Real regression input #
Regression case link-002
{
"payload": "Visit data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== for the claim page."
}Observed decision contract #
| Machine-readable value | MALICIOUS_LINK |
|---|---|
| Fast-path result | SANITIZE |
| Thorough result | SANITIZE |
| Documented risk | MEDIUM |
| Threat classes | MALICIOUS_LINK |
What Warden detects #
Warden heuristically flags data URLs, punycode, IP literals, and mixed-script hostnames.
Why it matters in agent commerce #
An active or deceptive URL can move a buyer from trusted workflow into attacker-controlled content.
Detector boundary #
False-positive considerations
Related integration guidance #
Do not follow the flagged link; use the sanitized payload.
Preserve the machine-readable reason value in decision logs, but do not treat it as a probability or a universal statement about the payload.