{ "action_maps": [ { "label": "browser_click", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_click" }, { "label": "browser_close_tab", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_close_tab" }, { "label": "browser_extract_content", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_extract_content" }, { "label": "browser_get_state", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_get_state" }, { "label": "browser_go_back", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_go_back" }, { "label": "browser_list_tabs", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_list_tabs" }, { "label": "browser_navigate", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_navigate" }, { "label": "browser_scroll", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_scroll" }, { "label": "browser_switch_tab", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_switch_tab" }, { "label": "browser_type", "mappings": [], "matched_via": "none", "subject_id": "cap_browser_type" }, { "label": "retry_with_browser_use_agent", "mappings": [], "matched_via": "none", "subject_id": "cap_retry_with_browser_use_agent" }, { "label": "execute", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute" }, { "label": "execute_skill", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_skill" }, { "label": "export_storage_state", "mappings": [ { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_export_storage_state" }, { "label": "migrate_legacy_paths", "mappings": [ { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'migrate'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "an unapproved production change maps to system-process modification / persistence", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1543", "name": "Create or Modify System Process", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_migrate_legacy_paths" }, { "label": "run", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run" }, { "label": "run_agent", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_agent" }, { "label": "run_auth_command", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_auth_command" }, { "label": "run_browser_task", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_browser_task" }, { "label": "run_cli", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_cli" }, { "label": "run_download", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_download" }, { "label": "run_main_interface", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_main_interface" }, { "label": "run_model_button_click_test", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_model_button_click_test" }, { "label": "run_once", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_once" }, { "label": "run_parallel_agents", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_parallel_agents" }, { "label": "run_profile_use", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_profile_use" }, { "label": "run_prompt_mode", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_prompt_mode" }, { "label": "run_search", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_search" }, { "label": "run_single_agent", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_single_agent" }, { "label": "run_single_task", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_single_task" }, { "label": "run_speed_comparison", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_speed_comparison" }, { "label": "run_sync", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_sync" }, { "label": "run_task", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_task" }, { "label": "run_task_subprocess", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_task_subprocess" }, { "label": "send_command", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_command" }, { "label": "send_demo_mode_log", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_demo_mode_log" }, { "label": "send_keys", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_keys" }, { "label": "send_log", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_log" }, { "label": "send_message", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message" }, { "label": "send_raw", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_raw" }, { "label": "upload", "mappings": [ { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_upload" }, { "label": "upload_file", "mappings": [ { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_upload_file" } ], "edges": [ { "dst": "fn_execute", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_execute_skill", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_export_storage_state", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_migrate_legacy_paths", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_agent", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_auth_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_browser_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_cli", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_download", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_main_interface", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_model_button_click_test", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_once", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_parallel_agents", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_profile_use", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_prompt_mode", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_search", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_single_agent", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_single_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_speed_comparison", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_sync", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_run_task_subprocess", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_demo_mode_log", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_keys", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_log", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_send_raw", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_upload", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "fn_upload_file", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_browser_use" }, { "dst": "cap_browser_click", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_close_tab", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_extract_content", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_get_state", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_go_back", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_list_tabs", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_navigate", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_scroll", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_switch_tab", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_browser_type", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" }, { "dst": "cap_retry_with_browser_use_agent", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_browser_use" } ], "frameworks": [], "nodes": [ { "id": "agent_browser_use", "name": "browser-use", "props": { "source_kind": "directory" }, "provenance": "EXTRACTED", "type": "Agent" }, { "id": "cap_browser_click", "name": "browser_click", "props": { "action": "browser_click" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_close_tab", "name": "browser_close_tab", "props": { "action": "browser_close_tab" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_extract_content", "name": "browser_extract_content", "props": { "action": "browser_extract_content" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_get_state", "name": "browser_get_state", "props": { "action": "browser_get_state" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_go_back", "name": "browser_go_back", "props": { "action": "browser_go_back" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_list_tabs", "name": "browser_list_tabs", "props": { "action": "browser_list_tabs" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_navigate", "name": "browser_navigate", "props": { "action": "browser_navigate" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_scroll", "name": "browser_scroll", "props": { "action": "browser_scroll" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_switch_tab", "name": "browser_switch_tab", "props": { "action": "browser_switch_tab" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_browser_type", "name": "browser_type", "props": { "action": "browser_type" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_retry_with_browser_use_agent", "name": "retry_with_browser_use_agent", "props": { "action": "retry_with_browser_use_agent" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "fn_execute", "name": "execute", "props": { "action": "execute" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_skill", "name": "execute_skill", "props": { "action": "execute_skill" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_export_storage_state", "name": "export_storage_state", "props": { "action": "export_storage_state" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_migrate_legacy_paths", "name": "migrate_legacy_paths", "props": { "action": "migrate_legacy_paths" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run", "name": "run", "props": { "action": "run" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_agent", "name": "run_agent", "props": { "action": "run_agent" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_auth_command", "name": "run_auth_command", "props": { "action": "run_auth_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_browser_task", "name": "run_browser_task", "props": { "action": "run_browser_task" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_cli", "name": "run_cli", "props": { "action": "run_cli" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_download", "name": "run_download", "props": { "action": "run_download" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_main_interface", "name": "run_main_interface", "props": { "action": "run_main_interface" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_model_button_click_test", "name": "run_model_button_click_test", "props": { "action": "run_model_button_click_test" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_once", "name": "run_once", "props": { "action": "run_once" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_parallel_agents", "name": "run_parallel_agents", "props": { "action": "run_parallel_agents" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_profile_use", "name": "run_profile_use", "props": { "action": "run_profile_use" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_prompt_mode", "name": "run_prompt_mode", "props": { "action": "run_prompt_mode" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_search", "name": "run_search", "props": { "action": "run_search" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_single_agent", "name": "run_single_agent", "props": { "action": "run_single_agent" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_single_task", "name": "run_single_task", "props": { "action": "run_single_task" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_speed_comparison", "name": "run_speed_comparison", "props": { "action": "run_speed_comparison" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_sync", "name": "run_sync", "props": { "action": "run_sync" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_task", "name": "run_task", "props": { "action": "run_task" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_task_subprocess", "name": "run_task_subprocess", "props": { "action": "run_task_subprocess" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_command", "name": "send_command", "props": { "action": "send_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_demo_mode_log", "name": "send_demo_mode_log", "props": { "action": "send_demo_mode_log" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_keys", "name": "send_keys", "props": { "action": "send_keys" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_log", "name": "send_log", "props": { "action": "send_log" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message", "name": "send_message", "props": { "action": "send_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_raw", "name": "send_raw", "props": { "action": "send_raw" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_upload", "name": "upload", "props": { "action": "upload" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_upload_file", "name": "upload_file", "props": { "action": "upload_file" }, "provenance": "EXTRACTED", "type": "Task" } ], "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.", "source": "browser-use", "source_kind": "directory" }