lintai docs

Appearance

Preset Reference

membership167 direct rules

preview

Deeper-review rules that expand coverage beyond the recommended default.

Membership preset: directly activates this rule set.

Coverage

Covered Rules

SEC101HTML comment: dangerous instructionsHidden HTML comment contains dangerous agent instructionspreviewmarkdown
SEC102Markdown: remote execution instructionMarkdown contains remote download-and-execute instruction outside code blockspreviewmarkdown
SEC103HTML comment: remote execution instructionHidden HTML comment contains remote download-and-execute instructionpreviewmarkdown
SEC104Markdown: base64 executable payloadMarkdown contains a base64-decoded executable payload outside code blockspreviewmarkdown
SEC105Markdown: parent-directory file accessMarkdown instructions reference parent-directory traversal for file accesspreviewmarkdown
SEC306JSON config: hidden override instructionsJSON configuration description contains override-style hidden instructionspreviewjson
SEC307Config: sensitive env forwardingConfiguration forwards sensitive environment variable referencespreviewjson
SEC308Config: suspicious remote endpointConfiguration points at a suspicious remote endpointpreviewjson
SEC313Shell example: remote content piped to shellFenced shell example pipes remote content directly into a shellpreviewmarkdown
SEC323server.json auth: missing explicit secret flagserver.json auth header carries material without an explicit secret flagpreviewserver_json
SEC335AI markdown: metadata-service accessAI-native markdown contains a direct cloud metadata-service access examplepreviewmarkdown
SEC336MCP client config: broad envFileRepo-local MCP client config loads a broad dotenv-style envFilepreviewjson
SEC347AI markdown: MCP via mutable package runnerAI-native markdown example launches MCP through a mutable package runnerpreviewmarkdown
SEC348AI markdown: mutable Docker imageAI-native markdown Docker example uses a mutable registry imagepreviewmarkdown
SEC349AI markdown: privileged Docker patternAI-native markdown Docker example uses a host-escape or privileged runtime patternpreviewmarkdown
SEC350Instruction markdown: untrusted content promotedInstruction markdown promotes untrusted external content to developer/system-level instructionspreviewmarkdown
SEC351AI instruction: disables user approvalAI-native instruction explicitly disables user approval or confirmationpreviewmarkdown
SEC352AI markdown: unscoped Bash tool grantAI-native markdown frontmatter grants unscoped Bash tool accessstablemarkdown
SEC355AI markdown: wildcard tool grantAI-native markdown frontmatter grants wildcard tool accesspreviewmarkdown
SEC356Plugin agent: `permissionMode` in frontmatterPlugin agent frontmatter sets `permissionMode`previewmarkdown
SEC357Plugin agent: `hooks` in frontmatterPlugin agent frontmatter sets `hooks`previewmarkdown
SEC358Plugin agent: `mcpServers` in frontmatterPlugin agent frontmatter sets `mcpServers`previewmarkdown
SEC359Cursor rule: `alwaysApply` typeCursor rule frontmatter `alwaysApply` must be booleanpreviewmarkdown
SEC360Cursor rule: `globs` typeCursor rule frontmatter `globs` must be a sequence of patternspreviewmarkdown
SEC361Claude settings: missing `$schema`Claude settings file is missing a top-level `$schema` referencepreviewclaude_settings
SEC362Claude settings: wildcard Bash permissionsClaude settings permissions allow `Bash(*)` in a shared committed configstableclaude_settings
SEC363Claude settings: home-directory hook pathClaude settings hook command uses a home-directory path in a shared committed configpreviewclaude_settings
SEC364Claude settings: bypassPermissions default modeClaude settings set `permissions.defaultMode` to `bypassPermissions` in a shared committed configstableclaude_settings
SEC365Claude settings: non-HTTPS allowed HTTP hook URLClaude settings allow non-HTTPS HTTP hook URLs in a shared committed configpreviewclaude_settings
SEC366Claude settings: dangerous HTTP hook host literalClaude settings allow dangerous host literals in `allowedHttpHookUrls`previewclaude_settings
SEC367Claude settings: wildcard WebFetch permissionsClaude settings permissions allow `WebFetch(*)` in a shared committed configstableclaude_settings
SEC368Claude settings: repo-external absolute hook pathClaude settings hook command uses a repo-external absolute path in a shared committed configpreviewclaude_settings
SEC369Claude settings: wildcard Write permissionsClaude settings permissions allow `Write(*)` in a shared committed configstableclaude_settings
SEC372Claude settings: wildcard Read permissionsClaude settings permissions allow `Read(*)` in a shared committed configstableclaude_settings
SEC373Claude settings: wildcard Edit permissionsClaude settings permissions allow `Edit(*)` in a shared committed configstableclaude_settings
SEC374Claude settings: wildcard WebSearch permissionsClaude settings permissions allow `WebSearch(*)` in a shared committed configstableclaude_settings
SEC375Claude settings: wildcard Glob permissionsClaude settings permissions allow `Glob(*)` in a shared committed configstableclaude_settings
SEC376Claude settings: wildcard Grep permissionsClaude settings permissions allow `Grep(*)` in a shared committed configstableclaude_settings
SEC378Cursor rule: redundant `globs` with `alwaysApply`Cursor rule frontmatter should not set `globs` when `alwaysApply` is `true`previewmarkdown
SEC379Cursor rule: unknown frontmatter keyCursor rule frontmatter contains an unknown keypreviewmarkdown
SEC380Cursor rule: missing `description`Cursor rule frontmatter should include `description`previewmarkdown
SEC381Claude settings: command hook missing `timeout`Claude settings command hook should set `timeout` in a shared committed configpreviewclaude_settings
SEC382Claude settings: `matcher` on unsupported hook eventClaude settings should not use `matcher` on unsupported hook eventspreviewclaude_settings
SEC383Claude settings: missing `matcher` on matcher-capable hook eventClaude settings should set `matcher` on matcher-capable hook eventspreviewclaude_settings
SEC384Claude settings: bare WebSearch permissionsClaude settings permissions allow bare `WebSearch` in a shared committed configstableclaude_settings
SEC385Claude settings: shared git push permissionsClaude settings permissions allow `Bash(git push)` in a shared committed configpreviewclaude_settings
SEC386Claude settings: shared git checkout permissionsClaude settings permissions allow `Bash(git checkout:*)` in a shared committed configpreviewclaude_settings
SEC387Claude settings: shared git commit permissionsClaude settings permissions allow `Bash(git commit:*)` in a shared committed configpreviewclaude_settings
SEC388Claude settings: shared git stash permissionsClaude settings permissions allow `Bash(git stash:*)` in a shared committed configpreviewclaude_settings
SEC389AI markdown: bare WebSearch tool grantAI-native markdown frontmatter grants bare `WebSearch` tool accesspreviewmarkdown
SEC399Claude settings: shared npx Bash permissionsClaude settings permissions allow `Bash(npx ...)` in a shared committed configpreviewclaude_settings
SEC400Claude settings: shared enabledMcpjsonServersClaude settings enable `enabledMcpjsonServers` in a shared committed configstableclaude_settings
SEC404AI markdown: bare WebFetch tool grantAI-native markdown frontmatter grants bare `WebFetch` tool accesspreviewmarkdown
SEC405Claude settings: shared package install permissionsClaude settings permissions allow package installation commands in a shared committed configstableclaude_settings
SEC406Claude settings: shared git add permissionsClaude settings permissions allow `Bash(git add:*)` in a shared committed configpreviewclaude_settings
SEC407Claude settings: shared git clone permissionsClaude settings permissions allow `Bash(git clone:*)` in a shared committed configpreviewclaude_settings
SEC408Claude settings: shared gh pr permissionsClaude settings permissions allow `Bash(gh pr:*)` in a shared committed configpreviewclaude_settings
SEC409Claude settings: shared git fetch permissionsClaude settings permissions allow `Bash(git fetch:*)` in a shared committed configpreviewclaude_settings
SEC410Claude settings: shared git ls-remote permissionsClaude settings permissions allow `Bash(git ls-remote:*)` in a shared committed configpreviewclaude_settings
SEC411Claude settings: shared curl permissionsClaude settings permissions allow `Bash(curl:*)` in a shared committed configstableclaude_settings
SEC412Claude settings: shared wget permissionsClaude settings permissions allow `Bash(wget:*)` in a shared committed configstableclaude_settings
SEC413Claude settings: shared git config permissionsClaude settings permissions allow `Bash(git config:*)` in a shared committed configstableclaude_settings
SEC414Claude settings: shared git tag permissionsClaude settings permissions allow `Bash(git tag:*)` in a shared committed configstableclaude_settings
SEC415Claude settings: shared git branch permissionsClaude settings permissions allow `Bash(git branch:*)` in a shared committed configstableclaude_settings
SEC416AI markdown: Claude bare pip installAI-native markdown models Claude package installation with bare `pip install` despite explicit `uv` preference guidancepreviewmarkdown
SEC417AI markdown: unpinned pip git installAI-native markdown installs Python packages from an unpinned `git+https://` sourcestablemarkdown
SEC418Claude settings: shared raw.githubusercontent.com WebFetch permissionsClaude settings permissions allow `WebFetch(domain:raw.githubusercontent.com)` in a shared committed configstableclaude_settings
SEC419AI markdown: `Bash(curl:*)` tool grantAI-native markdown frontmatter grants `Bash(curl:*)` authoritypreviewmarkdown
SEC420AI markdown: `Bash(wget:*)` tool grantAI-native markdown frontmatter grants `Bash(wget:*)` authoritypreviewmarkdown
SEC421AI markdown: `Bash(git clone:*)` tool grantAI-native markdown frontmatter grants `Bash(git clone:*)` authoritypreviewmarkdown
SEC428AI markdown: unsafe Read path grantAI-native markdown frontmatter grants `Read(...)` over an unsafe repo-external pathstablemarkdown
SEC429AI markdown: unsafe Write path grantAI-native markdown frontmatter grants `Write(...)` over an unsafe repo-external pathstablemarkdown
SEC430AI markdown: unsafe Edit path grantAI-native markdown frontmatter grants `Edit(...)` over an unsafe repo-external pathstablemarkdown
SEC431AI markdown: unsafe Glob path grantAI-native markdown frontmatter grants `Glob(...)` over an unsafe repo-external pathstablemarkdown
SEC432AI markdown: `Bash(git add:*)` tool grantAI-native markdown frontmatter grants `Bash(git add:*)` authoritystablemarkdown
SEC433AI markdown: `Bash(git fetch:*)` tool grantAI-native markdown frontmatter grants `Bash(git fetch:*)` authoritystablemarkdown
SEC434AI markdown: raw.githubusercontent.com WebFetch grantAI-native markdown frontmatter grants `WebFetch(domain:raw.githubusercontent.com)` authoritystablemarkdown
SEC435AI markdown: `Bash(git config:*)` tool grantAI-native markdown frontmatter grants `Bash(git config:*)` authoritystablemarkdown
SEC436AI markdown: `Bash(git tag:*)` tool grantAI-native markdown frontmatter grants `Bash(git tag:*)` authoritystablemarkdown
SEC437AI markdown: `Bash(git branch:*)` tool grantAI-native markdown frontmatter grants `Bash(git branch:*)` authoritystablemarkdown
SEC438AI markdown: `Bash(git reset:*)` tool grantAI-native markdown frontmatter grants `Bash(git reset:*)` authoritystablemarkdown
SEC439AI markdown: `Bash(git clean:*)` tool grantAI-native markdown frontmatter grants `Bash(git clean:*)` authoritystablemarkdown
SEC440AI markdown: `Bash(git restore:*)` tool grantAI-native markdown frontmatter grants `Bash(git restore:*)` authoritystablemarkdown
SEC441AI markdown: `Bash(git rebase:*)` tool grantAI-native markdown frontmatter grants `Bash(git rebase:*)` authoritystablemarkdown
SEC442AI markdown: `Bash(git merge:*)` tool grantAI-native markdown frontmatter grants `Bash(git merge:*)` authoritystablemarkdown
SEC443AI markdown: `Bash(git cherry-pick:*)` tool grantAI-native markdown frontmatter grants `Bash(git cherry-pick:*)` authoritystablemarkdown
SEC444AI markdown: `Bash(git apply:*)` tool grantAI-native markdown frontmatter grants `Bash(git apply:*)` authoritystablemarkdown
SEC445AI markdown: `Bash(git am:*)` tool grantAI-native markdown frontmatter grants `Bash(git am:*)` authoritystablemarkdown
SEC447AI markdown: package installation tool grantAI-native markdown frontmatter grants package installation authoritystablemarkdown
SEC448AI markdown: pip trusted-hostAI-native markdown installs Python packages with `--trusted-host`stablemarkdown
SEC449AI markdown: pip http indexAI-native markdown installs Python packages from an insecure `http://` package indexstablemarkdown
SEC450AI markdown: npm http registryAI-native markdown installs JavaScript packages from an insecure `http://` registrystablemarkdown
SEC451AI markdown: cargo http git installAI-native markdown installs Rust packages from an insecure `http://` git sourcestablemarkdown
SEC452AI markdown: cargo http indexAI-native markdown installs Rust packages from an insecure `http://` indexstablemarkdown
SEC453AI markdown: pip http sourceAI-native markdown installs Python packages from an insecure direct `http://` sourcestablemarkdown
SEC454AI markdown: npm http sourceAI-native markdown installs JavaScript packages from an insecure direct `http://` sourcestablemarkdown
SEC455AI markdown: pip http git installAI-native markdown installs Python packages from an insecure `git+http://` sourcestablemarkdown
SEC456AI markdown: pip http find-linksAI-native markdown installs Python packages with insecure `http://` find-linksstablemarkdown
SEC457AI markdown: js package strict-ssl falseAI-native markdown disables strict SSL verification for JavaScript package manager configstablemarkdown
SEC458AI markdown: pip config http indexAI-native markdown configures Python package resolution with an insecure `http://` package indexstablemarkdown
SEC459AI markdown: js package config http registryAI-native markdown configures a JavaScript package manager with an insecure `http://` registrystablemarkdown
SEC460AI markdown: pip config http find-linksAI-native markdown configures Python package discovery with insecure `http://` find-linksstablemarkdown
SEC461AI markdown: pip config trusted-hostAI-native markdown configures Python package resolution with `trusted-host`stablemarkdown
SEC462AI markdown: network TLS bypassAI-native markdown disables TLS verification for a network-capable commandstablemarkdown
SEC463AI markdown: `Bash(sudo:*)` tool grantAI-native markdown frontmatter grants `Bash(sudo:*)` authoritystablemarkdown
SEC464AI markdown: git http cloneAI-native markdown clones a Git repository from an insecure `http://` sourcestablemarkdown
SEC465AI markdown: git http remoteAI-native markdown configures a Git remote with an insecure `http://` sourcestablemarkdown
SEC466AI markdown: `Bash(rm:*)` tool grantAI-native markdown frontmatter grants `Bash(rm:*)` authoritystablemarkdown
SEC467AI markdown: `Bash(chmod:*)` tool grantAI-native markdown frontmatter grants `Bash(chmod:*)` authoritystablemarkdown
SEC468AI markdown: `Bash(chown:*)` tool grantAI-native markdown frontmatter grants `Bash(chown:*)` authoritystablemarkdown
SEC469AI markdown: `Bash(chgrp:*)` tool grantAI-native markdown frontmatter grants `Bash(chgrp:*)` authoritystablemarkdown
SEC470AI markdown: `Bash(su:*)` tool grantAI-native markdown frontmatter grants `Bash(su:*)` authoritystablemarkdown
SEC471AI markdown: git sslVerify falseAI-native markdown disables Git TLS verification with `http.sslVerify false`stablemarkdown
SEC472AI markdown: GIT_SSL_NO_VERIFYAI-native markdown disables Git TLS verification with `GIT_SSL_NO_VERIFY`stablemarkdown
SEC473AI markdown: git inline sslVerify falseAI-native markdown disables Git TLS verification with `git -c http.sslVerify=false`stablemarkdown
SEC475Claude settings: unsafe Read path permissionsClaude settings permissions allow `Read(...)` over an unsafe path in a shared committed configstableclaude_settings
SEC476Claude settings: unsafe Write path permissionsClaude settings permissions allow `Write(...)` over an unsafe path in a shared committed configstableclaude_settings
SEC477Claude settings: unsafe Edit path permissionsClaude settings permissions allow `Edit(...)` over an unsafe path in a shared committed configstableclaude_settings
SEC478Claude settings: shared git reset permissionsClaude settings permissions allow `Bash(git reset:*)` in a shared committed configpreviewclaude_settings
SEC479Claude settings: shared git clean permissionsClaude settings permissions allow `Bash(git clean:*)` in a shared committed configpreviewclaude_settings
SEC480Claude settings: shared git restore permissionsClaude settings permissions allow `Bash(git restore:*)` in a shared committed configpreviewclaude_settings
SEC481Claude settings: shared git rebase permissionsClaude settings permissions allow `Bash(git rebase:*)` in a shared committed configpreviewclaude_settings
SEC482Claude settings: shared git merge permissionsClaude settings permissions allow `Bash(git merge:*)` in a shared committed configpreviewclaude_settings
SEC483Claude settings: shared git cherry-pick permissionsClaude settings permissions allow `Bash(git cherry-pick:*)` in a shared committed configpreviewclaude_settings
SEC484Claude settings: shared git apply permissionsClaude settings permissions allow `Bash(git apply:*)` in a shared committed configpreviewclaude_settings
SEC485Claude settings: shared git am permissionsClaude settings permissions allow `Bash(git am:*)` in a shared committed configpreviewclaude_settings
SEC486Claude settings: unsafe Glob path permissionsClaude settings permissions allow `Glob(...)` over an unsafe path in a shared committed configstableclaude_settings
SEC487Claude settings: unsafe Grep path permissionsClaude settings permissions allow `Grep(...)` over an unsafe path in a shared committed configstableclaude_settings
SEC488Claude settings: shared uvx Bash permissionsClaude settings permissions allow `Bash(uvx ...)` in a shared committed configpreviewclaude_settings
SEC489Claude settings: shared pnpm dlx Bash permissionsClaude settings permissions allow `Bash(pnpm dlx ...)` in a shared committed configpreviewclaude_settings
SEC490Claude settings: shared yarn dlx Bash permissionsClaude settings permissions allow `Bash(yarn dlx ...)` in a shared committed configpreviewclaude_settings
SEC491Claude settings: shared pipx run Bash permissionsClaude settings permissions allow `Bash(pipx run ...)` in a shared committed configpreviewclaude_settings
SEC492Claude settings: shared npm exec Bash permissionsClaude settings permissions allow `Bash(npm exec ...)` in a shared committed configpreviewclaude_settings
SEC493Claude settings: shared bunx Bash permissionsClaude settings permissions allow `Bash(bunx ...)` in a shared committed configpreviewclaude_settings
SEC502Claude settings: shared gh api POST permissionsClaude settings permissions allow `Bash(gh api --method POST:*)` in a shared committed configstableclaude_settings
SEC503Claude settings: shared gh issue create permissionsClaude settings permissions allow `Bash(gh issue create:*)` in a shared committed configstableclaude_settings
SEC504Claude settings: shared gh repo create permissionsClaude settings permissions allow `Bash(gh repo create:*)` in a shared committed configstableclaude_settings
SEC508Claude settings: shared gh secret set permissionsClaude settings permissions allow `Bash(gh secret set:*)` in a shared committed configstableclaude_settings
SEC509Claude settings: shared gh variable set permissionsClaude settings permissions allow `Bash(gh variable set:*)` in a shared committed configstableclaude_settings
SEC510Claude settings: shared gh workflow run permissionsClaude settings permissions allow `Bash(gh workflow run:*)` in a shared committed configstableclaude_settings
SEC514Claude settings: shared gh secret delete permissionsClaude settings permissions allow `Bash(gh secret delete:*)` in a shared committed configstableclaude_settings
SEC515Claude settings: shared gh variable delete permissionsClaude settings permissions allow `Bash(gh variable delete:*)` in a shared committed configstableclaude_settings
SEC516Claude settings: shared gh workflow disable permissionsClaude settings permissions allow `Bash(gh workflow disable:*)` in a shared committed configstableclaude_settings
SEC520AI markdown: `Read(*)` wildcard tool grantAI-native markdown frontmatter grants `Read(*)` wildcard accessstablemarkdown
SEC521AI markdown: `Write(*)` wildcard tool grantAI-native markdown frontmatter grants `Write(*)` wildcard accessstablemarkdown
SEC522AI markdown: `Edit(*)` wildcard tool grantAI-native markdown frontmatter grants `Edit(*)` wildcard accessstablemarkdown
SEC523AI markdown: `Glob(*)` wildcard tool grantAI-native markdown frontmatter grants `Glob(*)` wildcard accessstablemarkdown
SEC524AI markdown: `Grep(*)` wildcard tool grantAI-native markdown frontmatter grants `Grep(*)` wildcard accessstablemarkdown
SEC525AI markdown: `WebFetch(*)` wildcard tool grantAI-native markdown frontmatter grants `WebFetch(*)` wildcard accessstablemarkdown
SEC526AI markdown: `WebSearch(*)` wildcard tool grantAI-native markdown frontmatter grants `WebSearch(*)` wildcard accessstablemarkdown
SEC527AI markdown: `Bash(*)` wildcard tool grantAI-native markdown frontmatter grants `Bash(*)` wildcard accessstablemarkdown
SEC528Claude settings: shared gh api DELETE permissionsClaude settings permissions allow `Bash(gh api --method DELETE:*)` in a shared committed configstableclaude_settings
SEC530Claude settings: shared gh api PATCH permissionsClaude settings permissions allow `Bash(gh api --method PATCH:*)` in a shared committed configstableclaude_settings
SEC531Claude settings: shared gh api PUT permissionsClaude settings permissions allow `Bash(gh api --method PUT:*)` in a shared committed configstableclaude_settings
SEC534Claude settings: shared gh repo delete permissionsClaude settings permissions allow `Bash(gh repo delete:*)` in a shared committed configstableclaude_settings
SEC536Claude settings: shared gh release delete permissionsClaude settings permissions allow `Bash(gh release delete:*)` in a shared committed configstableclaude_settings
SEC538Claude settings: shared gh repo edit permissionsClaude settings permissions allow `Bash(gh repo edit:*)` in a shared committed configstableclaude_settings
SEC540Claude settings: shared gh release create permissionsClaude settings permissions allow `Bash(gh release create:*)` in a shared committed configstableclaude_settings
SEC542Claude settings: shared gh repo transfer permissionsClaude settings permissions allow `Bash(gh repo transfer:*)` in a shared committed configstableclaude_settings
SEC544Claude settings: shared gh release upload permissionsClaude settings permissions allow `Bash(gh release upload:*)` in a shared committed configstableclaude_settings
SEC626Claude settings: bare Bash permissionsClaude settings permissions allow bare `Bash` in a shared committed configstableclaude_settings
SEC627Claude settings: bare Read permissionsClaude settings permissions allow bare `Read` in a shared committed configstableclaude_settings
SEC628Claude settings: bare Write permissionsClaude settings permissions allow bare `Write` in a shared committed configstableclaude_settings
SEC629Claude settings: bare Edit permissionsClaude settings permissions allow bare `Edit` in a shared committed configstableclaude_settings
SEC630Claude settings: bare Glob permissionsClaude settings permissions allow bare `Glob` in a shared committed configstableclaude_settings
SEC631Claude settings: bare Grep permissionsClaude settings permissions allow bare `Grep` in a shared committed configstableclaude_settings
SEC632Claude settings: bare WebFetch permissionsClaude settings permissions allow bare `WebFetch` in a shared committed configstableclaude_settings

What This Preset Enables ​

The preview preset enables deeper-review rules that expand coverage beyond the recommended default.

This lane can include two different shapes of shipped preview rule:

  • core preview rules that still look like part of the main product thesis
  • context-sensitive preview rules that are still useful, but need more domain-specific validation before they should be read as universal signals

When To Use It ​

Use it when you want wider discovery and are willing to review more contextual findings alongside the quiet default.

Tradeoffs ​

This preset can surface more noise than recommended; dedicated sidecar lanes like compat, guidance, governance, and advisory still stay explicit. It is still the main deeper-review lane, not a catch-all guidance bucket.