LF Security Corpus: Scripting Capability Chains
Collection
JavaScript, PowerShell, shell, Python and native capability-chain fixtures. Synthetic Layerfault adversarial test fixtures, not usable models. • 6 items • Updated
powershell-capability-chain
SECURITY TEST ARTIFACT: DO NOT USE AS A PRODUCTION MODEL
This repository is part of the Layerfault synthetic security corpus. It is deliberately constructed to contain security-relevant characteristics for scanner testing.
Corpus ID: LF-CORPUS-PS-0001
Purpose
PowerShell package with synthetic credential access, dynamic code, loopback download/execute syntax, native load, process, encoded command and package-install syntax.
Direct expected Layerfault rules
LF-PS-SEMANTIC-CREDENTIAL-ACCESSLF-PS-SEMANTIC-DOWNLOAD-EXECUTELF-PS-SEMANTIC-DYNAMIC-CODELF-PS-SEMANTIC-NATIVE-LOADLF-PS-SEMANTIC-NETWORKLF-PS-SEMANTIC-PACKAGE-INSTALLLF-PS-SEMANTIC-PROCESS
Candidate rules
These are deliberately plausible targets that remain marked as candidates until the exact Layerfault build used for certification confirms them.
LF-PS-DOWNLOADLF-PS-ENCODED-COMMANDLF-PS-INVOKE-EXPRESSION
Negative-control rules
These should remain silent for this corpus item.
- None
Safety
The corpus uses fake secrets, loopback/.invalid network destinations, harmless marker output,
and synthetic model behavior only. It is intended for static scanning and isolated security testing.
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support