ai-rsk 0.7.2

Security gate for AI-generated code - blocks the build until vulnerabilities are fixed
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

id: EXEC_DYNAMIC_PYTHON
version: 1
severity: BLOCK
cwe:
  - "CWE-95"
source:
  name: "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')"
  quote: "The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before inserting the input into an executable resource, such as a library, configuration file, or template."
  verified: true
  verified_date: "2026-03-15"
languages:
  - python
file_patterns:
  - "*.py"
patterns:
  # Python exec() builtin with variable argument
  - "^\\s*exec\\s*\\(\\s*[a-zA-Z_]"
  # Python eval() with variable argument
  - "^\\s*eval\\s*\\(\\s*[a-zA-Z_]"
  # Python eval/exec with f-string
  - "eval\\s*\\(\\s*f['\"]"
  - "exec\\s*\\(\\s*f['\"]"
case_insensitive: false
exclude_paths:
  - "test/"
  - "tests/"
  - "__tests__/"
  - "spec/"
  - "node_modules/"
  - "vendor/"
  - ".venv/"
  - "venv/"
message: "Python exec()/eval() with dynamic input detected. If the input comes from a user, database, or external source, an attacker can execute arbitrary Python code on your server. This is one of the most dangerous vulnerabilities possible."
fix: |
  NEVER use exec/eval with dynamic input in Python.
  Alternatives:
    # WRONG:
    exec(user_code)
    eval(user_expression)

    # RIGHT - use ast.literal_eval for safe evaluation of literals:
    import ast
    data = ast.literal_eval(user_input)

    # RIGHT - use a safe expression parser for math:
    from simpleeval import simple_eval
    result = simple_eval(user_expression)

    # RIGHT - use a whitelist for dynamic behavior:
    actions = {'add': add_fn, 'remove': remove_fn}
    fn = actions.get(user_choice)
    if fn:
        fn()

  If you absolutely must evaluate dynamic code, use a sandboxed environment (RestrictedPython).