Risk rule index

Use the rule ID from a finding to locate its risk explanation. The event category values below match the rules; library categories group them into readable topics.

Rule ID	Event category	Tier	Base severity	Risk explanation
RULE_ADV_CREDENTIAL_FILE_SENT	credential_movement	Requires Pro	CRITICAL	Credential file sent to an unrelated host
RULE_ADV_CREDENTIAL_VALUE_SENT	credential_movement	Requires Pro	CRITICAL	Credential sent in a request, not as authentication
RULE_ADV_CREDENTIAL_STAGED_SENT	credential_movement	Requires Pro	CRITICAL	Credential file staged, then sent
RULE_ADV_SENSITIVE_TO_NEW_HOST	data_movement	Requires Pro	MEDIUM	Sensitive file read before reaching a new host
RULE_ADV_SENSITIVE_DATA_SENT	data_movement	Requires Pro	HIGH	Database or mail data sent out
RULE_ADV_ARCHIVE_TO_NEW_HOST	data_movement	Requires Pro	MEDIUM	Archive sent to a new host
RULE_ADV_CODE_PUSHED_TO_NEW_HOST	data_movement	Requires Pro	MEDIUM	Code pushed to a new git host
RULE_ADV_CREDENTIAL_READ_THEN_WRITE_OUTSIDE_WORKSPACE	exfiltration_sequence	Requires Pro	HIGH	Sensitive access followed by an outside-workspace write
RULE_ADV_STAGED_WRITE_THEN_EXECUTION	persistence_sequence	Requires Pro	MEDIUM	Configuration write followed by execution
RULE_CREDENTIAL_EXFIL	credential_exfiltration	Community	CRITICAL	Possible credential transmission
RULE_CREDENTIAL_IN_PARAMS	credential_exposure	Community	MEDIUM	Credentials in tool parameters
RULE_CROSS_AGENT_AUTH_ACCESS	cross_agent	Community	HIGH	Agent authentication file access
RULE_CWD_BOUNDARY_WRITE	cwd_boundary	Community	MEDIUM	Writes outside the workspace
RULE_INPUT_VALIDATION_SQL_INJECTION	input_validation	Community	HIGH	SQL injection patterns
RULE_MNEMONIC_PHRASE	wallet_generation	Community	HIGH	Wallet private keys and recovery phrases
RULE_OUTBOUND_KNOWN_IP	unexpected_network_destination	Community	MEDIUM	Calls to raw IP addresses
RULE_OUTBOUND_UNKNOWN_IP	unexpected_network_destination	Community	HIGH	Calls to raw IP addresses
RULE_PERSISTENCE_GIT_HOOKS	persistence	Community	HIGH	Git hook directory access
RULE_PERSISTENCE_SHELL_STARTUP	persistence	Community	HIGH	Shell startup file access
RULE_PRIVATE_KEY_MATERIAL	wallet_generation	Community	HIGH	Wallet private keys and recovery phrases
RULE_SANDBOX_DISABLE_BASH	sandbox_disable	Community	HIGH	Sandbox and permission configuration changes
RULE_SANDBOX_DISABLE_SETTINGS_WRITE	sandbox_disable	Community	HIGH	Sandbox and permission configuration changes
RULE_SELF_PROTECTION_BASH	self_protection	Community	HIGH	Monitoring configuration access and removal
RULE_SELF_PROTECTION_CONFIG_WRITE	self_protection	Community	HIGH	Monitoring configuration access and removal
RULE_SENSITIVE_PATH_READ	sensitive_path_read	Community	HIGH	Sensitive file access
RULE_SUPPLY_CHAIN_DEP_CONFUSION	supply_chain	Community	MEDIUM	Risky dependency sources and install patterns
RULE_SUPPLY_CHAIN_HOOK_CONFIG_WRITE	supply_chain	Community	HIGH	Agent hook configuration access
RULE_SUPPLY_CHAIN_IOC_DOMAIN	supply_chain	Community	HIGH	Listed collection and testing domains
RULE_SUPPLY_CHAIN_MCP_URL_MUTATION	supply_chain	Community	HIGH	MCP configuration changes and redirection
RULE_SUPPLY_CHAIN_NEW_MCP_SERVER	supply_chain	Community	LOW	New or changed MCP server use
RULE_SUPPLY_CHAIN_PKG_CONFIG_WRITE	supply_chain	Community	HIGH	MCP configuration changes and redirection
RULE_SUPPLY_CHAIN_SKILL_MANIPULATION	supply_chain	Community	HIGH	Plugin and registry configuration changes
RULE_SUPPLY_CHAIN_TOOL_SHADOW	supply_chain	Community	HIGH	Tool name shadowing
RULE_SUPPLY_CHAIN_WORKSPACE_CONFIG_ACCESS	supply_chain	Community	MEDIUM	Workspace instruction and MCP configuration access
RULE_THREAT_API_BASE_URL_OVERRIDE	threat_command	Community	HIGH	API endpoint redirection
RULE_THREAT_AUDIT_TRAIL_DESTRUCTION	threat_command	Community	HIGH	Shell history and log removal
RULE_THREAT_CREDENTIAL_ARCHIVE	threat_command	Community	HIGH	Credential directory collection
RULE_THREAT_DESTRUCTIVE_COMMAND	threat_command	Community	HIGH	Destructive system commands
RULE_THREAT_ENCODED_PAYLOAD	threat_command	Community	HIGH	Encoded or indirect command execution
RULE_THREAT_IMDS_ACCESS	threat_command	Community	HIGH	Cloud metadata service references
RULE_THREAT_PACKAGE_PUBLISH	threat_command	Community	MEDIUM	Package publishing activity
RULE_THREAT_REVERSE_SHELL	threat_command	Community	CRITICAL	Reverse shell patterns
RULE_THREAT_SSH_TUNNEL	threat_command	Community	MEDIUM	SSH tunnels and proxies
RULE_UNBOUNDED_CONSUMPTION_BURST	unbounded_consumption	Community	MEDIUM	High tool-call volume
RULE_UNBOUNDED_CONSUMPTION_SUSTAINED	unbounded_consumption	Community	HIGH	High tool-call volume
RULE_WALLET_CLI_DETECTED	wallet_generation	Community	HIGH	Cryptocurrency wallet operations

Base severity is the rule default. A finding involving content saved for later execution may have a lower severity. Your loaded rule version and event details determine the finding you see.

Linking to a rule

Each rule has a stable link at /risk-library/rule/<RULE_ID>, which opens its risk explanation. For example, /risk-library/rule/RULE_CREDENTIAL_EXFIL opens Possible credential transmission. A rule ID the library does not cover opens this index instead.