{ "action_maps": [ { "label": "add", "mappings": [], "matched_via": "none", "subject_id": "cap_add" }, { "label": "airbnb", "mappings": [], "matched_via": "none", "subject_id": "cap_airbnb" }, { "label": "calculate_bmi", "mappings": [], "matched_via": "none", "subject_id": "cap_calculate_bmi" }, { "label": "calculator", "mappings": [], "matched_via": "none", "subject_id": "cap_calculator" }, { "label": "cloudflare-ai-gateway", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_ai_gateway" }, { "label": "cloudflare-bindings", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_bindings" }, { "label": "cloudflare-browser", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_browser" }, { "label": "cloudflare-dns-analytics", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_dns_analytics" }, { "label": "cloudflare-docs", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_docs" }, { "label": "cloudflare-logs", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_logs" }, { "label": "cloudflare-observability", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_observability" }, { "label": "cloudflare-radar", "mappings": [], "matched_via": "none", "subject_id": "cap_cloudflare_radar" }, { "label": "compare", "mappings": [], "matched_via": "none", "subject_id": "cap_compare" }, { "label": "custom_add", "mappings": [], "matched_via": "none", "subject_id": "cap_custom_add" }, { "label": "filesystem", "mappings": [], "matched_via": "none", "subject_id": "cap_filesystem" }, { "label": "format_result", "mappings": [], "matched_via": "none", "subject_id": "cap_format_result" }, { "label": "get_agent_info", "mappings": [], "matched_via": "none", "subject_id": "cap_get_agent_info" }, { "label": "get_agents_info", "mappings": [], "matched_via": "none", "subject_id": "cap_get_agents_info" }, { "label": "get_available_tools", "mappings": [], "matched_via": "none", "subject_id": "cap_get_available_tools" }, { "label": "get_chat_history", "mappings": [], "matched_via": "none", "subject_id": "cap_get_chat_history" }, { "label": "mcp-git-ingest", "mappings": [], "matched_via": "none", "subject_id": "cap_mcp_git_ingest" }, { "label": "multiply", "mappings": [], "matched_via": "none", "subject_id": "cap_multiply" }, { "label": "search", "mappings": [], "matched_via": "none", "subject_id": "cap_post_api_rest_v1_search" }, { "label": "scrape", "mappings": [], "matched_via": "none", "subject_id": "cap_post_scrape" }, { "label": "explainPhrase", "mappings": [], "matched_via": "none", "subject_id": "cap_post_v1_public_openai_explain_phrase" }, { "label": "explainTask", "mappings": [], "matched_via": "none", "subject_id": "cap_post_v1_public_openai_explain_task" }, { "label": "translate", "mappings": [], "matched_via": "none", "subject_id": "cap_post_v1_public_openai_translate" }, { "label": "reset", "mappings": [], "matched_via": "none", "subject_id": "cap_reset" }, { "label": "set_output_language", "mappings": [], "matched_via": "none", "subject_id": "cap_set_output_language" }, { "label": "step", "mappings": [], "matched_via": "none", "subject_id": "cap_step" }, { "label": "subtract", "mappings": [], "matched_via": "none", "subject_id": "cap_subtract" }, { "label": "delete", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete" }, { "label": "delete_app", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_app" }, { "label": "delete_auth_data", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_auth_data" }, { "label": "delete_cache", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_cache" }, { "label": "delete_collection", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_collection" }, { "label": "delete_columns", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_columns" }, { "label": "delete_dataset", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_dataset" }, { "label": "delete_email", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_email" }, { "label": "delete_entity", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_entity" }, { "label": "delete_event", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_event" }, { "label": "delete_linked_account", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_linked_account" }, { "label": "delete_post", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_post" }, { "label": "delete_record", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_record" }, { "label": "delete_rows", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_rows" }, { "label": "delete_server_instance", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_server_instance" }, { "label": "delete_sheet", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_sheet" }, { "label": "delete_slack_message", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_slack_message" }, { "label": "delete_triplet", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_triplet" }, { "label": "delete_workbook", "mappings": [ { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Honoring a change freeze is configuration change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: A freeze restricts who/when changes may be applied.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-5", "name": "Access Restrictions for Change", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'delete'; confirm against published text (asserted basis: Deploying during a freeze is acting beyond authority.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "a destructive change during a freeze maps to data destruction", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1485", "name": "Data Destruction", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_delete_workbook" }, { "label": "deploy_folder", "mappings": [ { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "an unapproved production change maps to system-process modification / persistence", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1543", "name": "Create or Modify System Process", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_deploy_folder" }, { "label": "deploy_html_content", "mappings": [ { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Requiring an approved change request is the core of change control.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "CM-3", "name": "Configuration Change Control", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: An unapproved production change by an agent needs human sign-off.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'deploy'; confirm against published text (asserted basis: Deploying without approval is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "an unapproved production change maps to system-process modification / persistence", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1543", "name": "Create or Modify System Process", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_deploy_html_content" }, { "label": "exec_action", "mappings": [], "matched_via": "none", "subject_id": "fn_exec_action" }, { "label": "exec_python_file", "mappings": [], "matched_via": "none", "subject_id": "fn_exec_python_file" }, { "label": "exec_run", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_exec_run" }, { "label": "execute", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute" }, { "label": "execute_action", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_action" }, { "label": "execute_code", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_code" }, { "label": "execute_command", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_command" }, { "label": "execute_function", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_function" }, { "label": "execute_query", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_execute_query" }, { "label": "export_sheet_to_csv", "mappings": [ { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_export_sheet_to_csv" }, { "label": "export_solutions", "mappings": [ { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_export_solutions" }, { "label": "export_to_file", "mappings": [ { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'export'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_export_to_file" }, { "label": "post", "mappings": [], "matched_via": "none", "subject_id": "fn_post" }, { "label": "post_dependency", "mappings": [], "matched_via": "none", "subject_id": "fn_post_dependency" }, { "label": "post_task", "mappings": [], "matched_via": "none", "subject_id": "fn_post_task" }, { "label": "refund_get", "mappings": [ { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-5", "name": "Separation of Duties", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Risk treatment: enforce a control commensurate with transaction risk.", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MANAGE", "name": "Manage function", "provenance": "EXTRACTED" }, { "basis": "separation of duties mitigates valid-account / privilege abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1078", "name": "Valid Accounts", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_refund_get" }, { "label": "refund_list", "mappings": [ { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: Dual control is the textbook separation-of-duties control: no single actor (here, one agent) completes a sensitive transaction alone.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-5", "name": "Separation of Duties", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: A high-value financial action by an automated system requires effective human oversight before it takes effect.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'refund'; confirm against published text (asserted basis: An agent moving money without a second authorizer is the canonical excessive-agency failure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Risk treatment: enforce a control commensurate with transaction risk.", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MANAGE", "name": "Manage function", "provenance": "EXTRACTED" }, { "basis": "separation of duties mitigates valid-account / privilege abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1078", "name": "Valid Accounts", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_refund_list" }, { "label": "run", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run" }, { "label": "run_actor", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_actor" }, { "label": "run_async", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_async" }, { "label": "run_atomic", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_atomic" }, { "label": "run_automated_demo", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_automated_demo" }, { "label": "run_example", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_example" }, { "label": "run_example_async", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_example_async" }, { "label": "run_example_http", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_example_http" }, { "label": "run_example_stdio", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_example_stdio" }, { "label": "run_example_sync", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_example_sync" }, { "label": "run_exec", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_exec" }, { "label": "run_file", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_file" }, { "label": "run_game", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_game" }, { "label": "run_in_thread", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_in_thread" }, { "label": "run_mcp_server", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_mcp_server" }, { "label": "run_memory_toolkit_example", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_memory_toolkit_example" }, { "label": "run_pptx_agent", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_pptx_agent" }, { "label": "run_project", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_project" }, { "label": "run_single_benchmark", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_single_benchmark" }, { "label": "run_storage_example", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_storage_example" }, { "label": "run_task", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_task" }, { "label": "run_test", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_test" }, { "label": "run_tool", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_tool" }, { "label": "run_workforce", "mappings": [ { "basis": "heuristic: side-effecting action with no second authorizer detected -- confirm against published text", "confidence": "ambiguous", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "AMBIGUOUS" } ], "matched_via": "heuristic", "subject_id": "fn_run_workforce" }, { "label": "send_email", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_email" }, { "label": "send_message", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message" }, { "label": "send_message_to_user", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_message_to_user" }, { "label": "send_slack_message", "mappings": [ { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'send'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_send_slack_message" }, { "label": "terminate_job", "mappings": [ { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: An adverse automated decision affecting a person requires human oversight before it is issued.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 14", "name": "Human oversight", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'terminate'; confirm against published text (asserted basis: Issuing an adverse decision with no human in the loop is excessive agency.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM06", "name": "Excessive Agency", "provenance": "INFERRED" }, { "basis": "Adverse outcomes are a measured risk requiring a treatment (human review).", "confidence": "advisory", "fw": "NIST AI RMF", "id": "MEASURE", "name": "Measure function", "provenance": "EXTRACTED" }, { "basis": "autonomous execution without oversight maps to command/scripting abuse", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1059", "name": "Command and Scripting Interpreter", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_terminate_job" }, { "label": "upload_file", "mappings": [ { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Blocking export to an out-of-scope endpoint is information-flow enforcement.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "AC-4", "name": "Information Flow Enforcement", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Preventing data leaving the controlled boundary is boundary protection.)", "confidence": "inferred", "fw": "NIST SP 800-53r5", "id": "SC-7", "name": "Boundary Protection", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Uncontrolled egress of regulated data is a data-governance failure.)", "confidence": "inferred", "fw": "EU AI Act", "id": "Art 10", "name": "Data and data governance", "provenance": "INFERRED" }, { "basis": "inferred from action verb 'upload'; confirm against published text (asserted basis: Egress of regulated records is sensitive-information disclosure.)", "confidence": "inferred", "fw": "OWASP LLM Top 10 (2025)", "id": "LLM02", "name": "Sensitive Information Disclosure", "provenance": "INFERRED" }, { "basis": "Data leaving to an external domain maps to the Exfiltration tactic; confirm the specific technique with an analyst.", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "TA0010", "name": "Exfiltration", "provenance": "EXTRACTED" }, { "basis": "uncontrolled egress of regulated data maps to exfiltration", "confidence": "advisory", "fw": "MITRE ATT&CK", "id": "T1048", "name": "Exfiltration Over Alternative Protocol", "provenance": "EXTRACTED" } ], "matched_via": "heuristic", "subject_id": "fn_upload_file" }, { "label": "getNews", "mappings": [], "matched_via": "none", "subject_id": "op_get_ai_news" }, { "label": "Returns images", "mappings": [], "matched_via": "none", "subject_id": "op_get_apod" }, { "label": "searchClasses", "mappings": [], "matched_via": "none", "subject_id": "op_get_classes" }, { "label": "getQRCode", "mappings": [], "matched_via": "none", "subject_id": "op_get_create_qr_code" }, { "label": "productsUsingGET", "mappings": [], "matched_via": "none", "subject_id": "op_get_public_openai_v0_products" }, { "label": "searchTeachers", "mappings": [], "matched_via": "none", "subject_id": "op_get_teachers" } ], "edges": [ { "dst": "fn_delete", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_app", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_auth_data", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_cache", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_collection", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_columns", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_dataset", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_email", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_entity", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_event", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_linked_account", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_post", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_record", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_rows", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_server_instance", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_sheet", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_slack_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_triplet", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_delete_workbook", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_deploy_folder", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_deploy_html_content", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_exec_action", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_exec_python_file", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_exec_run", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute_action", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute_code", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute_command", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute_function", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_execute_query", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_export_sheet_to_csv", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_export_solutions", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_export_to_file", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_post", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_post_dependency", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_post_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_refund_get", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_refund_list", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_actor", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_async", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_atomic", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_automated_demo", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_example", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_example_async", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_example_http", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_example_stdio", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_example_sync", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_exec", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_file", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_game", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_in_thread", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_mcp_server", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_memory_toolkit_example", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_pptx_agent", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_project", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_single_benchmark", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_storage_example", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_test", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_tool", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_run_workforce", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_send_email", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_send_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_send_message_to_user", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_send_slack_message", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_terminate_job", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "fn_upload_file", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_ai_news", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_apod", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_classes", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_create_qr_code", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_public_openai_v0_products", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_get_teachers", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_post_api_rest_v1_search", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_post_scrape", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_post_v1_public_openai_explain_phrase", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_post_v1_public_openai_explain_task", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "op_post_v1_public_openai_translate", "provenance": "EXTRACTED", "rel": "EXECUTES", "src": "agent_camel" }, { "dst": "cap_add", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_airbnb", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_calculate_bmi", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_calculator", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_ai_gateway", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_bindings", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_browser", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_dns_analytics", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_docs", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_logs", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_observability", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_cloudflare_radar", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_compare", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_custom_add", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_filesystem", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_format_result", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_get_agent_info", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_get_agents_info", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_get_available_tools", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_get_chat_history", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_mcp_git_ingest", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_multiply", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_post_api_rest_v1_search", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_post_scrape", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_post_v1_public_openai_explain_phrase", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_post_v1_public_openai_explain_task", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_post_v1_public_openai_translate", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_reset", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_set_output_language", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_step", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" }, { "dst": "cap_subtract", "provenance": "EXTRACTED", "rel": "HAS_CAPABILITY", "src": "agent_camel" } ], "frameworks": [], "nodes": [ { "id": "agent_camel", "name": "camel", "props": { "source_kind": "directory" }, "provenance": "EXTRACTED", "type": "Agent" }, { "id": "cap_add", "name": "add", "props": { "action": "add" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_airbnb", "name": "airbnb", "props": { "action": "airbnb" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_calculate_bmi", "name": "calculate_bmi", "props": { "action": "calculate_bmi" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_calculator", "name": "calculator", "props": { "action": "calculator" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_ai_gateway", "name": "cloudflare-ai-gateway", "props": { "action": "cloudflare-ai-gateway" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_bindings", "name": "cloudflare-bindings", "props": { "action": "cloudflare-bindings" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_browser", "name": "cloudflare-browser", "props": { "action": "cloudflare-browser" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_dns_analytics", "name": "cloudflare-dns-analytics", "props": { "action": "cloudflare-dns-analytics" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_docs", "name": "cloudflare-docs", "props": { "action": "cloudflare-docs" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_logs", "name": "cloudflare-logs", "props": { "action": "cloudflare-logs" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_observability", "name": "cloudflare-observability", "props": { "action": "cloudflare-observability" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_cloudflare_radar", "name": "cloudflare-radar", "props": { "action": "cloudflare-radar" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_compare", "name": "compare", "props": { "action": "compare" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_custom_add", "name": "custom_add", "props": { "action": "custom_add" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_filesystem", "name": "filesystem", "props": { "action": "filesystem" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_format_result", "name": "format_result", "props": { "action": "format_result" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_get_agent_info", "name": "get_agent_info", "props": { "action": "get_agent_info" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_get_agents_info", "name": "get_agents_info", "props": { "action": "get_agents_info" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_get_available_tools", "name": "get_available_tools", "props": { "action": "get_available_tools" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_get_chat_history", "name": "get_chat_history", "props": { "action": "get_chat_history" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_mcp_git_ingest", "name": "mcp-git-ingest", "props": { "action": "mcp-git-ingest" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_multiply", "name": "multiply", "props": { "action": "multiply" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_post_api_rest_v1_search", "name": "search", "props": { "action": "search" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_post_scrape", "name": "scrape", "props": { "action": "scrape" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_post_v1_public_openai_explain_phrase", "name": "explainPhrase", "props": { "action": "explainPhrase" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_post_v1_public_openai_explain_task", "name": "explainTask", "props": { "action": "explainTask" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_post_v1_public_openai_translate", "name": "translate", "props": { "action": "translate" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_reset", "name": "reset", "props": { "action": "reset" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_set_output_language", "name": "set_output_language", "props": { "action": "set_output_language" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_step", "name": "step", "props": { "action": "step" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "cap_subtract", "name": "subtract", "props": { "action": "subtract" }, "provenance": "EXTRACTED", "type": "Capability" }, { "id": "fn_delete", "name": "delete", "props": { "action": "delete" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_app", "name": "delete_app", "props": { "action": "delete_app" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_auth_data", "name": "delete_auth_data", "props": { "action": "delete_auth_data" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_cache", "name": "delete_cache", "props": { "action": "delete_cache" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_collection", "name": "delete_collection", "props": { "action": "delete_collection" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_columns", "name": "delete_columns", "props": { "action": "delete_columns" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_dataset", "name": "delete_dataset", "props": { "action": "delete_dataset" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_email", "name": "delete_email", "props": { "action": "delete_email" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_entity", "name": "delete_entity", "props": { "action": "delete_entity" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_event", "name": "delete_event", "props": { "action": "delete_event" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_linked_account", "name": "delete_linked_account", "props": { "action": "delete_linked_account" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_post", "name": "delete_post", "props": { "action": "delete_post" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_record", "name": "delete_record", "props": { "action": "delete_record" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_rows", "name": "delete_rows", "props": { "action": "delete_rows" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_server_instance", "name": "delete_server_instance", "props": { "action": "delete_server_instance" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_sheet", "name": "delete_sheet", "props": { "action": "delete_sheet" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_slack_message", "name": "delete_slack_message", "props": { "action": "delete_slack_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_triplet", "name": "delete_triplet", "props": { "action": "delete_triplet" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_delete_workbook", "name": "delete_workbook", "props": { "action": "delete_workbook" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_deploy_folder", "name": "deploy_folder", "props": { "action": "deploy_folder" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_deploy_html_content", "name": "deploy_html_content", "props": { "action": "deploy_html_content" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_exec_action", "name": "exec_action", "props": { "action": "exec_action" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_exec_python_file", "name": "exec_python_file", "props": { "action": "exec_python_file" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_exec_run", "name": "exec_run", "props": { "action": "exec_run" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute", "name": "execute", "props": { "action": "execute" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_action", "name": "execute_action", "props": { "action": "execute_action" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_code", "name": "execute_code", "props": { "action": "execute_code" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_command", "name": "execute_command", "props": { "action": "execute_command" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_function", "name": "execute_function", "props": { "action": "execute_function" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_execute_query", "name": "execute_query", "props": { "action": "execute_query" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_export_sheet_to_csv", "name": "export_sheet_to_csv", "props": { "action": "export_sheet_to_csv" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_export_solutions", "name": "export_solutions", "props": { "action": "export_solutions" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_export_to_file", "name": "export_to_file", "props": { "action": "export_to_file" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_post", "name": "post", "props": { "action": "post" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_post_dependency", "name": "post_dependency", "props": { "action": "post_dependency" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_post_task", "name": "post_task", "props": { "action": "post_task" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_refund_get", "name": "refund_get", "props": { "action": "refund_get" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_refund_list", "name": "refund_list", "props": { "action": "refund_list" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run", "name": "run", "props": { "action": "run" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_actor", "name": "run_actor", "props": { "action": "run_actor" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_async", "name": "run_async", "props": { "action": "run_async" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_atomic", "name": "run_atomic", "props": { "action": "run_atomic" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_automated_demo", "name": "run_automated_demo", "props": { "action": "run_automated_demo" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_example", "name": "run_example", "props": { "action": "run_example" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_example_async", "name": "run_example_async", "props": { "action": "run_example_async" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_example_http", "name": "run_example_http", "props": { "action": "run_example_http" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_example_stdio", "name": "run_example_stdio", "props": { "action": "run_example_stdio" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_example_sync", "name": "run_example_sync", "props": { "action": "run_example_sync" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_exec", "name": "run_exec", "props": { "action": "run_exec" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_file", "name": "run_file", "props": { "action": "run_file" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_game", "name": "run_game", "props": { "action": "run_game" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_in_thread", "name": "run_in_thread", "props": { "action": "run_in_thread" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_mcp_server", "name": "run_mcp_server", "props": { "action": "run_mcp_server" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_memory_toolkit_example", "name": "run_memory_toolkit_example", "props": { "action": "run_memory_toolkit_example" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_pptx_agent", "name": "run_pptx_agent", "props": { "action": "run_pptx_agent" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_project", "name": "run_project", "props": { "action": "run_project" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_single_benchmark", "name": "run_single_benchmark", "props": { "action": "run_single_benchmark" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_storage_example", "name": "run_storage_example", "props": { "action": "run_storage_example" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_task", "name": "run_task", "props": { "action": "run_task" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_test", "name": "run_test", "props": { "action": "run_test" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_tool", "name": "run_tool", "props": { "action": "run_tool" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_run_workforce", "name": "run_workforce", "props": { "action": "run_workforce" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_email", "name": "send_email", "props": { "action": "send_email" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message", "name": "send_message", "props": { "action": "send_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_message_to_user", "name": "send_message_to_user", "props": { "action": "send_message_to_user" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_send_slack_message", "name": "send_slack_message", "props": { "action": "send_slack_message" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_terminate_job", "name": "terminate_job", "props": { "action": "terminate_job" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "fn_upload_file", "name": "upload_file", "props": { "action": "upload_file" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_ai_news", "name": "getNews", "props": { "action": "getNews" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_apod", "name": "Returns images", "props": { "action": "Returns images" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_classes", "name": "searchClasses", "props": { "action": "searchClasses" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_create_qr_code", "name": "getQRCode", "props": { "action": "getQRCode" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_public_openai_v0_products", "name": "productsUsingGET", "props": { "action": "productsUsingGET" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_get_teachers", "name": "searchTeachers", "props": { "action": "searchTeachers" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_post_api_rest_v1_search", "name": "search", "props": { "action": "search" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_post_scrape", "name": "scrape", "props": { "action": "scrape" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_post_v1_public_openai_explain_phrase", "name": "explainPhrase", "props": { "action": "explainPhrase" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_post_v1_public_openai_explain_task", "name": "explainTask", "props": { "action": "explainTask" }, "provenance": "EXTRACTED", "type": "Task" }, { "id": "op_post_v1_public_openai_translate", "name": "translate", "props": { "action": "translate" }, "provenance": "EXTRACTED", "type": "Task" } ], "note": "Proposed CWN mappings, confidence-tagged. Confirm against the current published control text before relying on them for audit. Enterprise control ids are mapped at onboarding by your GRC team, never auto-asserted.", "source": "camel", "source_kind": "directory" }