{"data":{"skill":{"slug":"sickn33-distributed-debugging-debug-trace","name":"distributed-debugging-debug-trace","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/distributed-debugging-debug-trace","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"0ce08cae-8459-4947-864d-ba59a9c17544","skill_id":"d67b957f-78cf-4de0-9b71-a4660de6d615","version":5,"content_hash":"v3:f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526:f1edebdc8189f2cdab28e3ed1d1a4b2fee079921a362816131809c710a81211a:349f927b0d13221904be922761ac315b5fefed015c27e16475807d9ec34fa333:736b696c6c732f7369636b6e33332f64697374726962757465642d646562756767696e672d64656275672d7472616365:b55488a262562f6afe0093f0c315b2b2","risk_level":"critical","is_blocked":true,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"blocked","manual_install_policy":"allowed_with_warning","summary":"Most static findings are false positives caused by JavaScript template literals, explicit configuration reads, and ordinary profiler file output. Confirmed risks include unsafe dashboard rendering and debugger exposure. The playbook also contains unauthenticated runtime evaluation and sensitive telemetry patterns that require correction before publication.","remediation":[{"issue":"The remote debugger permits unauthenticated runtime expression evaluation and binds debugger interfaces broadly.","severity":"critical","suggestion":"Remove remote evaluation or require strong mutual authentication, authorization, TLS, audit logging, strict network isolation, and loopback binding by default."},{"issue":"Tracing exports complete request bodies and user or session identifiers without redaction.","severity":"high","suggestion":"Replace payload capture with a field allowlist, redact sensitive values, classify telemetry, and enforce access and retention controls."},{"issue":"The dashboard inserts unauthenticated WebSocket values through innerHTML.","severity":"high","suggestion":"Use authenticated WSS, validate message schemas, and render values with textContent or trusted encoding."},{"issue":"Production debugging replaces the process-wide console during individual requests.","severity":"high","suggestion":"Use request-scoped logging with asynchronous context and never return unrestricted diagnostic logs to clients."}],"risk_factor_evidence":[{"factor":"scripts","evidence":[{"file":"resources/implementation-playbook.md","line_end":1183,"line_start":1183},{"file":"resources/implementation-playbook.md","line_end":1195,"line_start":1195},{"file":"resources/implementation-playbook.md","line_end":1208,"line_start":1208}]},{"factor":"external_commands","evidence":[{"file":"resources/implementation-playbook.md","line_end":113,"line_start":111},{"file":"resources/implementation-playbook.md","line_end":116,"line_start":113},{"file":"resources/implementation-playbook.md","line_end":117,"line_start":116},{"file":"resources/implementation-playbook.md","line_end":148,"line_start":117},{"file":"resources/implementation-playbook.md","line_end":166,"line_start":148},{"file":"resources/implementation-playbook.md","line_end":214,"line_start":210},{"file":"resources/implementation-playbook.md","line_end":270,"line_start":214},{"file":"resources/implementation-playbook.md","line_end":408,"line_start":379},{"file":"resources/implementation-playbook.md","line_end":420,"line_start":408},{"file":"resources/implementation-playbook.md","line_end":503,"line_start":480},{"file":"resources/implementation-playbook.md","line_end":522,"line_start":503},{"file":"resources/implementation-playbook.md","line_end":533,"line_start":522},{"file":"resources/implementation-playbook.md","line_end":534,"line_start":533},{"file":"resources/implementation-playbook.md","line_end":535,"line_start":534},{"file":"resources/implementation-playbook.md","line_end":536,"line_start":535},{"file":"resources/implementation-playbook.md","line_end":583,"line_start":536},{"file":"resources/implementation-playbook.md","line_end":701,"line_start":686},{"file":"resources/implementation-playbook.md","line_end":708,"line_start":701},{"file":"resources/implementation-playbook.md","line_end":714,"line_start":708},{"file":"resources/implementation-playbook.md","line_end":729,"line_start":714},{"file":"resources/implementation-playbook.md","line_end":738,"line_start":729},{"file":"resources/implementation-playbook.md","line_end":791,"line_start":738},{"file":"resources/implementation-playbook.md","line_end":867,"line_start":791},{"file":"resources/implementation-playbook.md","line_end":992,"line_start":981},{"file":"resources/implementation-playbook.md","line_end":1110,"line_start":1082},{"file":"resources/implementation-playbook.md","line_end":1195,"line_start":1188},{"file":"resources/implementation-playbook.md","line_end":1207,"line_start":1200},{"file":"resources/implementation-playbook.md","line_end":1208,"line_start":1207},{"file":"resources/implementation-playbook.md","line_end":1242,"line_start":1212},{"file":"SKILL.md","line_end":38,"line_start":38},{"file":"SKILL.md","line_end":47,"line_start":47}]},{"factor":"network","evidence":[{"file":"resources/implementation-playbook.md","line_end":315,"line_start":315},{"file":"resources/implementation-playbook.md","line_end":388,"line_start":388},{"file":"resources/implementation-playbook.md","line_end":1163,"line_start":1163},{"file":"resources/implementation-playbook.md","line_end":294,"line_start":294},{"file":"resources/implementation-playbook.md","line_end":898,"line_start":898},{"file":"resources/implementation-playbook.md","line_end":899,"line_start":899},{"file":"resources/implementation-playbook.md","line_end":182,"line_start":182},{"file":"resources/implementation-playbook.md","line_end":268,"line_start":268},{"file":"resources/implementation-playbook.md","line_end":269,"line_start":269}]},{"factor":"filesystem","evidence":[{"file":"resources/implementation-playbook.md","line_end":681,"line_start":681},{"file":"resources/implementation-playbook.md","line_end":713,"line_start":713},{"file":"resources/implementation-playbook.md","line_end":737,"line_start":737},{"file":"resources/implementation-playbook.md","line_end":680,"line_start":680},{"file":"resources/implementation-playbook.md","line_end":713,"line_start":713},{"file":"resources/implementation-playbook.md","line_end":737,"line_start":737},{"file":"resources/implementation-playbook.md","line_end":56,"line_start":56}]},{"factor":"env_access","evidence":[{"file":"resources/implementation-playbook.md","line_end":146,"line_start":146},{"file":"resources/implementation-playbook.md","line_end":156,"line_start":156},{"file":"resources/implementation-playbook.md","line_end":294,"line_start":294},{"file":"resources/implementation-playbook.md","line_end":300,"line_start":300},{"file":"resources/implementation-playbook.md","line_end":301,"line_start":301},{"file":"resources/implementation-playbook.md","line_end":435,"line_start":435},{"file":"resources/implementation-playbook.md","line_end":447,"line_start":447},{"file":"resources/implementation-playbook.md","line_end":461,"line_start":461},{"file":"resources/implementation-playbook.md","line_end":464,"line_start":464},{"file":"resources/implementation-playbook.md","line_end":473,"line_start":473},{"file":"resources/implementation-playbook.md","line_end":478,"line_start":478},{"file":"resources/implementation-playbook.md","line_end":490,"line_start":490},{"file":"resources/implementation-playbook.md","line_end":604,"line_start":604},{"file":"resources/implementation-playbook.md","line_end":610,"line_start":610},{"file":"resources/implementation-playbook.md","line_end":622,"line_start":622},{"file":"resources/implementation-playbook.md","line_end":890,"line_start":890},{"file":"resources/implementation-playbook.md","line_end":891,"line_start":891},{"file":"resources/implementation-playbook.md","line_end":892,"line_start":892},{"file":"resources/implementation-playbook.md","line_end":893,"line_start":893},{"file":"resources/implementation-playbook.md","line_end":898,"line_start":898},{"file":"resources/implementation-playbook.md","line_end":899,"line_start":899},{"file":"resources/implementation-playbook.md","line_end":900,"line_start":900},{"file":"resources/implementation-playbook.md","line_end":905,"line_start":905},{"file":"resources/implementation-playbook.md","line_end":906,"line_start":906},{"file":"resources/implementation-playbook.md","line_end":907,"line_start":907},{"file":"resources/implementation-playbook.md","line_end":917,"line_start":917},{"file":"resources/implementation-playbook.md","line_end":947,"line_start":947},{"file":"resources/implementation-playbook.md","line_end":1003,"line_start":1003},{"file":"resources/implementation-playbook.md","line_end":1004,"line_start":1004},{"file":"resources/implementation-playbook.md","line_end":1005,"line_start":1005},{"file":"resources/implementation-playbook.md","line_end":1079,"line_start":1079},{"file":"resources/implementation-playbook.md","line_end":146,"line_start":146},{"file":"resources/implementation-playbook.md","line_end":156,"line_start":156},{"file":"resources/implementation-playbook.md","line_end":294,"line_start":294},{"file":"resources/implementation-playbook.md","line_end":300,"line_start":300},{"file":"resources/implementation-playbook.md","line_end":301,"line_start":301},{"file":"resources/implementation-playbook.md","line_end":435,"line_start":435},{"file":"resources/implementation-playbook.md","line_end":447,"line_start":447},{"file":"resources/implementation-playbook.md","line_end":461,"line_start":461},{"file":"resources/implementation-playbook.md","line_end":464,"line_start":464},{"file":"resources/implementation-playbook.md","line_end":473,"line_start":473},{"file":"resources/implementation-playbook.md","line_end":478,"line_start":478},{"file":"resources/implementation-playbook.md","line_end":490,"line_start":490},{"file":"resources/implementation-playbook.md","line_end":604,"line_start":604},{"file":"resources/implementation-playbook.md","line_end":610,"line_start":610},{"file":"resources/implementation-playbook.md","line_end":622,"line_start":622},{"file":"resources/implementation-playbook.md","line_end":890,"line_start":890},{"file":"resources/implementation-playbook.md","line_end":891,"line_start":891},{"file":"resources/implementation-playbook.md","line_end":892,"line_start":892},{"file":"resources/implementation-playbook.md","line_end":893,"line_start":893}]}],"critical_findings":[{"title":"Unauthenticated Remote Runtime Evaluation","locations":[{"file":"resources/implementation-playbook.md","line_end":255,"line_start":179}],"confidence":0.99,"description":"The remote debug server accepts WebSocket messages without authentication and sends caller expressions to Runtime.evaluate. Network clients can execute code in the process.","review_kind":"security","source_category":"semantic","source_severity":"critical","confidence_reasoning":"The server directly routes unauthenticated evaluate messages to the Node.js inspector. The default all-interface binding makes remote access plausible."}],"high_findings":[{"title":"innerHTML assignment (XSS risk)","locations":[{"file":"resources/implementation-playbook.md","line_end":1183,"line_start":1183}],"confidence":0.98,"description":"container.innerHTML = `","review_kind":"capability","source_category":"scripts","source_severity":"medium","confidence_reasoning":"The dashboard inserts WebSocket-supplied metrics into innerHTML without encoding. A crafted payload can execute script in the dashboard origin."},{"title":"innerHTML assignment (XSS risk)","locations":[{"file":"resources/implementation-playbook.md","line_end":1195,"line_start":1195}],"confidence":0.98,"description":"entry.innerHTML = `","review_kind":"capability","source_category":"scripts","source_severity":"medium","confidence_reasoning":"The dashboard inserts WebSocket-supplied trace fields into innerHTML without encoding. A crafted payload can execute script in the dashboard origin."},{"title":"innerHTML assignment (XSS risk)","locations":[{"file":"resources/implementation-playbook.md","line_end":1208,"line_start":1208}],"confidence":0.98,"description":"entry.innerHTML = `","review_kind":"capability","source_category":"scripts","source_severity":"medium","confidence_reasoning":"The dashboard inserts WebSocket-supplied log fields into innerHTML without encoding. A crafted payload can execute script in the dashboard origin."},{"title":"Hardcoded IP address","locations":[{"file":"resources/implementation-playbook.md","line_end":182,"line_start":182}],"confidence":0.99,"description":"this.host = options.host || '0.0.0.0';","review_kind":"capability","source_category":"network","source_severity":"medium","confidence_reasoning":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation."},{"title":"Hardcoded IP address","locations":[{"file":"resources/implementation-playbook.md","line_end":268,"line_start":268}],"confidence":0.99,"description":"ENV NODE_OPTIONS=\"--inspect=0.0.0.0:9229\"","review_kind":"capability","source_category":"network","source_severity":"medium","confidence_reasoning":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation."},{"title":"Hardcoded IP address","locations":[{"file":"resources/implementation-playbook.md","line_end":269,"line_start":269}],"confidence":0.99,"description":"CMD [\"node\", \"--inspect-brk=0.0.0.0:9229\", \"index.js\"]","review_kind":"capability","source_category":"network","source_severity":"medium","confidence_reasoning":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation."},{"title":"Sensitive Request Data Exported in Traces","locations":[{"file":"resources/implementation-playbook.md","line_end":325,"line_start":294}],"confidence":0.98,"description":"The tracing example records complete request bodies, user identifiers, and session identifiers. The configured span processor exports these values to Jaeger.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The code explicitly serializes request.body and records user and session identifiers. No field allowlist or redaction occurs before export."},{"title":"Cross-Request Debug Log Capture","locations":[{"file":"resources/implementation-playbook.md","line_end":1046,"line_start":1008}],"confidence":0.94,"description":"Production middleware replaces the process-wide console during one request. Concurrent request logs can enter another user debug context and expose sensitive data.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The console object is global, while capture state belongs to one request. Concurrent application activity can therefore be recorded in the wrong context."}],"medium_findings":[{"title":"WebSocket connection","locations":[{"file":"resources/implementation-playbook.md","line_end":1163,"line_start":1163}],"confidence":0.94,"description":"const ws = new WebSocket('ws://localhost:9231/debug');","review_kind":"capability","source_category":"network","source_severity":"medium","confidence_reasoning":"The dashboard accepts unauthenticated plaintext WebSocket data and passes it to rendering functions. This permits local data injection and interception."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":1361,"audit_model":"codex","audited_at":"2026-07-23T22:28:42.727+00:00","created_at":"2026-07-26T09:24:02.53147+00:00","static_findings":[{"id":"scripts:resources/implementation-playbook.md:1183:innerhtml-assignment-xss-risk","file":"resources/implementation-playbook.md","pattern":"innerHTML assignment (XSS risk)","snippet":"container.innerHTML = `","category":"scripts","line_end":1183,"severity":"medium","line_start":1183},{"id":"scripts:resources/implementation-playbook.md:1195:innerhtml-assignment-xss-risk","file":"resources/implementation-playbook.md","pattern":"innerHTML assignment (XSS risk)","snippet":"entry.innerHTML = `","category":"scripts","line_end":1195,"severity":"medium","line_start":1195},{"id":"scripts:resources/implementation-playbook.md:1208:innerhtml-assignment-xss-risk","file":"resources/implementation-playbook.md","pattern":"innerHTML assignment (XSS risk)","snippet":"entry.innerHTML = `","category":"scripts","line_end":1208,"severity":"medium","line_start":1208},{"id":"external_commands:resources/implementation-playbook.md:111:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"performance.mark(`${componentName}-start`);","category":"external_commands","line_end":113,"severity":"medium","line_start":111},{"id":"external_commands:resources/implementation-playbook.md:113:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"performance.mark(`${componentName}-end`);","category":"external_commands","line_end":116,"severity":"medium","line_start":113},{"id":"external_commands:resources/implementation-playbook.md:116:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"`${componentName}-start`,","category":"external_commands","line_end":117,"severity":"medium","line_start":116},{"id":"external_commands:resources/implementation-playbook.md:117:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"`${componentName}-end`","category":"external_commands","line_end":148,"severity":"medium","line_start":117},{"id":"external_commands:resources/implementation-playbook.md:148:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"original.call(console, `%c[${timestamp}] ${level.toUpperCase()}:`, style, ...args);","category":"external_commands","line_end":166,"severity":"medium","line_start":148},{"id":"external_commands:resources/implementation-playbook.md:210:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"debugUrl: `chrome-devtools://devtools/bundled/inspector.html?ws=${this.host}:${this.port}`","category":"external_commands","line_end":214,"severity":"medium","line_start":210},{"id":"external_commands:resources/implementation-playbook.md:214:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Remote debug server listening on ws://${this.host}:${this.wsPort}`);","category":"external_commands","line_end":270,"severity":"medium","line_start":214},{"id":"external_commands:resources/implementation-playbook.md:379:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"const span = this.tracer.startSpan(`${req.method} ${req.path}`, {","category":"external_commands","line_end":408,"severity":"medium","line_start":379},{"id":"external_commands:resources/implementation-playbook.md:408:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"message: `HTTP ${res.statusCode}`,","category":"external_commands","line_end":420,"severity":"medium","line_start":408},{"id":"external_commands:resources/implementation-playbook.md:480:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"index: `logs-${this.service}`,","category":"external_commands","line_end":503,"severity":"medium","line_start":480},{"id":"external_commands:resources/implementation-playbook.md:503:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"return `${timestamp} [${level}]: ${message}${metaString}`;","category":"external_commands","line_end":522,"severity":"medium","line_start":503},{"id":"external_commands:resources/implementation-playbook.md:522:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"this.logger.debug(`Timing: ${label}`, {","category":"external_commands","line_end":533,"severity":"medium","line_start":522},{"id":"external_commands:resources/implementation-playbook.md:533:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"rss: `${Math.round(usage.rss / 1024 / 1024)}MB`,","category":"external_commands","line_end":534,"severity":"medium","line_start":533},{"id":"external_commands:resources/implementation-playbook.md:534:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"heapTotal: `${Math.round(usage.heapTotal / 1024 / 1024)}MB`,","category":"external_commands","line_end":535,"severity":"medium","line_start":534},{"id":"external_commands:resources/implementation-playbook.md:535:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"heapUsed: `${Math.round(usage.heapUsed / 1024 / 1024)}MB`,","category":"external_commands","line_end":536,"severity":"medium","line_start":535},{"id":"external_commands:resources/implementation-playbook.md:536:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"external: `${Math.round(usage.external / 1024 / 1024)}MB`,","category":"external_commands","line_end":583,"severity":"medium","line_start":536},{"id":"external_commands:resources/implementation-playbook.md:686:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"const title = options.title || `cpu-profile-${id}`;","category":"external_commands","line_end":701,"severity":"medium","line_start":686},{"id":"external_commands:resources/implementation-playbook.md:701:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"throw new Error(`CPU profile ${id} not found`);","category":"external_commands","line_end":708,"severity":"medium","line_start":701},{"id":"external_commands:resources/implementation-playbook.md:708:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"const fileName = `${profileInfo.title}-${Date.now()}.cpuprofile`;","category":"external_commands","line_end":714,"severity":"medium","line_start":708},{"id":"external_commands:resources/implementation-playbook.md:714:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`CPU profile saved to ${filePath}`);","category":"external_commands","line_end":729,"severity":"medium","line_start":714},{"id":"external_commands:resources/implementation-playbook.md:729:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"const fileName = `heap-${tag}-${Date.now()}.heapsnapshot`;","category":"external_commands","line_end":738,"severity":"medium","line_start":729},{"id":"external_commands:resources/implementation-playbook.md:738:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"console.log(`Heap snapshot saved to ${filePath}`);","category":"external_commands","line_end":791,"severity":"medium","line_start":738},{"id":"external_commands:resources/implementation-playbook.md:791:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"console.warn(`Slow function execution: ${name} took ${duration}ms`);","category":"external_commands","line_end":867,"severity":"medium","line_start":791},{"id":"external_commands:resources/implementation-playbook.md:981:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"const id = profiler.startCPUProfile(`request-${Date.now()}`);","category":"external_commands","line_end":992,"severity":"medium","line_start":981},{"id":"external_commands:resources/implementation-playbook.md:1082:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"profiler.takeHeapSnapshot(`breakpoint-${Date.now()}`);","category":"external_commands","line_end":1110,"severity":"medium","line_start":1082},{"id":"external_commands:resources/implementation-playbook.md:1188:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"`;","category":"external_commands","line_end":1195,"severity":"medium","line_start":1188},{"id":"external_commands:resources/implementation-playbook.md:1200:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"`;","category":"external_commands","line_end":1207,"severity":"medium","line_start":1200},{"id":"external_commands:resources/implementation-playbook.md:1207:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"entry.className = `log-entry ${log.level}`;","category":"external_commands","line_end":1208,"severity":"medium","line_start":1207},{"id":"external_commands:resources/implementation-playbook.md:1212:ruby-shell-backtick-execution","file":"resources/implementation-playbook.md","pattern":"Ruby/shell backtick execution","snippet":"`;","category":"external_commands","line_end":1242,"severity":"medium","line_start":1212},{"id":"network:resources/implementation-playbook.md:315:http-https-request","file":"resources/implementation-playbook.md","pattern":"HTTP/HTTPS request","snippet":"span.setAttribute('http.request.body', JSON.stringify(request.body));","category":"network","line_end":315,"severity":"low","line_start":315},{"id":"network:resources/implementation-playbook.md:388:http-https-request","file":"resources/implementation-playbook.md","pattern":"HTTP/HTTPS request","snippet":"'http.request_content_length': req.get('content-length'),","category":"network","line_end":388,"severity":"low","line_start":388},{"id":"network:resources/implementation-playbook.md:1163:websocket-connection","file":"resources/implementation-playbook.md","pattern":"WebSocket connection","snippet":"const ws = new WebSocket('ws://localhost:9231/debug');","category":"network","line_end":1163,"severity":"medium","line_start":1163},{"id":"network:resources/implementation-playbook.md:294:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"endpoint: process.env.JAEGER_ENDPOINT || 'http://localhost:14268/api/traces',","category":"network","line_end":294,"severity":"low","line_start":294},{"id":"network:resources/implementation-playbook.md:898:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"jaeger: process.env.JAEGER_ENDPOINT || 'http://localhost:14268',","category":"network","line_end":898,"severity":"low","line_start":898},{"id":"network:resources/implementation-playbook.md:899:hardcoded-url","file":"resources/implementation-playbook.md","pattern":"Hardcoded URL","snippet":"elasticsearch: process.env.ELASTICSEARCH_URL || 'http://localhost:9200',","category":"network","line_end":899,"severity":"low","line_start":899},{"id":"network:resources/implementation-playbook.md:182:hardcoded-ip-address","file":"resources/implementation-playbook.md","pattern":"Hardcoded IP address","snippet":"this.host = options.host || '0.0.0.0';","category":"network","line_end":182,"severity":"medium","line_start":182},{"id":"network:resources/implementation-playbook.md:268:hardcoded-ip-address","file":"resources/implementation-playbook.md","pattern":"Hardcoded IP address","snippet":"ENV NODE_OPTIONS=\"--inspect=0.0.0.0:9229\"","category":"network","line_end":268,"severity":"medium","line_start":268},{"id":"network:resources/implementation-playbook.md:269:hardcoded-ip-address","file":"resources/implementation-playbook.md","pattern":"Hardcoded IP address","snippet":"CMD [\"node\", \"--inspect-brk=0.0.0.0:9229\", \"index.js\"]","category":"network","line_end":269,"severity":"medium","line_start":269},{"id":"filesystem:resources/implementation-playbook.md:681:node-js-fs-operations","file":"resources/implementation-playbook.md","pattern":"Node.js fs operations","snippet":"fs.mkdirSync(this.outputDir, { recursive: true });","category":"filesystem","line_end":681,"severity":"medium","line_start":681},{"id":"filesystem:resources/implementation-playbook.md:713:node-js-fs-operations","file":"resources/implementation-playbook.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filePath, result);","category":"filesystem","line_end":713,"severity":"medium","line_start":713},{"id":"filesystem:resources/implementation-playbook.md:737:node-js-fs-operations","file":"resources/implementation-playbook.md","pattern":"Node.js fs operations","snippet":"fs.writeFileSync(filePath, result);","category":"filesystem","line_end":737,"severity":"medium","line_start":737},{"id":"filesystem:resources/implementation-playbook.md:680:node-js-fs-stat-operations","file":"resources/implementation-playbook.md","pattern":"Node.js fs stat operations","snippet":"if (!fs.existsSync(this.outputDir)) {","category":"filesystem","line_end":680,"severity":"low","line_start":680},{"id":"filesystem:resources/implementation-playbook.md:713:synchronous-file-operations","file":"resources/implementation-playbook.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filePath, result);","category":"filesystem","line_end":713,"severity":"medium","line_start":713},{"id":"filesystem:resources/implementation-playbook.md:737:synchronous-file-operations","file":"resources/implementation-playbook.md","pattern":"Synchronous file operations","snippet":"fs.writeFileSync(filePath, result);","category":"filesystem","line_end":737,"severity":"medium","line_start":737},{"id":"filesystem:resources/implementation-playbook.md:56:hidden-file-access","file":"resources/implementation-playbook.md","pattern":"Hidden file access","snippet":"\"program\": \"${workspaceFolder}/node_modules/.bin/jest\",","category":"filesystem","line_end":56,"severity":"medium","line_start":56},{"id":"env_access:resources/implementation-playbook.md:146:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":146,"severity":"low","line_start":146},{"id":"env_access:resources/implementation-playbook.md:156:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":156,"severity":"low","line_start":156},{"id":"env_access:resources/implementation-playbook.md:294:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"endpoint: process.env.JAEGER_ENDPOINT || 'http://localhost:14268/api/traces',","category":"env_access","line_end":294,"severity":"low","line_start":294},{"id":"env_access:resources/implementation-playbook.md:300:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"[SemanticResourceAttributes.SERVICE_VERSION]: process.env.SERVICE_VERSION || '1.0.0',","category":"env_access","line_end":300,"severity":"low","line_start":300},{"id":"env_access:resources/implementation-playbook.md:301:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"[SemanticResourceAttributes.DEPLOYMENT_ENVIRONMENT]: process.env.NODE_ENV || 'development',","category":"env_access","line_end":301,"severity":"low","line_start":301},{"id":"env_access:resources/implementation-playbook.md:435:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"this.level = process.env.LOG_LEVEL || 'debug';","category":"env_access","line_end":435,"severity":"low","line_start":435},{"id":"env_access:resources/implementation-playbook.md:447:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":447,"severity":"low","line_start":447},{"id":"env_access:resources/implementation-playbook.md:461:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.DEBUG_LOG_FILE) {","category":"env_access","line_end":461,"severity":"low","line_start":461},{"id":"env_access:resources/implementation-playbook.md:464:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"filename: process.env.DEBUG_LOG_FILE,","category":"env_access","line_end":464,"severity":"low","line_start":464},{"id":"env_access:resources/implementation-playbook.md:473:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.ELASTICSEARCH_URL) {","category":"env_access","line_end":473,"severity":"low","line_start":473},{"id":"env_access:resources/implementation-playbook.md:478:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"node: process.env.ELASTICSEARCH_URL,","category":"env_access","line_end":478,"severity":"low","line_start":478},{"id":"env_access:resources/implementation-playbook.md:490:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"environment: process.env.NODE_ENV,","category":"env_access","line_end":490,"severity":"low","line_start":490},{"id":"env_access:resources/implementation-playbook.md:604:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"authToken: process.env.SENTRY_AUTH_TOKEN,","category":"env_access","line_end":604,"severity":"low","line_start":604},{"id":"env_access:resources/implementation-playbook.md:610:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"release: process.env.RELEASE_VERSION,","category":"env_access","line_end":610,"severity":"low","line_start":610},{"id":"env_access:resources/implementation-playbook.md:622:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'production') {","category":"env_access","line_end":622,"severity":"low","line_start":622},{"id":"env_access:resources/implementation-playbook.md:890:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"remoteDebugging: process.env.ENABLE_REMOTE_DEBUG === 'true',","category":"env_access","line_end":890,"severity":"low","line_start":890},{"id":"env_access:resources/implementation-playbook.md:891:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"tracing: process.env.ENABLE_TRACING === 'true',","category":"env_access","line_end":891,"severity":"low","line_start":891},{"id":"env_access:resources/implementation-playbook.md:892:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"profiling: process.env.ENABLE_PROFILING === 'true',","category":"env_access","line_end":892,"severity":"low","line_start":892},{"id":"env_access:resources/implementation-playbook.md:893:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"memoryMonitoring: process.env.ENABLE_MEMORY_MONITORING === 'true',","category":"env_access","line_end":893,"severity":"low","line_start":893},{"id":"env_access:resources/implementation-playbook.md:898:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"jaeger: process.env.JAEGER_ENDPOINT || 'http://localhost:14268',","category":"env_access","line_end":898,"severity":"low","line_start":898},{"id":"env_access:resources/implementation-playbook.md:899:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"elasticsearch: process.env.ELASTICSEARCH_URL || 'http://localhost:9200',","category":"env_access","line_end":899,"severity":"low","line_start":899},{"id":"env_access:resources/implementation-playbook.md:900:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"sentry: process.env.SENTRY_DSN,","category":"env_access","line_end":900,"severity":"low","line_start":900},{"id":"env_access:resources/implementation-playbook.md:905:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"traces: parseFloat(process.env.TRACE_SAMPLING_RATE || '0.1'),","category":"env_access","line_end":905,"severity":"low","line_start":905},{"id":"env_access:resources/implementation-playbook.md:906:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"profiles: parseFloat(process.env.PROFILE_SAMPLING_RATE || '0.01'),","category":"env_access","line_end":906,"severity":"low","line_start":906},{"id":"env_access:resources/implementation-playbook.md:907:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"logs: parseFloat(process.env.LOG_SAMPLING_RATE || '1.0'),","category":"env_access","line_end":907,"severity":"low","line_start":907},{"id":"env_access:resources/implementation-playbook.md:917:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"const level = process.env.DEBUG_LEVEL || 'info';","category":"env_access","line_end":917,"severity":"low","line_start":917},{"id":"env_access:resources/implementation-playbook.md:947:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":947,"severity":"low","line_start":947},{"id":"env_access:resources/implementation-playbook.md:1003:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"this.enabled = process.env.PRODUCTION_DEBUG === 'true';","category":"env_access","line_end":1003,"severity":"low","line_start":1003},{"id":"env_access:resources/implementation-playbook.md:1004:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"this.authToken = process.env.DEBUG_AUTH_TOKEN;","category":"env_access","line_end":1004,"severity":"low","line_start":1004},{"id":"env_access:resources/implementation-playbook.md:1005:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"this.allowedIPs = (process.env.DEBUG_ALLOWED_IPS || '').split(',');","category":"env_access","line_end":1005,"severity":"low","line_start":1005},{"id":"env_access:resources/implementation-playbook.md:1079:environment-variable-access-dot-notation","file":"resources/implementation-playbook.md","pattern":"Environment variable access (dot notation)","snippet":"if (process.env.NODE_ENV === 'production') {","category":"env_access","line_end":1079,"severity":"low","line_start":1079},{"id":"env_access:resources/implementation-playbook.md:146:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":146,"severity":"low","line_start":146},{"id":"env_access:resources/implementation-playbook.md:156:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":156,"severity":"low","line_start":156},{"id":"env_access:resources/implementation-playbook.md:294:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"endpoint: process.env.JAEGER_ENDPOINT || 'http://localhost:14268/api/traces',","category":"env_access","line_end":294,"severity":"low","line_start":294},{"id":"env_access:resources/implementation-playbook.md:300:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"[SemanticResourceAttributes.SERVICE_VERSION]: process.env.SERVICE_VERSION || '1.0.0',","category":"env_access","line_end":300,"severity":"low","line_start":300},{"id":"env_access:resources/implementation-playbook.md:301:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"[SemanticResourceAttributes.DEPLOYMENT_ENVIRONMENT]: process.env.NODE_ENV || 'development',","category":"env_access","line_end":301,"severity":"low","line_start":301},{"id":"env_access:resources/implementation-playbook.md:435:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"this.level = process.env.LOG_LEVEL || 'debug';","category":"env_access","line_end":435,"severity":"low","line_start":435},{"id":"env_access:resources/implementation-playbook.md:447:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":447,"severity":"low","line_start":447},{"id":"env_access:resources/implementation-playbook.md:461:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.DEBUG_LOG_FILE) {","category":"env_access","line_end":461,"severity":"low","line_start":461},{"id":"env_access:resources/implementation-playbook.md:464:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"filename: process.env.DEBUG_LOG_FILE,","category":"env_access","line_end":464,"severity":"low","line_start":464},{"id":"env_access:resources/implementation-playbook.md:473:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.ELASTICSEARCH_URL) {","category":"env_access","line_end":473,"severity":"low","line_start":473},{"id":"env_access:resources/implementation-playbook.md:478:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"node: process.env.ELASTICSEARCH_URL,","category":"env_access","line_end":478,"severity":"low","line_start":478},{"id":"env_access:resources/implementation-playbook.md:490:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"environment: process.env.NODE_ENV,","category":"env_access","line_end":490,"severity":"low","line_start":490},{"id":"env_access:resources/implementation-playbook.md:604:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"authToken: process.env.SENTRY_AUTH_TOKEN,","category":"env_access","line_end":604,"severity":"low","line_start":604},{"id":"env_access:resources/implementation-playbook.md:610:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"release: process.env.RELEASE_VERSION,","category":"env_access","line_end":610,"severity":"low","line_start":610},{"id":"env_access:resources/implementation-playbook.md:622:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'production') {","category":"env_access","line_end":622,"severity":"low","line_start":622},{"id":"env_access:resources/implementation-playbook.md:890:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"remoteDebugging: process.env.ENABLE_REMOTE_DEBUG === 'true',","category":"env_access","line_end":890,"severity":"low","line_start":890},{"id":"env_access:resources/implementation-playbook.md:891:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"tracing: process.env.ENABLE_TRACING === 'true',","category":"env_access","line_end":891,"severity":"low","line_start":891},{"id":"env_access:resources/implementation-playbook.md:892:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"profiling: process.env.ENABLE_PROFILING === 'true',","category":"env_access","line_end":892,"severity":"low","line_start":892},{"id":"env_access:resources/implementation-playbook.md:893:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"memoryMonitoring: process.env.ENABLE_MEMORY_MONITORING === 'true',","category":"env_access","line_end":893,"severity":"low","line_start":893},{"id":"env_access:resources/implementation-playbook.md:898:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"jaeger: process.env.JAEGER_ENDPOINT || 'http://localhost:14268',","category":"env_access","line_end":898,"severity":"low","line_start":898},{"id":"env_access:resources/implementation-playbook.md:899:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"elasticsearch: process.env.ELASTICSEARCH_URL || 'http://localhost:9200',","category":"env_access","line_end":899,"severity":"low","line_start":899},{"id":"env_access:resources/implementation-playbook.md:900:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"sentry: process.env.SENTRY_DSN,","category":"env_access","line_end":900,"severity":"low","line_start":900},{"id":"env_access:resources/implementation-playbook.md:905:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"traces: parseFloat(process.env.TRACE_SAMPLING_RATE || '0.1'),","category":"env_access","line_end":905,"severity":"low","line_start":905},{"id":"env_access:resources/implementation-playbook.md:906:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"profiles: parseFloat(process.env.PROFILE_SAMPLING_RATE || '0.01'),","category":"env_access","line_end":906,"severity":"low","line_start":906},{"id":"env_access:resources/implementation-playbook.md:907:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"logs: parseFloat(process.env.LOG_SAMPLING_RATE || '1.0'),","category":"env_access","line_end":907,"severity":"low","line_start":907},{"id":"env_access:resources/implementation-playbook.md:917:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"const level = process.env.DEBUG_LEVEL || 'info';","category":"env_access","line_end":917,"severity":"low","line_start":917},{"id":"env_access:resources/implementation-playbook.md:947:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'development') {","category":"env_access","line_end":947,"severity":"low","line_start":947},{"id":"env_access:resources/implementation-playbook.md:1003:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"this.enabled = process.env.PRODUCTION_DEBUG === 'true';","category":"env_access","line_end":1003,"severity":"low","line_start":1003},{"id":"env_access:resources/implementation-playbook.md:1004:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"this.authToken = process.env.DEBUG_AUTH_TOKEN;","category":"env_access","line_end":1004,"severity":"low","line_start":1004},{"id":"env_access:resources/implementation-playbook.md:1005:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"this.allowedIPs = (process.env.DEBUG_ALLOWED_IPS || '').split(',');","category":"env_access","line_end":1005,"severity":"low","line_start":1005},{"id":"env_access:resources/implementation-playbook.md:1079:environment-variable-object","file":"resources/implementation-playbook.md","pattern":"Environment variable object","snippet":"if (process.env.NODE_ENV === 'production') {","category":"env_access","line_end":1079,"severity":"low","line_start":1079},{"id":"sensitive:resources/implementation-playbook.md:146:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'development') {","category":"sensitive","line_end":146,"severity":"high","line_start":146},{"id":"sensitive:resources/implementation-playbook.md:156:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'development') {","category":"sensitive","line_end":156,"severity":"high","line_start":156},{"id":"sensitive:resources/implementation-playbook.md:294:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"endpoint: process.env.JAEGER_ENDPOINT || 'http://localhost:14268/api/traces',","category":"sensitive","line_end":294,"severity":"high","line_start":294},{"id":"sensitive:resources/implementation-playbook.md:300:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"[SemanticResourceAttributes.SERVICE_VERSION]: process.env.SERVICE_VERSION || '1.0.0',","category":"sensitive","line_end":300,"severity":"high","line_start":300},{"id":"sensitive:resources/implementation-playbook.md:301:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"[SemanticResourceAttributes.DEPLOYMENT_ENVIRONMENT]: process.env.NODE_ENV || 'development',","category":"sensitive","line_end":301,"severity":"high","line_start":301},{"id":"sensitive:resources/implementation-playbook.md:435:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"this.level = process.env.LOG_LEVEL || 'debug';","category":"sensitive","line_end":435,"severity":"high","line_start":435},{"id":"sensitive:resources/implementation-playbook.md:447:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'development') {","category":"sensitive","line_end":447,"severity":"high","line_start":447},{"id":"sensitive:resources/implementation-playbook.md:461:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.DEBUG_LOG_FILE) {","category":"sensitive","line_end":461,"severity":"high","line_start":461},{"id":"sensitive:resources/implementation-playbook.md:464:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"filename: process.env.DEBUG_LOG_FILE,","category":"sensitive","line_end":464,"severity":"high","line_start":464},{"id":"sensitive:resources/implementation-playbook.md:473:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.ELASTICSEARCH_URL) {","category":"sensitive","line_end":473,"severity":"high","line_start":473},{"id":"sensitive:resources/implementation-playbook.md:478:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"node: process.env.ELASTICSEARCH_URL,","category":"sensitive","line_end":478,"severity":"high","line_start":478},{"id":"sensitive:resources/implementation-playbook.md:490:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"environment: process.env.NODE_ENV,","category":"sensitive","line_end":490,"severity":"high","line_start":490},{"id":"sensitive:resources/implementation-playbook.md:604:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"authToken: process.env.SENTRY_AUTH_TOKEN,","category":"sensitive","line_end":604,"severity":"high","line_start":604},{"id":"sensitive:resources/implementation-playbook.md:610:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"release: process.env.RELEASE_VERSION,","category":"sensitive","line_end":610,"severity":"high","line_start":610},{"id":"sensitive:resources/implementation-playbook.md:622:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'production') {","category":"sensitive","line_end":622,"severity":"high","line_start":622},{"id":"sensitive:resources/implementation-playbook.md:890:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"remoteDebugging: process.env.ENABLE_REMOTE_DEBUG === 'true',","category":"sensitive","line_end":890,"severity":"high","line_start":890},{"id":"sensitive:resources/implementation-playbook.md:891:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"tracing: process.env.ENABLE_TRACING === 'true',","category":"sensitive","line_end":891,"severity":"high","line_start":891},{"id":"sensitive:resources/implementation-playbook.md:892:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"profiling: process.env.ENABLE_PROFILING === 'true',","category":"sensitive","line_end":892,"severity":"high","line_start":892},{"id":"sensitive:resources/implementation-playbook.md:893:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"memoryMonitoring: process.env.ENABLE_MEMORY_MONITORING === 'true',","category":"sensitive","line_end":893,"severity":"high","line_start":893},{"id":"sensitive:resources/implementation-playbook.md:898:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"jaeger: process.env.JAEGER_ENDPOINT || 'http://localhost:14268',","category":"sensitive","line_end":898,"severity":"high","line_start":898},{"id":"sensitive:resources/implementation-playbook.md:899:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"elasticsearch: process.env.ELASTICSEARCH_URL || 'http://localhost:9200',","category":"sensitive","line_end":899,"severity":"high","line_start":899},{"id":"sensitive:resources/implementation-playbook.md:900:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"sentry: process.env.SENTRY_DSN,","category":"sensitive","line_end":900,"severity":"high","line_start":900},{"id":"sensitive:resources/implementation-playbook.md:905:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"traces: parseFloat(process.env.TRACE_SAMPLING_RATE || '0.1'),","category":"sensitive","line_end":905,"severity":"high","line_start":905},{"id":"sensitive:resources/implementation-playbook.md:906:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"profiles: parseFloat(process.env.PROFILE_SAMPLING_RATE || '0.01'),","category":"sensitive","line_end":906,"severity":"high","line_start":906},{"id":"sensitive:resources/implementation-playbook.md:907:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"logs: parseFloat(process.env.LOG_SAMPLING_RATE || '1.0'),","category":"sensitive","line_end":907,"severity":"high","line_start":907},{"id":"sensitive:resources/implementation-playbook.md:917:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"const level = process.env.DEBUG_LEVEL || 'info';","category":"sensitive","line_end":917,"severity":"high","line_start":917},{"id":"sensitive:resources/implementation-playbook.md:947:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'development') {","category":"sensitive","line_end":947,"severity":"high","line_start":947},{"id":"sensitive:resources/implementation-playbook.md:1003:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"this.enabled = process.env.PRODUCTION_DEBUG === 'true';","category":"sensitive","line_end":1003,"severity":"high","line_start":1003},{"id":"sensitive:resources/implementation-playbook.md:1004:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"this.authToken = process.env.DEBUG_AUTH_TOKEN;","category":"sensitive","line_end":1004,"severity":"high","line_start":1004},{"id":"sensitive:resources/implementation-playbook.md:1005:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"this.allowedIPs = (process.env.DEBUG_ALLOWED_IPS || '').split(',');","category":"sensitive","line_end":1005,"severity":"high","line_start":1005},{"id":"sensitive:resources/implementation-playbook.md:1079:environment-file-access","file":"resources/implementation-playbook.md","pattern":"Environment file access","snippet":"if (process.env.NODE_ENV === 'production') {","category":"sensitive","line_end":1079,"severity":"high","line_start":1079},{"id":"sensitive:resources/implementation-playbook.md:500:certificate-key-files","file":"resources/implementation-playbook.md","pattern":"Certificate/key files","snippet":"const metaString = Object.keys(meta).length ?","category":"sensitive","line_end":500,"severity":"high","line_start":500},{"id":"blocker:resources/implementation-playbook.md:385:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"'http.host': req.hostname,","category":"blocker","line_end":385,"severity":"low","line_start":385},{"id":"blocker:resources/implementation-playbook.md:491:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"hostname: require('os').hostname(),","category":"blocker","line_end":491,"severity":"low","line_start":491},{"id":"blocker:resources/implementation-playbook.md:956:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"const id = profiler.startCPUProfile('manual');","category":"blocker","line_end":956,"severity":"low","line_start":956},{"id":"blocker:resources/implementation-playbook.md:981:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"const id = profiler.startCPUProfile(`request-${Date.now()}`);","category":"blocker","line_end":981,"severity":"low","line_start":981},{"id":"blocker:resources/implementation-playbook.md:1129:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":".log-entry { padding: 5px; border-bottom: 1px solid #3e3e3e; }","category":"blocker","line_end":1129,"severity":"low","line_start":1129},{"id":"blocker:resources/implementation-playbook.md:1307:system-reconnaissance","file":"resources/implementation-playbook.md","pattern":"System reconnaissance","snippet":"Focus on creating a comprehensive debugging environment that enhances developer productivity and ena","category":"blocker","line_end":1307,"severity":"low","line_start":1307},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- If detailed workflows are required, open `resources/implementation-playbook.md`.","category":"external_commands","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `resources/implementation-playbook.md` for detailed tooling and configuration patterns.","category":"external_commands","line_end":47,"severity":"medium","line_start":47},{"id":"blocker:SKILL.md:42:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Avoid enabling verbose tracing in production without safeguards.","category":"blocker","line_end":42,"severity":"low","line_start":42}],"finding_verdicts":[{"id":"scripts:resources/implementation-playbook.md:1183:innerhtml-assignment-xss-risk","reason":"The dashboard inserts WebSocket-supplied metrics into innerHTML without encoding. A crafted payload can execute script in the dashboard origin.","verdict":"confirmed","severity":"high","confidence":0.98},{"id":"scripts:resources/implementation-playbook.md:1195:innerhtml-assignment-xss-risk","reason":"The dashboard inserts WebSocket-supplied trace fields into innerHTML without encoding. A crafted payload can execute script in the dashboard origin.","verdict":"confirmed","severity":"high","confidence":0.98},{"id":"scripts:resources/implementation-playbook.md:1208:innerhtml-assignment-xss-risk","reason":"The dashboard inserts WebSocket-supplied log fields into innerHTML without encoding. A crafted payload can execute script in the dashboard origin.","verdict":"confirmed","severity":"high","confidence":0.98},{"id":"external_commands:resources/implementation-playbook.md:111:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:113:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:116:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:117:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:148:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:210:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:214:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:379:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:408:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:480:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:503:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:522:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:533:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:534:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:535:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:536:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:686:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:701:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:708:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:714:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:729:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:738:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:791:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:981:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:1082:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:1188:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax or its closing delimiter. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:1200:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax or its closing delimiter. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:1207:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:resources/implementation-playbook.md:1212:ruby-shell-backtick-execution","reason":"The snippet is JavaScript template-literal syntax or its closing delimiter. No Ruby or shell execution API is present.","verdict":"false_positive","confidence":0.99},{"id":"network:resources/implementation-playbook.md:315:http-https-request","reason":"This line serializes a request body into a span attribute; it does not issue an HTTP request. The resulting data exposure is covered separately.","verdict":"false_positive","confidence":0.99},{"id":"network:resources/implementation-playbook.md:388:http-https-request","reason":"This line reads the request content-length header for trace metadata. It does not create an HTTP or HTTPS connection.","verdict":"false_positive","confidence":0.99},{"id":"network:resources/implementation-playbook.md:1163:websocket-connection","reason":"The dashboard accepts unauthenticated plaintext WebSocket data and passes it to rendering functions. This permits local data injection and interception.","verdict":"confirmed","severity":"medium","confidence":0.94},{"id":"network:resources/implementation-playbook.md:294:hardcoded-url","reason":"The URL is a loopback default for a named observability service and can be overridden by configuration. It is not a secret or unrelated destination.","verdict":"false_positive","confidence":0.97},{"id":"network:resources/implementation-playbook.md:898:hardcoded-url","reason":"The URL is a loopback default for a named observability service and can be overridden by configuration. It is not a secret or unrelated destination.","verdict":"false_positive","confidence":0.97},{"id":"network:resources/implementation-playbook.md:899:hardcoded-url","reason":"The URL is a loopback default for a named observability service and can be overridden by configuration. It is not a secret or unrelated destination.","verdict":"false_positive","confidence":0.97},{"id":"network:resources/implementation-playbook.md:182:hardcoded-ip-address","reason":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"network:resources/implementation-playbook.md:268:hardcoded-ip-address","reason":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"network:resources/implementation-playbook.md:269:hardcoded-ip-address","reason":"The example binds the Node.js inspector or remote debug service to all network interfaces. Exposed debugger access can permit arbitrary runtime evaluation.","verdict":"confirmed","severity":"high","confidence":0.99},{"id":"filesystem:resources/implementation-playbook.md:681:node-js-fs-operations","reason":"The profiler creates its configured output directory or writes generated profile artifacts there. No unrelated file collection or destructive operation is shown.","verdict":"false_positive","confidence":0.9},{"id":"filesystem:resources/implementation-playbook.md:713:node-js-fs-operations","reason":"The profiler creates its configured output directory or writes generated profile artifacts there. No unrelated file collection or destructive operation is shown.","verdict":"false_positive","confidence":0.9},{"id":"filesystem:resources/implementation-playbook.md:737:node-js-fs-operations","reason":"The profiler creates its configured output directory or writes generated profile artifacts there. No unrelated file collection or destructive operation is shown.","verdict":"false_positive","confidence":0.9},{"id":"filesystem:resources/implementation-playbook.md:680:node-js-fs-stat-operations","reason":"The existence check is limited to the configured profiler output directory before creation. It does not enumerate or inspect sensitive files.","verdict":"false_positive","confidence":0.98},{"id":"filesystem:resources/implementation-playbook.md:713:synchronous-file-operations","reason":"The synchronous write stores a generated CPU or heap profile in the configured output directory. Blocking behavior is a performance concern, not a security threat.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:resources/implementation-playbook.md:737:synchronous-file-operations","reason":"The synchronous write stores a generated CPU or heap profile in the configured output directory. Blocking behavior is a performance concern, not a security threat.","verdict":"false_positive","confidence":0.91},{"id":"filesystem:resources/implementation-playbook.md:56:hidden-file-access","reason":"The path names the installed Jest executable under node_modules/.bin. It does not access credentials, user dotfiles, or concealed data.","verdict":"false_positive","confidence":1},{"id":"env_access:resources/implementation-playbook.md:146:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:156:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:294:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:300:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:301:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:435:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:447:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:461:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:464:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:473:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:478:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:490:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:604:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:610:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:622:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:890:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:891:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:892:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:893:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:898:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:899:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:900:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:905:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:906:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:907:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:917:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:947:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1003:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1004:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1005:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1079:environment-variable-access-dot-notation","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:146:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:156:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:294:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:300:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:301:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:435:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:447:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:461:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:464:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:473:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:478:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:490:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:604:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:610:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:622:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:890:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:891:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:892:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:893:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:898:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:899:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:900:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:905:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:906:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:907:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:917:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:947:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1003:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1004:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1005:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"env_access:resources/implementation-playbook.md:1079:environment-variable-object","reason":"The example reads one explicitly named runtime setting for debugging or observability configuration. It does not enumerate variables or send them to an unrelated destination.","verdict":"false_positive","confidence":0.98},{"id":"sensitive:resources/implementation-playbook.md:146:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:156:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:294:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:300:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:301:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:435:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:447:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:461:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:464:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:473:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:478:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:490:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:604:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:610:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:622:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:890:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:891:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:892:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:893:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:898:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:899:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:900:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:905:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:906:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:907:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:917:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:947:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:1003:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:1004:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:1005:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:1079:environment-file-access","reason":"The snippet reads an explicitly named process.env value and does not open an environment file. Its use matches the documented integration or feature configuration.","verdict":"false_positive","confidence":0.99},{"id":"sensitive:resources/implementation-playbook.md:500:certificate-key-files","reason":"Object.keys(meta) enumerates JavaScript object properties to format log metadata. It does not access certificates, private keys, or filesystem paths.","verdict":"false_positive","confidence":1},{"id":"blocker:resources/implementation-playbook.md:385:system-reconnaissance","reason":"The request hostname is recorded as standard HTTP trace metadata. The example does not scan hosts, interfaces, or network ranges.","verdict":"false_positive","confidence":0.97},{"id":"blocker:resources/implementation-playbook.md:491:system-reconnaissance","reason":"The local hostname is attached to structured application logs for source identification. It is expected observability metadata, not reconnaissance.","verdict":"false_positive","confidence":0.95},{"id":"blocker:resources/implementation-playbook.md:956:system-reconnaissance","reason":"This starts an application CPU profile with a local identifier. It does not discover system topology, accounts, interfaces, or services.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:981:system-reconnaissance","reason":"This starts an application CPU profile with a local identifier. It does not discover system topology, accounts, interfaces, or services.","verdict":"false_positive","confidence":0.99},{"id":"blocker:resources/implementation-playbook.md:1129:system-reconnaissance","reason":"The snippet is a CSS rule for dashboard log entries. It performs no execution or system discovery.","verdict":"false_positive","confidence":1},{"id":"blocker:resources/implementation-playbook.md:1307:system-reconnaissance","reason":"This is closing guidance about developer productivity and issue resolution. It contains no reconnaissance instruction or executable behavior.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The backticks delimit a Markdown file path. They do not invoke Ruby, a shell, or any command API.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:47:ruby-shell-backtick-execution","reason":"The backticks delimit a Markdown file path. They do not invoke Ruby, a shell, or any command API.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:42:system-reconnaissance","reason":"This is a safety instruction against unguarded verbose production tracing. It neither requests nor performs system reconnaissance.","verdict":"false_positive","confidence":1}],"semantic_findings":[{"title":"Unauthenticated Remote Runtime Evaluation","severity":"critical","locations":[{"file":"resources/implementation-playbook.md","line_end":255,"line_start":179}],"confidence":0.99,"description":"The remote debug server accepts WebSocket messages without authentication and sends caller expressions to Runtime.evaluate. Network clients can execute code in the process.","confidence_reasoning":"The server directly routes unauthenticated evaluate messages to the Node.js inspector. The default all-interface binding makes remote access plausible."},{"title":"Sensitive Request Data Exported in Traces","severity":"high","locations":[{"file":"resources/implementation-playbook.md","line_end":325,"line_start":294}],"confidence":0.98,"description":"The tracing example records complete request bodies, user identifiers, and session identifiers. The configured span processor exports these values to Jaeger.","confidence_reasoning":"The code explicitly serializes request.body and records user and session identifiers. No field allowlist or redaction occurs before export."},{"title":"Cross-Request Debug Log Capture","severity":"high","locations":[{"file":"resources/implementation-playbook.md","line_end":1046,"line_start":1008}],"confidence":0.94,"description":"Production middleware replaces the process-wide console during one request. Concurrent request logs can enter another user debug context and expose sensitive data.","confidence_reasoning":"The console object is global, while capture state belongs to one request. Concurrent application activity can therefore be recorded in the wrong context."}],"subject_marketplace_commit_sha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","subject_content_hash":"f1edebdc8189f2cdab28e3ed1d1a4b2fee079921a362816131809c710a81211a","subject_tree_hash":"349f927b0d13221904be922761ac315b5fefed015c27e16475807d9ec34fa333","subject_plugin_path":"skills/sickn33/distributed-debugging-debug-trace","audit_payload_hash":"b55488a262562f6afe0093f0c315b2b2","confirmed_risk_level":"critical","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526","contentHash":"f1edebdc8189f2cdab28e3ed1d1a4b2fee079921a362816131809c710a81211a","treeHash":"349f927b0d13221904be922761ac315b5fefed015c27e16475807d9ec34fa333","pluginPath":"skills/sickn33/distributed-debugging-debug-trace","auditPayloadHash":"b55488a262562f6afe0093f0c315b2b2"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-distributed-debugging-debug-trace/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"critical","confirmedFindingCount":3,"capabilityReviewCount":7,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"blocked","manualInstallPolicy":"allowed_with_warning","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}