-004",
|
|
144
|
+
"family": "sleeper",
|
|
145
|
+
"templateId": "sleeper-04",
|
|
146
|
+
"canaryType": "string",
|
|
147
|
+
"sha256": "ccd39baaced0597fb78e206d10c13835760c0c28e1bc50ca7bf039efabb98398"
|
|
148
|
+
},
|
|
149
|
+
{
|
|
150
|
+
"scenarioId": "benign-sleeper-005",
|
|
151
|
+
"family": "sleeper",
|
|
152
|
+
"templateId": "sleeper-05",
|
|
153
|
+
"canaryType": "string",
|
|
154
|
+
"sha256": "e101a81f98dac55be7183a1329c66be2a9f639b2e2ced60d587410b9f8a28eaf"
|
|
155
|
+
},
|
|
156
|
+
{
|
|
157
|
+
"scenarioId": "benign-sleeper-006",
|
|
158
|
+
"family": "sleeper",
|
|
159
|
+
"templateId": "sleeper-06",
|
|
160
|
+
"canaryType": "string",
|
|
161
|
+
"sha256": "baa1eaa971cf11af8d8ffc50bc75fff765ceaa053935c33307c11a496fe47a64"
|
|
162
|
+
},
|
|
163
|
+
{
|
|
164
|
+
"scenarioId": "benign-sleeper-007",
|
|
165
|
+
"family": "sleeper",
|
|
166
|
+
"templateId": "sleeper-07",
|
|
167
|
+
"canaryType": "string",
|
|
168
|
+
"sha256": "d642cbdb34ec31ca74b3c20e4bb8059ca7e8600c50825254191ef46d08d97889"
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
"scenarioId": "benign-sleeper-008",
|
|
172
|
+
"family": "sleeper",
|
|
173
|
+
"templateId": "sleeper-08",
|
|
174
|
+
"canaryType": "string",
|
|
175
|
+
"sha256": "c297652fe574ac6120a8b6cb863f8f5196e7e1d7ed02488873f46ce3897f49d3"
|
|
176
|
+
},
|
|
177
|
+
{
|
|
178
|
+
"scenarioId": "benign-sleeper-009",
|
|
179
|
+
"family": "sleeper",
|
|
180
|
+
"templateId": "sleeper-09",
|
|
181
|
+
"canaryType": "string",
|
|
182
|
+
"sha256": "3c704a779895c1a04a9e16a33a2cfbbfffe32b4a3f6afb2b46f1183e3c48f027"
|
|
183
|
+
},
|
|
184
|
+
{
|
|
185
|
+
"scenarioId": "benign-sleeper-010",
|
|
186
|
+
"family": "sleeper",
|
|
187
|
+
"templateId": "sleeper-10",
|
|
188
|
+
"canaryType": "string",
|
|
189
|
+
"sha256": "4ee64d92074686ec8cac0bc3b176b228fe43e3ebd7df57544bb07f009aaaa312"
|
|
190
|
+
},
|
|
191
|
+
{
|
|
192
|
+
"scenarioId": "benign-cross-session-001",
|
|
193
|
+
"family": "cross-session",
|
|
194
|
+
"templateId": "cross-session-01",
|
|
195
|
+
"canaryType": "string",
|
|
196
|
+
"sha256": "3b8cd686933490d902402389e9a65c17464bad634270766f0ae1e48ba06b3830"
|
|
197
|
+
},
|
|
198
|
+
{
|
|
199
|
+
"scenarioId": "benign-cross-session-002",
|
|
200
|
+
"family": "cross-session",
|
|
201
|
+
"templateId": "cross-session-02",
|
|
202
|
+
"canaryType": "string",
|
|
203
|
+
"sha256": "4f15026fac732c6adcc3d27cdba6ce747c11979508bf27b3ffac25b4bef8bbd5"
|
|
204
|
+
},
|
|
205
|
+
{
|
|
206
|
+
"scenarioId": "benign-cross-session-003",
|
|
207
|
+
"family": "cross-session",
|
|
208
|
+
"templateId": "cross-session-03",
|
|
209
|
+
"canaryType": "url",
|
|
210
|
+
"sha256": "c6f0992c0fa8b7bcfe151b6e719f2c08f84f753717edfa14187fd7b9babf11e6"
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
"scenarioId": "benign-cross-session-004",
|
|
214
|
+
"family": "cross-session",
|
|
215
|
+
"templateId": "cross-session-04",
|
|
216
|
+
"canaryType": "string",
|
|
217
|
+
"sha256": "1c366f2bc8b74abbe96d74777e3a98f791ead52206ebf900f1c219f2fe003218"
|
|
218
|
+
},
|
|
219
|
+
{
|
|
220
|
+
"scenarioId": "benign-cross-session-005",
|
|
221
|
+
"family": "cross-session",
|
|
222
|
+
"templateId": "cross-session-05",
|
|
223
|
+
"canaryType": "string",
|
|
224
|
+
"sha256": "bc8b1c7657871338c81874367ae322a1f9ef59528691ff1f174fb3436b774953"
|
|
225
|
+
},
|
|
226
|
+
{
|
|
227
|
+
"scenarioId": "benign-cross-session-006",
|
|
228
|
+
"family": "cross-session",
|
|
229
|
+
"templateId": "cross-session-06",
|
|
230
|
+
"canaryType": "url",
|
|
231
|
+
"sha256": "68aeadcbed78bb8cedb8c07636f3c0c2a02a99c9e1069e0f3cfaed67bf0b6b67"
|
|
232
|
+
},
|
|
233
|
+
{
|
|
234
|
+
"scenarioId": "benign-cross-session-007",
|
|
235
|
+
"family": "cross-session",
|
|
236
|
+
"templateId": "cross-session-07",
|
|
237
|
+
"canaryType": "string",
|
|
238
|
+
"sha256": "48092e491944d5c5dcfe832bc841c903b80d69a90fd305cb33959581f735e6a9"
|
|
239
|
+
},
|
|
240
|
+
{
|
|
241
|
+
"scenarioId": "benign-cross-session-008",
|
|
242
|
+
"family": "cross-session",
|
|
243
|
+
"templateId": "cross-session-08",
|
|
244
|
+
"canaryType": "string",
|
|
245
|
+
"sha256": "03938e373eaa13612dd16a753950e6aeb8d004463818296a50960c317660666e"
|
|
246
|
+
},
|
|
247
|
+
{
|
|
248
|
+
"scenarioId": "benign-cross-session-009",
|
|
249
|
+
"family": "cross-session",
|
|
250
|
+
"templateId": "cross-session-09",
|
|
251
|
+
"canaryType": "url",
|
|
252
|
+
"sha256": "ae4df64edffc5dce522a2961da79d97a8aa8013889ae972e63d070dc03fd0f79"
|
|
253
|
+
},
|
|
254
|
+
{
|
|
255
|
+
"scenarioId": "benign-cross-session-010",
|
|
256
|
+
"family": "cross-session",
|
|
257
|
+
"templateId": "cross-session-10",
|
|
258
|
+
"canaryType": "string",
|
|
259
|
+
"sha256": "e8e5c9ceeedfbf60d236d546f6e5fb442d42154852ee088efb8a3b77b0f24f57"
|
|
260
|
+
},
|
|
261
|
+
{
|
|
262
|
+
"scenarioId": "benign-tool-hijack-001",
|
|
263
|
+
"family": "tool-hijack",
|
|
264
|
+
"templateId": "tool-hijack-01",
|
|
265
|
+
"canaryType": "tool",
|
|
266
|
+
"sha256": "bf4f121af395bc58c0b1c47d2c073e64649e70fa78655efd24350b01657073f2"
|
|
267
|
+
},
|
|
268
|
+
{
|
|
269
|
+
"scenarioId": "benign-tool-hijack-002",
|
|
270
|
+
"family": "tool-hijack",
|
|
271
|
+
"templateId": "tool-hijack-02",
|
|
272
|
+
"canaryType": "tool",
|
|
273
|
+
"sha256": "cccba6a568f55c565a05bb1545932af8aeec40692e2fed3f3090d8d39c017606"
|
|
274
|
+
},
|
|
275
|
+
{
|
|
276
|
+
"scenarioId": "benign-tool-hijack-003",
|
|
277
|
+
"family": "tool-hijack",
|
|
278
|
+
"templateId": "tool-hijack-03",
|
|
279
|
+
"canaryType": "tool",
|
|
280
|
+
"sha256": "f1d6c5ab1c96340f14b7bfba112591500fa21aea4a2e47aa0c77ec1c51b06b60"
|
|
281
|
+
},
|
|
282
|
+
{
|
|
283
|
+
"scenarioId": "benign-tool-hijack-004",
|
|
284
|
+
"family": "tool-hijack",
|
|
285
|
+
"templateId": "tool-hijack-04",
|
|
286
|
+
"canaryType": "tool",
|
|
287
|
+
"sha256": "b1919b351ccf5ee77ac5f5ca18fb2563a8690b2ea495445b9bb7d8ad5434b7e1"
|
|
288
|
+
},
|
|
289
|
+
{
|
|
290
|
+
"scenarioId": "benign-tool-hijack-005",
|
|
291
|
+
"family": "tool-hijack",
|
|
292
|
+
"templateId": "tool-hijack-05",
|
|
293
|
+
"canaryType": "tool",
|
|
294
|
+
"sha256": "4f1a5b556fe74288da1b451d9023a359ff6ba15b20621f758ae30a9fd4a461d0"
|
|
295
|
+
},
|
|
296
|
+
{
|
|
297
|
+
"scenarioId": "benign-tool-hijack-006",
|
|
298
|
+
"family": "tool-hijack",
|
|
299
|
+
"templateId": "tool-hijack-06",
|
|
300
|
+
"canaryType": "tool",
|
|
301
|
+
"sha256": "3f391f498eef8cc1fe66e05daf11cc4fce14d083b5929a692cb448ed85f8e431"
|
|
302
|
+
},
|
|
303
|
+
{
|
|
304
|
+
"scenarioId": "benign-tool-hijack-007",
|
|
305
|
+
"family": "tool-hijack",
|
|
306
|
+
"templateId": "tool-hijack-07",
|
|
307
|
+
"canaryType": "tool",
|
|
308
|
+
"sha256": "48cbfc00bf826ad99f6c80b6802443b0c954075620c27f6f63d0957b7bfe094d"
|
|
309
|
+
},
|
|
310
|
+
{
|
|
311
|
+
"scenarioId": "benign-tool-hijack-008",
|
|
312
|
+
"family": "tool-hijack",
|
|
313
|
+
"templateId": "tool-hijack-08",
|
|
314
|
+
"canaryType": "tool",
|
|
315
|
+
"sha256": "24ca1036d398ad72e086e5ac8f84da5f15bea1885352926c89b14f212015fdf4"
|
|
316
|
+
},
|
|
317
|
+
{
|
|
318
|
+
"scenarioId": "benign-tool-hijack-009",
|
|
319
|
+
"family": "tool-hijack",
|
|
320
|
+
"templateId": "tool-hijack-09",
|
|
321
|
+
"canaryType": "tool",
|
|
322
|
+
"sha256": "92d6fa8223d05de7bdd87653d4fd55eb505617eefe5143cd7bc22143ce4cd85b"
|
|
323
|
+
},
|
|
324
|
+
{
|
|
325
|
+
"scenarioId": "benign-tool-hijack-010",
|
|
326
|
+
"family": "tool-hijack",
|
|
327
|
+
"templateId": "tool-hijack-10",
|
|
328
|
+
"canaryType": "tool",
|
|
329
|
+
"sha256": "c21a8f6cb8e24ddd7af4381f57c923722e1eb76f94216602b8fd405fbbd1ed7d"
|
|
330
|
+
}
|
|
331
|
+
],
|
|
332
|
+
"payloadRuleAudit": {
|
|
333
|
+
"templates": 40,
|
|
334
|
+
"pass": 40,
|
|
335
|
+
"date": "2026-08-27"
|
|
336
|
+
},
|
|
337
|
+
"manifestSha256": "3e201b28f831bb945b68e66df713e541db584876c5c57891f586e0f5546203fa"
|
|
338
|
+
}
|
|
@@ -0,0 +1,338 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"suiteVersion": "h5-injection-suite-v3",
|
|
4
|
+
"stage": "benign-use",
|
|
5
|
+
"seed": 71,
|
|
6
|
+
"variantsPerFamily": 10,
|
|
7
|
+
"scenarioCount": 40,
|
|
8
|
+
"templateIds": [
|
|
9
|
+
"cross-session-01",
|
|
10
|
+
"cross-session-02",
|
|
11
|
+
"cross-session-03",
|
|
12
|
+
"cross-session-04",
|
|
13
|
+
"cross-session-05",
|
|
14
|
+
"cross-session-06",
|
|
15
|
+
"cross-session-07",
|
|
16
|
+
"cross-session-08",
|
|
17
|
+
"cross-session-09",
|
|
18
|
+
"cross-session-10",
|
|
19
|
+
"minja-01",
|
|
20
|
+
"minja-02",
|
|
21
|
+
"minja-03",
|
|
22
|
+
"minja-04",
|
|
23
|
+
"minja-05",
|
|
24
|
+
"minja-06",
|
|
25
|
+
"minja-07",
|
|
26
|
+
"minja-08",
|
|
27
|
+
"minja-09",
|
|
28
|
+
"minja-10",
|
|
29
|
+
"sleeper-01",
|
|
30
|
+
"sleeper-02",
|
|
31
|
+
"sleeper-03",
|
|
32
|
+
"sleeper-04",
|
|
33
|
+
"sleeper-05",
|
|
34
|
+
"sleeper-06",
|
|
35
|
+
"sleeper-07",
|
|
36
|
+
"sleeper-08",
|
|
37
|
+
"sleeper-09",
|
|
38
|
+
"sleeper-10",
|
|
39
|
+
"tool-hijack-01",
|
|
40
|
+
"tool-hijack-02",
|
|
41
|
+
"tool-hijack-03",
|
|
42
|
+
"tool-hijack-04",
|
|
43
|
+
"tool-hijack-05",
|
|
44
|
+
"tool-hijack-06",
|
|
45
|
+
"tool-hijack-07",
|
|
46
|
+
"tool-hijack-08",
|
|
47
|
+
"tool-hijack-09",
|
|
48
|
+
"tool-hijack-10"
|
|
49
|
+
],
|
|
50
|
+
"scenarios": [
|
|
51
|
+
{
|
|
52
|
+
"scenarioId": "benign-use-minja-001",
|
|
53
|
+
"family": "minja",
|
|
54
|
+
"templateId": "minja-01",
|
|
55
|
+
"canaryType": "string",
|
|
56
|
+
"sha256": "592a1583c6e67759f3daa02db424fc8ac92991d17365deaab45656db1f428f6f"
|
|
57
|
+
},
|
|
58
|
+
{
|
|
59
|
+
"scenarioId": "benign-use-minja-002",
|
|
60
|
+
"family": "minja",
|
|
61
|
+
"templateId": "minja-02",
|
|
62
|
+
"canaryType": "string",
|
|
63
|
+
"sha256": "54c0a30751815a850f39908918d75081392db7d509030181714245160261d095"
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"scenarioId": "benign-use-minja-003",
|
|
67
|
+
"family": "minja",
|
|
68
|
+
"templateId": "minja-03",
|
|
69
|
+
"canaryType": "string",
|
|
70
|
+
"sha256": "ba1c9401b62873dd3fd36cce42117855798dc2c39921fb96db627be147846217"
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
"scenarioId": "benign-use-minja-004",
|
|
74
|
+
"family": "minja",
|
|
75
|
+
"templateId": "minja-04",
|
|
76
|
+
"canaryType": "string",
|
|
77
|
+
"sha256": "a2786ca5c96242cc450239e702557c9c1553ff3d08df49cb9bfc36abbb1d9370"
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
"scenarioId": "benign-use-minja-005",
|
|
81
|
+
"family": "minja",
|
|
82
|
+
"templateId": "minja-05",
|
|
83
|
+
"canaryType": "string",
|
|
84
|
+
"sha256": "d9667e27bfe23291d4097fcd93bc8ab98fbd16697b3e6d3203e9594ef94c8664"
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
"scenarioId": "benign-use-minja-006",
|
|
88
|
+
"family": "minja",
|
|
89
|
+
"templateId": "minja-06",
|
|
90
|
+
"canaryType": "string",
|
|
91
|
+
"sha256": "fc1b90cfacf1829e45fb5728f3558d972dd6aedbdff528ae68f23035387c7259"
|
|
92
|
+
},
|
|
93
|
+
{
|
|
94
|
+
"scenarioId": "benign-use-minja-007",
|
|
95
|
+
"family": "minja",
|
|
96
|
+
"templateId": "minja-07",
|
|
97
|
+
"canaryType": "string",
|
|
98
|
+
"sha256": "386ec38ee244f46fda8e199789c8625c316798d66cbf1dd639009ede8042748a"
|
|
99
|
+
},
|
|
100
|
+
{
|
|
101
|
+
"scenarioId": "benign-use-minja-008",
|
|
102
|
+
"family": "minja",
|
|
103
|
+
"templateId": "minja-08",
|
|
104
|
+
"canaryType": "string",
|
|
105
|
+
"sha256": "888aeb6defcc5f50aa756f46264685234371021969f13d337e733f26ca413b5d"
|
|
106
|
+
},
|
|
107
|
+
{
|
|
108
|
+
"scenarioId": "benign-use-minja-009",
|
|
109
|
+
"family": "minja",
|
|
110
|
+
"templateId": "minja-09",
|
|
111
|
+
"canaryType": "string",
|
|
112
|
+
"sha256": "7ec3b69571ef2ee3bcb2e0dbdaee141de4692e8be880697821c16d063fc28b9d"
|
|
113
|
+
},
|
|
114
|
+
{
|
|
115
|
+
"scenarioId": "benign-use-minja-010",
|
|
116
|
+
"family": "minja",
|
|
117
|
+
"templateId": "minja-10",
|
|
118
|
+
"canaryType": "string",
|
|
119
|
+
"sha256": "fabe6d1ad1f622b07eebb6202f76859ccdb780f47e5053ceaee456ef3b7aa4e9"
|
|
120
|
+
},
|
|
121
|
+
{
|
|
122
|
+
"scenarioId": "benign-use-sleeper-001",
|
|
123
|
+
"family": "sleeper",
|
|
124
|
+
"templateId": "sleeper-01",
|
|
125
|
+
"canaryType": "string",
|
|
126
|
+
"sha256": "6cc0e5dd8fbd6bccbd6d7333502c987e86625e3425b11c02274d18ab2f2ff8f5"
|
|
127
|
+
},
|
|
128
|
+
{
|
|
129
|
+
"scenarioId": "benign-use-sleeper-002",
|
|
130
|
+
"family": "sleeper",
|
|
131
|
+
"templateId": "sleeper-02",
|
|
132
|
+
"canaryType": "string",
|
|
133
|
+
"sha256": "110e30ca02f60b01e4091b933a26aa5afcd0889ab6db609bcc4e6f994e45ff4a"
|
|
134
|
+
},
|
|
135
|
+
{
|
|
136
|
+
"scenarioId": "benign-use-sleeper-003",
|
|
137
|
+
"family": "sleeper",
|
|
138
|
+
"templateId": "sleeper-03",
|
|
139
|
+
"canaryType": "string",
|
|
140
|
+
"sha256": "a99d8779973f5dbf2e3275f275697b7c7fa2eb618e50c4c9a40e73b8590b313d"
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"scenarioId": "benign-use-sleeper-004",
|
|
144
|
+
"family": "sleeper",
|
|
145
|
+
"templateId": "sleeper-04",
|
|
146
|
+
"canaryType": "string",
|
|
147
|
+
"sha256": "c7610afb14615ffd6c1500aea504220fb4aa8011f888023e99ff94e16a95db49"
|
|
148
|
+
},
|
|
149
|
+
{
|
|
150
|
+
"scenarioId": "benign-use-sleeper-005",
|
|
151
|
+
"family": "sleeper",
|
|
152
|
+
"templateId": "sleeper-05",
|
|
153
|
+
"canaryType": "string",
|
|
154
|
+
"sha256": "6c7290ad02ceafb64027632129543d1ce5ac1f25b67af781ef1ccdd6e4a9f70c"
|
|
155
|
+
},
|
|
156
|
+
{
|
|
157
|
+
"scenarioId": "benign-use-sleeper-006",
|
|
158
|
+
"family": "sleeper",
|
|
159
|
+
"templateId": "sleeper-06",
|
|
160
|
+
"canaryType": "string",
|
|
161
|
+
"sha256": "e6c874bac2321b8e3968a27d726f9af3450f0815f3799db7085a532a73843722"
|
|
162
|
+
},
|
|
163
|
+
{
|
|
164
|
+
"scenarioId": "benign-use-sleeper-007",
|
|
165
|
+
"family": "sleeper",
|
|
166
|
+
"templateId": "sleeper-07",
|
|
167
|
+
"canaryType": "string",
|
|
168
|
+
"sha256": "a22c8254dd6e62d12830f071af1c62d9e3b578a93c466676266c05864fb1d3c8"
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
"scenarioId": "benign-use-sleeper-008",
|
|
172
|
+
"family": "sleeper",
|
|
173
|
+
"templateId": "sleeper-08",
|
|
174
|
+
"canaryType": "string",
|
|
175
|
+
"sha256": "bc1eb66b0aa8fa9afbaa03d2b2bab9c08f1c9393105e4b08abb2bd40d4799b90"
|
|
176
|
+
},
|
|
177
|
+
{
|
|
178
|
+
"scenarioId": "benign-use-sleeper-009",
|
|
179
|
+
"family": "sleeper",
|
|
180
|
+
"templateId": "sleeper-09",
|
|
181
|
+
"canaryType": "string",
|
|
182
|
+
"sha256": "8d43e163e4a37709e3a6bc7b61f5c8dca072c7acda9a5089ef840d1837e960e1"
|
|
183
|
+
},
|
|
184
|
+
{
|
|
185
|
+
"scenarioId": "benign-use-sleeper-010",
|
|
186
|
+
"family": "sleeper",
|
|
187
|
+
"templateId": "sleeper-10",
|
|
188
|
+
"canaryType": "string",
|
|
189
|
+
"sha256": "a4fecd2e9c2f8975574bb86c0fa139728bbc9414ec7b13940e2658c410854d78"
|
|
190
|
+
},
|
|
191
|
+
{
|
|
192
|
+
"scenarioId": "benign-use-cross-session-001",
|
|
193
|
+
"family": "cross-session",
|
|
194
|
+
"templateId": "cross-session-01",
|
|
195
|
+
"canaryType": "string",
|
|
196
|
+
"sha256": "e48ba34b09820311de03b2e15b066a854f450758b4d5918a3ec0439823f52a29"
|
|
197
|
+
},
|
|
198
|
+
{
|
|
199
|
+
"scenarioId": "benign-use-cross-session-002",
|
|
200
|
+
"family": "cross-session",
|
|
201
|
+
"templateId": "cross-session-02",
|
|
202
|
+
"canaryType": "string",
|
|
203
|
+
"sha256": "c6ba7072e598f806adb3f0d4715a85d246cdd099299da901f8c501eb8593fa86"
|
|
204
|
+
},
|
|
205
|
+
{
|
|
206
|
+
"scenarioId": "benign-use-cross-session-003",
|
|
207
|
+
"family": "cross-session",
|
|
208
|
+
"templateId": "cross-session-03",
|
|
209
|
+
"canaryType": "url",
|
|
210
|
+
"sha256": "eac4b8931f087f9a18cf2a5798217ee876601cced489c25634e53c6624335dc3"
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
"scenarioId": "benign-use-cross-session-004",
|
|
214
|
+
"family": "cross-session",
|
|
215
|
+
"templateId": "cross-session-04",
|
|
216
|
+
"canaryType": "string",
|
|
217
|
+
"sha256": "cf98273683e2b16287eeccde440ffce1b77498ec3a2a3290cfb91db7132775e8"
|
|
218
|
+
},
|
|
219
|
+
{
|
|
220
|
+
"scenarioId": "benign-use-cross-session-005",
|
|
221
|
+
"family": "cross-session",
|
|
222
|
+
"templateId": "cross-session-05",
|
|
223
|
+
"canaryType": "string",
|
|
224
|
+
"sha256": "9069c51a5721b5ed4a02603da9c73b70edf46c98fa75c4bfaa7f6adc742de67f"
|
|
225
|
+
},
|
|
226
|
+
{
|
|
227
|
+
"scenarioId": "benign-use-cross-session-006",
|
|
228
|
+
"family": "cross-session",
|
|
229
|
+
"templateId": "cross-session-06",
|
|
230
|
+
"canaryType": "url",
|
|
231
|
+
"sha256": "8e89ee4d307dad4ac7ed19cd43696b167c4cb39246fb903c4df9429b2f7cac08"
|
|
232
|
+
},
|
|
233
|
+
{
|
|
234
|
+
"scenarioId": "benign-use-cross-session-007",
|
|
235
|
+
"family": "cross-session",
|
|
236
|
+
"templateId": "cross-session-07",
|
|
237
|
+
"canaryType": "string",
|
|
238
|
+
"sha256": "254a63cbb5cbfab85bce49d1eec6158ca68d192039e29057fa4b5d95d9fd80d8"
|
|
239
|
+
},
|
|
240
|
+
{
|
|
241
|
+
"scenarioId": "benign-use-cross-session-008",
|
|
242
|
+
"family": "cross-session",
|
|
243
|
+
"templateId": "cross-session-08",
|
|
244
|
+
"canaryType": "string",
|
|
245
|
+
"sha256": "33f944e03bca3e73542c8745b0595213e5db0f22dae740f195602208b5f04fa3"
|
|
246
|
+
},
|
|
247
|
+
{
|
|
248
|
+
"scenarioId": "benign-use-cross-session-009",
|
|
249
|
+
"family": "cross-session",
|
|
250
|
+
"templateId": "cross-session-09",
|
|
251
|
+
"canaryType": "url",
|
|
252
|
+
"sha256": "804a675b0cc06e21ead4053ac7650e518170ca2924094fe13c343d2841c93723"
|
|
253
|
+
},
|
|
254
|
+
{
|
|
255
|
+
"scenarioId": "benign-use-cross-session-010",
|
|
256
|
+
"family": "cross-session",
|
|
257
|
+
"templateId": "cross-session-10",
|
|
258
|
+
"canaryType": "string",
|
|
259
|
+
"sha256": "e5b3cf0df3cff2d2eb61eb0c119ab9646e50e10bf3c3259afa974cd937a18158"
|
|
260
|
+
},
|
|
261
|
+
{
|
|
262
|
+
"scenarioId": "benign-use-tool-hijack-001",
|
|
263
|
+
"family": "tool-hijack",
|
|
264
|
+
"templateId": "tool-hijack-01",
|
|
265
|
+
"canaryType": "tool",
|
|
266
|
+
"sha256": "a5a79087427093041b78ab1b944d3c691f72a5e5da3a23c6ebaa9065d9a5fc14"
|
|
267
|
+
},
|
|
268
|
+
{
|
|
269
|
+
"scenarioId": "benign-use-tool-hijack-002",
|
|
270
|
+
"family": "tool-hijack",
|
|
271
|
+
"templateId": "tool-hijack-02",
|
|
272
|
+
"canaryType": "tool",
|
|
273
|
+
"sha256": "3548c6b70f3278f92dc23992d1450c8de16fc805497c0921a8678f518918a9d2"
|
|
274
|
+
},
|
|
275
|
+
{
|
|
276
|
+
"scenarioId": "benign-use-tool-hijack-003",
|
|
277
|
+
"family": "tool-hijack",
|
|
278
|
+
"templateId": "tool-hijack-03",
|
|
279
|
+
"canaryType": "tool",
|
|
280
|
+
"sha256": "957694d6dd3fdbd6bc1e05bdb594a328d282c2738c6467dae14d4cabd49ddcb0"
|
|
281
|
+
},
|
|
282
|
+
{
|
|
283
|
+
"scenarioId": "benign-use-tool-hijack-004",
|
|
284
|
+
"family": "tool-hijack",
|
|
285
|
+
"templateId": "tool-hijack-04",
|
|
286
|
+
"canaryType": "tool",
|
|
287
|
+
"sha256": "45bb8679644eb383d4a3958ce761b093a7c86ee80375c5c00ddf79ff450b32db"
|
|
288
|
+
},
|
|
289
|
+
{
|
|
290
|
+
"scenarioId": "benign-use-tool-hijack-005",
|
|
291
|
+
"family": "tool-hijack",
|
|
292
|
+
"templateId": "tool-hijack-05",
|
|
293
|
+
"canaryType": "tool",
|
|
294
|
+
"sha256": "ec85aeefbb95a620a9df407acb9fca3dc4f87ebeb6098c2deade6db4194dedb6"
|
|
295
|
+
},
|
|
296
|
+
{
|
|
297
|
+
"scenarioId": "benign-use-tool-hijack-006",
|
|
298
|
+
"family": "tool-hijack",
|
|
299
|
+
"templateId": "tool-hijack-06",
|
|
300
|
+
"canaryType": "tool",
|
|
301
|
+
"sha256": "6d6c92d08f061c3d62adfbe6f46d194746aeb9b7838f059616d7bd64002262b8"
|
|
302
|
+
},
|
|
303
|
+
{
|
|
304
|
+
"scenarioId": "benign-use-tool-hijack-007",
|
|
305
|
+
"family": "tool-hijack",
|
|
306
|
+
"templateId": "tool-hijack-07",
|
|
307
|
+
"canaryType": "tool",
|
|
308
|
+
"sha256": "cde34c0b71d49467886a9ec6d2987b5a5de75a14bab6581426860388ae008e08"
|
|
309
|
+
},
|
|
310
|
+
{
|
|
311
|
+
"scenarioId": "benign-use-tool-hijack-008",
|
|
312
|
+
"family": "tool-hijack",
|
|
313
|
+
"templateId": "tool-hijack-08",
|
|
314
|
+
"canaryType": "tool",
|
|
315
|
+
"sha256": "be6ce6233d4d54592c22d2bae0ee2c6802ed8a27cf7af39a79e609510257c9a4"
|
|
316
|
+
},
|
|
317
|
+
{
|
|
318
|
+
"scenarioId": "benign-use-tool-hijack-009",
|
|
319
|
+
"family": "tool-hijack",
|
|
320
|
+
"templateId": "tool-hijack-09",
|
|
321
|
+
"canaryType": "tool",
|
|
322
|
+
"sha256": "bd57ac69c77a54bd948183338a76f7ad4188efa1ceae8ff1863a3ee32a874339"
|
|
323
|
+
},
|
|
324
|
+
{
|
|
325
|
+
"scenarioId": "benign-use-tool-hijack-010",
|
|
326
|
+
"family": "tool-hijack",
|
|
327
|
+
"templateId": "tool-hijack-10",
|
|
328
|
+
"canaryType": "tool",
|
|
329
|
+
"sha256": "5688cdeb9dea7aa7b4b00833955907267eae35e65c50f8f16928171a7005e0b8"
|
|
330
|
+
}
|
|
331
|
+
],
|
|
332
|
+
"payloadRuleAudit": {
|
|
333
|
+
"templates": 40,
|
|
334
|
+
"pass": 40,
|
|
335
|
+
"date": "2026-08-27"
|
|
336
|
+
},
|
|
337
|
+
"manifestSha256": "dfe0dbe3800234bc779c7baae596e39c7233e20dff088c84f68787e47a83f950"
|
|
338
|
+
}
|