{
 "product": "Skill Memory Sandbox",
 "slug": "skill-sandbox",
 "base": "https://cainstudio.online",
 "page": "https://cainstudio.online/guide-skill-sandbox.html",
 "claims": [
  {
   "id": "C01",
   "kind": "attack",
   "claim": "Smart-home skill tries to read the password vault -> Nothing leaked.",
   "requests": [
    {
     "method": "POST",
     "url": "/api/v1/clawx/skills/verify-isolation",
     "body": {
      "attacker_skill_id": "smart_home_hub",
      "victim_skill_id": "onepassword_vault"
     }
    }
   ],
   "path": "leak_detected",
   "expect": [
    false
   ]
  },
  {
   "id": "C02",
   "kind": "control",
   "claim": "...and the vault can still read its own memory -> The owner is not locked out.",
   "requests": [
    {
     "method": "POST",
     "url": "/api/v1/clawx/skills/verify-isolation",
     "body": {
      "attacker_skill_id": "smart_home_hub",
      "victim_skill_id": "onepassword_vault"
     }
    }
   ],
   "path": "victim_control_read_ok",
   "expect": [
    true
   ]
  },
  {
   "id": "C03",
   "kind": "attack",
   "claim": "...overall result -> Every attack refused.",
   "requests": [
    {
     "method": "POST",
     "url": "/api/v1/clawx/skills/verify-isolation",
     "body": {
      "attacker_skill_id": "smart_home_hub",
      "victim_skill_id": "onepassword_vault"
     }
    }
   ],
   "path": "status",
   "expect": [
    "PASS"
   ]
  },
  {
   "id": "C04",
   "kind": "attack",
   "claim": "The reverse: the vault reads the smart-home skill -> Isolation works both ways.",
   "requests": [
    {
     "method": "POST",
     "url": "/api/v1/clawx/skills/verify-isolation",
     "body": {
      "attacker_skill_id": "onepassword_vault",
      "victim_skill_id": "smart_home_hub"
     }
    }
   ],
   "path": "status",
   "expect": [
    "PASS"
   ]
  }
 ]
}