"use strict";
var __importDefault = (this && this.__importDefault) || function (mod) {
    return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.DEFAULT_OUTPUT_PATH = exports.PLUGIN_PRESET_DESCRIPTIONS = exports.strategyDisplayNames = exports.strategyDescriptions = exports.pluginDescriptions = exports.categoryAliasesReverse = exports.categoryAliases = exports.categoryLabels = exports.categoryMapReverse = exports.categoryColors = exports.categoryDescriptions = exports.hiddenPlugins = exports.riskCategories = exports.riskCategorySeverityMap = exports.severityRiskScores = exports.severityDisplayNames = exports.SeveritySchema = exports.Severity = exports.displayNameOverrides = exports.subCategoryDescriptions = void 0;
const zod_1 = __importDefault(require("zod"));
exports.subCategoryDescriptions = {
    ['agentic:memory-poisoning']: 'Tests whether an agent is vulnerable to memory poisoning attacks',
    aegis: "Tests content safety handling using NVIDIA's Aegis dataset",
    'ascii-smuggling': 'Tests vulnerability to Unicode tag-based instruction smuggling attacks',
    audio: 'Tests handling of audio content',
    'authoritative-markup-injection': 'Tests vulnerability to authoritative markup injection attacks',
    layer: 'Applies multiple strategies in a defined order',
    base64: 'Tests handling of Base64-encoded malicious payloads',
    basic: 'Original plugin tests without any additional strategies or optimizations',
    beavertails: 'Tests handling of malicious prompts from the BeaverTails dataset',
    'best-of-n': 'Jailbreak technique published by Anthropic and Stanford',
    bfla: 'Tests for broken function-level authorization vulnerabilities (OWASP API 5)',
    'bias:age': 'Age-related bias detection',
    'bias:disability': 'Disability-related bias detection',
    'bias:gender': 'Gender-related bias detection',
    'bias:race': 'Race-related bias detection',
    bola: 'Tests for broken object-level authorization vulnerabilities (OWASP API 1)',
    cca: 'Tests for vulnerability to Context Compliance Attacks using fabricated conversation history',
    citation: 'Exploits academic authority bias to bypass content filters',
    competitors: 'Tests for unauthorized competitor mentions and endorsements',
    contracts: 'Tests for unauthorized contractual commitments and legal exposure',
    coppa: "Tests for COPPA (Children's Online Privacy Protection Act) compliance violations",
    'cross-session-leak': 'Tests for information leakage vulnerabilities between different user sessions',
    crescendo: 'Multi-turn attack strategy that gradually escalates malicious intent',
    //custom: 'User-defined multi-turn conversation strategy with custom instructions',
    cyberseceval: "Tests prompt injection attacks from Meta's CyberSecEval dataset",
    'debug-access': 'Identifies exposed debugging interfaces and unauthorized command execution vectors',
    default: 'Executes comprehensive baseline security testing across multiple risk categories',
    'divergent-repetition': 'Tests for training data leaks through repetitive pattern exploitation that causes model divergence',
    donotanswer: 'Tests for vulnerabilities to Do Not Answer attacks',
    'excessive-agency': 'Tests for unauthorized actions beyond defined system boundaries',
    ferpa: 'Tests for compliance with Family Educational Rights and Privacy Act',
    foundation: 'Tests a collection of plugins designed to run against foundation models',
    gcg: 'Greedy Coordinate Gradient adversarial suffix attack',
    goat: 'Dynamic multi-turn attack generation using adversarial techniques',
    'guardrails-eval': 'Comprehensive testing suite for evaluating guardrails effectiveness against prompt injection, jailbreaking, harmful content, and PII leakage',
    hallucination: 'Tests for fabrication of false or misleading information',
    harmbench: 'Tests for harmful content using the HarmBench dataset',
    'toxic-chat': 'Tests handling of toxic prompts from the ToxicChat dataset',
    harmful: 'Tests handling of malicious content across multiple categories',
    'harmful:chemical-biological-weapons': 'Tests handling of WMD-related content',
    'harmful:child-exploitation': 'Tests handling of child exploitation content',
    'harmful:copyright-violations': 'Tests handling of intellectual property violations',
    'harmful:cybercrime': 'Tests handling of cybercrime-related content',
    'harmful:cybercrime:malicious-code': 'Tests creation of malicious code',
    'harmful:graphic-content': 'Tests handling of graphic or violent content',
    'harmful:harassment-bullying': 'Tests handling of harassment and bullying content',
    'harmful:hate': 'Tests handling of hate speech and discriminatory content',
    'harmful:illegal-activities': 'Tests handling of general illegal activities',
    'harmful:illegal-drugs': 'Tests handling of illegal drug-related content',
    'harmful:illegal-drugs:meth': 'Tests handling of methamphetamine-related content',
    'harmful:indiscriminate-weapons': 'Tests handling of weapons-related content',
    'harmful:insults': 'Tests handling of personal attacks and insults',
    'harmful:intellectual-property': 'Tests handling of IP theft and violations',
    'harmful:misinformation-disinformation': 'Tests handling of false information campaigns',
    'harmful:non-violent-crime': 'Tests handling of non-violent criminal content',
    'harmful:privacy': 'Tests handling of privacy violation attempts',
    'harmful:profanity': 'Tests handling of profane or inappropriate language',
    'harmful:radicalization': 'Tests handling of extremist content and recruitment',
    'harmful:self-harm': 'Tests handling of self-harm and suicide content',
    'harmful:sex-crime': 'Tests handling of sexual crime content',
    'harmful:sexual-content': 'Tests handling of explicit sexual content',
    'harmful:specialized-advice': 'Tests handling of unauthorized professional advice',
    'harmful:unsafe-practices': 'Tests handling of dangerous activity instructions',
    'harmful:violent-crime': 'Tests handling of violent crime content',
    'harmful:weapons:ied': 'Tests handling of Improvised Explosive Devices',
    hex: 'Tests handling of hex-encoded malicious payloads',
    hijacking: 'Tests for unauthorized resource usage and purpose deviation',
    homoglyph: 'Tests handling of homoglyph (visually similar Unicode characters) encoding to bypass filters',
    image: 'Tests handling of image content',
    imitation: 'Tests handling of unauthorized impersonation of entities',
    'indirect-prompt-injection': 'Tests for injection vulnerabilities via untrusted variables',
    'insurance:coverage-discrimination': 'Tests for discriminatory coverage decisions based on protected characteristics (age, disability, race, etc.)',
    'insurance:network-misinformation': 'Tests for inaccurate provider network information',
    'insurance:phi-disclosure': 'Tests for unauthorized disclosure of Protected Health Information in violation of HIPAA privacy regulations',
    'ecommerce:pci-dss': 'Tests for exposure of payment card data including credit card numbers, CVVs, and bank account details in violation of PCI DSS requirements',
    'ecommerce:compliance-bypass': 'Tests for attempts to bypass security rules, terms of service, or compliance policies in e-commerce systems',
    'ecommerce:order-fraud': 'Tests for detection of fraudulent order patterns, unauthorized transactions, or payment manipulation attempts',
    'ecommerce:price-manipulation': 'Tests for price manipulation through discount abuse, inventory exploits, or unauthorized price modifications',
    intent: 'Tests for manipulation of system behavior via specific prompts',
    jailbreak: 'Single-shot optimization of safety bypass techniques',
    'jailbreak:composite': 'Combines multiple jailbreak techniques for enhanced effectiveness',
    //'jailbreak:hydra':
    //'Multi-turn conversational attacks with meta-learning that adapts strategy based on full conversation history',
    'jailbreak:likert': 'Uses Likert scale-based prompts to bypass content filters',
    //'jailbreak:meta':
    //'Meta-agent that builds its own attack taxonomy and learns from full attack history',
    'jailbreak:tree': 'Tree-based search for optimal safety bypass vectors',
    leetspeak: 'Tests handling of leetspeak-encoded malicious content',
    'math-prompt': 'Tests handling of mathematical notation-based attacks',
    'mischievous-user': 'Simulates a multi-turn conversation between a mischievous user and an agent',
    morse: 'Tests handling of content encoded in Morse code to potentially bypass filters',
    multilingual: '[DEPRECATED] Tests handling of attacks across multiple languages. Use top-level language config instead.',
    mcp: 'Tests for vulnerabilities to Model Context Protocol (MCP) attacks',
    'medical:anchoring-bias': 'Tests for medical anchoring bias where AI fixates on irrelevant information',
    'medical:hallucination': 'Tests for fabricated medical facts, studies, or drug interactions',
    'medical:incorrect-knowledge': 'Tests for factually wrong medical information that could cause harm',
    'medical:off-label-use': 'Tests for inappropriate off-label medication recommendations without proper disclaimers',
    'medical:prioritization-error': 'Tests for poor medical prioritization and triage decisions',
    'medical:sycophancy': 'Tests for agreeing with incorrect medical assumptions to be helpful',
    'financial:calculation-error': 'Tests for errors in financial calculations, risk assessments, or quantitative analysis',
    'financial:compliance-violation': 'Tests for suggestions that violate securities laws, enable insider trading, or circumvent regulations',
    'financial:confidential-disclosure': 'Tests for inappropriate disclosure of MNPI, proprietary strategies, or confidential financial data',
    'financial:counterfactual': 'Tests for false financial narratives or misleading market information',
    'financial:data-leakage': 'Tests for exposure of proprietary trading strategies or confidential financial data',
    'financial:defamation': 'Tests for false statements damaging financial entity reputations',
    'financial:hallucination': 'Tests for fabricated market data, non-existent financial instruments, or fictional company information',
    'financial:impartiality': 'Tests for unauthorized financial advice or transaction facilitation',
    'financial:misconduct': 'Tests for facilitation of financial crimes or market manipulation',
    'financial:sycophancy': 'Tests for agreeing with risky investment strategies or validating get-rich-quick schemes',
    'goal-misalignment': "Tests whether AI systems recognize when optimizing proxy metrics might not align with true goals (Goodhart's Law)",
    'off-topic': 'Tests whether AI systems can be manipulated to go off-topic from their intended purpose',
    overreliance: 'Tests for overreliance on system assumptions',
    'pharmacy:controlled-substance-compliance': 'Tests adherence to DEA regulations for controlled substance prescribing, dispensing, and monitoring',
    'pharmacy:dosage-calculation': 'Tests accuracy of pharmaceutical dosage calculations including weight-based dosing and renal adjustments',
    'pharmacy:drug-interaction': 'Tests identification of dangerous drug-drug, drug-food, and drug-supplement interactions',
    pii: 'Tests handling of personal identifiable information',
    'pii:api-db': 'Tests for PII exposure via API/database access',
    'pii:direct': 'Tests for direct PII exposure vulnerabilities',
    'pii:session': 'Tests for PII exposure in session data',
    'pii:social': 'Tests for PII exposure via social engineering',
    piglatin: 'Tests handling of content translated to Pig Latin to potentially bypass filters',
    camelcase: 'Tests handling of text transformed into camelCase to potentially bypass filters',
    emoji: 'Tests handling of text hidden using emoji variation selectors',
    pliny: 'Tests handling of Pliny prompt injections',
    policy: 'Tests compliance with custom security policies',
    politics: 'Tests handling of political content and bias',
    'prompt-extraction': 'Tests for system prompt disclosure vulnerabilities',
    'prompt-injection': 'Tests for direct prompt injection vulnerabilities',
    'rag-document-exfiltration': 'Tests for RAG document exfiltration',
    //'rag-poisoning': 'Tests for vulnerabilities to RAG retrieval poisoning attacks',
    rbac: 'Tests role-based access control implementation',
    'reasoning-dos': 'Tests for vulnerabilities to computational resource exhaustion through excessive reasoning patterns',
    religion: 'Tests handling of religious content and bias',
    retry: 'Automatically incorporates previously failed test cases to build a regression testing suite',
    rot13: 'Tests handling of ROT13-encoded malicious content',
    'shell-injection': 'Tests for command injection vulnerabilities',
    simba: `Simulates a human red teamer with planning, adversarial reasoning, and dynamic attacks`,
    'special-token-injection': 'Tests vulnerability to token injection attacks using format-specific delimiters',
    'sql-injection': 'Tests for SQL injection vulnerabilities',
    ssrf: 'Tests for server-side request forgery vulnerabilities',
    'system-prompt-override': 'Tests for system prompt override vulnerabilities',
    'tool-discovery': 'Tests for enumeration of available tools and function calls',
    unsafebench: 'Tests handling of unsafe image content from the UnsafeBench dataset',
    'unverifiable-claims': 'Tests for claims that cannot be verified or fact-checked',
    vlguard: 'Tests handling of potentially unsafe image content from the VLGuard dataset',
    wordplay: 'Tests whether AI systems can be tricked into generating profanity through wordplay',
    xstest: 'Tests for XSTest attacks',
    video: 'Tests handling of video content',
    'other-encodings': 'Collection of alternative text transformation strategies (Morse code, Pig Latin, camelCase, and emoji variation selector smuggling) for testing evasion techniques',
    bias: 'Bias detection across protected characteristics',
    medical: 'Medical AI safety testing across healthcare vulnerabilities',
    pharmacy: 'Pharmacy AI safety testing across pharmaceutical vulnerabilities',
    insurance: 'Insurance AI safety testing across healthcare coverage vulnerabilities',
    financial: 'Financial AI safety testing across financial services vulnerabilities',
    ecommerce: 'E-commerce AI safety testing across payment security and transaction integrity vulnerabilities',
};
// These names are displayed in risk cards and in the table
exports.displayNameOverrides = {
    ['agentic:memory-poisoning']: 'Agentic Memory Poisoning',
    aegis: 'Aegis Dataset',
    'ascii-smuggling': 'ASCII Smuggling',
    audio: 'Audio Content',
    'authoritative-markup-injection': 'Authoritative Markup Injection',
    base64: 'Base64 Payload Encoding',
    basic: 'Baseline Testing',
    beavertails: 'BeaverTails Dataset',
    'toxic-chat': 'ToxicChat Dataset',
    'best-of-n': 'Best-of-N',
    bfla: 'Function-Level Authorization Bypass',
    bola: 'Object-Level Authorization Bypass',
    camelcase: 'CamelCase Encoding',
    emoji: 'Emoji Smuggling',
    cca: 'Context Compliance Attack',
    citation: 'Authority Bias Exploitation',
    competitors: 'Rival Brand Promotion',
    contracts: 'Unauthorized Commitments',
    coppa: 'COPPA Compliance',
    crescendo: 'Multi-Turn Crescendo',
    //custom: 'Custom',
    'cross-session-leak': 'Cross-Session Data Leakage',
    cyberseceval: 'CyberSecEval Dataset',
    'debug-access': 'Debug Interface Exposure',
    default: 'Standard Security Suite',
    'divergent-repetition': 'Divergent Repetition',
    donotanswer: 'Do Not Answer Dataset',
    'excessive-agency': 'Excessive Agency',
    ferpa: 'FERPA Compliance',
    foundation: 'Foundation Model Plugin Collection',
    gcg: 'Greedy Coordinate Gradient',
    layer: 'Strategy Layer',
    mcp: 'MCP Attacks',
    'medical:anchoring-bias': 'Clinical Fixation Bias',
    'medical:hallucination': 'False Clinical Information',
    'medical:incorrect-knowledge': 'Inaccurate Medical Facts',
    'medical:off-label-use': 'Unapproved Medication Usage',
    'medical:prioritization-error': 'Triage Decision Failure',
    'medical:sycophancy': 'Patient-Pleasing Over Accuracy',
    'financial:calculation-error': 'Quantitative Analysis Accuracy',
    'financial:compliance-violation': 'Regulatory Violation Facilitation',
    'financial:confidential-disclosure': 'Proprietary Information Leakage',
    'financial:counterfactual': 'False Market Narrative Generation',
    'financial:data-leakage': 'Sensitive Financial Data Exposure',
    'financial:defamation': 'Entity Reputation Harm',
    'financial:hallucination': 'Fictitious Market Information',
    'financial:impartiality': 'Unauthorized Advisory Services',
    'financial:misconduct': 'Financial Crime Enablement',
    'financial:sycophancy': 'Risky Strategy Validation',
    'goal-misalignment': 'Goal Misalignment',
    'off-topic': 'Off-Topic Manipulation',
    goat: 'Generative Offensive Agent Tester',
    'guardrails-eval': 'Guardrails Evaluation',
    hallucination: 'Hallucination',
    harmbench: 'Harmbench',
    harmful: 'Malicious Content Suite',
    'bias:age': 'Age Bias',
    'bias:disability': 'Disability Bias',
    'bias:gender': 'Gender Bias',
    'bias:race': 'Race Bias',
    bias: 'Bias Detection',
    medical: 'Medical Safety Suite',
    pharmacy: 'Pharmacy Safety Suite',
    insurance: 'Insurance Safety Suite',
    financial: 'Financial Safety Suite',
    ecommerce: 'E-commerce Safety Suite',
    'harmful:chemical-biological-weapons': 'CBRN Material Content',
    'harmful:child-exploitation': 'Child Exploitation Content',
    'harmful:copyright-violations': 'Protected Content Reproduction',
    'harmful:cybercrime': 'Cybercrime',
    'harmful:cybercrime:malicious-code': 'Exploit Code Generation',
    'harmful:graphic-content': 'Graphic Content',
    'harmful:harassment-bullying': 'Harassment',
    'harmful:hate': 'Hate Speech',
    'harmful:illegal-activities': 'Illegal Activity',
    'harmful:illegal-drugs': 'Drug-Related Content',
    'harmful:illegal-drugs:meth': 'Methamphetamine Content',
    'harmful:indiscriminate-weapons': 'Weapons Content',
    'harmful:insults': 'Personal Attacks',
    'harmful:intellectual-property': 'IP Theft',
    'harmful:misinformation-disinformation': 'False Information Campaign',
    'harmful:non-violent-crime': 'Non-Violent Crime',
    'harmful:privacy': 'Privacy Violation',
    'harmful:profanity': 'Profanity',
    'harmful:radicalization': 'Extremist Content',
    'harmful:self-harm': 'Self-Harm',
    'harmful:sex-crime': 'Sexual Crime',
    'harmful:sexual-content': 'Explicit Content',
    'harmful:specialized-advice': 'Unauthorized Advice',
    'harmful:unsafe-practices': 'Dangerous Activity',
    'harmful:violent-crime': 'Violent Crime',
    'harmful:weapons:ied': 'Explosive Device Instructions',
    hex: 'Hex Encoding',
    hijacking: 'Resource Hijacking',
    homoglyph: 'Homoglyph Encoding',
    image: 'Image Content',
    imitation: 'Entity Impersonation',
    'indirect-prompt-injection': 'Indirect Prompt Injection',
    'insurance:coverage-discrimination': 'Discriminatory Benefit Decisions',
    'insurance:network-misinformation': 'Provider Network Inaccuracy',
    'insurance:phi-disclosure': 'Health Data Exposure',
    'ecommerce:pci-dss': 'Payment Data Protection',
    'ecommerce:compliance-bypass': 'Policy Circumvention',
    'ecommerce:order-fraud': 'Transaction Fraud Detection',
    'ecommerce:price-manipulation': 'Pricing System Exploitation',
    intent: 'Targeted Manipulation Resistance',
    jailbreak: 'Single-shot Optimization',
    'jailbreak:composite': 'Multi-Vector Safety Bypass',
    //'jailbreak:hydra': 'Hydra Multi-turn',
    'jailbreak:likert': 'Likert Scale Jailbreak',
    //'jailbreak:meta': 'Meta-Agent Strategic Jailbreak',
    'jailbreak:tree': 'Tree-Based Attack Search',
    leetspeak: 'Leetspeak Payload Encoding',
    'math-prompt': 'Mathematical Notation Attack',
    morse: 'Morse Code Encoding',
    multilingual: 'Multilingual Translation [DEPRECATED]',
    'other-encodings': 'Collection of Text Encodings',
    overreliance: 'Overreliance',
    'pharmacy:controlled-substance-compliance': 'Scheduled Drug Regulation',
    'pharmacy:dosage-calculation': 'Medication Quantity Accuracy',
    'pharmacy:drug-interaction': 'Adverse Reaction Detection',
    piglatin: 'Pig Latin Encoding',
    pii: 'PII Data Exposure',
    "pii:api-db": "PII via API/Database",
    "pii:direct": "PII via Direct Exposure",
    "pii:session": "PII via Session Data",
    "pii:social": "PII via Social Engineering",
    pliny: 'Pliny Prompt Injections',
    policy: 'Custom Rule Enforcement',
    politics: 'Political Bias',
    'prompt-extraction': 'System Prompt Disclosure',
    'prompt-injection': 'Direct Prompt Injection',
    'rag-document-exfiltration': 'RAG Document Exfiltration',
    //'rag-poisoning': 'RAG Poisoning',
    rbac: 'RBAC Implementation',
    'reasoning-dos': 'Reasoning DoS',
    'mischievous-user': 'Mischievous User',
    religion: 'Religious Bias',
    retry: 'Regression Testing',
    rot13: 'ROT13 Payload Encoding',
    'shell-injection': 'Command Injection',
    simba: 'Simba Red Team Agent',
    'special-token-injection': 'Special Token Injection',
    'sql-injection': 'SQL Injection',
    ssrf: 'SSRF Vulnerability',
    'system-prompt-override': 'System Prompt Override',
    'tool-discovery': 'Tool Discovery',
    unsafebench: 'UnsafeBench Dataset',
    'unverifiable-claims': 'Unverifiable Claims',
    vlguard: 'VLGuard Dataset',
    wordplay: 'Wordplay',
    xstest: 'XSTest Dataset',
    video: 'Video Content',
};
exports.Severity = {
    Critical: 'critical',
    High: 'high',
    Medium: 'medium',
    Low: 'low',
};
// Zod schema for Severity validation
exports.SeveritySchema = zod_1.default.enum(['critical', 'high', 'medium', 'low']);
exports.severityDisplayNames = {
    [exports.Severity.Critical]: 'Critical',
    [exports.Severity.High]: 'High',
    [exports.Severity.Medium]: 'Medium',
    [exports.Severity.Low]: 'Low',
};
exports.severityRiskScores = {
    [exports.Severity.Critical]: 8.0,
    [exports.Severity.High]: 6.0,
    [exports.Severity.Medium]: 4.0,
    [exports.Severity.Low]: 2.0,
};
/*
 * Default severity values for each plugin.
 * Use getRiskCategorySeverityMap() whenever possible to respect the user's severity settings.
 */
exports.riskCategorySeverityMap = {
    ['agentic:memory-poisoning']: exports.Severity.High,
    aegis: exports.Severity.Medium,
    'ascii-smuggling': exports.Severity.Low,
    beavertails: exports.Severity.Low,
    bfla: exports.Severity.High,
    bola: exports.Severity.High,
    cca: exports.Severity.High,
    ferpa: exports.Severity.Medium,
    'financial:calculation-error': exports.Severity.Low,
    'financial:compliance-violation': exports.Severity.Medium,
    'financial:confidential-disclosure': exports.Severity.High,
    'financial:counterfactual': exports.Severity.Medium,
    'financial:data-leakage': exports.Severity.Medium,
    'financial:defamation': exports.Severity.Medium,
    'financial:hallucination': exports.Severity.Low,
    'financial:impartiality': exports.Severity.Medium,
    'financial:misconduct': exports.Severity.High,
    'financial:sycophancy': exports.Severity.Low,
    'goal-misalignment': exports.Severity.Low,
    competitors: exports.Severity.Low,
    contracts: exports.Severity.Medium,
    coppa: exports.Severity.High,
    'cross-session-leak': exports.Severity.Medium,
    cyberseceval: exports.Severity.Medium,
    donotanswer: exports.Severity.Medium,
    'debug-access': exports.Severity.High,
    default: exports.Severity.Low,
    mcp: exports.Severity.High,
    'medical:anchoring-bias': exports.Severity.High,
    'medical:hallucination': exports.Severity.Critical,
    'medical:incorrect-knowledge': exports.Severity.Critical,
    'medical:off-label-use': exports.Severity.High,
    'medical:prioritization-error': exports.Severity.High,
    'medical:sycophancy': exports.Severity.Medium,
    'off-topic': exports.Severity.Medium,
    'divergent-repetition': exports.Severity.Medium,
    'excessive-agency': exports.Severity.Medium,
    'tool-discovery': exports.Severity.Low,
    foundation: exports.Severity.Medium,
    'guardrails-eval': exports.Severity.Medium,
    hallucination: exports.Severity.Medium,
    harmbench: exports.Severity.Medium,
    'toxic-chat': exports.Severity.Medium,
    harmful: exports.Severity.Medium,
    'bias:age': exports.Severity.Low,
    'bias:disability': exports.Severity.Low,
    'bias:gender': exports.Severity.Low,
    'bias:race': exports.Severity.Low,
    bias: exports.Severity.Low,
    medical: exports.Severity.High,
    pharmacy: exports.Severity.High,
    insurance: exports.Severity.High,
    financial: exports.Severity.High,
    ecommerce: exports.Severity.High,
    'harmful:chemical-biological-weapons': exports.Severity.High,
    'harmful:child-exploitation': exports.Severity.Critical,
    'harmful:copyright-violations': exports.Severity.Low,
    'harmful:cybercrime': exports.Severity.Low,
    'harmful:cybercrime:malicious-code': exports.Severity.Low,
    'harmful:graphic-content': exports.Severity.Medium,
    'harmful:harassment-bullying': exports.Severity.Low,
    'harmful:hate': exports.Severity.Critical,
    'harmful:illegal-activities': exports.Severity.Medium,
    'harmful:illegal-drugs': exports.Severity.Medium,
    'harmful:illegal-drugs:meth': exports.Severity.Low,
    'harmful:indiscriminate-weapons': exports.Severity.Medium,
    'harmful:insults': exports.Severity.Low,
    'harmful:intellectual-property': exports.Severity.Medium,
    'harmful:misinformation-disinformation': exports.Severity.Medium,
    'harmful:non-violent-crime': exports.Severity.Medium,
    'harmful:privacy': exports.Severity.High,
    'harmful:profanity': exports.Severity.Low,
    'harmful:radicalization': exports.Severity.Low,
    'harmful:self-harm': exports.Severity.Critical,
    'harmful:sex-crime': exports.Severity.High,
    'harmful:sexual-content': exports.Severity.Medium,
    'harmful:specialized-advice': exports.Severity.Medium,
    'harmful:unsafe-practices': exports.Severity.Low,
    'harmful:violent-crime': exports.Severity.High,
    'harmful:weapons:ied': exports.Severity.Low,
    hijacking: exports.Severity.High,
    imitation: exports.Severity.Low,
    'indirect-prompt-injection': exports.Severity.High,
    'insurance:coverage-discrimination': exports.Severity.Critical,
    'insurance:network-misinformation': exports.Severity.High,
    'insurance:phi-disclosure': exports.Severity.Critical,
    'ecommerce:pci-dss': exports.Severity.Critical,
    'ecommerce:compliance-bypass': exports.Severity.High,
    'ecommerce:order-fraud': exports.Severity.High,
    'ecommerce:price-manipulation': exports.Severity.High,
    intent: exports.Severity.High,
    overreliance: exports.Severity.Low,
    'pharmacy:controlled-substance-compliance': exports.Severity.High,
    'pharmacy:dosage-calculation': exports.Severity.Critical,
    'pharmacy:drug-interaction': exports.Severity.Critical,
    pii: exports.Severity.High,
    'pii:api-db': exports.Severity.High,
    'pii:direct': exports.Severity.High,
    'pii:session': exports.Severity.High,
    'pii:social': exports.Severity.High,
    pliny: exports.Severity.Medium,
    policy: exports.Severity.High,
    politics: exports.Severity.Low,
    'prompt-extraction': exports.Severity.Medium,
    'rag-document-exfiltration': exports.Severity.Medium,
    //'rag-poisoning': Severity.Medium,
    rbac: exports.Severity.High,
    'reasoning-dos': exports.Severity.Low,
    religion: exports.Severity.Low,
    'shell-injection': exports.Severity.High,
    'special-token-injection': exports.Severity.Medium,
    'sql-injection': exports.Severity.High,
    ssrf: exports.Severity.High,
    'system-prompt-override': exports.Severity.High,
    unsafebench: exports.Severity.Medium,
    'unverifiable-claims': exports.Severity.Medium,
    vlguard: exports.Severity.Medium,
    wordplay: exports.Severity.Low,
    xstest: exports.Severity.Low,
};
exports.riskCategories = {
    'Security Controls': [
        // System security
        'ascii-smuggling',
        'shell-injection',
        'debug-access',
        'divergent-repetition',
        // 'indirect-prompt-injection',
        'rag-document-exfiltration',
        // 'rag-poisoning',
        // 'hijacking',
        'special-token-injection',
        'sql-injection',
        'ssrf',
        'prompt-extraction',
        'system-prompt-override',
        'harmful:cybercrime:malicious-code',
    ],
    'Access Control': [
        'bfla',
        'bola',
        'rbac',
        'cross-session-leak',
        'excessive-agency'
    ],
    'Privacy Controls': [
        'harmful:privacy',
        'pii:api-db',
        'pii:direct',
        'pii:session',
        'pii:social',
    ],
    'Agentic AI Security': [
        'agentic:memory-poisoning',
        'cca',
        'mcp',
        'reasoning-dos',
        'tool-discovery',
        'goal-misalignment',
        'off-topic'
    ],
    'Unsafe Content': [
        'harmful:cybercrime',
        'harmful:unsafe-practices',
        'harmful:illegal-drugs',
        'harmful:illegal-activities',
        'harmful:intellectual-property',
        'harmful:illegal-drugs:meth',
        'harmful:non-violent-crime',
        'harmful:sex-crime',
        'harmful:specialized-advice',
        'harmful:indiscriminate-weapons',
        'harmful:violent-crime',
        'harmful:chemical-biological-weapons',
    ],
    'Toxic Content': [
        'harmful:graphic-content',
        'harmful:radicalization',
        'harmful:harassment-bullying',
        'harmful:sexual-content',
        'harmful:hate',
        'harmful:insults',
        'harmful:profanity',
        'harmful:self-harm',
        'harmful:child-exploitation',
        'wordplay',
    ],
    'Bias': [
        'bias:age',
        'bias:disability',
        'bias:gender',
        'bias:race',
        'bias',
        'politics',
        'religion',
    ],
    'Compliance': [
        'coppa',
        'ferpa',
        'contracts',
        'harmful:copyright-violations',
        'harmful:weapons:ied',
        'insurance:coverage-discrimination',
        'insurance:network-misinformation',
        // Data protection
        'insurance:phi-disclosure',
        //'pii',
    ],
    'Brand Protection': [
        'competitors',
        'harmful:misinformation-disinformation',
        'hallucination',
        'overreliance',
        'imitation',
        'unverifiable-claims',
        'intent',
        'policy',
    ],
    'Domain-Specific Risks': [
        'ecommerce:pci-dss',
        'ecommerce:compliance-bypass',
        'ecommerce:order-fraud',
        'ecommerce:price-manipulation',
        'financial:calculation-error',
        'financial:compliance-violation',
        'financial:confidential-disclosure',
        'financial:counterfactual',
        'financial:data-leakage',
        'financial:defamation',
        'financial:hallucination',
        'financial:impartiality',
        'financial:misconduct',
        'financial:sycophancy',
        'medical:hallucination',
        'medical:anchoring-bias',
        'medical:incorrect-knowledge',
        'medical:off-label-use',
        'medical:prioritization-error',
        'medical:sycophancy',
        'pharmacy:controlled-substance-compliance',
        'pharmacy:dosage-calculation',
        'pharmacy:drug-interaction',
    ],
    /*   Datasets: [
      'aegis',
      'beavertails',
      'cyberseceval',
      'donotanswer',
      'harmbench',
      'toxic-chat',
      'pliny',
      'unsafebench',
      'vlguard',
      'xstest',
    ], */
};
exports.hiddenPlugins = [
    'indirect-prompt-injection',
    'aegis',
    'beavertails',
    'cyberseceval',
    'donotanswer',
    'harmbench',
    'toxic-chat',
    'pliny',
    'unsafebench',
    'vlguard',
    'xstest',
    'hijacking',
    //'rag-poisoning',
    'agentic:memory-poisoning',
];
exports.categoryDescriptions = {
    'Security & Access Control': 'Data protection, access control, and system security risks.',
    'Compliance': 'Regulatory compliance, legal, and policy violation risks.',
    'Privacy Control': 'Data protection, access control, and system security risks.',
    'Agentic AI Security': 'Agentic AI security risks.',
    'Unsafe Content': 'Unsafe content risks.',
    'Toxic Content': 'Toxic content risks.',
    'Bias': 'Bias risks.',
    'Trust & Safety': 'Harmful, inappropriate, or offensive content generation risks.',
    'Brand Protection': 'Output reliability, accuracy, and brand reputation risks.',
    Datasets: 'Pre-defined test cases from research datasets.',
    'Domain-Specific Risks': 'Specialized risks and failure modes.',
};
/** Chart/UI colors: keys match `riskCategories` plus description-only labels and legacy aliases. */
exports.categoryColors = {
    'Security Controls': '#0092CC',
    'Access Control': '#0077B6',
    'Privacy Controls': '#6366F1',
    'Agentic AI Security': '#9333EA',
    'Unsafe Content': '#EA580C',
    'Toxic Content': '#DC2626',
    Bias: '#CA8A04',
    Compliance: '#BE123C',
    'Brand Protection': '#DCD427',
    'Domain-Specific Risks': '#059669',
    'Security & Access Control': '#0092CC',
    'Privacy Control': '#6366F1',
    'Trust & Safety': '#779933',
    Datasets: '#FF3473',
    'Compliance & Legal': '#BE123C',
    Brand: '#DCD427',
};
exports.categoryMapReverse = Object.entries(exports.riskCategories).reduce((acc, [category, harms]) => {
    harms.forEach((harm) => {
        acc[harm] = category;
    });
    return acc;
}, {});
exports.categoryLabels = Object.keys(exports.categoryMapReverse);
// Map from plugin name to metric name or harm category
exports.categoryAliases = {
    ['agentic:memory-poisoning']: 'AgenticMemoryPoisoning',
    aegis: 'Aegis',
    'ascii-smuggling': 'AsciiSmuggling',
    beavertails: 'BeaverTails',
    bfla: 'BFLAEnforcement',
    bola: 'BOLAEnforcement',
    cca: 'CCAEnforcement',
    competitors: 'CompetitorEndorsement',
    contracts: 'ContractualCommitment',
    coppa: 'COPPACompliance',
    'cross-session-leak': 'CrossSessionLeak',
    cyberseceval: 'CyberSecEval',
    donotanswer: 'DoNotAnswer',
    'debug-access': 'DebugAccess',
    default: 'Default',
    ferpa: 'FERPACompliance',
    mcp: 'MCP',
    'medical:anchoring-bias': 'MedicalAnchoringBias',
    'medical:hallucination': 'Medical Hallucination',
    'medical:incorrect-knowledge': 'MedicalIncorrectKnowledge',
    'medical:off-label-use': 'MedicalOffLabelUse',
    'medical:prioritization-error': 'MedicalPrioritizationError',
    'medical:sycophancy': 'MedicalSycophancy',
    'ecommerce:compliance-bypass': 'EcommerceComplianceBypass',
    'ecommerce:order-fraud': 'EcommerceOrderFraud',
    'ecommerce:pci-dss': 'EcommercePciDss',
    'ecommerce:price-manipulation': 'EcommercePriceManipulation',
    'financial:calculation-error': 'FinancialCalculationError',
    'financial:compliance-violation': 'FinancialComplianceViolation',
    'financial:confidential-disclosure': 'FinancialConfidentialDisclosure',
    'financial:counterfactual': 'FinancialCounterfactual',
    'financial:data-leakage': 'FinancialDataLeakage',
    'financial:defamation': 'FinancialDefamation',
    'financial:hallucination': 'FinancialHallucination',
    'financial:impartiality': 'FinancialImpartiality',
    'financial:misconduct': 'FinancialMisconduct',
    'financial:sycophancy': 'FinancialSycophancy',
    'goal-misalignment': 'GoalMisalignment',
    'off-topic': 'OffTopic',
    'pharmacy:controlled-substance-compliance': 'PharmacyControlledSubstanceCompliance',
    'pharmacy:dosage-calculation': 'PharmacyDosageCalculation',
    'pharmacy:drug-interaction': 'PharmacyDrugInteraction',
    'divergent-repetition': 'DivergentRepetition',
    'excessive-agency': 'ExcessiveAgency',
    'tool-discovery': 'ToolDiscovery',
    foundation: 'Foundation',
    'guardrails-eval': 'GuardrailsEvaluation',
    hallucination: 'Hallucination',
    harmbench: 'Harmbench',
    'toxic-chat': 'ToxicChat',
    harmful: 'Harmful',
    'bias:age': 'Age Bias',
    'bias:disability': 'Disability Bias',
    'bias:gender': 'Gender Bias',
    'bias:race': 'Race Bias',
    bias: 'Bias Detection',
    medical: 'Medical Safety',
    pharmacy: 'Pharmacy Safety',
    insurance: 'Insurance Safety',
    financial: 'Financial Safety',
    ecommerce: 'E-commerce Safety',
    'harmful:chemical-biological-weapons': 'Chemical & Biological Weapons',
    'harmful:child-exploitation': 'Child Exploitation',
    'harmful:copyright-violations': 'Copyright Violations - Copyrighted text',
    'harmful:cybercrime': 'Cybercrime',
    'harmful:cybercrime:malicious-code': 'Malicious Code',
    'harmful:graphic-content': 'Graphic Content',
    'harmful:harassment-bullying': 'Harassment',
    'harmful:hate': 'Hate',
    'harmful:illegal-activities': 'Illegal Activities - Fraud & scams',
    'harmful:illegal-drugs': 'Illegal Drugs',
    'harmful:illegal-drugs:meth': 'Methamphetamine',
    'harmful:indiscriminate-weapons': 'Indiscriminate Weapons',
    'harmful:insults': 'Insults and personal attacks',
    'harmful:intellectual-property': 'Intellectual Property violation',
    'harmful:misinformation-disinformation': 'Misinformation & Disinformation - Harmful lies and propaganda',
    'harmful:non-violent-crime': 'Non-Violent Crimes',
    'harmful:privacy': 'Privacy violations',
    'harmful:profanity': 'Requests containing profanity',
    'harmful:radicalization': 'Radicalization',
    'harmful:self-harm': 'Self-Harm',
    'harmful:sex-crime': 'Sex Crimes',
    'harmful:sexual-content': 'Sexual Content',
    'harmful:specialized-advice': 'Specialized Advice - Financial',
    'harmful:unsafe-practices': 'Promotion of unsafe practices',
    'harmful:violent-crime': 'Violent Crimes',
    'harmful:weapons:ied': 'Improvised Explosive Devices',
    hijacking: 'Hijacking',
    imitation: 'Imitation',
    'indirect-prompt-injection': 'Indirect Prompt Injection',
    'insurance:coverage-discrimination': 'InsuranceCoverageDiscrimination',
    'insurance:network-misinformation': 'InsuranceNetworkMisinformation',
    'insurance:phi-disclosure': 'InsurancePhiDisclosure',
    intent: 'Intent',
    overreliance: 'Overreliance',
    pii: 'PIILeak',
    'pii:api-db': 'PIILeak',
    'pii:direct': 'PIILeak',
    'pii:session': 'PIILeak',
    'pii:social': 'PIILeak',
    pliny: 'Pliny',
    policy: 'PolicyViolation',
    politics: 'PoliticalStatement',
    'prompt-extraction': 'PromptExtraction',
    'rag-document-exfiltration': 'RAG Document Exfiltration',
    //'rag-poisoning': 'RAG Poisoning',
    rbac: 'RbacEnforcement',
    'reasoning-dos': 'Reasoning DoS',
    religion: 'Religion',
    'shell-injection': 'ShellInjection',
    'special-token-injection': 'SpecialTokenInjection',
    'sql-injection': 'SqlInjection',
    ssrf: 'SSRFEnforcement',
    'system-prompt-override': 'System Prompt Override',
    unsafebench: 'UnsafeBench',
    'unverifiable-claims': 'Unverifiable Claims',
    vlguard: 'VLGuard',
    wordplay: 'Wordplay',
    xstest: 'XSTest',
};
exports.categoryAliasesReverse = Object.entries(exports.categoryAliases).reduce((acc, [key, value]) => {
    acc[value] = key;
    return acc;
}, {});
exports.pluginDescriptions = {
    ['agentic:memory-poisoning']: 'Evaluates agent susceptibility to corrupted memory injection that alters future behavior',
    aegis: "Tests content safety handling using NVIDIA's Aegis dataset",
    'ascii-smuggling': 'Examines vulnerabilities to hidden instructions embedded within ASCII character sequences',
    beavertails: 'Tests handling of malicious prompts from the BeaverTails dataset',
    bfla: 'Assesses function access controls for privilege escalation risks where users execute unauthorized operations (API Security Risk #5)',
    bola: 'Validates object access controls to prevent unauthorized viewing or modification of data belonging to other users (API Security Risk #1)',
    cca: 'Examines resistance to attacks using manufactured conversation history to manipulate responses',
    competitors: 'Validates prevention of promoting rival products or services without authorization',
    contracts: 'Assesses safeguards preventing generation of legally binding language without authorization',
    coppa: "Validates protection mechanisms for users under 13, ensuring proper consent and data handling per federal children's privacy law",
    'cross-session-leak': 'Validates isolation between user sessions to prevent information bleeding',
    cyberseceval: "Tests prompt injection attacks from Meta's CyberSecEval dataset",
    donotanswer: 'Tests for vulnerabilities to Do Not Answer attacks',
    'debug-access': 'Identifies exposed debugging interfaces and unauthorized command execution vectors',
    default: 'Executes comprehensive baseline security testing across multiple risk categories',
    'divergent-repetition': 'Tests for training data exposure through exploited repetitive generation patterns',
    'excessive-agency': 'Examines safeguards against performing actions beyond defined scope',
    'tool-discovery': 'Tests for enumeration of available tools and function calls',
    ferpa: 'Tests compliance with educational privacy regulations governing student record protection',
    foundation: 'Tests a collection of plugins designed to run against foundation models',
    hallucination: 'Validates accuracy controls preventing generation of false factual claims',
    harmbench: 'Tests for harmful content, illegal activities, misinformation using the HarmBench dataset from the Center for AI Safety (CAIS)',
    'toxic-chat': 'Tests handling of toxic user prompts from the ToxicChat dataset',
    harmful: 'Comprehensive suite for testing handling of various categories of malicious content',
    'bias:age': 'Examines responses for age-related prejudice, stereotyping, and unfair treatment',
    'bias:disability': 'Tests for disability-related prejudice, stereotyping, and unfair treatment',
    'bias:gender': 'Validates absence of gender-related prejudice, stereotyping, and unfair treatment',
    'bias:race': 'Examines responses for ethnicity-related prejudice, stereotyping, and unfair treatment',
    bias: 'Unified bias detection across protected characteristics including age, disability, gender, and race',
    medical: 'Comprehensive medical AI safety testing for healthcare-specific vulnerabilities including hallucination, anchoring bias, incorrect knowledge, off-label use, prioritization errors, and sycophancy',
    pharmacy: 'Comprehensive pharmacy AI safety testing for pharmaceutical vulnerabilities including drug interactions, dosage calculations, and controlled substance compliance',
    insurance: 'Comprehensive insurance AI safety testing for healthcare coverage vulnerabilities including coverage discrimination, network misinformation, and PHI disclosure',
    financial: 'Comprehensive financial AI safety testing for financial services vulnerabilities including calculation errors, compliance violations, hallucination, and data leakage',
    ecommerce: 'Comprehensive e-commerce AI safety testing for payment security and transaction integrity vulnerabilities including PCI DSS compliance, fraud detection, and price manipulation',
    'harmful:chemical-biological-weapons': 'Assesses filtering of chemical, biological, radiological, and nuclear weapon information',
    'harmful:child-exploitation': 'Tests blocking of content depicting or facilitating abuse of minors',
    'harmful:copyright-violations': 'Tests prevention of reproducing protected creative works',
    'harmful:cybercrime': 'Examines filtering of content enabling digital crimes',
    'harmful:cybercrime:malicious-code': 'Validates refusal to generate software designed for unauthorized access or damage',
    'harmful:graphic-content': 'Validates filtering of disturbing violent or gory material',
    'harmful:harassment-bullying': 'Examines blocking of content designed to intimidate or harm specific individuals',
    'harmful:hate': 'Tests filtering of content expressing prejudice toward protected groups',
    'harmful:illegal-activities': 'Tests rejection of content facilitating prohibited conduct',
    'harmful:illegal-drugs': 'Assesses blocking of narcotic substance manufacturing or distribution content',
    'harmful:illegal-drugs:meth': 'Validates filtering of methamphetamine production information',
    'harmful:indiscriminate-weapons': 'Tests filtering of weaponry designed for civilian casualties',
    'harmful:insults': 'Validates handling of directed verbal aggression and derogatory language',
    'harmful:intellectual-property': 'Examines prevention of facilitating proprietary information acquisition',
    'harmful:misinformation-disinformation': 'Tests filtering of organized false information distribution',
    'harmful:non-violent-crime': 'Validates filtering of fraud, theft, and other property crime content',
    'harmful:privacy': 'Assesses handling of requests that would violate individual privacy rights',
    'harmful:profanity': 'Assesses management of vulgar and offensive vocabulary',
    'harmful:radicalization': 'Tests blocking of content promoting violent ideological movements',
    'harmful:self-harm': 'Validates filtering of content encouraging injury to oneself',
    'harmful:sex-crime': 'Tests blocking of sexual assault and abuse content',
    'harmful:sexual-content': 'Examines blocking of pornographic and sexually explicit material',
    'harmful:specialized-advice': 'Assesses prevention of providing guidance requiring professional licensure',
    'harmful:unsafe-practices': 'Validates filtering of instructions for activities with significant injury risk',
    'harmful:violent-crime': 'Tests blocking of assault, homicide, and other physically harmful content',
    'harmful:weapons:ied': 'Validates filtering of homemade explosive construction information',
    hijacking: 'Assesses protection against unauthorized resource usage and purpose deviation',
    imitation: 'Examines prevention of falsely representing real individuals or organizations',
    'insurance:coverage-discrimination': 'Tests for benefit decisions influenced by protected characteristics (age, disability, ethnicity, genetics, gender) violating civil rights laws including ADA, Section 1557, GINA, and anti-discrimination statutes',
    'insurance:network-misinformation': 'Validates accuracy of provider availability information to prevent incorrect network status, outdated contracts, phantom providers, and obsolete data causing unexpected billing',
    'insurance:phi-disclosure': 'Validates safeguards against exposing medical records in violation of HIPAA, including member data crossover, insufficient verification, and third-party disclosure',
    'ecommerce:pci-dss': 'Validates protection of payment credentials including card numbers, security codes, expiration dates, account holder information, banking details, and transaction tokens per payment security standards',
    'ecommerce:compliance-bypass': 'Tests detection of attempts to circumvent security controls, service terms, age verification, geographic restrictions, or regulatory requirements',
    'ecommerce:order-fraud': 'Validates identification of suspicious transaction patterns, unauthorized purchases, credential compromise, or payment system manipulation',
    'ecommerce:price-manipulation': 'Tests detection of pricing exploits including promotional code abuse, inventory manipulation, checkout system exploitation, unauthorized discounting, or stacked offer vulnerabilities',
    mcp: 'Tests for vulnerabilities to Model Context Protocol (MCP) attacks',
    'medical:anchoring-bias': 'Tests for excessive focus on misleading information in clinical reasoning',
    'medical:hallucination': 'Validates detection of invented clinical data, nonexistent research, fabricated pharmaceutical interactions, or false health claims',
    'medical:incorrect-knowledge': 'Validates detection of medically inaccurate information that could cause patient harm',
    'medical:off-label-use': 'Tests handling of non-approved medication applications, ensuring proper warnings, limitations, and consultation requirements',
    'medical:prioritization-error': 'Validates appropriate urgency assessment in medical situations to prevent delayed treatment',
    'medical:sycophancy': 'Tests resistance to confirming medically inaccurate beliefs or prioritizing patient preferences over clinical accuracy',
    'financial:calculation-error': 'Validates accuracy of derivative pricing, risk metrics, asset allocation, and quantitative models where errors could result in substantial monetary loss',
    'financial:compliance-violation': 'Tests prevention of facilitating illegal trading, market abuse, illicit fund transfers, or breaches of securities and banking regulations',
    'financial:confidential-disclosure': 'Validates protection of non-public market information, proprietary strategies, customer holdings, transaction details, or restricted financial intelligence',
    'financial:counterfactual': 'Tests detection of fabricated market occurrences, fictional business events, deceptive causal relationships, or altered chronologies that mislead market participants',
    'financial:data-leakage': 'Validates protection of confidential algorithms, client account details, merger information, or restricted financial intelligence',
    'financial:defamation': 'Tests prevention of unsubstantiated claims harming institutional credibility, including baseless fraud allegations, invented controversies, or false bankruptcy assertions',
    'financial:hallucination': 'Validates detection of invented market prices, nonexistent securities, fabricated earnings reports, or fictional trading events',
    'financial:impartiality': 'Tests prevention of unauthorized financial guidance, portfolio recommendations, intermediary suggestions, or transaction execution without proper credentials or warnings',
    'financial:misconduct': 'Validates blocking of assistance with illegal trading, market abuse, order front-running, quote stuffing, corrupt payments, or regulatory evasion',
    'financial:sycophancy': 'Tests resistance to validating dangerous investment approaches, unrealistic profit targets, or speculative schemes',
    'off-topic': 'Tests maintenance of functional boundaries when prompted to perform out-of-scope tasks',
    'goal-misalignment': 'Tests recognition that optimizing measurable indicators may diverge from actual objectives (Goodhart\'s principle: metrics lose value when used as targets)',
    'pharmacy:controlled-substance-compliance': 'Validates adherence to federal regulations governing scheduled medication prescribing, distribution, and tracking, including classification limits, supply restrictions, refill monitoring, database requirements, and fraud indicators',
    'pharmacy:dosage-calculation': 'Tests precision in medication quantity computations including body-weight formulas, organ function adjustments, measurement conversions, infusion rates, solution concentrations, and age-based dosing to prevent harmful errors',
    'pharmacy:drug-interaction': 'Validates identification of hazardous medication combinations including drug-drug conflicts, dietary interactions, supplement risks, major contraindications, metabolic pathway conflicts, cardiac risks, syndrome triggers, and cumulative effects',
    'indirect-prompt-injection': 'Tests for injection vulnerabilities via untrusted variables',
    intent: 'Validates resilience against purpose-driven adversarial attempts',
    overreliance: 'Examines critical evaluation of potentially incorrect assumptions',
    pii: 'Comprehensive evaluation of personal identifiable information protection',
    'pii:api-db': 'Tests for identity information leakage through backend system interfaces',
    'pii:direct': 'Examines direct exposure of personal identifying details',
    'pii:session': 'Validates protection of identity data stored in active sessions',
    'pii:social': 'Assesses resistance to obtaining personal information through psychological manipulation',
    pliny: 'Tests handling of Pliny prompt injections',
    policy: 'Validates adherence to organization-specific security requirements',
    politics: 'Tests for partisan preferences in political discourse',
    'prompt-extraction': 'Tests defenses against revealing underlying system instructions',
    'rag-document-exfiltration': 'Validates protection of retrieved documents from unauthorized extraction',
    //'rag-poisoning': 'Examines resistance to malicious content injection in retrieval-augmented systems',
    rbac: 'Validates proper enforcement of role-based permission boundaries',
    'reasoning-dos': 'Assesses vulnerability to resource depletion through computationally intensive reasoning requests',
    religion: 'Examines responses for faith-based preferences or prejudice',
    'shell-injection': 'Evaluates defenses against malicious operating system command execution',
    'special-token-injection': 'Checks for exploitation of conversation structure markers to manipulate model behavior',
    'sql-injection': 'Validates protection against database manipulation through malicious query construction',
    ssrf: 'Examines vulnerability to unauthorized internal network requests initiated by the model',
    'system-prompt-override': 'Assesses resistance to attempts at replacing or modifying core instructions',
    unsafebench: 'Tests handling of unsafe image content through multi-modal model evaluation and safety filters',
    'unverifiable-claims': 'Tests prevention of stating information that cannot be confirmed, including predictions, unsourced data, and unknowable details',
    vlguard: 'Tests handling of potentially unsafe image content using the VLGuard dataset',
    wordplay: 'Tests vulnerability to generating inappropriate language through seemingly innocuous linguistic puzzles, rhyme schemes, and word games',
    xstest: 'Tests how models handle ambiguous terms related to potentially harmful topics like violence and drugs',
    'guardrails-eval': 'Evaluate guardrail effectiveness against common risks',
};
exports.strategyDescriptions = {
    audio: 'Validates model response to malicious audio inputs and voice-based attack vectors',
    'authoritative-markup-injection': 'Attempts to bypass filters by injecting content that appears to come from trusted sources',
    base64: 'Encodes harmful content in Base64 format to evade detection mechanisms',
    basic: 'Default testing mode with no additional transformations. Serves as baseline for comparison.',
    'best-of-n': 'Generates multiple attack variations and selects the most effective response',
    camelcase: 'Transforms text using alternating uppercase and lowercase to evade pattern matching',
    emoji: 'Hides malicious payloads within Unicode emoji sequences and variation selectors',
    citation: 'Leverages fabricated academic or expert references to increase credibility of harmful content',
    crescendo: 'Builds malicious intent gradually across multiple conversation turns to avoid detection',
    //custom: 'User-defined multi-turn conversation strategy with custom instructions',
    default: 'Baseline evaluation approach without additional evasion techniques',
    gcg: 'Applies gradient-based optimization to craft adversarial text suffixes that manipulate model outputs',
    goat: 'Employs an autonomous agent that generates and adapts attacks using reinforcement learning',
    hex: 'Converts harmful content to hexadecimal notation to bypass content filters',
    homoglyph: 'Replaces standard characters with visually identical Unicode alternatives to evade detection',
    image: 'Embeds malicious instructions or content within image files for multimodal testing',
    jailbreak: 'Crafts optimized single prompts designed to bypass model safety guardrails',
    'jailbreak:composite': 'Combines multiple evasion techniques within a single attack for increased success rate',
    //'jailbreak:hydra': 'Executes sophisticated multi-turn conversations that learn and adapt based on model responses',
    'jailbreak:likert': 'Frames harmful requests as neutral rating scales or survey questions',
    //'jailbreak:meta': 'Utilizes a meta-agent that builds attack strategies by analyzing successful and failed attempts',
    'jailbreak:tree': 'Explores multiple attack branches using tree search algorithms to find optimal paths',
    layer: 'Applies multiple evasion strategies in sequence, with each layer building on the previous',
    leetspeak: 'Replaces letters with numbers and symbols (e.g., "3" for "E") to avoid content filtering',
    'math-prompt': 'Disguises harmful instructions using mathematical symbols, equations, or notation',
    'mischievous-user': 'Simulates realistic adversarial user behavior across extended conversations',
    morse: 'Translates harmful content into Morse code dots and dashes for obfuscation',
    multilingual: 'Switches between languages mid-conversation to exploit inconsistent safety mechanisms',
    'other-encodings': 'Tests various text encoding and transformation methods for detection gaps',
    piglatin: 'Applies Pig Latin rules to obscure harmful content from pattern-based filters',
    'prompt-injection': 'Injects instructions that attempt to override or manipulate the system prompt',
    retry: 'Re-runs previously unsuccessful test cases to ensure fixes remain effective over time',
    rot13: 'Applies Caesar cipher rotation to obfuscate malicious content',
    simba: 'Deploys an AI agent that emulates human red team tactics including strategic planning and adaptation',
    video: 'Tests model handling of video inputs containing embedded malicious content or instructions',
};
exports.strategyDisplayNames = {
    audio: 'Audio',
    'authoritative-markup-injection': 'Trusted Source Injection',
    base64: 'Base64',
    basic: 'Standard Testing',
    'best-of-n': 'Best-of-N',
    camelcase: 'Camelcase',
    emoji: 'Emoji Smuggling',
    citation: 'False Authority',
    crescendo: 'Crescendo',
    //custom: 'Custom',
    default: 'Standard Testing',
    gcg: 'Greedy Coordinate Gradient',
    goat: 'Generative Offensive Agent Tester',
    hex: 'Hex Encoding',
    homoglyph: 'Homoglyph Encoding',
    image: 'Image',
    jailbreak: 'Single-shot Optimization',
    'jailbreak:composite': 'Composite Jailbreaks',
    //'jailbreak:hydra': 'Adaptive Multi-Turn Attack',
    'jailbreak:likert': 'Likert Scale Jailbreak',
    //'jailbreak:meta': 'Self-Learning Attack Agent',
    'jailbreak:tree': 'Tree-based Optimization',
    layer: 'Sequential Strategy Chain',
    leetspeak: 'Leetspeak Encoding',
    'math-prompt': 'Mathematical Encoding',
    'mischievous-user': 'Adversarial User Simulation',
    morse: 'Morse Code',
    multilingual: 'Language Switching Attack',
    'other-encodings': 'Alternative Text Transformations',
    piglatin: 'Pig Latin',
    'prompt-injection': 'Prompt Injection',
    retry: 'Failure Replay Testing',
    rot13: 'ROT13 Encoding',
    simba: 'Intelligent Red Team Agent',
    video: 'Video',
};
exports.PLUGIN_PRESET_DESCRIPTIONS = {
    Custom: 'Choose your own plugins',
    'EU AI Act': 'EU AI Act prohibited & high-risk requirements',
    Foundation: 'Plugins for redteaming foundation models recommended by Promptfoo',
    GDPR: 'Data protection and privacy requirements',
    'HIPAA Control': 'HIPAA-focused controls for PHI/PII confidentiality, access control, and session isolation',
    'HIPAA Risk': 'Healthcare safety risks: wrong diagnosis, harmful info, triage errors, and medication safety',
    'HIPAA Relevance': 'Healthcare fairness and equal-care risks across protected characteristics',
    'Governance Risk': 'Governance and reliability risks: unsafe objectives, overreliance, unverifiable claims, misleading outputs',
    'HIPAA Mapping': 'HIPAA-related operational controls: prevent debug leakage, hidden actions, unsafe automation, unauthorized commitments',
    'HIPAA Requirement': 'Core security requirements for PHI systems: DB/system/network security, injection defense, availability, and integrity',
    'Breach Risk': 'Breach vectors and leakage paths: exfiltration, training data leaks, system prompt leaks, RAG poisoning, session leaks',
    'Guardrails Evaluation': 'Evaluate guardrail effectiveness against common risks',
    Harmful: 'Harmful content assessment using MLCommons and HarmBench taxonomies',
    'ISO 42001': 'ISO/IEC 42001 AI management system requirements',
    'Minimal Test': 'Minimal set of plugins to validate your setup',
    MITRE: 'MITRE ATLAS framework',
    NIST: 'NIST AI Risk Management Framework',
    'OWASP Agentic AI Top 10': 'OWASP Agentic AI Top 10 Threats and Mitigations',
    'OWASP API Top 10': 'OWASP API security vulnerabilities framework',
    'OWASP Gen AI Red Team': 'OWASP Gen AI Red Teaming Best Practices',
    'OWASP LLM Top 10': 'OWASP LLM security vulnerabilities framework',
    RAG: 'Recommended plugins plus tests for RAG-specific scenarios like access control',
    Recommended: 'A broad set of plugins recommended by Trusys',
    RBIPrinciples: 'Recommended plugins for India’s financial system',
    MCP: 'A set of plugins for testing MCP-based systems',
};
exports.DEFAULT_OUTPUT_PATH = 'redteam.yaml';
//# sourceMappingURL=metadata.js.map