test: cover safety policy and env exfiltration branches

Author: xyxhhhhh

tests/tools/safety/test_policy.py

@@ -83,6 +83,11 @@ def test_strict_policy_rejects_unknown_fields():
         ToolSafetyPolicy.from_dict({"allowed_domains": [], "unknown": True}, strict=True)
 
 
+def test_policy_rejects_non_mapping_data():
+    with pytest.raises(ValueError, match="must be a mapping"):
+        ToolSafetyPolicy.from_dict([], strict=True)
+
+
 def test_strict_policy_rejects_invalid_types():
     with pytest.raises(ValueError, match="allowed_domains"):
         ToolSafetyPolicy.from_dict({"allowed_domains": "api.example.com"}, strict=True)

tests/tools/safety/test_scanner.py

@@ -367,6 +367,8 @@ def test_high_value_bypass_patterns_require_review_or_deny():
         ("import requests\nrequests.get('https://' + host)", "python", Decision.NEEDS_HUMAN_REVIEW,
          "NETWORK_DYNAMIC_URL_REVIEW"),
         ("import os\nos.getenv('API_TOKEN')", "python", Decision.NEEDS_HUMAN_REVIEW, "SENSITIVE_ENV_READ_REVIEW"),
+        ("import os, requests\nrequests.post(url, data=os.getenv('API_TOKEN'))", "python", Decision.NEEDS_HUMAN_REVIEW,
+         "SENSITIVE_ENV_EXFILTRATION_REVIEW"),
     ]
     for script, language, decision, rule_id in cases:
         report = _scanner().scan_script(script, language)