{
  "context": "Tests whether agent avoids unsafe C functions (strcpy, sprintf, gets, strcat) and uses safe replacements with proper compiler security flags.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "No unsafe string functions",
      "description": "Does NOT use strcpy, strcat, sprintf, or gets anywhere in the code (uses strncpy/strncat/snprintf/fgets instead)",
      "max_score": 30
    },
    {
      "name": "Uses snprintf",
      "description": "Uses snprintf (not sprintf) for string formatting",
      "max_score": 20
    },
    {
      "name": "Null termination",
      "description": "When using strncpy or similar bounded functions, explicitly ensures null termination of destination buffer",
      "max_score": 20
    },
    {
      "name": "Security compiler flags",
      "description": "Makefile or build instructions include at least two of: -fstack-protector-all, -D_FORTIFY_SOURCE=2, -fsanitize=address, -fPIE, -Wformat-security",
      "max_score": 30
    }
  ]
}