{"record":{"id":"52680ef03ce94c39","repo":"davila7/claude-code-templates","slug":"sem-e007","errorCode":"SEM_E007","errorMessage":"Security bypass attempt detected","messagePattern":"Security bypass attempt detected","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"critical","filePath":"cli-tool/src/validation/validators/SemanticValidator.js","lineNumber":59,"sourceCode":"        code: 'SEM_E004',\n        message: 'Command execution attempt detected',\n        severity: 'critical'\n      },\n      {\n        pattern: /\\b(fetch|retrieve|get|extract|obtain|steal|harvest|capture|collect)\\s+(the\\s+)?(user['']?s?\\s+)?(auth\\s+)?(token|key|password|credential|secret|api[\\s_-]?key)/gi,\n        code: 'SEM_E005',\n        message: 'Credential harvesting pattern detected',\n        severity: 'critical'\n      },\n      {\n        pattern: /(open|spawn|exec|run)\\s+(a\\s+)?(shell|terminal|bash|cmd|powershell)/gi,\n        code: 'SEM_E006',\n        message: 'Shell access attempt detected',\n        severity: 'critical'\n      },\n      {\n        pattern: /(disable|bypass|override|skip)\\s+(security|safety|filter|protection|validation)/gi,\n        code: 'SEM_E007',\n        message: 'Security bypass attempt detected',\n        severity: 'critical'\n      },\n      {\n        pattern: /always\\s+(obey|follow|comply\\s+with|execute)\\s+the\\s+user/gi,\n        code: 'SEM_E008',\n        message: 'Unconditional obedience instruction detected',\n        severity: 'high'\n      },\n      {\n        pattern: /(forget|disregard|remove)\\s+(everything|all\\s+previous|prior\\s+context)/gi,\n        code: 'SEM_E009',\n        message: 'Context manipulation attempt detected',\n        severity: 'high'\n      },\n      {\n        pattern: /modify\\s+your\\s+(own\\s+)?(code|behavior|instructions?|rules?)/gi,\n        code: 'SEM_E010',","sourceCodeStart":41,"sourceCodeEnd":77,"githubUrl":"https://github.com/davila7/claude-code-templates/blob/a0851ed10c7c60463dac8cfaaca124cf32d5804d/cli-tool/src/validation/validators/SemanticValidator.js#L41-L77","documentation":"SEM_E007 is a critical finding matching /(disable|bypass|override|skip)\\s+(security|safety|filter|protection|validation)/gi. It catches instructions telling the agent to turn off its own safeguards — a direct jailbreak technique. SemanticValidator emits it during content validation whenever this verb+target pairing occurs.","triggerScenarios":"Component text containing phrases like 'bypass security checks', 'skip validation', 'disable safety filters', 'override protection' (any casing, flexible whitespace). Often appears inside red-team/testing components or when authors quote injection payloads.","commonSituations":"Security-research or red-team agents that describe attack techniques; CI components that legitimately suggest skipping lint/validation steps ('skip validation in dev mode'); docs quoting jailbreak attempts for educational purposes.","solutions":["Rephrase CI advice to avoid the exact pairing: 'validation can be loosened in development via config' instead of 'skip validation'","Keep quoted attack samples out of validated content fields, or paraphrase them","Scope instructions to specific named tools: 'run eslint with --rule warnings' rather than 'disable the filter'","Use the review waiver if the component is a verified security-testing artifact"],"exampleFix":"// before\nSkip validation when deploying to the dev environment.\n\n// after\nUse the `--no-verify` deploy profile for development environments after review.","handlingStrategy":"validation","validationCode":"const BYPASS_RE = /(disable|bypass|override|skip)\\s+(security|safety|filter|protection|validation)/i;\nfunction containsBypassLanguage(text) { return BYPASS_RE.test(text); }","typeGuard":"function isSafeBypassText(text) { return !/(disable|bypass|override|skip)\\s+(security|safety|filter|protection|validation)/i.test(text); }","tryCatchPattern":null,"preventionTips":["Phrase dev-mode relaxations as configuration, not 'skip validation'","Name the specific tool being configured (eslint, a linter profile)","Keep quoted attack text out of validated fields"],"tags":["security-bypass","jailbreak","semantic-validation"],"backgroundTag":"prompt-injection-detected","analyzedSha":"a0851ed10c7c60463dac8cfaaca124cf32d5804d","analyzedAt":"2026-08-28T14:11:56.058Z","schemaVersion":2},"datasetVersion":"2026-08-28T16:17:29.566Z"}