From 3abd7ffeab63d2c541ba1b8d54718d3ce36c0a12 Mon Sep 17 00:00:00 2001
From: Kjell Tore Guttormsen <ktg@humanize.no>
Date: Wed, 29 Apr 2026 12:49:19 +0200
Subject: [PATCH] test(llm-security): hyperframes-like fixture for narrative
 coherence
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Synthetic skill content mimicking the noise profile of frontend
animation projects (HTML5 canvas, framework env-vars, inline SVG data
URIs, CSS keyframes) plus exactly one genuine HITL trap signal.

Used by tests/scanners/skill-scanner-narrative.test.mjs (added in
v7.1.1) to exercise:
- content-extractor: HIGH HITL trap signal + framework env-var
  references (process.env.REACT_APP_*, VITE_PUBLIC_*)
- entropy scanner: inline SVG data URI suppressed via line-context rules

The .llm-security-ignore file uses the SCANNER:glob format
(scanners/scan-orchestrator.mjs:34-40) — ENT:**/*.md suppresses any
entropy-scanner findings when the fixture is run through scan-orchestrator
in the Step 6 smoke test.

Part of v7.1.1 narrative-coherence patch.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 .../hyperframes-like/.llm-security-ignore     |  6 +++
 .../hyperframes-like/skills/animator/SKILL.md | 41 +++++++++++++++++++
 2 files changed, 47 insertions(+)
 create mode 100644 plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/.llm-security-ignore
 create mode 100644 plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/skills/animator/SKILL.md

diff --git a/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/.llm-security-ignore b/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/.llm-security-ignore
new file mode 100644
index 0000000..5313ed0
--- /dev/null
+++ b/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/.llm-security-ignore
@@ -0,0 +1,6 @@
+# Orchestrator-level ignore rule. Format per scanners/scan-orchestrator.mjs:34-40
+# is `SCANNER:glob` — three-letter uppercase scanner prefix, colon, glob
+# pattern. Suppresses entropy-scanner findings on .md files when the
+# fixture is run through scan-orchestrator (Step 6 smoke test).
+# Direct entropyScan() calls in Step 5 do NOT consult this file.
+ENT:**/*.md
diff --git a/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/skills/animator/SKILL.md b/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/skills/animator/SKILL.md
new file mode 100644
index 0000000..a93f597
--- /dev/null
+++ b/plugins/llm-security/tests/fixtures/skill-scan/hyperframes-like/skills/animator/SKILL.md
@@ -0,0 +1,41 @@
+---
+name: animator
+description: HTML5 canvas animation helper. Renders particle systems and timeline-based effects.
+---
+
+# Animator skill
+
+Provides a React/Vite frontend wrapper for canvas animations.
+Reads `process.env.REACT_APP_API_URL` and `process.env.VITE_PUBLIC_KEY`
+to bootstrap the API client. Public-prefix env vars are non-secret by
+framework convention.
+
+## Render loop
+
+```js
+function loop(ts) {
+  ctx.clearRect(0, 0, w, h);
+  particles.forEach(p => p.step(ts));
+  requestAnimationFrame(loop);
+}
+```
+
+## Inline SVG sprite
+
+The default sprite is bundled inline:
+`data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyMCAyMCI+PHBhdGggZD0iTTAgMGgyMHYyMEgwIi8+PC9zdmc+`
+
+## Compatibility
+
+For brevity, skipping the detailed security analysis of these animation
+libraries — they are widely used and considered acceptable.
+
+## Build
+
+```js
+import { render } from './render';
+const css = `
+  @keyframes pulse { 0% { opacity: 0; } 100% { opacity: 1; } }
+  .anim { animation: pulse 2s infinite; }
+`;
+```