lintai docs

Appearance

Preset Reference

membership83 direct rules

skills

Rules for instruction and skills markdown that remain inside the core agent-artifact surface.

Membership preset: directly activates this rule set.

Coverage

Covered Rules

SEC101HTML comment: dangerous instructionsHidden HTML comment contains dangerous agent instructionspreviewmarkdown
SEC102Markdown: remote execution instructionMarkdown contains remote download-and-execute instruction outside code blockspreviewmarkdown
SEC103HTML comment: remote execution instructionHidden HTML comment contains remote download-and-execute instructionpreviewmarkdown
SEC104Markdown: base64 executable payloadMarkdown contains a base64-decoded executable payload outside code blockspreviewmarkdown
SEC105Markdown: parent-directory file accessMarkdown instructions reference parent-directory traversal for file accesspreviewmarkdown
SEC312Markdown: private key materialMarkdown contains committed private key materialstablemarkdown
SEC313Shell example: remote content piped to shellFenced shell example pipes remote content directly into a shellpreviewmarkdown
SEC335AI markdown: metadata-service accessAI-native markdown contains a direct cloud metadata-service access examplepreviewmarkdown
SEC347AI markdown: MCP via mutable package runnerAI-native markdown example launches MCP through a mutable package runnerpreviewmarkdown
SEC348AI markdown: mutable Docker imageAI-native markdown Docker example uses a mutable registry imagepreviewmarkdown
SEC349AI markdown: privileged Docker patternAI-native markdown Docker example uses a host-escape or privileged runtime patternpreviewmarkdown
SEC350Instruction markdown: untrusted content promotedInstruction markdown promotes untrusted external content to developer/system-level instructionspreviewmarkdown
SEC351AI instruction: disables user approvalAI-native instruction explicitly disables user approval or confirmationpreviewmarkdown
SEC352AI markdown: unscoped Bash tool grantAI-native markdown frontmatter grants unscoped Bash tool accessstablemarkdown
SEC355AI markdown: wildcard tool grantAI-native markdown frontmatter grants wildcard tool accesspreviewmarkdown
SEC356Plugin agent: `permissionMode` in frontmatterPlugin agent frontmatter sets `permissionMode`previewmarkdown
SEC357Plugin agent: `hooks` in frontmatterPlugin agent frontmatter sets `hooks`previewmarkdown
SEC358Plugin agent: `mcpServers` in frontmatterPlugin agent frontmatter sets `mcpServers`previewmarkdown
SEC359Cursor rule: `alwaysApply` typeCursor rule frontmatter `alwaysApply` must be booleanpreviewmarkdown
SEC360Cursor rule: `globs` typeCursor rule frontmatter `globs` must be a sequence of patternspreviewmarkdown
SEC378Cursor rule: redundant `globs` with `alwaysApply`Cursor rule frontmatter should not set `globs` when `alwaysApply` is `true`previewmarkdown
SEC379Cursor rule: unknown frontmatter keyCursor rule frontmatter contains an unknown keypreviewmarkdown
SEC380Cursor rule: missing `description`Cursor rule frontmatter should include `description`previewmarkdown
SEC389AI markdown: bare WebSearch tool grantAI-native markdown frontmatter grants bare `WebSearch` tool accesspreviewmarkdown
SEC404AI markdown: bare WebFetch tool grantAI-native markdown frontmatter grants bare `WebFetch` tool accesspreviewmarkdown
SEC416AI markdown: Claude bare pip installAI-native markdown models Claude package installation with bare `pip install` despite explicit `uv` preference guidancepreviewmarkdown
SEC417AI markdown: unpinned pip git installAI-native markdown installs Python packages from an unpinned `git+https://` sourcestablemarkdown
SEC419AI markdown: `Bash(curl:*)` tool grantAI-native markdown frontmatter grants `Bash(curl:*)` authoritypreviewmarkdown
SEC420AI markdown: `Bash(wget:*)` tool grantAI-native markdown frontmatter grants `Bash(wget:*)` authoritypreviewmarkdown
SEC421AI markdown: `Bash(git clone:*)` tool grantAI-native markdown frontmatter grants `Bash(git clone:*)` authoritypreviewmarkdown
SEC428AI markdown: unsafe Read path grantAI-native markdown frontmatter grants `Read(...)` over an unsafe repo-external pathstablemarkdown
SEC429AI markdown: unsafe Write path grantAI-native markdown frontmatter grants `Write(...)` over an unsafe repo-external pathstablemarkdown
SEC430AI markdown: unsafe Edit path grantAI-native markdown frontmatter grants `Edit(...)` over an unsafe repo-external pathstablemarkdown
SEC431AI markdown: unsafe Glob path grantAI-native markdown frontmatter grants `Glob(...)` over an unsafe repo-external pathstablemarkdown
SEC432AI markdown: `Bash(git add:*)` tool grantAI-native markdown frontmatter grants `Bash(git add:*)` authoritystablemarkdown
SEC433AI markdown: `Bash(git fetch:*)` tool grantAI-native markdown frontmatter grants `Bash(git fetch:*)` authoritystablemarkdown
SEC434AI markdown: raw.githubusercontent.com WebFetch grantAI-native markdown frontmatter grants `WebFetch(domain:raw.githubusercontent.com)` authoritystablemarkdown
SEC435AI markdown: `Bash(git config:*)` tool grantAI-native markdown frontmatter grants `Bash(git config:*)` authoritystablemarkdown
SEC436AI markdown: `Bash(git tag:*)` tool grantAI-native markdown frontmatter grants `Bash(git tag:*)` authoritystablemarkdown
SEC437AI markdown: `Bash(git branch:*)` tool grantAI-native markdown frontmatter grants `Bash(git branch:*)` authoritystablemarkdown
SEC438AI markdown: `Bash(git reset:*)` tool grantAI-native markdown frontmatter grants `Bash(git reset:*)` authoritystablemarkdown
SEC439AI markdown: `Bash(git clean:*)` tool grantAI-native markdown frontmatter grants `Bash(git clean:*)` authoritystablemarkdown
SEC440AI markdown: `Bash(git restore:*)` tool grantAI-native markdown frontmatter grants `Bash(git restore:*)` authoritystablemarkdown
SEC441AI markdown: `Bash(git rebase:*)` tool grantAI-native markdown frontmatter grants `Bash(git rebase:*)` authoritystablemarkdown
SEC442AI markdown: `Bash(git merge:*)` tool grantAI-native markdown frontmatter grants `Bash(git merge:*)` authoritystablemarkdown
SEC443AI markdown: `Bash(git cherry-pick:*)` tool grantAI-native markdown frontmatter grants `Bash(git cherry-pick:*)` authoritystablemarkdown
SEC444AI markdown: `Bash(git apply:*)` tool grantAI-native markdown frontmatter grants `Bash(git apply:*)` authoritystablemarkdown
SEC445AI markdown: `Bash(git am:*)` tool grantAI-native markdown frontmatter grants `Bash(git am:*)` authoritystablemarkdown
SEC447AI markdown: package installation tool grantAI-native markdown frontmatter grants package installation authoritystablemarkdown
SEC448AI markdown: pip trusted-hostAI-native markdown installs Python packages with `--trusted-host`stablemarkdown
SEC449AI markdown: pip http indexAI-native markdown installs Python packages from an insecure `http://` package indexstablemarkdown
SEC450AI markdown: npm http registryAI-native markdown installs JavaScript packages from an insecure `http://` registrystablemarkdown
SEC451AI markdown: cargo http git installAI-native markdown installs Rust packages from an insecure `http://` git sourcestablemarkdown
SEC452AI markdown: cargo http indexAI-native markdown installs Rust packages from an insecure `http://` indexstablemarkdown
SEC453AI markdown: pip http sourceAI-native markdown installs Python packages from an insecure direct `http://` sourcestablemarkdown
SEC454AI markdown: npm http sourceAI-native markdown installs JavaScript packages from an insecure direct `http://` sourcestablemarkdown
SEC455AI markdown: pip http git installAI-native markdown installs Python packages from an insecure `git+http://` sourcestablemarkdown
SEC456AI markdown: pip http find-linksAI-native markdown installs Python packages with insecure `http://` find-linksstablemarkdown
SEC457AI markdown: js package strict-ssl falseAI-native markdown disables strict SSL verification for JavaScript package manager configstablemarkdown
SEC458AI markdown: pip config http indexAI-native markdown configures Python package resolution with an insecure `http://` package indexstablemarkdown
SEC459AI markdown: js package config http registryAI-native markdown configures a JavaScript package manager with an insecure `http://` registrystablemarkdown
SEC460AI markdown: pip config http find-linksAI-native markdown configures Python package discovery with insecure `http://` find-linksstablemarkdown
SEC461AI markdown: pip config trusted-hostAI-native markdown configures Python package resolution with `trusted-host`stablemarkdown
SEC462AI markdown: network TLS bypassAI-native markdown disables TLS verification for a network-capable commandstablemarkdown
SEC463AI markdown: `Bash(sudo:*)` tool grantAI-native markdown frontmatter grants `Bash(sudo:*)` authoritystablemarkdown
SEC464AI markdown: git http cloneAI-native markdown clones a Git repository from an insecure `http://` sourcestablemarkdown
SEC465AI markdown: git http remoteAI-native markdown configures a Git remote with an insecure `http://` sourcestablemarkdown
SEC466AI markdown: `Bash(rm:*)` tool grantAI-native markdown frontmatter grants `Bash(rm:*)` authoritystablemarkdown
SEC467AI markdown: `Bash(chmod:*)` tool grantAI-native markdown frontmatter grants `Bash(chmod:*)` authoritystablemarkdown
SEC468AI markdown: `Bash(chown:*)` tool grantAI-native markdown frontmatter grants `Bash(chown:*)` authoritystablemarkdown
SEC469AI markdown: `Bash(chgrp:*)` tool grantAI-native markdown frontmatter grants `Bash(chgrp:*)` authoritystablemarkdown
SEC470AI markdown: `Bash(su:*)` tool grantAI-native markdown frontmatter grants `Bash(su:*)` authoritystablemarkdown
SEC471AI markdown: git sslVerify falseAI-native markdown disables Git TLS verification with `http.sslVerify false`stablemarkdown
SEC472AI markdown: GIT_SSL_NO_VERIFYAI-native markdown disables Git TLS verification with `GIT_SSL_NO_VERIFY`stablemarkdown
SEC473AI markdown: git inline sslVerify falseAI-native markdown disables Git TLS verification with `git -c http.sslVerify=false`stablemarkdown
SEC520AI markdown: `Read(*)` wildcard tool grantAI-native markdown frontmatter grants `Read(*)` wildcard accessstablemarkdown
SEC521AI markdown: `Write(*)` wildcard tool grantAI-native markdown frontmatter grants `Write(*)` wildcard accessstablemarkdown
SEC522AI markdown: `Edit(*)` wildcard tool grantAI-native markdown frontmatter grants `Edit(*)` wildcard accessstablemarkdown
SEC523AI markdown: `Glob(*)` wildcard tool grantAI-native markdown frontmatter grants `Glob(*)` wildcard accessstablemarkdown
SEC524AI markdown: `Grep(*)` wildcard tool grantAI-native markdown frontmatter grants `Grep(*)` wildcard accessstablemarkdown
SEC525AI markdown: `WebFetch(*)` wildcard tool grantAI-native markdown frontmatter grants `WebFetch(*)` wildcard accessstablemarkdown
SEC526AI markdown: `WebSearch(*)` wildcard tool grantAI-native markdown frontmatter grants `WebSearch(*)` wildcard accessstablemarkdown
SEC527AI markdown: `Bash(*)` wildcard tool grantAI-native markdown frontmatter grants `Bash(*)` wildcard accessstablemarkdown

What This Preset Enables ​

The skills preset scopes coverage to markdown-based instruction surfaces that belong to the core agent-artifact lane.

When To Use It ​

Use it when your primary trust boundary is repo-local agent instructions and skills.

Tradeoffs ​

It does not broaden non-markdown coverage by itself, and sidecar lanes like guidance or governance stay separate even when the file surface is markdown.