kingfisher/crates/kingfisher-rules/data/rules/browseruse.yml
2026-04-17 11:01:46 -07:00

37 lines
1.1 KiB
YAML

rules:
- name: Browser Use API Key
id: kingfisher.browseruse.1
pattern: |
(?x)
\b
(
bu_[A-Za-z0-9_-]{42,46}
)
\b
pattern_requirements:
min_digits: 4
min_lowercase: 4
min_uppercase: 4
min_entropy: 3.5
confidence: medium
examples:
- 'BROWSER_USE_API_KEY="bu_7U8x7aOi0uXig8bf3ubvJLqb7TWf_pskUMN5XTPfUCg"'
- 'browser-use apiKey: "bu_oMANI1IOblFfFeBillhzHIuOG9MmVO7qAnSE4_eRBWk"'
references:
- https://docs.browser-use.com/cloud/quickstart
- https://docs.browser-use.com/llms-full.txt
validation:
type: Http
content:
request:
method: GET
url: https://api.browser-use.com/api/v3/sessions
headers:
X-Browser-Use-API-Key: "{{ TOKEN }}"
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: JsonValid
# Revocation is managed from Browser Use Cloud settings; no public key-revocation endpoint is documented.