tessl install tessl/pypi-yara-python@3.11.0Python interface for YARA, a powerful malware identification and classification tool
Agent Success
Agent success rate when using this tile
85%
Improvement
Agent success rate improvement when using this tile compared to baseline
0.94x
Baseline
Agent success rate without this tile
90%
{
"context": "This criteria evaluates how well the engineer uses yara-python's duplicate metadata handling feature to extract and aggregate metadata from YARA rules. The focus is on proper use of the allow_duplicate_metadata parameter and correct metadata extraction from match objects.",
"type": "weighted_checklist",
"checklist": [
{
"name": "Rule compilation",
"description": "Uses yara.compile() to compile the YARA rule source string",
"max_score": 15
},
{
"name": "Scanning with data",
"description": "Calls the match() method on the compiled rules object with the scan_data parameter to scan the provided data",
"max_score": 15
},
{
"name": "Duplicate metadata parameter",
"description": "Uses allow_duplicate_metadata=True parameter in the match() call to enable collection of duplicate metadata values as lists",
"max_score": 40
},
{
"name": "Metadata extraction",
"description": "Accesses the .meta attribute on match objects to extract metadata dictionaries from matched rules",
"max_score": 20
},
{
"name": "Result structure",
"description": "Returns a list of dictionaries containing 'rule' (the rule name) and 'metadata' (the metadata dict) for each match, correctly preserving the structure where duplicate keys have list values",
"max_score": 10
}
]
}