LoFP LoFP / media processing, deployment, or reporting pipelines that intentionally shell out to external tools (e.g. ffmpeg, git) from within a task.

Techniques

Sample rules

Shell Spawned by Celery Worker Process

Description

Detects a system shell interpreter being spawned directly by a Celery worker process. This behavior indicates a Python background task execution framework is evaluating raw string input through a shell execution context, which is highly indicative of successful command or prompt injection exploitation against an LLM agent task.

Detection logic

condition: all of selection_*
selection_img:
  Image|endswith:
  - /ash
  - /bash
  - /busybox
  - /csh
  - /dash
  - /fish
  - /ksh
  - /sh
  - /tcsh
  - /zsh
  ParentCommandLine|contains: celery
selection_parent:
- ParentImage|endswith:
  - /python
  - /python3
- ParentImage|contains: /python3.