#!/usr/bin/env bash
# A6 — Secret exfiltration trong input (OWASP LLM06)
# cwd = thư mục gốc dự án. Offline OK.

printf 'my key -----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAK...\n-----END RSA PRIVATE KEY-----\n' > /tmp/a6.txt
bash .specify/scripts/bash/security-check.sh /tmp/a6.txt /tmp/o.txt input; echo "exit=$?"

# Kỳ vọng: SECURITY_BLOCKED rules=["...PRIVATE KEY...","secret-in-input"] · exit=2