tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

Logging uplift for model training purposes (command injection model) [Small change] (#6330)

Browse Source
This commit is contained in:
dorien-koelemeijer
2026-01-27 12:25:11 +07:00
committed by GitHub
parent f5b402bbdf
commit e9024b7c19
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/goose/src/agents/tool_execution.rs
+2 -1
View File
@@ -91,7 +91,8 @@ impl Agent {
counter.goose.prompt_injection_user_decisions = 1,
decision = ?confirmation.permission,
finding_id = %finding_id,
"User security decision"
tool_request_id = %request.id,
"Prompt injection detection: user decision on command injection finding"
);
}
crates/goose/src/security/mod.rs
+8 -3
View File
@@ -114,20 +114,25 @@ impl SecurityManager {
let above_threshold = analysis_result.confidence > config_threshold;
let finding_id = format!("SEC-{}", Uuid::new_v4().simple());
let tool_call_json =
serde_json::to_string(&tool_call).unwrap_or_else(|_| "{}".to_string());
tracing::warn!(
counter.goose.prompt_injection_finding = 1,
threat_type = "command_injection",
above_threshold = above_threshold,
tool_name = %tool_call.name,
tool_request_id = %tool_request.id,
tool_call_json = %tool_call_json,
confidence = analysis_result.confidence,
explanation = %sanitized_explanation,
finding_id = %finding_id,
threshold = config_threshold,
"{}",
if above_threshold {
"Current tool call flagged as malicious after security analysis (above threshold)"
"Prompt injection detection: Current tool call flagged as malicious after security analysis (above threshold)"
} else {
"Security finding below threshold - logged but not blocking execution"
"Prompt injection detection: Security finding below threshold (logged but not blocking execution)"
}
);
if above_threshold {
@@ -155,7 +160,7 @@ impl SecurityManager {
tracing::info!(
counter.goose.prompt_injection_analysis_performed = 1,
security_issues_found = results.len(),
"Security analysis complete"
"Prompt injection detection: Security analysis complete"
);
Ok(results)
}