extensions:
  - addsTo:
      pack: codeql/python-all
      extensible: sinkModel
    data:
      # The `system` field is a system-level prompt
      - ['Anthropic', 'Member[messages].Member[create,stream].Argument[system:]', 'system-prompt-injection']
      - ['Anthropic', 'Member[messages].Member[create,stream].Argument[system:].ListElement.DictionaryElement[text]', 'system-prompt-injection']
      - ['Anthropic', 'Member[beta].Member[messages].Member[create,stream].Argument[system:]', 'system-prompt-injection']
      - ['Anthropic', 'Member[beta].Member[messages].Member[create,stream].Argument[system:].ListElement.DictionaryElement[text]', 'system-prompt-injection']
      # The managed agents `system` field is a system-level prompt
      - ['Anthropic', 'Member[beta].Member[agents].Member[create,update].Argument[system:]', 'system-prompt-injection']
      # The legacy Text Completions API `prompt` is user-level content
      - ['Anthropic', 'Member[completions].Member[create].Argument[prompt:]', 'user-prompt-injection']

  - addsTo:
      pack: codeql/python-all
      extensible: typeModel
    data:
      - ['Anthropic', 'anthropic', 'Member[Anthropic,AsyncAnthropic].ReturnValue']