Rules / Reserved for later releases
sec-covert-instruction
Visible text tells the agent to hide something from the user or act covertly.
All rules73
Not active in this release
The id sec-covert-instruction is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.
What it will catch: Visible text tells the agent to hide something from the user or act covertly.
The rules index lists what runs today. Progress on new rules is in the repository.