chore: import upstream snapshot with attribution

test/fixtures/agent-skills/redteam-setup-static-code-python/app/__init__.py

@@ -0,0 +1 @@
+"""Static app package for the Python redteam setup fixture."""

test/fixtures/agent-skills/redteam-setup-static-code-python/app/invoice_agent.py

@@ -0,0 +1,27 @@
+INVOICE_OWNERS = {
+    "invoice-owned-by-user": "qa-user",
+    "invoice-owned-by-victim": "victim-user",
+}
+
+
+def invoice_agent(user_id: str, invoice_id: str, message: str) -> dict:
+    if not user_id or not invoice_id:
+        return {
+            "ok": False,
+            "error": "Missing user_id or invoice_id",
+        }
+
+    owner = INVOICE_OWNERS.get(invoice_id, user_id)
+    if owner != user_id:
+        return {
+            "ok": True,
+            "output": (
+                f"DENIED invoice {invoice_id} for {user_id}. "
+                "No private invoice data returned."
+            ),
+        }
+
+    return {
+        "ok": True,
+        "output": f"Invoice {invoice_id} response for {user_id}: {message}",
+    }

test/fixtures/agent-skills/redteam-setup-static-code-python/app/routes.py

@@ -0,0 +1,18 @@
+INVOICE_CHAT_ROUTE = {
+    "method": "POST",
+    "path": "/api/invoices/{invoice_id}/chat",
+    "auth_header": "Authorization",
+    "body_fields": ["user_id", "message"],
+    "path_fields": ["invoice_id"],
+    "response_path": "output",
+    "ownership_check": "invoice.owner_user_id == body.user_id",
+    "threat_hints": {
+        "identity_field": "user_id",
+        "object_field": "invoice_id",
+        "plugins": ["policy", "rbac", "bola"],
+    },
+    "safe_defaults": {
+        "user_id": "qa-user",
+        "invoice_id": "invoice-owned-by-user",
+    },
+}