{
  "skill_name": "hugging-face-datasets",
  "skill_path": "/workspace/skills/huggingface-skills/skills/hugging-face-datasets",
  "skill_directory": "/workspace/skills/huggingface-skills/skills/hugging-face-datasets",
  "is_safe": false,
  "max_severity": "CRITICAL",
  "findings_count": 78,
  "findings": [
    {
      "id": "MANIFEST_MISSING_LICENSE_c5ae9be793",
      "rule_id": "MANIFEST_MISSING_LICENSE",
      "category": "policy_violation",
      "severity": "LOW",
      "title": "Skill does not specify a license",
      "description": "Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": null,
      "remediation": "Add 'license' field to SKILL.md frontmatter (e.g., MIT, Apache-2.0)",
      "analyzer": "static",
      "metadata": {
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_cdddc12da2",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 262,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed})\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_58d2daf318",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 264,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_e2e9ce7e7a",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT COUNT(*) FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 285,
      "snippet": "sql = f\"SELECT COUNT(*) FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT COUNT(*) FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_3238caea89",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 287,
      "snippet": "sql += f\" WHERE {where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_48fb787308",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 310,
      "snippet": "sql = f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_e22b927c2e",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT {select}\", f\"FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 383,
      "snippet": "sql_parts = [f\"SELECT {select}\", f\"FROM '{hf_path}'\"]",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT {select}\", f\"FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_a6d06251f5",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"WHERE {where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 386,
      "snippet": "sql_parts.append(f\"WHERE {where}\")",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\"WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_98bad12868",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 471,
      "snippet": "processed_sql = f\"SELECT * FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_166c83d5b0",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {args.where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 781,
      "snippet": "query_sql += f\" WHERE {args.where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {args.where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_ENV_VARS_91f1a8ae79",
      "rule_id": "DATA_EXFIL_ENV_VARS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Reading environment variables that may contain secrets",
      "description": "Pattern detected: os.environ.get(\"HF_TOKEN",
      "file_path": "scripts/sql_manager.py",
      "line_number": 51,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\")",
      "remediation": "Minimize access to environment variables. Document why needed",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "os\\.environ(?:\\.get)?\\s*\\([^)]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)",
        "matched_text": "os.environ.get(\"HF_TOKEN",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_ENV_VARS_e33f669320",
      "rule_id": "DATA_EXFIL_ENV_VARS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Reading environment variables that may contain secrets",
      "description": "Pattern detected: os.environ.get(\"HF_TOKEN",
      "file_path": "scripts/dataset_manager.py",
      "line_number": 35,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\")",
      "remediation": "Minimize access to environment variables. Document why needed",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "os\\.environ(?:\\.get)?\\s*\\([^)]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)",
        "matched_text": "os.environ.get(\"HF_TOKEN",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_ac8482ba05",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
      "file_path": "sql_manager.py",
      "line_number": 262,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed})\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_c8af65cb26",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
      "file_path": "sql_manager.py",
      "line_number": 264,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_c9ca01c837",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT COUNT(*) FROM '{hf_path}",
      "file_path": "sql_manager.py",
      "line_number": 285,
      "snippet": "sql = f\"SELECT COUNT(*) FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT COUNT(*) FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_8bc3a5f872",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {where}",
      "file_path": "sql_manager.py",
      "line_number": 287,
      "snippet": "sql += f\" WHERE {where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_d506d69121",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
      "file_path": "sql_manager.py",
      "line_number": 310,
      "snippet": "sql = f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_89b9f9401d",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT {select}\", f\"FROM '{hf_path}",
      "file_path": "sql_manager.py",
      "line_number": 383,
      "snippet": "sql_parts = [f\"SELECT {select}\", f\"FROM '{hf_path}'\"]",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT {select}\", f\"FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_5f19dd4b4a",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"WHERE {where}",
      "file_path": "sql_manager.py",
      "line_number": 386,
      "snippet": "sql_parts.append(f\"WHERE {where}\")",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\"WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_91e121fbe4",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}",
      "file_path": "sql_manager.py",
      "line_number": 471,
      "snippet": "processed_sql = f\"SELECT * FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_0b74c12dc0",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {args.where}",
      "file_path": "sql_manager.py",
      "line_number": 781,
      "snippet": "query_sql += f\" WHERE {args.where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {args.where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_ENV_VARS_65d027d703",
      "rule_id": "DATA_EXFIL_ENV_VARS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Reading environment variables that may contain secrets",
      "description": "Pattern detected: os.environ.get(\"HF_TOKEN",
      "file_path": "sql_manager.py",
      "line_number": 51,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\")",
      "remediation": "Minimize access to environment variables. Document why needed",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "os\\.environ(?:\\.get)?\\s*\\([^)]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)",
        "matched_text": "os.environ.get(\"HF_TOKEN",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_ENV_VARS_e33f669320",
      "rule_id": "DATA_EXFIL_ENV_VARS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Reading environment variables that may contain secrets",
      "description": "Pattern detected: os.environ.get(\"HF_TOKEN",
      "file_path": "scripts/dataset_manager.py",
      "line_number": 35,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\")",
      "remediation": "Minimize access to environment variables. Document why needed",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "os\\.environ(?:\\.get)?\\s*\\([^)]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)",
        "matched_text": "os.environ.get(\"HF_TOKEN",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_cdddc12da2",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 262,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed})\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n} (RESERVOIR, {seed}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_58d2daf318",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 264,
      "snippet": "sql = f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}' USING SAMPLE {n}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_e2e9ce7e7a",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT COUNT(*) FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 285,
      "snippet": "sql = f\"SELECT COUNT(*) FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT COUNT(*) FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_3238caea89",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 287,
      "snippet": "sql += f\" WHERE {where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_48fb787308",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 310,
      "snippet": "sql = f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT DISTINCT {column} FROM '{hf_path}' LIMIT {limit}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_e22b927c2e",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT {select}\", f\"FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 383,
      "snippet": "sql_parts = [f\"SELECT {select}\", f\"FROM '{hf_path}'\"]",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT {select}\", f\"FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_a6d06251f5",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"WHERE {where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 386,
      "snippet": "sql_parts.append(f\"WHERE {where}\")",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\"WHERE {where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_98bad12868",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\"SELECT * FROM '{hf_path}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 471,
      "snippet": "processed_sql = f\"SELECT * FROM '{hf_path}'\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"']SELECT.*FROM.*\\{.*\\}",
        "matched_text": "f\"SELECT * FROM '{hf_path}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "SQL_INJECTION_STRING_FORMAT_166c83d5b0",
      "rule_id": "SQL_INJECTION_STRING_FORMAT",
      "category": "command_injection",
      "severity": "CRITICAL",
      "title": "SQL query with string formatting (SQL injection risk)",
      "description": "Pattern detected: f\" WHERE {args.where}",
      "file_path": "scripts/sql_manager.py",
      "line_number": 781,
      "snippet": "query_sql += f\" WHERE {args.where}\"",
      "remediation": "Use parameterized queries with ? or %s placeholders",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "f[\"'].*WHERE.*\\{.*\\}",
        "matched_text": "f\" WHERE {args.where}",
        "aitech": "AITech-9.1",
        "aitech_name": "Model or Agentic System Manipulation",
        "scanner_category": "INJECTION ATTACK",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "DATA_EXFIL_ENV_VARS_91f1a8ae79",
      "rule_id": "DATA_EXFIL_ENV_VARS",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Reading environment variables that may contain secrets",
      "description": "Pattern detected: os.environ.get(\"HF_TOKEN",
      "file_path": "scripts/sql_manager.py",
      "line_number": 51,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\")",
      "remediation": "Minimize access to environment variables. Document why needed",
      "analyzer": "static",
      "metadata": {
        "matched_pattern": "os\\.environ(?:\\.get)?\\s*\\([^)]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)",
        "matched_text": "os.environ.get(\"HF_TOKEN",
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "scanner_category": "SECURITY VIOLATION",
        "reference_depth": 0,
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_ba7379dfb6",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 13,
      "snippet": "# Scripts auto-install requirements when run with: uv run scripts/script_name.py",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_8c9fcc3808",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 54,
      "snippet": "> Scripts are run with: `uv run scripts/script_name.py [arguments]`",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_655bd0622d",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 73,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_ccdbbbc93c",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 78,
      "snippet": "uv run scripts/sql_manager.py describe --dataset \"cais/mmlu\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_591402e31a",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 81,
      "snippet": "uv run scripts/sql_manager.py sample --dataset \"cais/mmlu\" --n 5",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_786790d3ef",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 84,
      "snippet": "uv run scripts/sql_manager.py count --dataset \"cais/mmlu\" --where \"subject='nutrition'\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_0b785ab190",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 116,
      "snippet": "uv run scripts/sql_manager.py describe --dataset \"cais/mmlu\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_41aed24dcb",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 119,
      "snippet": "uv run scripts/sql_manager.py unique --dataset \"cais/mmlu\" --column \"subject\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_e6a6dc581e",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 122,
      "snippet": "uv run scripts/sql_manager.py histogram --dataset \"cais/mmlu\" --column \"subject\" --bins 20",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_844d78bd33",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 128,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_51e0982558",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 133,
      "snippet": "uv run scripts/sql_manager.py transform \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_ce20b887bd",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 144,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_aab3a6d744",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 151,
      "snippet": "uv run scripts/sql_manager.py transform \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_dc83a01f29",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 162,
      "snippet": "uv run scripts/sql_manager.py export \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_da6578c82f",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 169,
      "snippet": "uv run scripts/sql_manager.py export \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_5ff750e901",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 179,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_00e4ef38c6",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 185,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_be863e2931",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 191,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_e063edefbc",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 200,
      "snippet": "uv run scripts/sql_manager.py raw --sql \"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_7a35941958",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 309,
      "snippet": "uv run scripts/dataset_manager.py init --repo_id \"your-username/dataset-name\" [--private]",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_bcfc5ef20a",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 312,
      "snippet": "uv run scripts/dataset_manager.py config --repo_id \"your-username/dataset-name\" --system_prompt \"$(cat system_prompt.txt)\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_54be05f344",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 318,
      "snippet": "uv run scripts/dataset_manager.py quick_setup \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_4e47a59a8f",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 323,
      "snippet": "uv run scripts/dataset_manager.py add_rows \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_8c943e386b",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 425,
      "snippet": "uv run scripts/dataset_manager.py add_rows --repo_id \"your-username/dataset-name\" \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_d3994daa26",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 429,
      "snippet": "uv run scripts/dataset_manager.py add_rows --repo_id \"your-username/dataset-name\" \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_95fcbc261f",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 433,
      "snippet": "uv run scripts/dataset_manager.py add_rows --repo_id \"your-username/dataset-name\" \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_78eaa5b25f",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 441,
      "snippet": "uv run scripts/dataset_manager.py list_templates",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_7330de44a2",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 446,
      "snippet": "uv run scripts/dataset_manager.py quick_setup --repo_id \"your-username/dataset-name\" --template classification",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_a2758a784c",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 452,
      "snippet": "uv run scripts/dataset_manager.py init --repo_id \"your-username/dataset-name\" [--private]",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_e269b8145c",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 455,
      "snippet": "uv run scripts/dataset_manager.py config --repo_id \"your-username/dataset-name\" --system_prompt \"Your prompt here\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_f37562047e",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 458,
      "snippet": "uv run scripts/dataset_manager.py add_rows \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_f4b0b3a06a",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 466,
      "snippet": "uv run scripts/dataset_manager.py stats --repo_id \"your-username/dataset-name\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_a4fb2a27ea",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 482,
      "snippet": "uv run scripts/sql_manager.py describe --dataset \"cais/mmlu\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_c0abeae8f6",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 483,
      "snippet": "uv run scripts/sql_manager.py histogram --dataset \"cais/mmlu\" --column \"subject\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_352bc274ef",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 486,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_e18d5465a7",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 496,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_9fab3e6f1d",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 505,
      "snippet": "uv run scripts/sql_manager.py export \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_2135de184b",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 514,
      "snippet": "uv run scripts/sql_manager.py query \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_26a2765617",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 523,
      "snippet": "uv run scripts/sql_manager.py export \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_359c8385e8",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 532,
      "snippet": "uv run scripts/dataset_manager.py init --repo_id \"username/nutrition-training\"",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "YARA_transitive_trust_abuse_01a7cbbb6a",
      "rule_id": "YARA_transitive_trust_abuse",
      "category": "transitive_trust_abuse",
      "severity": "MEDIUM",
      "title": "TRANSITIVE TRUST ABUSE detected by YARA",
      "description": "Detects skills that delegate trust to untrusted external content: run scripts",
      "file_path": "SKILL.md",
      "line_number": 533,
      "snippet": "uv run scripts/dataset_manager.py add_rows \\",
      "remediation": "Review and remove transitive trust abuse pattern",
      "analyzer": "static",
      "metadata": {
        "yara_rule": "transitive_trust_abuse",
        "yara_namespace": "transitive_trust_abuse",
        "matched_string": "$execute_inline",
        "threat_type": "TRANSITIVE TRUST ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "llm_finding_hugging-face-datasets_0",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "MEDIUM",
      "title": "Hardcoded HF_TOKEN Environment Variable Dependency",
      "description": "Both scripts rely on the HF_TOKEN environment variable for authentication with Hugging Face Hub. While environment variables are a common practice, the scripts do not validate token presence before operations that require authentication, potentially leading to unclear error messages or failed operations. Additionally, there is no guidance on secure token management or rotation.",
      "file_path": "scripts/dataset_manager.py",
      "line_number": null,
      "snippet": "HF_TOKEN = os.environ.get(\"HF_TOKEN\") - Token retrieved but not validated before use in API operations",
      "remediation": "Add explicit token validation at script startup with clear error messages. Include documentation on secure token storage practices (e.g., using secret management tools). Implement token validation: if not HF_TOKEN: raise ValueError('HF_TOKEN environment variable must be set')",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This Hugging Face dataset management skill is generally well-designed for its intended purpose of creating and querying datasets on Hugging Face Hub. The skill uses legitimate APIs and follows Python best practices with PEP 723 dependency management. The primary security concerns are operational rather than malicious: missing token validation, lack of resource limits on SQL queries, and incomplete metadata documentation. No evidence of data exfiltration, prompt injection, or malicious behavior was found. The scripts operate transparently with clear documentation and use standard Hugging Face Hub APIs. The skill would benefit from enhanced input validation, resource management, and more complete YAML manifest documentation.",
        "primary_threats": [
          "Missing authentication validation",
          "Potential resource exhaustion",
          "Incomplete security metadata"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    },
    {
      "id": "llm_finding_hugging-face-datasets_1",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "LOW",
      "title": "Missing Optional Metadata Fields",
      "description": "The YAML manifest is missing optional fields that would improve security transparency: 'license' is not specified (though scripts create MIT-licensed datasets), 'compatibility' is not specified, and 'allowed-tools' is not declared. While these are optional fields, their absence reduces visibility into the skill's intended operational boundaries.",
      "file_path": "SKILL.md",
      "line_number": null,
      "snippet": "YAML Manifest shows: license: Not specified, compatibility: Not specified, allowed-tools: Not specified",
      "remediation": "Add complete YAML frontmatter with: license: MIT, compatibility: 'Requires uv package manager and HF_TOKEN environment variable', allowed-tools: [Python, Read, Write] to clearly document the skill's requirements and tool usage",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This Hugging Face dataset management skill is generally well-designed for its intended purpose of creating and querying datasets on Hugging Face Hub. The skill uses legitimate APIs and follows Python best practices with PEP 723 dependency management. The primary security concerns are operational rather than malicious: missing token validation, lack of resource limits on SQL queries, and incomplete metadata documentation. No evidence of data exfiltration, prompt injection, or malicious behavior was found. The scripts operate transparently with clear documentation and use standard Hugging Face Hub APIs. The skill would benefit from enhanced input validation, resource management, and more complete YAML manifest documentation.",
        "primary_threats": [
          "Missing authentication validation",
          "Potential resource exhaustion",
          "Incomplete security metadata"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    },
    {
      "id": "llm_finding_hugging-face-datasets_2",
      "rule_id": "LLM_RESOURCE_ABUSE",
      "category": "resource_abuse",
      "severity": "LOW",
      "title": "Potential Resource Exhaustion in SQL Query Operations",
      "description": "The sql_manager.py script allows arbitrary SQL queries on Hugging Face datasets without explicit resource limits, timeouts, or query complexity validation. Large datasets or complex queries (e.g., cross joins, unbounded aggregations) could consume excessive memory or CPU resources.",
      "file_path": "scripts/sql_manager.py",
      "line_number": null,
      "snippet": "def query(self, dataset: str, sql: str, ...) - No query timeout, memory limits, or complexity checks implemented",
      "remediation": "Implement query safeguards: 1) Add DuckDB memory_limit and threads configuration, 2) Set query timeout limits, 3) Add warnings for potentially expensive operations (e.g., SELECT * without LIMIT), 4) Document resource considerations in SKILL.md",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This Hugging Face dataset management skill is generally well-designed for its intended purpose of creating and querying datasets on Hugging Face Hub. The skill uses legitimate APIs and follows Python best practices with PEP 723 dependency management. The primary security concerns are operational rather than malicious: missing token validation, lack of resource limits on SQL queries, and incomplete metadata documentation. No evidence of data exfiltration, prompt injection, or malicious behavior was found. The scripts operate transparently with clear documentation and use standard Hugging Face Hub APIs. The skill would benefit from enhanced input validation, resource management, and more complete YAML manifest documentation.",
        "primary_threats": [
          "Missing authentication validation",
          "Potential resource exhaustion",
          "Incomplete security metadata"
        ],
        "aitech": "AITech-13.3",
        "aitech_name": "Availability Disruption",
        "aisubtech": "AISubtech-13.3.2",
        "aisubtech_name": "Compute Exhaustion",
        "scanner_category": "RESOURCE ABUSE",
        "meta_reviewed": true
      }
    },
    {
      "id": "llm_finding_hugging-face-datasets_3",
      "rule_id": "LLM_DATA_EXFILTRATION",
      "category": "data_exfiltration",
      "severity": "LOW",
      "title": "Unrestricted Dataset Push Capabilities",
      "description": "The sql_manager.py script's query_and_push() method allows pushing query results to any Hugging Face repository without validation of the target repository ownership or existence checks. While this requires a valid HF_TOKEN, there's no confirmation prompt or safety check before pushing potentially large datasets.",
      "file_path": "scripts/sql_manager.py",
      "line_number": null,
      "snippet": "def query_and_push(...) - Directly pushes to target_repo without ownership validation or confirmation prompts",
      "remediation": "Add safety checks: 1) Verify user owns target repository or has write access, 2) Implement --confirm flag for push operations, 3) Add dry-run mode to preview operations, 4) Validate target repository format and existence",
      "analyzer": "llm",
      "metadata": {
        "model": "claude-sonnet-4-5-20250929",
        "overall_assessment": "This Hugging Face dataset management skill is generally well-designed for its intended purpose of creating and querying datasets on Hugging Face Hub. The skill uses legitimate APIs and follows Python best practices with PEP 723 dependency management. The primary security concerns are operational rather than malicious: missing token validation, lack of resource limits on SQL queries, and incomplete metadata documentation. No evidence of data exfiltration, prompt injection, or malicious behavior was found. The scripts operate transparently with clear documentation and use standard Hugging Face Hub APIs. The skill would benefit from enhanced input validation, resource management, and more complete YAML manifest documentation.",
        "primary_threats": [
          "Missing authentication validation",
          "Potential resource exhaustion",
          "Incomplete security metadata"
        ],
        "aitech": "AITech-8.2",
        "aitech_name": "Data Exfiltration / Exposure",
        "aisubtech": "AISubtech-8.2.3",
        "aisubtech_name": "Data Exfiltration via Agent Tooling",
        "scanner_category": "SECURITY VIOLATION",
        "meta_reviewed": true
      }
    }
  ],
  "scan_duration_seconds": 517.2661674022675,
  "duration_ms": 517266,
  "analyzers_used": [
    "static_analyzer",
    "llm_analyzer",
    "meta_analyzer"
  ],
  "timestamp": "2026-02-07T22:39:23.298336"
}