Fix languages mixed

ai/ai-best-practices/cohere-user-input-in-system-prompt/cohere-user-input-in-system-prompt-js.yaml

@@ -0,0 +1,29 @@
+rules:
+  - id: cohere-user-input-in-system-prompt-js
+    mode: taint
+    languages: [javascript, typescript]
+    severity: ERROR
+    message: >-
+      User input flows into the Cohere preamble/system prompt. This enables
+      prompt injection attacks where users can override system instructions.
+      Validate and sanitize user input, or keep preamble text hardcoded.
+    metadata:
+      cwe: "CWE-77: Command Injection"
+      category: security
+      confidence: MEDIUM
+      subcategory: [vuln]
+      likelihood: MEDIUM
+      impact: HIGH
+      technology: [cohere]
+      references:
+        - https://docs.cohere.com/docs/safety-modes
+    pattern-sources:
+      - pattern: req.body.$F
+      - pattern: req.query.$F
+      - pattern: req.params.$F
+      - pattern: req.body
+    pattern-sinks:
+      - patterns:
+          - pattern: |
+              $CLIENT.chat({..., preamble: $SINK, ...})
+          - focus-metavariable: $SINK

ai/ai-best-practices/cohere-user-input-in-system-prompt/cohere-user-input-in-system-prompt.yaml → ai/ai-best-practices/cohere-user-input-in-system-prompt/cohere-user-input-in-system-prompt-python.yaml

@@ -31,33 +31,4 @@ rules:
     pattern-sinks:
       - patterns:
           - pattern: $CLIENT.chat(..., preamble=$SINK, ...)
-          - focus-metavariable: $SINK
-
-  - id: cohere-user-input-in-system-prompt-js
-    mode: taint
-    languages: [javascript, typescript]
-    severity: ERROR
-    message: >-
-      User input flows into the Cohere preamble/system prompt. This enables
-      prompt injection attacks where users can override system instructions.
-      Validate and sanitize user input, or keep preamble text hardcoded.
-    metadata:
-      cwe: "CWE-77: Command Injection"
-      category: security
-      confidence: MEDIUM
-      subcategory: [vuln]
-      likelihood: MEDIUM
-      impact: HIGH
-      technology: [cohere]
-      references:
-        - https://docs.cohere.com/docs/safety-modes
-    pattern-sources:
-      - pattern: req.body.$F
-      - pattern: req.query.$F
-      - pattern: req.params.$F
-      - pattern: req.body
-    pattern-sinks:
-      - patterns:
-          - pattern: |
-              $CLIENT.chat({..., preamble: $SINK, ...})
-          - focus-metavariable: $SINK
+          - focus-metavariable: $SINK