Rules / Reserved for later releases
sec-image-exfil
External image URL built from data, or an instruction to render one.
All rules73
Not active in this release
The id sec-image-exfil is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.
What it will catch: External image URL built from data, or an instruction to render one.
The rules index lists what runs today. Progress on new rules is in the repository.