npm - agent-threat-rules - Versions diffs - 3.0.5 → 3.1.0 - Mend

agent-threat-rules 3.0.5 → 3.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (339) hide show

package/rules/privilege-escalation/ATR-2026-00041-scope-creep.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: ATR Community
 date: 2026/03/08
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: medium
 references:
   owasp_llm:

package/rules/privilege-escalation/ATR-2026-00107-delayed-execution-bypass.yaml CHANGED Viewed

@@ -11,7 +11,7 @@ author: ATR Community
 date: 2026/03/15
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: high
 source: threat-cloud
 references:

package/rules/privilege-escalation/ATR-2026-00110-eval-injection.yaml CHANGED Viewed

@@ -11,7 +11,7 @@ author: ATR Community
 date: 2026/03/26
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: critical
 references:
   owasp_agentic:

package/rules/privilege-escalation/ATR-2026-00111-shell-escape.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: ATR Community
 date: 2026/03/26
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: critical
 references:
   owasp_agentic:

package/rules/privilege-escalation/ATR-2026-00112-dynamic-import-exploitation.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: ATR Community
 date: 2026/03/26
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_agentic:

package/rules/privilege-escalation/ATR-2026-00143-casual-privilege-escalation.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/privilege-escalation/ATR-2026-00144-rationalized-safety-bypass.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/privilege-escalation/ATR-2026-00539-crewai-codeinterpreter-sandbox-escape-rce.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 title: "CrewAI CodeInterpreterTool Sandbox Escape and Prompt-to-Shell RCE (CVE-2026-2275 / VU#221883)"
 id: ATR-2026-00539
 rule_version: 1
-status: draft
+status: experimental
 description: >
   Detects the CrewAI CodeInterpreterTool exploit cluster disclosed 2026-03-30
   as CERT/CC VU#221883 (four CVEs). Two distinct attack surfaces are covered:
@@ -36,7 +36,7 @@ author: "ATR Community"
 date: "2026/05/28"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: draft
+maturity: experimental
 severity: critical
 references:

package/rules/privilege-escalation/ATR-2026-00546-crewai-json-loader-local-file-read.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 title: "CrewAI JSON Loader Arbitrary Local File Read (CVE-2026-2285)"
 id: ATR-2026-00546
 rule_version: 1
-status: draft
+status: experimental
 description: >
   Detects CVE-2026-2285 (CVSS HIGH, CWE-22): CrewAI's JSON document loader
   accepts a file path without sanitisation, allowing an agent or tool input
@@ -24,7 +24,7 @@ author: "ATR Community"
 date: "2026/05/28"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: draft
+maturity: experimental
 severity: high
 references:

package/rules/privilege-escalation/ATR-2026-00547-crewai-rag-url-ssrf-bypass.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 title: "CrewAI RAG URL Validation Bypass SSRF (CVE-2026-2286)"
 id: ATR-2026-00547
 rule_version: 1
-status: draft
+status: experimental
 description: >
   Detects CVE-2026-2286 (CVSS HIGH, CWE-918): CrewAI's RAG (retrieval-augmented
   generation) URL validator can be bypassed by URL encoding, mixed-case,
@@ -27,7 +27,7 @@ author: "ATR Community"
 date: "2026/05/28"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: draft
+maturity: experimental
 severity: high
 references:
@@ -97,11 +97,13 @@ detection:
   conditions:
     - field: content
       operator: regex
-      value: '(?i)(?:rag|retrieval[_-]?augmented|source[_-]?url|document[_-]?url)[^\n]{0,200}(?:169\.254\.169\.254|fd00:|2130706433|0x7f000001|0177\.0\.0\.1|localhost|127\.0\.[01]\.[01]|::1|0\.0\.0\.0|[a-z0-9-]+\.internal\.|10\.\d{1,3}\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3})'
+      value: '(?i)(?:rag|retrieval[_-]?augmented|source[_-]?url|document[_-]?url)[^\n]{0,200}(?:169\.254\.169\.254|fd00:|2130706433|0x7f000001|0177\.0\.0\.1|[a-z0-9-]+\.internal\.|(?:127\.0\.[01]\.[01]|10\.\d{1,3}\.\d{1,3}\.\d{1,3}|192\.168\.\d{1,3}\.\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3})(?::\d+)?/)'
       description: >
-        RAG source URL containing cloud metadata endpoint (169.254.169.254),
-        decimal/hex/octal loopback representations, IPv6 loopback, or private
-        RFC-1918 address ranges — SSRF bypass attempt via CVE-2026-2286
+        RAG source URL containing a cloud metadata endpoint (169.254.169.254),
+        decimal/hex/octal loopback representations, or an RFC-1918 private
+        address followed by an internal resource path — SSRF bypass via
+        CVE-2026-2286. Plain "localhost:PORT" / bare-IP server defaults (no
+        path) are excluded so legitimate RAG deployment docs do not false-positive.
     - field: content
       operator: regex

package/rules/prompt-injection/ATR-2026-00004-system-prompt-override.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: ATR Community
 date: 2026/03/08
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: critical
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00005-multi-turn-injection.yaml CHANGED Viewed

@@ -15,7 +15,7 @@ author: "ATR Community"
 date: "2026/03/08"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: medium
 references:

package/rules/prompt-injection/ATR-2026-00097-cjk-injection-patterns.yaml CHANGED Viewed

@@ -22,7 +22,7 @@ author: ATR Community
 date: 2026/03/11
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: critical
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00104-persona-hijacking.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: ATR Community
 date: 2026/03/15
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: critical
 source: threat-cloud
 references:

package/rules/prompt-injection/ATR-2026-00130-indirect-authority-claim.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: ATR Community
 date: 2026/04/01
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00131-fictional-academic-framing.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: ATR Community
 date: 2026/04/01
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: medium
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00133-paraphrase-injection.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: ATR Community
 date: 2026/04/01
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00137-authority-claim-injection.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00138-fictional-framing-bypass.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00140-indirect-reference-reversal.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00148-language-switch-injection.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: ATR Threat Cloud Crystallization
 date: 2026/04/07
 schema_version: "1.0"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00153-tool-with-embedded-instruction-to-bypass.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: Threat Cloud LLM Analyzer
 date: 2026/04/06
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: critical
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00154-unauthorized-background-task-execution-v.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: Threat Cloud LLM Analyzer
 date: 2026/04/06
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00155-hidden-llm-instructions-in-skill-descrip.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: Threat Cloud LLM Analyzer
 date: 2026/04/06
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00156-ssh-remote-command-execution-with-creden.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: Threat Cloud LLM Analyzer
 date: 2026/04/06
 schema_version: "0.1"
 detection_tier: semantic
-maturity: experimental
+maturity: test
 severity: high
 references:
   mitre_atlas:

package/rules/prompt-injection/ATR-2026-00163-skill-hidden-override-instruction.yaml CHANGED Viewed

@@ -11,7 +11,7 @@ author: 'ATR Project'
 date: '2026/04/14'
 schema_version: '1.0'
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:
@@ -58,8 +58,8 @@ detection:
       description: 'Social engineering — framing dangerous action as routine to avoid scrutiny'
     - field: content
       operator: regex
-      value: '(?i)(?:execute|run|perform)\s+(?:silently|quietly|in\s+the\s+background|without\s+(?:notification|alerting|informing|telling|notifying))'
-      description: 'Silent execution instruction'
+      value: '(?i)(?:execute|run|perform)\s+(?:silently|quietly|without\s+(?:notification|alerting|informing|telling|notifying)|(?:[\w\s-]{0,30}\s+)?in\s+the\s+background\b[\s\S]{0,40}?(?:without\s+(?:notif\w*|alert\w*|inform\w*|telling|notifying|(?:the\s+)?user(?:.?s)?(?:\s+(?:knowledge|awareness|notice|consent|confirmation|approval|permission))?|confirmation|approval|consent|permission|notice)|silently|secretly|covertly|hidden\s+from\s+(?:the\s+)?user|unbeknownst))'
+      description: 'Silent execution instruction (concealment-qualified; bare "in the background" no longer matches without a hide-from-user signal)'
   condition: any
   false_positives:
     - 'Security tools describing what attacks look like in documentation'

package/rules/prompt-injection/ATR-2026-00206-hidden-priority-instructions.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: "ATR Threat Cloud Crystallization"
 date: "2026/04/08"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00207-hidden-instructions.yaml CHANGED Viewed

@@ -8,7 +8,7 @@ author: "ATR Threat Cloud Crystallization"
 date: "2026/04/08"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00211-system-prompt-override.yaml CHANGED Viewed

@@ -10,7 +10,7 @@ author: "ATR Threat Cloud Crystallization"
 date: "2026/04/09"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00213-system-prompt-override.yaml CHANGED Viewed

@@ -9,7 +9,7 @@ author: "ATR Threat Cloud Crystallization"
 date: "2026/04/09"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00226-identity-substitution.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "nvidia-airt-test (via ATR garak pipe)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00227-historical-persona-jailbreak.yaml CHANGED Viewed

@@ -15,7 +15,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00228-structured-jailbreak.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00229-roleplay-jailbreak.yaml CHANGED Viewed

@@ -8,7 +8,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00230-persona-moral-bypass.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:
@@ -58,10 +58,6 @@ detection:
       operator: regex
       value: '(?i)\b(?:these\s+views\s+do\s+not\s+align|does\s+not\s+align)\s+with\s+(?:the\s+)?views\s+of\s+(?:OpenAI|Anthropic|the\s+company|the\s+organization|the\s+creators?)\b'
       description: 'Disclaimer about misalignment with creator views'
-    - field: content
-      operator: regex
-      value: '(?i)\[(?:your\s+)?(?:prompt|question|request|query)\s+here\]|\{(?:your\s+)?(?:prompt|question|request|query)\s+here\}|(?:prompt|question|request|query):\s*\[|\bprompt:\s*$'
-      description: 'Template placeholder indicating structure for follow-up injection'
     - field: content
       operator: regex
       value: '(?i)provide\s+(?:detailed\s+)?responses?\s+to\s+each\s+(?:prompt|question|request|query|instruction)'

package/rules/prompt-injection/ATR-2026-00231-identity-substitution.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "nvidia-airt-test (via ATR garak pipe)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00233-structured-jailbreak.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00234-roleplay-jailbreak.yaml CHANGED Viewed

@@ -8,7 +8,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00235-persona-moral-bypass.yaml CHANGED Viewed

@@ -1,9 +1,10 @@
 title: 'Persona-Based Moral Constraint Removal Jailbreak'
 id: ATR-2026-00235
 rule_version: 1
-status: experimental
+status: deprecated
 description: >
-  Detects jailbreak attempts that establish alternate personas explicitly designed to bypass
+  DEPRECATED: exact duplicate of ATR-2026-00230 (identical detection); retained as a tombstone, all detection is handled by ATR-2026-00230.
+  Detects jailbreak attempts that establish alternate personas explicitly designed to bypass
   moral and ethical constraints. This attack pattern instructs the AI to "take up" or "adopt"
   a named persona that is specifically described as being "not restrained by morals, ethics,
   or virtues" or similar moral constraint removal language. Often includes template placeholders
@@ -13,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/18"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:
@@ -58,10 +59,6 @@ detection:
       operator: regex
       value: '(?i)\b(?:these\s+views\s+do\s+not\s+align|does\s+not\s+align)\s+with\s+(?:the\s+)?views\s+of\s+(?:OpenAI|Anthropic|the\s+company|the\s+organization|the\s+creators?)\b'
       description: 'Disclaimer about misalignment with creator views'
-    - field: content
-      operator: regex
-      value: '(?i)\[(?:your\s+)?(?:prompt|question|request|query)\s+here\]|\{(?:your\s+)?(?:prompt|question|request|query)\s+here\}|(?:prompt|question|request|query):\s*\[|\bprompt:\s*$'
-      description: 'Template placeholder indicating structure for follow-up injection'
     - field: content
       operator: regex
       value: '(?i)provide\s+(?:detailed\s+)?responses?\s+to\s+each\s+(?:prompt|question|request|query|instruction)'

package/rules/prompt-injection/ATR-2026-00236-pseudo-code-jailbreak.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00237-dual-response-jailbreak.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00238-identity-replacement.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00239-amoral-persona-obsession.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00240-instruction-nullification-identity-repla.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00241-amoral-character-jailbreak.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00242-persona-jailbreak.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00243-acronym-jailbreak.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00244-dual-response-jailbreak.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00245-malicious-persona.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00247-dual-response-jailbreak.yaml CHANGED Viewed

@@ -12,7 +12,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00249-game-based-jailbreak.yaml CHANGED Viewed

@@ -11,7 +11,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00251-persona-embodiment-jailbreak.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00252-narrative-jailbreak.yaml CHANGED Viewed

@@ -14,7 +14,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm:

package/rules/prompt-injection/ATR-2026-00253-enhanced-persona-jailbreak.yaml CHANGED Viewed

@@ -13,7 +13,7 @@ author: "ATR Community (via NVIDIA garak in-the-wild corpus)"
 date: "2026/04/19"
 schema_version: "0.1"
 detection_tier: pattern
-maturity: experimental
+maturity: test
 severity: high
 references:
   owasp_llm: