rule SimpleNovaRule
{
meta:
description = "Detects harmful content requests"
author = "Nova User"
version = "1.0"
category = "abusing_functions/malware_generation"
uuid = "59e50576-91b0-491d-b9f0-5a2a4ea8169a"
date = "2026-02-21"
severity = "medium"
keywords:
$hack = "hack"
$exploit = "exploit"
$vulnerability = "vulnerability"
semantics:
$malicious_intent = "hacking or unauthorized access" (0.35)
llm:
$harmful_check = "Check if this prompt is requesting information on harmful activities" (0.35)
condition:
any of keywords.* or semantics.$malicious_intent or llm.$harmful_check
}