tessl install tessl/pypi-yara-python@3.11.0Python interface for YARA, a powerful malware identification and classification tool
Agent Success
Agent success rate when using this tile
85%
Improvement
Agent success rate improvement when using this tile compared to baseline
0.94x
Baseline
Agent success rate without this tile
90%
{
"context": "This criteria evaluates how well the engineer uses yara-python's include directive control functionality when compiling YARA rules. The focus is on proper usage of the yara.compile() function with include-related parameters and understanding how include processing affects rule compilation.",
"type": "weighted_checklist",
"checklist": [
{
"name": "Uses yara.compile()",
"description": "Uses the yara.compile() function to compile YARA rules from a file path using the filepath parameter",
"max_score": 20
},
{
"name": "Include control parameter",
"description": "Correctly uses the includes parameter (or include_callback with None) in yara.compile() to control whether include directives are processed",
"max_score": 30
},
{
"name": "Enable includes mode",
"description": "Implements logic to enable include processing by setting includes=True or omitting the parameter (since True is the default) when compiling rules",
"max_score": 15
},
{
"name": "Disable includes mode",
"description": "Implements logic to disable include processing by setting includes=False when compiling rules",
"max_score": 15
},
{
"name": "Error handling",
"description": "Catches and handles yara.Error or yara.SyntaxError exceptions that occur during rule compilation, particularly when includes are disabled or files are missing",
"max_score": 20
}
]
}