bothari01/secops-env

1spec_version: 12name: secops_env3type: space4runtime: fastapi5app: server.app:app6port: 80007 8tags:9  - security10  - secops11  - devops12  - pii13  - compliance14  - log-analysis15  - config-hardening16 17description: |18  Security Operations Environment for OpenEnv - AI Safety Auditing19  20  Simulates real-world security operations tasks:21  - PII Redaction (Easy): Identify and redact personally identifiable information22  - Fix Public Access (Medium): Identify and fix overly permissive cloud storage23  - Disable Ghost User (Hard): Find and disable orphaned/inactive user accounts24  - Log Analysis (Medium): Analyze security logs and classify security events25  - Config Hardening (Hard): Review configs for security misconfigurations26 27difficulty_levels:28  - easy29  - medium30  - hard31 32tasks:33  - id: pii_redaction34    name: PII Redaction35    difficulty: easy36    description: Identify and redact PII (SSN, emails, phones, credit cards, IPs) from text37    max_steps: 538    success_threshold: 0.939    40  - id: public_access41    name: Fix Public Access42    difficulty: medium43    description: Identify S3 buckets with public access and fix permissions44    max_steps: 745    success_threshold: 0.8546    47  - id: ghost_user48    name: Disable Ghost User49    difficulty: hard50    description: Identify orphaned/inactive accounts and disable them51    max_steps: 1052    success_threshold: 0.953 54  - id: log_analysis55    name: Log Analysis56    difficulty: medium57    description: Analyze security logs and classify events (MALWARE, TRUE_POSITIVE, etc.)58    max_steps: 659    success_threshold: 0.860 61  - id: config_hardening62    name: Configuration Hardening63    difficulty: hard64    description: Review YAML/JSON configs for security misconfigurations65    max_steps: 866    success_threshold: 0.7567