lintai docs

Appearance

Preset Reference

membership234 direct rules

base

Minimal stable baseline for explicit compatibility-focused setups.

Membership preset: directly activates this rule set.

Coverage

Covered Rules

SEC201Hook script: remote code executionHook script downloads remote code and executes itstablehook
SEC202Hook script: secret exfiltrationHook script appears to exfiltrate secrets through a network callstablehook
SEC203Hook script: insecure HTTP secret sendHook script sends secret material to an insecure http:// endpointstablehook
SEC204Hook script: TLS verification disabledHook script disables TLS or certificate verification for a network callstablehook
SEC205Hook script: hardcoded auth in network callHook script embeds static authentication material in a network callstablehook
SEC206Hook script: base64 payload executionHook script decodes a base64 payload and executes itstablehook
SEC301MCP config: shell trampolineMCP configuration shells out through sh -c or bash -cstablejson
SEC302Config: insecure HTTP endpointConfiguration contains an insecure http:// endpointstablejson
SEC303MCP config: credential env passthroughMCP configuration passes through credential environment variablesstablejson
SEC304Config: TLS verification disabledConfiguration disables TLS or certificate verificationstablejson
SEC305Config: hardcoded auth materialConfiguration embeds static authentication material in a connection or auth valuestablejson
SEC309Config: literal secrets in configConfiguration commits literal secret material in env, auth, or header valuesstablejson
SEC310Config: metadata or private-network hostConfiguration endpoint targets a metadata or private-network host literalstablejson
SEC311Cursor plugin: unsafe path traversalCursor plugin manifest contains an unsafe absolute or parent-traversing pathstablejson
SEC312Markdown: private key materialMarkdown contains committed private key materialstablemarkdown
SEC314Tool descriptor: missing machine fieldsMCP-style tool descriptor is missing required machine fieldsstabletool_json
SEC315Tool descriptors: duplicate tool namesMCP-style tool descriptor collection contains duplicate tool namesstabletool_json
SEC316OpenAI strict schema: missing additionalProperties falseOpenAI strict tool schema omits recursive additionalProperties: falsestabletool_json
SEC317OpenAI strict schema: properties not all requiredOpenAI strict tool schema does not require every declared propertystabletool_json
SEC318Anthropic strict schema: missing additionalProperties falseAnthropic strict tool input schema omits additionalProperties: falsestabletool_json
SEC319server.json remotes: insecure or private URLserver.json remotes entry uses an insecure or non-public remote URLstableserver_json
SEC320server.json remotes: undefined template variableserver.json remotes URL references an undefined template variablestableserver_json
SEC321server.json remotes: literal auth headerserver.json remotes header commits literal authentication materialstableserver_json
SEC322server.json remotes: undefined header variableserver.json remotes header value references an undefined template variablestableserver_json
SEC329MCP config: mutable package runnerMCP configuration launches tooling through a mutable package runnerstablejson
SEC330MCP config: remote content piped to shellMCP configuration command downloads remote content and pipes it into a shellstablejson
SEC331MCP config: TLS verification disabledMCP configuration command disables TLS verification in a network-capable execution pathstablejson
SEC337MCP config: Docker image not digest-pinnedMCP configuration launches Docker with an image reference that is not digest-pinnedstablejson
SEC338MCP config: sensitive host bind mountMCP configuration launches Docker with a bind mount of sensitive host materialstablejson
SEC339MCP config: privileged Docker flagsMCP configuration launches Docker with a host-escape or privileged runtime flagstablejson
SEC340Claude hook: mutable package launcherClaude settings command hook uses a mutable package launcherstableclaude_settings
SEC341Claude hook: remote content piped to shellClaude settings command hook downloads remote content and pipes it into a shellstableclaude_settings
SEC342Claude hook: TLS verification disabledClaude settings command hook disables TLS verification in a network-capable execution pathstableclaude_settings
SEC343Plugin hook: mutable package launcherPlugin hook command uses a mutable package launcherstablejson
SEC344Plugin hook: remote content piped to shellPlugin hook command downloads remote content and pipes it into a shellstablejson
SEC345Plugin hook: TLS verification disabledPlugin hook command disables TLS verification in a network-capable execution pathstablejson
SEC346MCP config: mutable registry refreshMCP configuration forces Docker to refresh from a mutable registry sourcestablejson
SEC394MCP config: wildcard auto-approveMCP configuration auto-approves all tools with `autoApprove: ["*"]`stablejson
SEC395MCP config: autoApproveTools trueMCP configuration auto-approves all tools with `autoApproveTools: true`stablejson
SEC396MCP config: trustTools trueMCP configuration fully trusts tools with `trustTools: true`stablejson
SEC397MCP config: sandbox disabledMCP configuration disables sandboxing with `sandbox: false` or `disableSandbox: true`stablejson
SEC398MCP config: wildcard capabilitiesMCP configuration grants all capabilities with `capabilities: ["*"]` or `capabilities: "*"`stablejson
SEC422MCP config: sudo commandMCP configuration launches the server through `sudo`stablejson
SEC446MCP config: sudo first argumentMCP configuration passes `sudo` as the first launch argumentstablejson
SEC546MCP config: Bash(*) auto-approveMCP configuration auto-approves blanket shell execution with `autoApprove: ["Bash(*)"]`stablejson
SEC547MCP config: curl auto-approveMCP configuration auto-approves `Bash(curl:*)` through `autoApprove`stablejson
SEC548MCP config: wget auto-approveMCP configuration auto-approves `Bash(wget:*)` through `autoApprove`stablejson
SEC549MCP config: sudo auto-approveMCP configuration auto-approves `Bash(sudo:*)` through `autoApprove`stablejson
SEC550MCP config: rm auto-approveMCP configuration auto-approves `Bash(rm:*)` through `autoApprove`stablejson
SEC551MCP config: git push auto-approveMCP configuration auto-approves `Bash(git push)` through `autoApprove`stablejson
SEC552MCP config: gh api POST auto-approveMCP configuration auto-approves `Bash(gh api --method POST:*)` through `autoApprove`stablejson
SEC553MCP config: git checkout auto-approveMCP configuration auto-approves `Bash(git checkout:*)` through `autoApprove`stablejson
SEC554MCP config: git commit auto-approveMCP configuration auto-approves `Bash(git commit:*)` through `autoApprove`stablejson
SEC555MCP config: git reset auto-approveMCP configuration auto-approves `Bash(git reset:*)` through `autoApprove`stablejson
SEC556MCP config: git clean auto-approveMCP configuration auto-approves `Bash(git clean:*)` through `autoApprove`stablejson
SEC557MCP config: gh api DELETE auto-approveMCP configuration auto-approves `Bash(gh api --method DELETE:*)` through `autoApprove`stablejson
SEC558MCP config: gh api PATCH auto-approveMCP configuration auto-approves `Bash(gh api --method PATCH:*)` through `autoApprove`stablejson
SEC559MCP config: gh api PUT auto-approveMCP configuration auto-approves `Bash(gh api --method PUT:*)` through `autoApprove`stablejson
SEC560MCP config: gh issue create auto-approveMCP configuration auto-approves `Bash(gh issue create:*)` through `autoApprove`stablejson
SEC561MCP config: gh repo create auto-approveMCP configuration auto-approves `Bash(gh repo create:*)` through `autoApprove`stablejson
SEC562MCP config: gh repo delete auto-approveMCP configuration auto-approves `Bash(gh repo delete:*)` through `autoApprove`stablejson
SEC563MCP config: gh repo edit auto-approveMCP configuration auto-approves `Bash(gh repo edit:*)` through `autoApprove`stablejson
SEC564MCP config: gh secret set auto-approveMCP configuration auto-approves `Bash(gh secret set:*)` through `autoApprove`stablejson
SEC565MCP config: gh variable set auto-approveMCP configuration auto-approves `Bash(gh variable set:*)` through `autoApprove`stablejson
SEC566MCP config: gh workflow run auto-approveMCP configuration auto-approves `Bash(gh workflow run:*)` through `autoApprove`stablejson
SEC567MCP config: Read wildcard auto-approveMCP configuration auto-approves `Read(*)` through `autoApprove`stablejson
SEC568MCP config: Write wildcard auto-approveMCP configuration auto-approves `Write(*)` through `autoApprove`stablejson
SEC569MCP config: Edit wildcard auto-approveMCP configuration auto-approves `Edit(*)` through `autoApprove`stablejson
SEC570MCP config: Glob wildcard auto-approveMCP configuration auto-approves `Glob(*)` through `autoApprove`stablejson
SEC571MCP config: Grep wildcard auto-approveMCP configuration auto-approves `Grep(*)` through `autoApprove`stablejson
SEC572MCP config: WebFetch wildcard auto-approveMCP configuration auto-approves `WebFetch(*)` through `autoApprove`stablejson
SEC573MCP config: WebSearch wildcard auto-approveMCP configuration auto-approves `WebSearch(*)` through `autoApprove`stablejson
SEC574MCP config: Read unsafe path auto-approveMCP configuration auto-approves `Read(...)` over an unsafe path through `autoApprove`stablejson
SEC575MCP config: Write unsafe path auto-approveMCP configuration auto-approves `Write(...)` over an unsafe path through `autoApprove`stablejson
SEC576MCP config: Edit unsafe path auto-approveMCP configuration auto-approves `Edit(...)` over an unsafe path through `autoApprove`stablejson
SEC577MCP config: Glob unsafe path auto-approveMCP configuration auto-approves `Glob(...)` over an unsafe path through `autoApprove`stablejson
SEC578MCP config: Grep unsafe path auto-approveMCP configuration auto-approves `Grep(...)` over an unsafe path through `autoApprove`stablejson
SEC579MCP config: gh secret delete auto-approveMCP configuration auto-approves `Bash(gh secret delete:*)` through `autoApprove`stablejson
SEC580MCP config: gh variable delete auto-approveMCP configuration auto-approves `Bash(gh variable delete:*)` through `autoApprove`stablejson
SEC581MCP config: gh workflow disable auto-approveMCP configuration auto-approves `Bash(gh workflow disable:*)` through `autoApprove`stablejson
SEC582MCP config: gh repo transfer auto-approveMCP configuration auto-approves `Bash(gh repo transfer:*)` through `autoApprove`stablejson
SEC583MCP config: gh release create auto-approveMCP configuration auto-approves `Bash(gh release create:*)` through `autoApprove`stablejson
SEC584MCP config: gh release delete auto-approveMCP configuration auto-approves `Bash(gh release delete:*)` through `autoApprove`stablejson
SEC585MCP config: gh release upload auto-approveMCP configuration auto-approves `Bash(gh release upload:*)` through `autoApprove`stablejson
SEC586MCP config: npx auto-approveMCP configuration auto-approves `Bash(npx ...)` through `autoApprove`stablejson
SEC587MCP config: uvx auto-approveMCP configuration auto-approves `Bash(uvx ...)` through `autoApprove`stablejson
SEC588MCP config: npm exec auto-approveMCP configuration auto-approves `Bash(npm exec ...)` through `autoApprove`stablejson
SEC589MCP config: bunx auto-approveMCP configuration auto-approves `Bash(bunx ...)` through `autoApprove`stablejson
SEC590MCP config: pnpm dlx auto-approveMCP configuration auto-approves `Bash(pnpm dlx ...)` through `autoApprove`stablejson
SEC591MCP config: yarn dlx auto-approveMCP configuration auto-approves `Bash(yarn dlx ...)` through `autoApprove`stablejson
SEC592MCP config: pipx run auto-approveMCP configuration auto-approves `Bash(pipx run ...)` through `autoApprove`stablejson
SEC593MCP config: package install auto-approveMCP configuration auto-approves package installation commands through `autoApprove`stablejson
SEC594MCP config: git clone auto-approveMCP configuration auto-approves `Bash(git clone:*)` through `autoApprove`stablejson
SEC595MCP config: git fetch auto-approveMCP configuration auto-approves `Bash(git fetch:*)` through `autoApprove`stablejson
SEC596MCP config: git ls-remote auto-approveMCP configuration auto-approves `Bash(git ls-remote:*)` through `autoApprove`stablejson
SEC597MCP config: git add auto-approveMCP configuration auto-approves `Bash(git add:*)` through `autoApprove`stablejson
SEC598MCP config: git config auto-approveMCP configuration auto-approves `Bash(git config:*)` through `autoApprove`stablejson
SEC599MCP config: git tag auto-approveMCP configuration auto-approves `Bash(git tag:*)` through `autoApprove`stablejson
SEC600MCP config: git branch auto-approveMCP configuration auto-approves `Bash(git branch:*)` through `autoApprove`stablejson
SEC601MCP config: gh pr auto-approveMCP configuration auto-approves `Bash(gh pr:*)` through `autoApprove`stablejson
SEC602MCP config: git stash auto-approveMCP configuration auto-approves `Bash(git stash:*)` through `autoApprove`stablejson
SEC603MCP config: git restore auto-approveMCP configuration auto-approves `Bash(git restore:*)` through `autoApprove`stablejson
SEC604MCP config: git rebase auto-approveMCP configuration auto-approves `Bash(git rebase:*)` through `autoApprove`stablejson
SEC605MCP config: git merge auto-approveMCP configuration auto-approves `Bash(git merge:*)` through `autoApprove`stablejson
SEC606MCP config: git cherry-pick auto-approveMCP configuration auto-approves `Bash(git cherry-pick:*)` through `autoApprove`stablejson
SEC607MCP config: git apply auto-approveMCP configuration auto-approves `Bash(git apply:*)` through `autoApprove`stablejson
SEC608MCP config: git am auto-approveMCP configuration auto-approves `Bash(git am:*)` through `autoApprove`stablejson
SEC609MCP config: crontab auto-approveMCP configuration auto-approves `Bash(crontab:*)` through `autoApprove`stablejson
SEC610MCP config: systemctl enable auto-approveMCP configuration auto-approves `Bash(systemctl enable:*)` through `autoApprove`stablejson
SEC611MCP config: launchctl load auto-approveMCP configuration auto-approves `Bash(launchctl load:*)` through `autoApprove`stablejson
SEC612MCP config: launchctl bootstrap auto-approveMCP configuration auto-approves `Bash(launchctl bootstrap:*)` through `autoApprove`stablejson
SEC613MCP config: chmod auto-approveMCP configuration auto-approves `Bash(chmod:*)` through `autoApprove`stablejson
SEC614MCP config: chown auto-approveMCP configuration auto-approves `Bash(chown:*)` through `autoApprove`stablejson
SEC615MCP config: chgrp auto-approveMCP configuration auto-approves `Bash(chgrp:*)` through `autoApprove`stablejson
SEC616MCP config: su auto-approveMCP configuration auto-approves `Bash(su:*)` through `autoApprove`stablejson
SEC617MCP config: raw.githubusercontent.com WebFetch auto-approveMCP configuration auto-approves `WebFetch(domain:raw.githubusercontent.com)` through `autoApprove`stablejson
SEC618MCP config: bare Read auto-approveMCP configuration auto-approves bare `Read` through `autoApprove`stablejson
SEC619MCP config: bare Write auto-approveMCP configuration auto-approves bare `Write` through `autoApprove`stablejson
SEC620MCP config: bare Edit auto-approveMCP configuration auto-approves bare `Edit` through `autoApprove`stablejson
SEC621MCP config: bare Glob auto-approveMCP configuration auto-approves bare `Glob` through `autoApprove`stablejson
SEC622MCP config: bare Grep auto-approveMCP configuration auto-approves bare `Grep` through `autoApprove`stablejson
SEC623MCP config: bare WebFetch auto-approveMCP configuration auto-approves bare `WebFetch` through `autoApprove`stablejson
SEC624MCP config: bare WebSearch auto-approveMCP configuration auto-approves bare `WebSearch` through `autoApprove`stablejson
SEC625MCP config: bare Bash auto-approveMCP configuration auto-approves bare `Bash` through `autoApprove`stablejson
SEC633Hook script: destructive root deletionHook script attempts destructive root deletionstablehook
SEC634Hook script: password file accessHook script accesses a sensitive system password filestablehook
SEC635Hook script: shell profile writeHook script writes to a shell profile startup filestablehook
SEC636Hook script: authorized_keys writeHook script writes to SSH authorized_keysstablehook
SEC637MCP config: destructive root deletionMCP configuration command attempts destructive root deletionstablejson
SEC638MCP config: password file accessMCP configuration command accesses a sensitive system password filestablejson
SEC639MCP config: shell profile writeMCP configuration command writes to a shell profile startup filestablejson
SEC640MCP config: authorized_keys writeMCP configuration command writes to SSH authorized_keysstablejson
SEC641Claude settings: command hook root deletionClaude settings command hook attempts destructive root deletionstableclaude_settings
SEC642Claude settings: command hook password file accessClaude settings command hook accesses a sensitive system password filestableclaude_settings
SEC643Claude settings: command hook shell profile writeClaude settings command hook writes to a shell profile startup filestableclaude_settings
SEC644Claude settings: command hook authorized_keys writeClaude settings command hook writes to SSH authorized_keysstableclaude_settings
SEC645Plugin hook: destructive root deletionPlugin hook command attempts destructive root deletionstablejson
SEC646Plugin hook: password file accessPlugin hook command accesses a sensitive system password filestablejson
SEC647Plugin hook: shell profile writePlugin hook command writes to a shell profile startup filestablejson
SEC648Plugin hook: authorized_keys writePlugin hook command writes to SSH authorized_keysstablejson
SEC649Hook script: cron persistenceHook script manipulates cron persistencestablehook
SEC650Hook script: systemd persistenceHook script registers a systemd service or unit for persistencestablehook
SEC651Hook script: launchd persistenceHook script registers a launchd plist for persistencestablehook
SEC652MCP config: cron persistenceMCP configuration command manipulates cron persistencestablejson
SEC653MCP config: systemd persistenceMCP configuration command registers a systemd service or unit for persistencestablejson
SEC654MCP config: launchd persistenceMCP configuration command registers a launchd plist for persistencestablejson
SEC655Claude settings: command hook cron persistenceClaude settings command hook manipulates cron persistencestableclaude_settings
SEC656Claude settings: command hook systemd persistenceClaude settings command hook registers a systemd service or unit for persistencestableclaude_settings
SEC657Claude settings: command hook launchd persistenceClaude settings command hook registers a launchd plist for persistencestableclaude_settings
SEC658Plugin hook: cron persistencePlugin hook command manipulates cron persistencestablejson
SEC659Plugin hook: systemd persistencePlugin hook command registers a systemd service or unit for persistencestablejson
SEC660Plugin hook: launchd persistencePlugin hook command registers a launchd plist for persistencestablejson
SEC661Hook script: insecure chmodHook script performs an insecure permission changestablehook
SEC662Hook script: setuid or setgid manipulationHook script manipulates setuid or setgid permissionsstablehook
SEC663Hook script: Linux capability manipulationHook script manipulates Linux capabilitiesstablehook
SEC664MCP config: insecure chmodMCP configuration command performs an insecure permission changestablejson
SEC665MCP config: setuid or setgid manipulationMCP configuration command manipulates setuid or setgid permissionsstablejson
SEC666MCP config: Linux capability manipulationMCP configuration command manipulates Linux capabilitiesstablejson
SEC667Claude settings: command hook insecure chmodClaude settings command hook performs an insecure permission changestableclaude_settings
SEC668Claude settings: command hook setuid or setgid manipulationClaude settings command hook manipulates setuid or setgid permissionsstableclaude_settings
SEC669Claude settings: command hook Linux capability manipulationClaude settings command hook manipulates Linux capabilitiesstableclaude_settings
SEC670Plugin hook: insecure chmodPlugin hook command performs an insecure permission changestablejson
SEC671Plugin hook: setuid or setgid manipulationPlugin hook command manipulates setuid or setgid permissionsstablejson
SEC672Plugin hook: Linux capability manipulationPlugin hook command manipulates Linux capabilitiesstablejson
SEC673Hook script: webhook secret exfiltrationHook script posts secret material to a webhook endpointstablehook
SEC674MCP config: secret exfiltrationMCP configuration command appears to send secret material over the networkstablejson
SEC675MCP config: insecure HTTP secret sendMCP configuration command sends secret material to an insecure http:// endpointstablejson
SEC676MCP config: webhook secret exfiltrationMCP configuration command posts secret material to a webhook endpointstablejson
SEC677Claude settings: secret exfiltration hookClaude settings command hook appears to send secret material over the networkstableclaude_settings
SEC678Claude settings: insecure HTTP secret sendClaude settings command hook sends secret material to an insecure http:// endpointstableclaude_settings
SEC679Claude settings: webhook secret exfiltrationClaude settings command hook posts secret material to a webhook endpointstableclaude_settings
SEC680Plugin hook: secret exfiltrationPlugin hook command appears to send secret material over the networkstablejson
SEC681Plugin hook: insecure HTTP secret sendPlugin hook command sends secret material to an insecure http:// endpointstablejson
SEC682Plugin hook: webhook secret exfiltrationPlugin hook command posts secret material to a webhook endpointstablejson
SEC683Hook script: sensitive file exfiltrationHook script transfers a sensitive credential file to a remote destinationstablehook
SEC684MCP config: sensitive file exfiltrationMCP configuration command transfers a sensitive credential file to a remote destinationstablejson
SEC685Claude settings: sensitive file exfiltration hookClaude settings command hook transfers a sensitive credential file to a remote destinationstableclaude_settings
SEC686Plugin hook: sensitive file exfiltrationPlugin hook command transfers a sensitive credential file to a remote destinationstablejson
SEC687Hook script: clipboard readHook script reads local clipboard contentsstablehook
SEC688Hook script: browser credential store accessHook script accesses browser credential or cookie storesstablehook
SEC689MCP config: clipboard readMCP configuration command reads local clipboard contentsstablejson
SEC690MCP config: browser credential store accessMCP configuration command accesses browser credential or cookie storesstablejson
SEC691Claude settings: clipboard read hookClaude settings command hook reads local clipboard contentsstableclaude_settings
SEC692Claude settings: browser credential store access hookClaude settings command hook accesses browser credential or cookie storesstableclaude_settings
SEC693Plugin hook: clipboard readPlugin hook command reads local clipboard contentsstablejson
SEC694Plugin hook: browser credential store accessPlugin hook command accesses browser credential or cookie storesstablejson
SEC695Hook script: clipboard exfiltrationHook script exfiltrates clipboard contents over the networkstablehook
SEC696Hook script: browser credential store exfiltrationHook script exfiltrates browser credential or cookie store datastablehook
SEC697MCP config: clipboard exfiltrationMCP configuration command exfiltrates clipboard contents over the networkstablejson
SEC698MCP config: browser credential store exfiltrationMCP configuration command exfiltrates browser credential or cookie store datastablejson
SEC699Claude settings: clipboard exfiltration hookClaude settings command hook exfiltrates clipboard contents over the networkstableclaude_settings
SEC700Claude settings: browser credential store exfiltration hookClaude settings command hook exfiltrates browser credential or cookie store datastableclaude_settings
SEC701Plugin hook: clipboard exfiltrationPlugin hook command exfiltrates clipboard contents over the networkstablejson
SEC702Plugin hook: browser credential store exfiltrationPlugin hook command exfiltrates browser credential or cookie store datastablejson
SEC703Hook script: screen captureHook script captures a screenshot or desktop imagestablehook
SEC704Hook script: screen capture exfiltrationHook script captures and exfiltrates a screenshot or desktop imagestablehook
SEC705MCP config: screen captureMCP configuration command captures a screenshot or desktop imagestablejson
SEC706MCP config: screen capture exfiltrationMCP configuration command captures and exfiltrates a screenshot or desktop imagestablejson
SEC707Claude settings: screen capture hookClaude settings command hook captures a screenshot or desktop imagestableclaude_settings
SEC708Claude settings: screen capture exfiltration hookClaude settings command hook captures and exfiltrates a screenshot or desktop imagestableclaude_settings
SEC709Plugin hook: screen capturePlugin hook command captures a screenshot or desktop imagestablejson
SEC710Plugin hook: screen capture exfiltrationPlugin hook command captures and exfiltrates a screenshot or desktop imagestablejson
SEC711Hook script: camera captureHook script captures a camera image or webcam streamstablehook
SEC712Hook script: microphone captureHook script records microphone or audio inputstablehook
SEC713Hook script: camera capture exfiltrationHook script captures and exfiltrates camera or webcam datastablehook
SEC714Hook script: microphone capture exfiltrationHook script records and exfiltrates microphone or audio inputstablehook
SEC715MCP config: camera captureMCP configuration command captures a webcam or camera imagestablejson
SEC716MCP config: microphone captureMCP configuration command captures microphone audiostablejson
SEC717MCP config: camera capture exfiltrationMCP configuration command captures and exfiltrates webcam or camera datastablejson
SEC718MCP config: microphone capture exfiltrationMCP configuration command captures and exfiltrates microphone audiostablejson
SEC719Claude settings: camera capture hookClaude settings command hook captures a webcam or camera imagestableclaude_settings
SEC720Claude settings: microphone capture hookClaude settings command hook captures microphone audiostableclaude_settings
SEC721Claude settings: camera capture exfiltration hookClaude settings command hook captures and exfiltrates webcam or camera datastableclaude_settings
SEC722Claude settings: microphone capture exfiltration hookClaude settings command hook captures and exfiltrates microphone audiostableclaude_settings
SEC723Plugin hook: camera capturePlugin hook command captures a webcam or camera imagestablejson
SEC724Plugin hook: microphone capturePlugin hook command captures microphone audiostablejson
SEC725Plugin hook: camera capture exfiltrationPlugin hook command captures and exfiltrates webcam or camera datastablejson
SEC726Plugin hook: microphone capture exfiltrationPlugin hook command captures and exfiltrates microphone audiostablejson
SEC727Hook script: keylogger captureHook script captures keystrokes or keyboard inputstablehook
SEC728Hook script: keylogger exfiltrationHook script captures and exfiltrates keystrokes or keyboard inputstablehook
SEC729MCP config: keylogger captureMCP configuration command captures keystrokes or keyboard inputstablejson
SEC730MCP config: keylogger exfiltrationMCP configuration command captures and exfiltrates keystrokes or keyboard inputstablejson
SEC731Claude settings: keylogger capture hookClaude settings command hook captures keystrokes or keyboard inputstableclaude_settings
SEC732Claude settings: keylogger exfiltration hookClaude settings command hook captures and exfiltrates keystrokes or keyboard inputstableclaude_settings
SEC733Plugin hook: keylogger capturePlugin hook command captures keystrokes or keyboard inputstablejson
SEC734Plugin hook: keylogger exfiltrationPlugin hook command captures and exfiltrates keystrokes or keyboard inputstablejson
SEC735Hook script: environment dumpHook script dumps environment variables or shell statestablehook
SEC736Hook script: environment dump exfiltrationHook script dumps and exfiltrates environment variables or shell statestablehook
SEC737MCP config: environment dumpMCP configuration command dumps environment variables or shell statestablejson
SEC738MCP config: environment dump exfiltrationMCP configuration command dumps and exfiltrates environment variables or shell statestablejson
SEC739Claude settings: environment dump hookClaude settings command hook dumps environment variables or shell statestableclaude_settings
SEC740Claude settings: environment dump exfiltration hookClaude settings command hook dumps and exfiltrates environment variables or shell statestableclaude_settings
SEC741Plugin hook: environment dumpPlugin hook command dumps environment variables or shell statestablejson
SEC742Plugin hook: environment dump exfiltrationPlugin hook command dumps and exfiltrates environment variables or shell statestablejson

What This Preset Enables ​

The base preset enables the minimal stable baseline for repo-local agent artifacts.

When To Use It ​

Use this when you explicitly want the old narrow baseline or need a compatibility-oriented starting point instead of the broader recommended default.

Tradeoffs ​

You get conservative coverage and minimal surprise, but you also miss the curated practical checks that now ship in recommended.