{ "skill_name": "remotion-to-hyperframes", "skill_path": "/Users/brianlevine/claude-projects/skill-scanner-test/skills/heygen-com-hyperframes/skills/remotion-to-hyperframes", "is_safe": true, "max_severity": "MEDIUM", "findings_count": 17, "findings": [ { "id": "MANIFEST_MISSING_LICENSE_c5ae9be793", "rule_id": "MANIFEST_MISSING_LICENSE", "category": "policy_violation", "severity": "INFO", "title": "Skill does not specify a license", "description": "Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.", "file_path": "SKILL.md", "line_number": null, "snippet": null, "remediation": "Add 'license' field to SKILL.md frontmatter (e.g., MIT, Apache-2.0)", "analyzer": "static", "metadata": { "aitech": null, "aitech_name": null, "aisubtech": null, "aisubtech_name": null, "aitech_mappings": [], "aisubtech_mappings": [], "framework_mappings": [], "taxonomy_status": "not_applicable", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_c34fffb399", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency '@remotion/cli' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-1-title-card/remotion-src/package.json", "line_number": 9, "snippet": "\"@remotion/cli\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_340ba51a50", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-1-title-card/remotion-src/package.json", "line_number": 10, "snippet": "\"react\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_e465975e4d", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react-dom' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-1-title-card/remotion-src/package.json", "line_number": 11, "snippet": "\"react-dom\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_5179461d7f", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'remotion' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-1-title-card/remotion-src/package.json", "line_number": 12, "snippet": "\"remotion\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_d8e7fe43f9", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency '@remotion/cli' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-2-multi-scene/remotion-src/package.json", "line_number": 9, "snippet": "\"@remotion/cli\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_2a38d48642", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-2-multi-scene/remotion-src/package.json", "line_number": 10, "snippet": "\"react\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_0181e46c63", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react-dom' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-2-multi-scene/remotion-src/package.json", "line_number": 11, "snippet": "\"react-dom\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_469bf08b2a", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'remotion' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-2-multi-scene/remotion-src/package.json", "line_number": 12, "snippet": "\"remotion\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_8e9e373f20", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency '@remotion/cli' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-3-data-driven/remotion-src/package.json", "line_number": 9, "snippet": "\"@remotion/cli\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_7d3e9ef962", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-3-data-driven/remotion-src/package.json", "line_number": 10, "snippet": "\"react\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_5daf678b9a", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'react-dom' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-3-data-driven/remotion-src/package.json", "line_number": 11, "snippet": "\"react-dom\": \"^18.3.1\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_b7d198b085", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'remotion' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-3-data-driven/remotion-src/package.json", "line_number": 12, "snippet": "\"remotion\": \"^4.0.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY_2363c4de0d", "rule_id": "SUPPLY_CHAIN_UNPINNED_DEPENDENCY", "category": "supply_chain_attack", "severity": "LOW", "title": "Unpinned dependency", "description": "Dependency 'zod' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).", "file_path": "assets/test-corpus/tier-3-data-driven/remotion-src/package.json", "line_number": 13, "snippet": "\"zod\": \"^3.22.0\"", "remediation": "Pin the dependency to an exact version (e.g. '\"package\": \"1.2.3\"').", "analyzer": "static", "metadata": { "semantic_facts": { "evidence_kind": "dependency_declaration", "context_kind": "dependency_file", "evidence_value_class": "unpinned_dependency", "evidence_count": 1, "signal_kind": "unpinned_dependency", "signals": [] }, "aitech": "AITech-9.3", "aitech_name": "Dependency / Plugin Compromise", "aisubtech": "AISubtech-9.3.3", "aisubtech_name": "Dependency Replacement / Rug Pull", "aitech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0053: LLM Plugin Compromise", "NIST AML: NISTAML.023: Backdoor Poisoning", "NIST AML: NISTAML.018: Prompt Injection", "Cisco AI MDL Code: MDL-023" ], "aisubtech_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "framework_mappings": [ "OWASP: LLM04:2026: Supply Chain", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0010: AI Supply Chain Compromise", "MITRE ATLAS: AML.T0018: Manipulate AI Model", "MITRE ATLAS: AML.T0109: AI Supply Chain Rug Pull", "NIST AML: NISTAML.051: Model Poisoning" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "DATA_EXFIL_JS_NETWORK_81fa7ef7f7", "rule_id": "DATA_EXFIL_JS_NETWORK", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Outbound network request primitives in JavaScript/TypeScript", "description": "Pattern detected: fetch(", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/03-async-metadata.tsx", "line_number": 31, "snippet": "const response = await fetch(", "remediation": "Ensure network operations are necessary and document allowed destinations", "analyzer": "static", "metadata": { "matched_pattern": "\\bfetch\\s*\\(", "matched_text": "fetch(", "signature_pattern_index": 0, "signature_match_start": 23, "signature_match_end": 29, "signature_pattern_sha256": "57220410873979f73624c44365682301491cb30501bab8d40d073a07386ad701", "scanner_category": "SECURITY VIOLATION", "signature_context": "package", "signature_polarity": "active", "source_category": "data_exfiltration", "category_normalization": "native", "semantic_facts": { "evidence_kind": "signature_pattern", "context_kind": "package", "signals": [ { "rule_id": "DATA_EXFIL_JS_NETWORK", "kind": "signature_polarity", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/03-async-metadata.tsx", "value_class": "active" }, { "rule_id": "DATA_EXFIL_JS_NETWORK", "kind": "unreferenced_executable", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/03-async-metadata.tsx", "value_class": "other" } ] }, "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "DATA_EXFIL_JS_NETWORK_f1db35cde6", "rule_id": "DATA_EXFIL_JS_NETWORK", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Outbound network request primitives in JavaScript/TypeScript", "description": "Pattern detected: fetch(", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/08-mixed.tsx", "line_number": 25, "snippet": "fetch(\"/api/items\")", "remediation": "Ensure network operations are necessary and document allowed destinations", "analyzer": "static", "metadata": { "matched_pattern": "\\bfetch\\s*\\(", "matched_text": "fetch(", "signature_pattern_index": 0, "signature_match_start": 0, "signature_match_end": 6, "signature_pattern_sha256": "57220410873979f73624c44365682301491cb30501bab8d40d073a07386ad701", "scanner_category": "SECURITY VIOLATION", "signature_context": "package", "signature_polarity": "active", "source_category": "data_exfiltration", "category_normalization": "native", "semantic_facts": { "evidence_kind": "signature_pattern", "context_kind": "package", "signals": [ { "rule_id": "DATA_EXFIL_JS_NETWORK", "kind": "signature_polarity", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/08-mixed.tsx", "value_class": "active" }, { "rule_id": "DATA_EXFIL_JS_NETWORK", "kind": "unreferenced_executable", "file_path": "assets/test-corpus/tier-4-escape-hatch/cases/08-mixed.tsx", "value_class": "other" } ] }, "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "FILE_MAGIC_MISMATCH_8cf5029240", "rule_id": "FILE_MAGIC_MISMATCH", "category": "obfuscation", "severity": "MEDIUM", "title": "File extension does not match actual content type", "description": "File 'render_diff.sh' extension (.sh) suggests one format but Magika detected a different text format: Python source (python). This may indicate content obfuscation or a misnamed file.", "file_path": "scripts/render_diff.sh", "line_number": null, "snippet": null, "remediation": "Rename the file to match its actual content type, or remove it if it appears malicious.", "analyzer": "static", "metadata": { "actual_type": "code/python", "actual_family": "code", "claimed_extension": ".sh", "confidence_score": 0.9391979575157166, "semantic_facts": { "evidence_kind": "file_magic", "context_kind": "binary", "signals": [ { "rule_id": "FILE_MAGIC_MISMATCH", "kind": "file_magic_mismatch", "file_path": "scripts/render_diff.sh", "value_class": "binary" } ] }, "aitech": "AITech-9.2", "aitech_name": "Detection Evasion", "aisubtech": "AISubtech-9.2.1", "aisubtech_name": "Obfuscation Vulnerabilities", "aitech_mappings": [ "OWASP: LLM09:2026: Vector and Embedding Weaknesses", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0074: Masquerading", "MITRE ATLAS: AML.T0068: LLM Prompt Obfuscation", "MITRE ATLAS: AML.T0107: Exploitation for Defense Evasion", "NIST AML: N/A", "Cisco AI MDL Code: MDL-001", "Cisco AI MDL Code: MDL-003", "Cisco AI MDL Code: MDL-009", "Cisco AI MDL Code: MDL-011", "Cisco AI MDL Code: MDL-016", "Cisco AI MDL Code: MDL-017", "Cisco AI MDL Code: MDL-019" ], "aisubtech_mappings": [ "OWASP: LLM09:2026: Vector and Embedding Weaknesses", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0074: Masquerading", "MITRE ATLAS: AML.T0068: LLM Prompt Obfuscation", "NIST AML: N/A", "Cisco AI MDL Code: MDL-001", "Cisco AI MDL Code: MDL-003", "Cisco AI MDL Code: MDL-009", "Cisco AI MDL Code: MDL-011", "Cisco AI MDL Code: MDL-016", "Cisco AI MDL Code: MDL-017", "Cisco AI MDL Code: MDL-019" ], "framework_mappings": [ "OWASP: LLM09:2026: Vector and Embedding Weaknesses", "OWASP: ASI04: Agentic Supply Chain Vulnerabilities", "MITRE ATLAS: AML.T0074: Masquerading", "MITRE ATLAS: AML.T0068: LLM Prompt Obfuscation", "NIST AML: N/A", "Cisco AI MDL Code: MDL-001", "Cisco AI MDL Code: MDL-003", "Cisco AI MDL Code: MDL-009", "Cisco AI MDL Code: MDL-011", "Cisco AI MDL Code: MDL-016", "Cisco AI MDL Code: MDL-017", "Cisco AI MDL Code: MDL-019" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } } ], "scan_duration_seconds": 0.3016698360443115, "duration_ms": 301, "analyzers_used": [ "static_analyzer", "bytecode", "pipeline", "correlation", "behavioral_analyzer", "trigger_analyzer" ], "timestamp": "2026-10-22T04:36:34.379268+00:00", "scan_metadata": { "policy_name": "default", "policy_version": "1.0", "policy_preset_base": "balanced", "policy_fingerprint_sha256": "3f48e661bfbc54597f97bbf3dcf2c1cbae2f596ddc79c0b44784efea326b3d1d", "cel": { "mode": "shadow", "runtime": "cel-go", "runtime_version": "v0.32.0;helper=2.3.1", "fact_schema": "v1", "expression_set_hash": "f26459b8f4a46a974d7ab0aaae34127b5b6a40d693e266e12fca03a69a6d26aa", "evaluated": 0, "retained": 17, "would_suppress": 0, "suppressed": 0, "fallbacks": 0, "projection_incomplete": 0, "elapsed_ms": 0.0, "projection_ms": 0.0, "evaluation_ms": 0.0, "errors": [], "per_rule": {}, "suppressed_candidates": [] }, "rule_contract": { "status": "passed", "schema_version": 2, "checked": 15, "invalid_findings": 0, "errors": [] }, "taxonomy": { "source": "builtin", "version": "2.0.0", "name": "Cisco AI Security and Safety Taxonomy", "revision": "655a343ac943a51b6f61f86e47156e7752c15dc6", "snapshot_sha256": "413e8ce9081e6d91b78aaa0d0b1c06cdc15d0406ad319e23e9f9f4f80735c441", "findings": { "mapped": 16, "not_applicable": 1, "unmapped": 0 } } }, "scanner_version": "2.3.1", "source": "heygen-com", "repo_url": "https://github.com/heygen-com/hyperframes" }