ai-gov.devaccellabs.com: breakage #34517

Prerequisites

• This is NOT a YouTube, Facebook, Twitch, Spotify or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
• I read and understand the policy about what is a valid filter issue.
• I verified that this issue is not a duplicate. (Use this button to find out.). Comment in the old issue threads even when they are closed or even if you have a different problem.
• I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
• I did not enable additional or non-default filter lists, or I have identified which specific stock list is causing the issue.
• I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
• I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
• I have turned off all other extensions and the issue still persists. (exception "Firefox Multi-Account Containers").
• If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site or browser issue.
• I have verified that the browser I am using is up to date with no pending updates.
• I did not answer truthfully to ALL the above checkboxes.

URL address of the web page

https://ai-gov.devaccellabs.com/traces (setup dialog; sign-in required — see below for the public pages that show what the site is)

Category

[unknown]

Description

I own this site. It is DevAccel Labs' internal developer tool ("AI Gov" / Traces Sync). Its setup dialog shows the install command for our CLI with a Copy button, the same way developer-tool sites do. On Windows the command was

irm https://ai-gov.devaccellabs.com/install.ps1 | iex

and pressing Copy triggered the prevent-clipboard-write ClickFix rule (^irm .+? iex\b in filters-general.txt), showing "Beware, uBlock Origin blocked a potential ClickFix attack" to one of our developers on 2026-09-16. Nothing is written to the clipboard except on that button click; there is no auto-copy, no fake captcha, no obfuscation.

Requesting a ~ai-gov.devaccellabs.com exclusion on the generic rule (as for brew.sh / christitus.com / community-scripts.org / massgrave.dev / natfrp.com). The dialog itself is behind sign-in (company accounts only), but the domain's purpose is verifiable publicly:

• https://ai-gov.devaccellabs.com/about — what the tool is, who installs it and what it does/does not do
• https://ai-gov.devaccellabs.com/install.ps1 and https://ai-gov.devaccellabs.com/install — the two installer scripts, plain text (download from /releases/, SHA-256 verification against a signed manifest, user-level install, no elevation)

For transparency: as a workaround I have already changed the copied text to the spelled-out Invoke-RestMethod https://ai-gov.devaccellabs.com/install.ps1 | Invoke-Expression, which the current regex does not match. I would rather have the domain excluded than depend on that; happy to answer any questions or provide a test account.

Browser name and version

Chrome (current stable); reported by a colleague, reproduced by running the current rule's regex against the copied text.

Other extensions used

None

Country

No response

Screenshot(s)

Configuration

uBlock Origin: current stable (colleague's install; exact version not captured)
listset: defaults only (rule is in ublock-filters, filters-general.txt line "*,~edu,~edu.cn,…##+js(prevent-clipboard-write, …)")