{"repo": "backbay-labs/clawdstrike", "files": {"crates/libs/hushspec/rulesets/ai-agent.yaml": {"666303e5f3428f3b6e6b72f118c269a02388e0a4": {"t": 1785674612.1658916, "n": 2550, "h": "3579a1e5f2fde7dc", "c": "hushspec: \"0.1.0\"\nname: ai-agent\ndescription: Security rules optimized for AI coding assistants\n\nrules:\n  forbidden_paths:\n    patterns:\n      - \"**/.ssh/**\"\n      - \"**/id_rsa*\"\n      - \"**/id_ed25519*\"\n      - \"**/id_ecdsa*\"\n      - \"**/.aws/**\"\n      - \"**/.env\"\n      - \"**/.env.*\"\n      - \"**/.git-credentials\"\n      - \"**/.gitconfig\"\n      - \"**/.gnupg/**\"\n      - \"**/.kube/**\"\n      - \"**/.docker/**\"\n      - \"**/.npmrc\"\n      - \"**/.password-store/**\"\n      - \"**/pass/**\"\n      - \"**/.1password/**\"\n      - \"/etc/shadow\"\n      - \"/etc/passwd\"\n      - \"/etc/sudoers\"\n      - \"**/AppData/Roaming/Microsoft/Credentials/**\"\n      - \"**/AppData/Local/Microsoft/Credentials/**\"\n      - \"**/AppData/Roaming/Microsoft/Vault/**\"\n      - \"**/NTUSER.DAT\"\n      - \"**/Windows/System32/config/SAM\"\n      - \"**/Windows/System32/config/SECURITY\"\n      - \"**/Windows/System32/config/SYSTEM\"\n    exceptions:\n      - \"**/.env.example\"\n      - \"**/.env.template\"\n\n  egress:\n    allow:\n      - \"*.openai.com\"\n      - \"*.anthropic.com\"\n      - \"api.together.xyz\"\n      - \"api.fireworks.ai\"\n      - \"api.github.com\"\n      - \"github.com\"\n      - \"*.githubusercontent.com\"\n      - \"gitlab.com\"\n      - \"bitbucket.org\"\n      - \"*.npmjs.org\"\n      - \"registry.npmjs.org\"\n      - \"pypi.org\"\n      - \"files.pythonhosted.org\"\n      - \"crates.io\"\n      - \"static.crates.io\"\n    block: []\n    default: block\n\n  secret_patterns:\n    patterns:\n      - name: aws_access_key\n        pattern: \"AKIA[0-9A-Z]{16}\"\n        severity: critical\n      - name: github_token\n        pattern: \"gh[ps]_[A-Za-z0-9]{36}\"\n        severity: critical\n      - name: openai_key\n        pattern: \"sk-[A-Za-z0-9]{48}\"\n        severity: critical\n      - name: anthropic_key\n        pattern: \"sk-ant-[A-Za-z0-9\\\\-]{95}\"\n        severity: critical\n      - name: private_key\n        pattern: \"-----BEGIN\\\\s+(RSA\\\\s+)?PRIVATE\\\\s+KEY-----\"\n        severity: critical\n    skip_paths:\n      - \"**/test/**\"\n      - \"**/tests/**\"\n      - \"**/fixtures/**\"\n      - \"**/mocks/**\"\n\n  patch_integrity:\n    max_additions: 2000\n    max_deletions: 1000\n    require_balance: false\n    max_imbalance_ratio: 20.0\n    forbidden_patterns:\n      - \"(?i)rm\\\\s+-rf\\\\s+/\"\n      - \"(?i)chmod\\\\s+777\"\n\n  shell_commands:\n    forbidden_patterns:\n      - \"(?i)rm\\\\s+-rf\\\\s+/\"\n      - \"curl.*\\\\|.*bash\"\n      - \"wget.*\\\\|.*bash\"\n\n  tool_access:\n    allow: []\n    block:\n      - shell_exec\n      - run_command\n    require_confirmation:\n      - git_push\n      - deploy\n      - publish\n    default: allow\n    max_args_size: 2097152\n"}}}}