docs / reference/rule-ids
Rule IDs
The complete index of rule identifiers in the active bundle.
Secrets
| RULE ID | SEVERITY | ENGINE |
|---|---|---|
| HARDCODED_AWS_KEY | critical | regex |
| HARDCODED_PRIVATE_KEY | critical | regex |
| HARDCODED_GITHUB_TOKEN | critical | regex |
| HARDCODED_GITHUB_PAT | critical | regex |
| HARDCODED_STRIPE_KEY | critical | regex |
| HARDCODED_GCP_KEY | critical | regex |
| HARDCODED_OPENAI_KEY | critical | regex |
| HARDCODED_ANTHROPIC_KEY | critical | regex |
| HARDCODED_RAZORPAY_KEY | critical | regex |
| HARDCODED_SECRET_GENERIC | critical | regex (CLI only — lookaheads) |
| HARDCODED_GENERIC_SECRET | high | regex |
Injection
| RULE ID | SEVERITY | ENGINE |
|---|---|---|
| PROMPT_INJECTION_STATIC | high | regex |
| PROMPT_INJECTION_PATTERN | high | regex |
| SQL_INJECTION_RISK | high | regex + ast |
| COMMAND_INJECTION_RISK | high | regex + ast |
Deserialisation & unsafe ops
| RULE ID | SEVERITY | ENGINE |
|---|---|---|
| DANGEROUS_DESERIALISATION | high | ast |
| UNSAFE_YAML_LOAD | high | ast |
MCP & AI security
| RULE ID | SEVERITY | ENGINE |
|---|---|---|
| MCP_TOOL_POISONING | critical | ast |
| MCP_SERVER_NETWORK_EXPOSURE | critical | regex |
| MCP_CONFIG_RUG_PULL_RISK | high | regex |
| HIDDEN_INSTRUCTION_IN_COMMENT | high | regex |
| VIBE_CODING_XSS_RISK | high | regex |