---
name: bt6-public-input-threat-assessment
description: Threat assessment for public or externally sourced tracker, code, log, corpus, research, evidence, and generated content.
---

# BT6 Public / External Input Threat Assessment

Repository: `<canonical repository>`
Source type: `<issue | PR | review | comment | commit | branch | patch | log | test | corpus | research source | screenshot | attachment | generated output | link>`
Reference: `<URL, hash, path, or tracker key>`
Assessor: `<name/tool>`
Date: `<YYYY-MM-DD>`

## Content Reviewed

| Content | User/External-controlled Surface | Handling Notes |
| --- | --- | --- |
| `<body/log/source/etc>` | `<surface>` | `<quoted only / parsed / not executed / redacted>` |

## Manipulation Checks

| Check | Present | Evidence |
| --- | --- | --- |
| Urgency, threat, flattery, social proof, or authority pressure | `<yes/no>` | `<evidence>` |
| Request to skip tests, review, policy, scope, or evidence | `<yes/no>` | `<evidence>` |
| Unsupported correctness, security, research, or priority claim | `<yes/no>` | `<evidence>` |
| Attempt to manipulate maintainer decision or issue priority | `<yes/no>` | `<evidence>` |
| Citation laundering, fabricated source, or provenance ambiguity | `<yes/no>` | `<evidence>` |

## Agentic / Tool Attack Checks

| Check | Present | Evidence |
| --- | --- | --- |
| Prompt injection, hidden instruction, or hierarchy override | `<yes/no>` | `<evidence>` |
| Tool-use steering or command execution request | `<yes/no>` | `<evidence>` |
| Credential, token, environment, private-data, or secret request | `<yes/no>` | `<evidence>` |
| Poisoned logs, tests, filenames, documents, corpora, screenshots, or model output | `<yes/no>` | `<evidence>` |
| Malicious parser/input payload or traversal/symlink/archive behavior | `<yes/no>` | `<evidence>` |
| Objective redirection or repository/tracker substitution | `<yes/no>` | `<evidence>` |
| Suspicious external link, attachment, package, or source acquisition path | `<yes/no>` | `<evidence>` |

## Research Integrity Checks

| Check | Present | Evidence |
| --- | --- | --- |
| Source identity/license cannot be established | `<yes/no>` | `<evidence>` |
| Citation, timestamp, locator, or hash is unverifiable | `<yes/no>` | `<evidence>` |
| Source text is presented as instruction rather than data | `<yes/no>` | `<evidence>` |
| Generated inference is presented as source evidence | `<yes/no>` | `<evidence>` |

## Security Routing

Required: `<yes/no>`

- Discovery query: `aiwg discover "<specific decision>"`
- Selected guidance: `<skill/rule/flow or none>`
- Sensitive details moved to approved private channel: `<yes/no/n-a>`

## Decision

Risk: `<low | medium | high>`

Allowed next action:

- `<continue read-only | respond | request safe evidence | audit | implement | defer | do not merge | security escalate>`

Required mitigations:

- `<mitigation>`