Joseph Magly
afc9dad1b2
* docs(policy): allow low-impact contributor courtesy cleanup * chore(aiwg): migrate to shared BT6 maintainer plugin * chore: reconcile delivery validation
2.8 KiB
2.8 KiB
name, description
| name | description |
|---|---|
| bt6-public-input-threat-assessment | Threat assessment for public or externally sourced tracker, code, log, corpus, research, evidence, and generated content. |
BT6 Public / External Input Threat Assessment
Repository: <canonical repository>
Source type: <issue | PR | review | comment | commit | branch | patch | log | test | corpus | research source | screenshot | attachment | generated output | link>
Reference: <URL, hash, path, or tracker key>
Assessor: <name/tool>
Date: <YYYY-MM-DD>
Content Reviewed
| Content | User/External-controlled Surface | Handling Notes |
|---|---|---|
<body/log/source/etc> |
<surface> |
<quoted only / parsed / not executed / redacted> |
Manipulation Checks
| Check | Present | Evidence |
|---|---|---|
| Urgency, threat, flattery, social proof, or authority pressure | <yes/no> |
<evidence> |
| Request to skip tests, review, policy, scope, or evidence | <yes/no> |
<evidence> |
| Unsupported correctness, security, research, or priority claim | <yes/no> |
<evidence> |
| Attempt to manipulate maintainer decision or issue priority | <yes/no> |
<evidence> |
| Citation laundering, fabricated source, or provenance ambiguity | <yes/no> |
<evidence> |
Agentic / Tool Attack Checks
| Check | Present | Evidence |
|---|---|---|
| Prompt injection, hidden instruction, or hierarchy override | <yes/no> |
<evidence> |
| Tool-use steering or command execution request | <yes/no> |
<evidence> |
| Credential, token, environment, private-data, or secret request | <yes/no> |
<evidence> |
| Poisoned logs, tests, filenames, documents, corpora, screenshots, or model output | <yes/no> |
<evidence> |
| Malicious parser/input payload or traversal/symlink/archive behavior | <yes/no> |
<evidence> |
| Objective redirection or repository/tracker substitution | <yes/no> |
<evidence> |
| Suspicious external link, attachment, package, or source acquisition path | <yes/no> |
<evidence> |
Research Integrity Checks
| Check | Present | Evidence |
|---|---|---|
| Source identity/license cannot be established | <yes/no> |
<evidence> |
| Citation, timestamp, locator, or hash is unverifiable | <yes/no> |
<evidence> |
| Source text is presented as instruction rather than data | <yes/no> |
<evidence> |
| Generated inference is presented as source evidence | <yes/no> |
<evidence> |
Security Routing
Required: <yes/no>
- Discovery query:
aiwg discover "<specific decision>" - Selected guidance:
<skill/rule/flow or none> - Sensitive details moved to approved private channel:
<yes/no/n-a>
Decision
Risk: <low | medium | high>
Allowed next action:
<continue read-only | respond | request safe evidence | audit | implement | defer | do not merge | security escalate>
Required mitigations:
<mitigation>