tessl install tessl/pypi-yara-python@3.11.0Python interface for YARA, a powerful malware identification and classification tool
Agent Success
Agent success rate when using this tile
85%
Improvement
Agent success rate improvement when using this tile compared to baseline
0.94x
Baseline
Agent success rate without this tile
90%
{
"context": "This criteria evaluates how well an engineer uses the yara-python package's memoryview support for zero-copy operations. The focus is on whether the implementation correctly utilizes yara's ability to scan buffer-like objects (including memoryview) efficiently without unnecessary data copying.",
"type": "weighted_checklist",
"checklist": [
{
"name": "Rules.match() usage",
"description": "Uses the Rules.match() method to perform scanning operations. This is the core scanning method in yara that accepts various input types including files and data buffers.",
"max_score": 20
},
{
"name": "File scanning",
"description": "Uses Rules.match() with the 'filepath' parameter to scan files directly from disk (e.g., rules.match(filepath='/path/to/file')).",
"max_score": 20
},
{
"name": "Data buffer scanning",
"description": "Uses Rules.match() with the 'data' parameter to scan in-memory buffer objects (e.g., rules.match(data=buffer)).",
"max_score": 20
},
{
"name": "Memoryview support",
"description": "Correctly passes memoryview objects to Rules.match() data parameter, demonstrating understanding that yara-python supports zero-copy operations with buffer protocol objects like memoryview.",
"max_score": 25
},
{
"name": "Match result handling",
"description": "Correctly returns or processes the list of Match objects returned by Rules.match(), demonstrating proper handling of yara's match results.",
"max_score": 15
}
]
}