Ctrl + k

or run

tessl search
Log in

Version

Workspace
tessl
Visibility
Public
Created
Last updated
Describes
pypipkg:pypi/yara-python@3.11.x
tile.json

tessl/pypi-yara-python

tessl install tessl/pypi-yara-python@3.11.0

Python interface for YARA, a powerful malware identification and classification tool

Agent Success

Agent success rate when using this tile

85%

Improvement

Agent success rate improvement when using this tile compared to baseline

0.94x

Baseline

Agent success rate without this tile

90%

rubric.jsonevals/scenario-3/

{
  "context": "This criteria evaluates how well the engineer uses yara-python's duplicate metadata handling feature to extract and aggregate metadata from YARA rules. The focus is on proper use of the allow_duplicate_metadata parameter and correct metadata extraction from match objects.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Rule compilation",
      "description": "Uses yara.compile() to compile the YARA rule source string",
      "max_score": 15
    },
    {
      "name": "Scanning with data",
      "description": "Calls the match() method on the compiled rules object with the scan_data parameter to scan the provided data",
      "max_score": 15
    },
    {
      "name": "Duplicate metadata parameter",
      "description": "Uses allow_duplicate_metadata=True parameter in the match() call to enable collection of duplicate metadata values as lists",
      "max_score": 40
    },
    {
      "name": "Metadata extraction",
      "description": "Accesses the .meta attribute on match objects to extract metadata dictionaries from matched rules",
      "max_score": 20
    },
    {
      "name": "Result structure",
      "description": "Returns a list of dictionaries containing 'rule' (the rule name) and 'metadata' (the metadata dict) for each match, correctly preserving the structure where duplicate keys have list values",
      "max_score": 10
    }
  ]
}