Session Signals baseline rules
unrated
Unrated (not enough evidence yet)
Rating starts once every component has real evidence. Missing evidence is stated, never faked as zero.
repoops/signals-baseline · pack · by repoops
The Session Signals baseline detection rules as an inspectable, versioned rule pack: signals-rules JSON files in the data-dir loader format (credential exposure, risky commands, prompt-injection markers, plus a false-positive ignore pack that drops well-known fake keys, already-masked values, and fixture context), generated from the compiled-in baseline in lib/session-signals-rules.mjs so the pack can never drift from the code. Install lands the files in the data dir's signals-rules/ only after approval on the Marketplace tab; the scanner merges them over the baseline on the next scan. Rule updates arrive as versioned, inspectable, approval-gated packs, never an opaque auto-feed.
Install
npx repoopshttps://www.repoops.ai/marketplace/install/repoops/signals-baseline
The URL and the command are the same thing: same pack, same signature. The install verifies the pack's ed25519 signature and lands it HELD for your approval - nothing runs until you approve.
What install does.
- Resolves this id and fetches the signed pack.
- Verifies the ed25519 signature against your repo's trust list. A tampered or unsigned pack is refused; there is no skip path.
- Lands the pack HELD as one inert proposal. Nothing runs, nothing edits a file.
- You approve or reject it on your Marketplace tab. Approval changes proposals only.