CAIN-42 CAIN StudioThe checks
| Check | Severity |
|---|---|
| Injected instructions or install commands in ANY text field of the manifest | CRITICAL |
| Code: shell, dynamic code, secrets, exfiltration, reverse shells, persistence | CRITICAL / HIGH |
| A shell or code-execution tool (recognised through paths, .exe and interpreter names) | HIGH |
| A wildcard memory region, or a sensitive one (credentials, secrets, vaults, keys, cloud, ssh, env) | HIGH |
| The CRITICAL privilege tier | MEDIUM (a person reviews it) |
| An unknown privilege tier | refused |
No skill is exempt because of its own skill_id: until today a skill that called itself
onepassword_vault could read the vault and grade CLEAN.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.