{"data":{"skill":{"slug":"tencentcloudbase-cloudbase-cli","name":"cloudbase-cli","icon":"📦","repo":"https://github.com/tencentcloudbase/skills/tree/main/skills/cloudbase-cli","status":"approved","author":"tencentcloudbase","authorVersion":"2.23.8","skillstoreRevision":1},"audit":{"id":"83b3bea5-bf9d-4525-9385-7b7991361a24","skill_id":"4ee4dbf1-bb33-4ff3-a7de-be8f83723458","version":2,"content_hash":"v3:24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec:8194ca2224b4b53c90507fe22a24dce04beef040a97f5f3f8532533eeb282a49:f82954646e3af7b57e3ff69e76e5158522f65be78ef840c5f7318e88d1d2821b:736b696c6c732f74656e63656e74636c6f7564626173652f636c6f7564626173652d636c69:2c935685c79e20e1238d4af0a69200f8","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"AI review found that the 229 static findings are false positives from Markdown documentation, placeholder values, and CloudBase CLI examples. No prompt injection, malware intent, secret exfiltration, or unauthorized network behavior was found.","remediation":[],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"references/app.md","line_end":131,"line_start":131},{"file":"references/functions.md","line_end":269,"line_start":269},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":24,"line_start":24}]},{"factor":"env_access","evidence":[{"file":"references/cloudrun.md","line_end":234,"line_start":234},{"file":"references/cloudrun.md","line_end":235,"line_start":235},{"file":"references/core.md","line_end":300,"line_start":300},{"file":"references/core.md","line_end":300,"line_start":300},{"file":"references/core.md","line_end":58,"line_start":58},{"file":"references/core.md","line_end":61,"line_start":61},{"file":"references/functions.md","line_end":296,"line_start":296},{"file":"references/functions.md","line_end":297,"line_start":297},{"file":"references/functions.md","line_end":296,"line_start":296},{"file":"references/functions.md","line_end":297,"line_start":297},{"file":"references/functions.md","line_end":270,"line_start":270},{"file":"references/functions.md","line_end":290,"line_start":290},{"file":"references/functions.md","line_end":296,"line_start":296}]},{"factor":"external_commands","evidence":[{"file":"references/core.md","line_end":461,"line_start":458},{"file":"SKILL.md","line_end":10,"line_start":10},{"file":"SKILL.md","line_end":15,"line_start":15},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":20,"line_start":20},{"file":"SKILL.md","line_end":23,"line_start":23},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":28,"line_start":28},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":40,"line_start":40},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":49,"line_start":49},{"file":"SKILL.md","line_end":61,"line_start":61},{"file":"SKILL.md","line_end":62,"line_start":62},{"file":"SKILL.md","line_end":65,"line_start":65},{"file":"SKILL.md","line_end":69,"line_start":69},{"file":"SKILL.md","line_end":70,"line_start":70},{"file":"SKILL.md","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":83,"line_start":83},{"file":"SKILL.md","line_end":84,"line_start":84},{"file":"SKILL.md","line_end":85,"line_start":85},{"file":"SKILL.md","line_end":86,"line_start":86},{"file":"SKILL.md","line_end":87,"line_start":87},{"file":"SKILL.md","line_end":88,"line_start":88},{"file":"SKILL.md","line_end":89,"line_start":89},{"file":"SKILL.md","line_end":90,"line_start":90},{"file":"SKILL.md","line_end":91,"line_start":91},{"file":"SKILL.md","line_end":92,"line_start":92},{"file":"SKILL.md","line_end":96,"line_start":96},{"file":"SKILL.md","line_end":97,"line_start":97},{"file":"SKILL.md","line_end":98,"line_start":98},{"file":"SKILL.md","line_end":99,"line_start":99},{"file":"SKILL.md","line_end":104,"line_start":104},{"file":"SKILL.md","line_end":106,"line_start":106},{"file":"SKILL.md","line_end":107,"line_start":107}]},{"factor":"scripts","evidence":[{"file":"references/functions.md","line_end":64,"line_start":64},{"file":"references/functions.md","line_end":67,"line_start":67},{"file":"references/permission.md","line_end":50,"line_start":50}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":11,"total_lines":3125,"audit_model":"codex","audited_at":"2026-07-09T15:54:27.604+00:00","created_at":"2026-07-15T09:20:43.970118+00:00","static_findings":[{"id":"blocker:references/access.md:79:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"tcb domains add api.example.com --certid <certId> -e <envId> --yes","category":"blocker","line_end":79,"severity":"low","line_start":79},{"id":"blocker:references/access.md:82:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"tcb domains add cdn.example.com --certid <certId> --access-type CDN -e <envId> --yes","category":"blocker","line_end":82,"severity":"low","line_start":82},{"id":"blocker:references/access.md:85:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"tcb domains add custom.example.com --certid <certId> --access-type CUSTOM --custom-cname <cname> -e ","category":"blocker","line_end":85,"severity":"low","line_start":85},{"id":"blocker:references/access.md:214:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"tcb domains add $DOMAIN --certid $CERT_ID -e $ENV_ID --yes","category":"blocker","line_end":214,"severity":"low","line_start":214},{"id":"blocker:references/access.md:259:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"tcb domains add <domain> --certid <certId> -e <envId> --yes [--access-type CDN]","category":"blocker","line_end":259,"severity":"low","line_start":259},{"id":"blocker:references/access.md:280:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"| `证书 xxx 不存在` | Invalid cert ID | Get correct ID from Tencent Cloud SSL console |","category":"blocker","line_end":280,"severity":"low","line_start":280},{"id":"blocker:references/access.md:293:system-reconnaissance","file":"references/access.md","pattern":"System reconnaissance","snippet":"- [ ] Routes: `--data` JSON is valid and includes `domain` + `routes[].path`","category":"blocker","line_end":293,"severity":"low","line_start":293},{"id":"blocker:references/access.md:17:network-reconnaissance","file":"references/access.md","pattern":"Network reconnaissance","snippet":"- Configuring CORS security domains for cross-origin access","category":"blocker","line_end":18,"severity":"low","line_start":17},{"id":"network:references/app.md:131:hardcoded-url","file":"references/app.md","pattern":"Hardcoded URL","snippet":"\"envVariables\": { \"REACT_APP_API\": \"https://api.example.com\" },","category":"network","line_end":131,"severity":"low","line_start":131},{"id":"blocker:references/app.md:29:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy --env-id <envId>","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:references/app.md:32:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy my-app --env-id <envId>","category":"blocker","line_end":32,"severity":"low","line_start":32},{"id":"blocker:references/app.md:57:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy --env-id <envId>","category":"blocker","line_end":57,"severity":"low","line_start":57},{"id":"blocker:references/app.md:60:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy my-app --env-id <envId> --force","category":"blocker","line_end":60,"severity":"low","line_start":60},{"id":"blocker:references/app.md:69:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy my-app --env-id <envId> --cwd ./packages/frontend","category":"blocker","line_end":69,"severity":"low","line_start":69},{"id":"blocker:references/app.md:83:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions list my-app --env-id <envId>","category":"blocker","line_end":83,"severity":"low","line_start":83},{"id":"blocker:references/app.md:86:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions detail my-app --env-id <envId>","category":"blocker","line_end":86,"severity":"low","line_start":86},{"id":"blocker:references/app.md:89:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions detail my-app --version-name my-app-001 --env-id <envId>","category":"blocker","line_end":89,"severity":"low","line_start":89},{"id":"blocker:references/app.md:92:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions detail my-app --env-id <envId> --json | jq '.data.failReason'","category":"blocker","line_end":92,"severity":"low","line_start":92},{"id":"blocker:references/app.md:103:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app delete my-app --env-id <envId> --dry-run","category":"blocker","line_end":103,"severity":"low","line_start":103},{"id":"blocker:references/app.md:106:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app delete my-app --env-id <envId>","category":"blocker","line_end":106,"severity":"low","line_start":106},{"id":"blocker:references/app.md:109:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app delete my-app --env-id <envId> --yes","category":"blocker","line_end":109,"severity":"low","line_start":109},{"id":"blocker:references/app.md:152:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb deploy [name] --env-id <id>              # Deploy (shorthand)","category":"blocker","line_end":152,"severity":"low","line_start":152},{"id":"blocker:references/app.md:153:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app deploy [name] --env-id <id>          # Deploy (full form)","category":"blocker","line_end":153,"severity":"low","line_start":153},{"id":"blocker:references/app.md:155:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app info <name> --env-id <id>            # App details","category":"blocker","line_end":155,"severity":"low","line_start":155},{"id":"blocker:references/app.md:156:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions list <name> --env-id <id>   # List versions","category":"blocker","line_end":156,"severity":"low","line_start":156},{"id":"blocker:references/app.md:157:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app versions detail <name> --env-id <id> # Version details","category":"blocker","line_end":157,"severity":"low","line_start":157},{"id":"blocker:references/app.md:158:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"tcb app delete <name> --env-id <id>          # Delete app","category":"blocker","line_end":158,"severity":"low","line_start":158},{"id":"blocker:references/app.md:186:system-reconnaissance","file":"references/app.md","pattern":"System reconnaissance","snippet":"To skip build entirely in CI: `tcb deploy my-app --env-id env-xxx --build-command '' --output-dir '.","category":"blocker","line_end":186,"severity":"low","line_start":186},{"id":"env_access:references/cloudrun.md:234:database-connection-strings","file":"references/cloudrun.md","pattern":"Database connection strings","snippet":"tcb secrets set DATABASE_URL \"mysql://...\" --env-id <envId>","category":"env_access","line_end":234,"severity":"high","line_start":234},{"id":"env_access:references/cloudrun.md:235:generic-api-secret-keys","file":"references/cloudrun.md","pattern":"Generic API/secret keys","snippet":"tcb secrets set API_SECRET \"...\" --env-id <envId>","category":"env_access","line_end":235,"severity":"high","line_start":235},{"id":"blocker:references/cloudrun.md:39:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy --service-name <serviceName> --env-id <envId>","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"blocker:references/cloudrun.md:42:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy --service-name <serviceName> --port 8080 --env-id <envId>","category":"blocker","line_end":42,"severity":"low","line_start":42},{"id":"blocker:references/cloudrun.md:45:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy --service-name <serviceName> --install-dependency true --env-id <envId>","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:references/cloudrun.md:48:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy --service-name <serviceName> --traffic --env-id <envId>","category":"blocker","line_end":48,"severity":"low","line_start":48},{"id":"blocker:references/cloudrun.md:51:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy --service-name <serviceName> --force --env-id <envId>","category":"blocker","line_end":51,"severity":"low","line_start":51},{"id":"blocker:references/cloudrun.md:62:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun list --env-id <envId>","category":"blocker","line_end":62,"severity":"low","line_start":62},{"id":"blocker:references/cloudrun.md:65:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun list --service-name <serviceName> --env-id <envId>","category":"blocker","line_end":65,"severity":"low","line_start":65},{"id":"blocker:references/cloudrun.md:66:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun list --service-type container --env-id <envId>","category":"blocker","line_end":66,"severity":"low","line_start":66},{"id":"blocker:references/cloudrun.md:90:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--env-id <envId> \\","category":"blocker","line_end":90,"severity":"low","line_start":90},{"id":"blocker:references/cloudrun.md:94:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"> ⚠️ Use `--remark` for meaningful version tracking (e.g. `\"v1.2.3 feat: add auth\"`). Avoid vague re","category":"blocker","line_end":94,"severity":"low","line_start":94},{"id":"blocker:references/cloudrun.md:105:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun traffic get --service-name <serviceName> --env-id <envId>","category":"blocker","line_end":105,"severity":"low","line_start":105},{"id":"blocker:references/cloudrun.md:115:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--env-id <envId> \\","category":"blocker","line_end":115,"severity":"low","line_start":115},{"id":"blocker:references/cloudrun.md:119:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app versions list my-service --env-id <envId>","category":"blocker","line_end":119,"severity":"low","line_start":119},{"id":"blocker:references/cloudrun.md:123:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--service-name my-service --env-id <envId> \\","category":"blocker","line_end":123,"severity":"low","line_start":123},{"id":"blocker:references/cloudrun.md:128:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--service-name my-service --env-id <envId> \\","category":"blocker","line_end":128,"severity":"low","line_start":128},{"id":"blocker:references/cloudrun.md:133:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--service-name my-service --env-id <envId> \\","category":"blocker","line_end":133,"severity":"low","line_start":133},{"id":"blocker:references/cloudrun.md:145:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"--service-name my-service --env-id <envId> \\","category":"blocker","line_end":145,"severity":"low","line_start":145},{"id":"blocker:references/cloudrun.md:152:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb logs search --service my-service --level error --env-id <envId>","category":"blocker","line_end":152,"severity":"low","line_start":152},{"id":"blocker:references/cloudrun.md:153:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb logs search --service my-service --limit 50 --env-id <envId>","category":"blocker","line_end":153,"severity":"low","line_start":153},{"id":"blocker:references/cloudrun.md:154:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app info my-service --env-id <envId>","category":"blocker","line_end":154,"severity":"low","line_start":154},{"id":"blocker:references/cloudrun.md:164:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app deploy --service-name svc --image $IMAGE --env-id dev-env-xxx","category":"blocker","line_end":164,"severity":"low","line_start":164},{"id":"blocker:references/cloudrun.md:166:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app deploy --service-name svc --image $IMAGE --env-id staging-env-xxx","category":"blocker","line_end":166,"severity":"low","line_start":166},{"id":"blocker:references/cloudrun.md:168:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app deploy --service-name svc --image $IMAGE --env-id prod-env-xxx --dry-run","category":"blocker","line_end":168,"severity":"low","line_start":168},{"id":"blocker:references/cloudrun.md:169:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb app deploy --service-name svc --image $IMAGE --env-id prod-env-xxx \\","category":"blocker","line_end":169,"severity":"low","line_start":169},{"id":"blocker:references/cloudrun.md:179:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run --env-id <envId>","category":"blocker","line_end":179,"severity":"low","line_start":179},{"id":"blocker:references/cloudrun.md:182:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run --hot-reload true --env-id <envId>","category":"blocker","line_end":182,"severity":"low","line_start":182},{"id":"blocker:references/cloudrun.md:185:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run --port 3000 --env-id <envId>","category":"blocker","line_end":185,"severity":"low","line_start":185},{"id":"blocker:references/cloudrun.md:188:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run --mode agent --agent-id <agentId> --env-id <envId>","category":"blocker","line_end":188,"severity":"low","line_start":188},{"id":"blocker:references/cloudrun.md:191:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run --dry-run true --env-id <envId>","category":"blocker","line_end":191,"severity":"low","line_start":191},{"id":"blocker:references/cloudrun.md:212:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun download --service-name <serviceName> --target <path> --env-id <envId>","category":"blocker","line_end":212,"severity":"low","line_start":212},{"id":"blocker:references/cloudrun.md:215:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun download --service-name <serviceName> --force --env-id <envId>","category":"blocker","line_end":215,"severity":"low","line_start":215},{"id":"blocker:references/cloudrun.md:218:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun delete --service-name <serviceName> --env-id <envId>","category":"blocker","line_end":218,"severity":"low","line_start":218},{"id":"blocker:references/cloudrun.md:221:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun delete --service-name <serviceName> --force --env-id <envId>","category":"blocker","line_end":221,"severity":"low","line_start":221},{"id":"blocker:references/cloudrun.md:234:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb secrets set DATABASE_URL \"mysql://...\" --env-id <envId>","category":"blocker","line_end":234,"severity":"low","line_start":234},{"id":"blocker:references/cloudrun.md:235:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb secrets set API_SECRET \"...\" --env-id <envId>","category":"blocker","line_end":235,"severity":"low","line_start":235},{"id":"blocker:references/cloudrun.md:238:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb secrets list --env-id <envId>","category":"blocker","line_end":238,"severity":"low","line_start":238},{"id":"blocker:references/cloudrun.md:251:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun deploy    --service-name <n> --env-id <id>     # Deploy service","category":"blocker","line_end":251,"severity":"low","line_start":251},{"id":"blocker:references/cloudrun.md:252:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun list      --env-id <id>                        # List services","category":"blocker","line_end":252,"severity":"low","line_start":252},{"id":"blocker:references/cloudrun.md:253:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun download  --service-name <n> --env-id <id>     # Download code","category":"blocker","line_end":253,"severity":"low","line_start":253},{"id":"blocker:references/cloudrun.md:254:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun delete    --service-name <n> --env-id <id>     # Delete service","category":"blocker","line_end":254,"severity":"low","line_start":254},{"id":"blocker:references/cloudrun.md:255:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun run       --env-id <id>                        # Local run (function only)","category":"blocker","line_end":255,"severity":"low","line_start":255},{"id":"blocker:references/cloudrun.md:256:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun traffic get  --service-name <n> --env-id <id>  # View traffic","category":"blocker","line_end":256,"severity":"low","line_start":256},{"id":"blocker:references/cloudrun.md:257:system-reconnaissance","file":"references/cloudrun.md","pattern":"System reconnaissance","snippet":"tcb cloudrun traffic set  --service-name <n> --env-id <id> --version-weights ...  # Set traffic","category":"blocker","line_end":257,"severity":"low","line_start":257},{"id":"external_commands:references/core.md:458:ruby-shell-backtick-execution","file":"references/core.md","pattern":"Ruby/shell backtick execution","snippet":"--env-id <envId>    # Temporarily override env (does not change `env use` setting)","category":"external_commands","line_end":461,"severity":"medium","line_start":458},{"id":"env_access:references/core.md:300:environment-variable-object","file":"references/core.md","pattern":"Environment variable object","snippet":"| `envVariables` | object | `{}` | Runtime env vars (`process.env.*` / `os.environ[]`) |","category":"env_access","line_end":300,"severity":"low","line_start":300},{"id":"env_access:references/core.md:300:python-environment-access","file":"references/core.md","pattern":"Python environment access","snippet":"| `envVariables` | object | `{}` | Runtime env vars (`process.env.*` / `os.environ[]`) |","category":"env_access","line_end":300,"severity":"low","line_start":300},{"id":"env_access:references/core.md:58:generic-api-secret-keys","file":"references/core.md","pattern":"Generic API/secret keys","snippet":"tcb login --apiKeyId $SECRET_ID --apiKey $SECRET_KEY","category":"env_access","line_end":58,"severity":"high","line_start":58},{"id":"env_access:references/core.md:61:generic-api-secret-keys","file":"references/core.md","pattern":"Generic API/secret keys","snippet":"tcb login --apiKeyId $TMP_SECRET_ID --apiKey $TMP_SECRET_KEY --token $SESSION_TOKEN","category":"env_access","line_end":61,"severity":"high","line_start":61},{"id":"sensitive:references/core.md:300:environment-file-access","file":"references/core.md","pattern":"Environment file access","snippet":"| `envVariables` | object | `{}` | Runtime env vars (`process.env.*` / `os.environ[]`) |","category":"sensitive","line_end":300,"severity":"high","line_start":300},{"id":"blocker:references/core.md:106:system-reconnaissance","file":"references/core.md","pattern":"System reconnaissance","snippet":"⚠️ **Always confirm envId before any operation** to avoid accidentally modifying production.","category":"blocker","line_end":106,"severity":"low","line_start":106},{"id":"blocker:references/core.md:128:system-reconnaissance","file":"references/core.md","pattern":"System reconnaissance","snippet":"tcb env rename <newAlias> --env-id <envId> --yes  # Rename alias","category":"blocker","line_end":128,"severity":"low","line_start":128},{"id":"blocker:references/core.md:137:system-reconnaissance","file":"references/core.md","pattern":"System reconnaissance","snippet":"tcb app deploy --env-id <envId>   # Override without changing default","category":"blocker","line_end":137,"severity":"low","line_start":137},{"id":"blocker:references/core.md:395:system-reconnaissance","file":"references/core.md","pattern":"System reconnaissance","snippet":"| 3 | Invalid input | Missing/malformed params | Check `--help`, fix params |","category":"blocker","line_end":395,"severity":"low","line_start":395},{"id":"blocker:references/core.md:458:system-reconnaissance","file":"references/core.md","pattern":"System reconnaissance","snippet":"--env-id <envId>    # Temporarily override env (does not change `env use` setting)","category":"blocker","line_end":458,"severity":"low","line_start":458},{"id":"scripts:references/functions.md:64:dynamic-function-constructor","file":"references/functions.md","pattern":"Dynamic function constructor","snippet":"# Event Function(普通云函数)","category":"scripts","line_end":64,"severity":"high","line_start":64},{"id":"scripts:references/functions.md:67:dynamic-function-constructor","file":"references/functions.md","pattern":"Dynamic function constructor","snippet":"# HTTP Function(HTTP 云函数)— requires scf_bootstrap","category":"scripts","line_end":67,"severity":"high","line_start":67},{"id":"network:references/functions.md:269:hardcoded-ip-address","file":"references/functions.md","pattern":"Hardcoded IP address","snippet":"\"DB_HOST\": \"10.0.0.1\",","category":"network","line_end":269,"severity":"medium","line_start":269},{"id":"env_access:references/functions.md:296:environment-variable-access-dot-notation","file":"references/functions.md","pattern":"Environment variable access (dot notation)","snippet":"const apiKey = process.env.API_KEY;","category":"env_access","line_end":296,"severity":"low","line_start":296},{"id":"env_access:references/functions.md:297:environment-variable-access-dot-notation","file":"references/functions.md","pattern":"Environment variable access (dot notation)","snippet":"const dbUrl = process.env.DB_URL;","category":"env_access","line_end":297,"severity":"low","line_start":297},{"id":"env_access:references/functions.md:296:environment-variable-object","file":"references/functions.md","pattern":"Environment variable object","snippet":"const apiKey = process.env.API_KEY;","category":"env_access","line_end":296,"severity":"low","line_start":296},{"id":"env_access:references/functions.md:297:environment-variable-object","file":"references/functions.md","pattern":"Environment variable object","snippet":"const dbUrl = process.env.DB_URL;","category":"env_access","line_end":297,"severity":"low","line_start":297},{"id":"env_access:references/functions.md:270:generic-api-secret-keys","file":"references/functions.md","pattern":"Generic API/secret keys","snippet":"\"API_KEY\": \"{{YOUR_API_KEY}}\"  // 替换为实际密钥","category":"env_access","line_end":270,"severity":"high","line_start":270},{"id":"env_access:references/functions.md:290:generic-api-secret-keys","file":"references/functions.md","pattern":"Generic API/secret keys","snippet":"export API_KEY=\"$CI_SECRET_API_KEY\"","category":"env_access","line_end":290,"severity":"high","line_start":290},{"id":"env_access:references/functions.md:296:generic-api-secret-keys","file":"references/functions.md","pattern":"Generic API/secret keys","snippet":"const apiKey = process.env.API_KEY;","category":"env_access","line_end":296,"severity":"high","line_start":296},{"id":"sensitive:references/functions.md:296:environment-file-access","file":"references/functions.md","pattern":"Environment file access","snippet":"const apiKey = process.env.API_KEY;","category":"sensitive","line_end":296,"severity":"high","line_start":296},{"id":"sensitive:references/functions.md:297:environment-file-access","file":"references/functions.md","pattern":"Environment file access","snippet":"const dbUrl = process.env.DB_URL;","category":"sensitive","line_end":297,"severity":"high","line_start":297},{"id":"blocker:references/functions.md:451:system-reconnaissance","file":"references/functions.md","pattern":"System reconnaissance","snippet":"- [ ] Did NOT overwrite — all existing vars preserved?","category":"blocker","line_end":451,"severity":"low","line_start":451},{"id":"blocker:references/hosting.md:29:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting detail --env-id <envId>","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:references/hosting.md:35:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./dist --env-id <envId> --yes","category":"blocker","line_end":35,"severity":"low","line_start":35},{"id":"blocker:references/hosting.md:38:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting list --env-id <envId>","category":"blocker","line_end":38,"severity":"low","line_start":38},{"id":"blocker:references/hosting.md:45:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy --env-id <envId> --yes","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:references/hosting.md:48:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./dist /v2 --env-id <envId> --yes","category":"blocker","line_end":48,"severity":"low","line_start":48},{"id":"blocker:references/hosting.md:51:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./index.html --env-id <envId> --yes","category":"blocker","line_end":51,"severity":"low","line_start":51},{"id":"blocker:references/hosting.md:54:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./dist/index.html /index.html --env-id <envId> --yes","category":"blocker","line_end":54,"severity":"low","line_start":54},{"id":"blocker:references/hosting.md:57:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./dist --env-id $ENV_ID --yes --json","category":"blocker","line_end":57,"severity":"low","line_start":57},{"id":"blocker:references/hosting.md:68:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete --dry-run --env-id <envId>","category":"blocker","line_end":68,"severity":"low","line_start":68},{"id":"blocker:references/hosting.md:71:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete path/to/file --env-id <envId> --yes","category":"blocker","line_end":71,"severity":"low","line_start":71},{"id":"blocker:references/hosting.md:74:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete path/to/dir --dir --env-id <envId> --yes","category":"blocker","line_end":74,"severity":"low","line_start":74},{"id":"blocker:references/hosting.md:85:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete --dry-run --env-id <envId>","category":"blocker","line_end":85,"severity":"low","line_start":85},{"id":"blocker:references/hosting.md:88:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete --env-id <envId> --yes","category":"blocker","line_end":88,"severity":"low","line_start":88},{"id":"blocker:references/hosting.md:91:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy ./dist --env-id <envId> --yes","category":"blocker","line_end":91,"severity":"low","line_start":91},{"id":"blocker:references/hosting.md:102:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting list --env-id <envId>","category":"blocker","line_end":102,"severity":"low","line_start":102},{"id":"blocker:references/hosting.md:105:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting list --env-id <envId> --limit 10 --offset 20","category":"blocker","line_end":105,"severity":"low","line_start":105},{"id":"blocker:references/hosting.md:108:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting list --env-id <envId> --json","category":"blocker","line_end":108,"severity":"low","line_start":108},{"id":"blocker:references/hosting.md:117:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting download path/to/file.txt --env-id <envId>","category":"blocker","line_end":117,"severity":"low","line_start":117},{"id":"blocker:references/hosting.md:120:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting download path/to/file.txt ./local --env-id <envId>","category":"blocker","line_end":120,"severity":"low","line_start":120},{"id":"blocker:references/hosting.md:123:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting download path/to/dir ./local --dir --env-id <envId>","category":"blocker","line_end":123,"severity":"low","line_start":123},{"id":"blocker:references/hosting.md:126:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting download / ./hosting-backup --dir --env-id <envId>","category":"blocker","line_end":126,"severity":"low","line_start":126},{"id":"blocker:references/hosting.md:135:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"| `-e, --env-id <envId>` | Target environment ID |","category":"blocker","line_end":135,"severity":"low","line_start":135},{"id":"blocker:references/hosting.md:148:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting detail   --env-id <id>                    # View hosting service info","category":"blocker","line_end":148,"severity":"low","line_start":148},{"id":"blocker:references/hosting.md:149:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting deploy   <localPath> [cloudPath] --env-id <id>  # Deploy files","category":"blocker","line_end":149,"severity":"low","line_start":149},{"id":"blocker:references/hosting.md:150:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting delete   [cloudPath] --env-id <id>        # Delete files","category":"blocker","line_end":150,"severity":"low","line_start":150},{"id":"blocker:references/hosting.md:151:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting list     --env-id <id>                    # List hosted files","category":"blocker","line_end":151,"severity":"low","line_start":151},{"id":"blocker:references/hosting.md:152:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"tcb hosting download <cloudPath> [localPath] --env-id <id>  # Download files","category":"blocker","line_end":152,"severity":"low","line_start":152},{"id":"blocker:references/hosting.md:172:system-reconnaissance","file":"references/hosting.md","pattern":"System reconnaissance","snippet":"- [ ] Hosting service enabled (`tcb hosting detail --env-id <envId>`)","category":"blocker","line_end":172,"severity":"low","line_start":172},{"id":"blocker:references/mysql.md:67:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db execute -e <envId> --sql \"UPDATE users SET status = 'inactive' WHERE id = 1001\" --json","category":"blocker","line_end":67,"severity":"low","line_start":67},{"id":"blocker:references/mysql.md:93:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db instance config get -e <envId> --instance-id <instanceId> --json","category":"blocker","line_end":93,"severity":"low","line_start":93},{"id":"blocker:references/mysql.md:100:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db instance config get -e <envId> --instance-id <instanceId> --json","category":"blocker","line_end":100,"severity":"low","line_start":100},{"id":"blocker:references/mysql.md:103:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db instance config set -e <envId> --instance-id <instanceId> --cpu 2 --memory 4 --yes","category":"blocker","line_end":103,"severity":"low","line_start":103},{"id":"blocker:references/mysql.md:113:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db instance restart -e <envId> --instance-id <instanceId>","category":"blocker","line_end":113,"severity":"low","line_start":113},{"id":"blocker:references/mysql.md:149:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db backup restore -e <envId> --strategy snapRollback --backup-id <backupId>","category":"blocker","line_end":149,"severity":"low","line_start":149},{"id":"blocker:references/mysql.md:165:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db backup drop -e <envId> --backup-id <backupId> --yes","category":"blocker","line_end":165,"severity":"low","line_start":165},{"id":"blocker:references/mysql.md:178:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db backup restore -e <envId> --strategy snapRollback --backup-id <backupId>","category":"blocker","line_end":178,"severity":"low","line_start":178},{"id":"blocker:references/mysql.md:187:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db monitor slow-query -e <envId> --instance-id <instanceId> --json","category":"blocker","line_end":187,"severity":"low","line_start":187},{"id":"blocker:references/mysql.md:190:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db monitor slow-query -e <envId> --instance-id <instanceId> \\","category":"blocker","line_end":190,"severity":"low","line_start":190},{"id":"blocker:references/mysql.md:219:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db monitor slow-query -e <envId> --instance-id <instanceId> --json","category":"blocker","line_end":219,"severity":"low","line_start":219},{"id":"blocker:references/mysql.md:240:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db backup restore -e <envId> --strategy snapRollback --backup-id <backupId>","category":"blocker","line_end":240,"severity":"low","line_start":240},{"id":"blocker:references/mysql.md:247:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"tcb db backup drop -e <envId> --backup-id <backupId> --yes","category":"blocker","line_end":247,"severity":"low","line_start":247},{"id":"blocker:references/mysql.md:256:system-reconnaissance","file":"references/mysql.md","pattern":"System reconnaissance","snippet":"| Missing instance in `--json` mode | `--instance-id` omitted | Add `--instance-id <id>` explicitly ","category":"blocker","line_end":256,"severity":"low","line_start":256},{"id":"blocker:references/nosql.md:231:system-reconnaissance","file":"references/nosql.md","pattern":"System reconnaissance","snippet":"| `--command` parse failure | Not a valid JSON array | Validate JSON locally; must be `[...]` not `{","category":"blocker","line_end":231,"severity":"low","line_start":231},{"id":"blocker:references/nosql.md:245:system-reconnaissance","file":"references/nosql.md","pattern":"System reconnaissance","snippet":"- [ ] `--command` is a valid JSON **array** (not a single object)?","category":"blocker","line_end":245,"severity":"low","line_start":245},{"id":"scripts:references/permission.md:50:dynamic-function-constructor","file":"references/permission.md","pattern":"Dynamic function constructor","snippet":"# Function (custom only, --rule required)","category":"scripts","line_end":50,"severity":"high","line_start":50},{"id":"blocker:references/permission.md:35:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get --env-id <envId>                        # all resource types","category":"blocker","line_end":35,"severity":"low","line_start":35},{"id":"blocker:references/permission.md:36:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get table --env-id <envId>                  # all tables","category":"blocker","line_end":36,"severity":"low","line_start":36},{"id":"blocker:references/permission.md:37:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get table:users,orders --env-id <envId>     # specific resources (max 100)","category":"blocker","line_end":37,"severity":"low","line_start":37},{"id":"blocker:references/permission.md:38:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get function --env-id <envId>               # functions","category":"blocker","line_end":38,"severity":"low","line_start":38},{"id":"blocker:references/permission.md:47:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission set table:users --level readonly --env-id <envId>","category":"blocker","line_end":47,"severity":"low","line_start":47},{"id":"blocker:references/permission.md:48:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission set storage:assets --level private --env-id <envId>","category":"blocker","line_end":48,"severity":"low","line_start":48},{"id":"blocker:references/permission.md:53:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--env-id <envId>","category":"blocker","line_end":53,"severity":"low","line_start":53},{"id":"blocker:references/permission.md:56:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission set collection:posts --rule '{\"read\": true, \"write\": false}' --env-id <envId>","category":"blocker","line_end":56,"severity":"low","line_start":56},{"id":"blocker:references/permission.md:81:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role list --env-id <envId>","category":"blocker","line_end":81,"severity":"low","line_start":81},{"id":"blocker:references/permission.md:82:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role list --type custom --detail --env-id <envId>","category":"blocker","line_end":82,"severity":"low","line_start":82},{"id":"blocker:references/permission.md:83:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role get --id <roleId> --detail --env-id <envId>","category":"blocker","line_end":83,"severity":"low","line_start":83},{"id":"blocker:references/permission.md:101:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--users \"u1001,u1002\" --env-id <envId>","category":"blocker","line_end":101,"severity":"low","line_start":101},{"id":"blocker:references/permission.md:104:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> \\","category":"blocker","line_end":104,"severity":"low","line_start":104},{"id":"blocker:references/permission.md:106:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--add-users \"u1003\" --yes --env-id <envId>","category":"blocker","line_end":106,"severity":"low","line_start":106},{"id":"blocker:references/permission.md:109:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> \\","category":"blocker","line_end":109,"severity":"low","line_start":109},{"id":"blocker:references/permission.md:111:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--remove-users \"u1002\" --yes --env-id <envId>","category":"blocker","line_end":111,"severity":"low","line_start":111},{"id":"blocker:references/permission.md:121:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> --add-policies '[","category":"blocker","line_end":121,"severity":"low","line_start":121},{"id":"blocker:references/permission.md:136:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"]' --yes --env-id <envId>","category":"blocker","line_end":136,"severity":"low","line_start":136},{"id":"blocker:references/permission.md:154:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role delete <roleId1> <roleId2> --yes --env-id <envId>   # max 100, custom only","category":"blocker","line_end":154,"severity":"low","line_start":154},{"id":"blocker:references/permission.md:163:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user list --name alice --email a@example.com --env-id <envId>","category":"blocker","line_end":163,"severity":"low","line_start":163},{"id":"blocker:references/permission.md:166:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user create alice --uid u1001 --type internalUser --status ACTIVE --env-id <envId>","category":"blocker","line_end":166,"severity":"low","line_start":166},{"id":"blocker:references/permission.md:169:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user update u1001 --status BLOCKED --env-id <envId>","category":"blocker","line_end":169,"severity":"low","line_start":169},{"id":"blocker:references/permission.md:172:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user delete u1001 u1002 --yes --env-id <envId>","category":"blocker","line_end":172,"severity":"low","line_start":172},{"id":"blocker:references/permission.md:183:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role list --detail --env-id <envId> --json","category":"blocker","line_end":183,"severity":"low","line_start":183},{"id":"blocker:references/permission.md:186:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get table:users,orders --env-id <envId>","category":"blocker","line_end":186,"severity":"low","line_start":186},{"id":"blocker:references/permission.md:187:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission get function --env-id <envId>","category":"blocker","line_end":187,"severity":"low","line_start":187},{"id":"blocker:references/permission.md:190:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> --remove-users \"u_temp\" --yes --env-id <envId>","category":"blocker","line_end":190,"severity":"low","line_start":190},{"id":"blocker:references/permission.md:193:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user update u_temp --status BLOCKED --env-id <envId>","category":"blocker","line_end":193,"severity":"low","line_start":193},{"id":"blocker:references/permission.md:219:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update                        # Update role (--add-*/-remove-*, --id required)","category":"blocker","line_end":219,"severity":"low","line_start":219},{"id":"blocker:references/permission.md:228:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"**Global flags:** `--env-id <envId>` (required), `--json` (machine output), `--yes` (skip confirmati","category":"blocker","line_end":228,"severity":"low","line_start":228},{"id":"blocker:references/permission.md:239:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"| JSON parse error | `--policies`/`--add-policies` not valid JSON array | Validate JSON before execu","category":"blocker","line_end":239,"severity":"low","line_start":239},{"id":"blocker:references/permission.md:250:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role list --type custom --env-id <envId>                           # confirm role exists","category":"blocker","line_end":250,"severity":"low","line_start":250},{"id":"blocker:references/permission.md:251:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <devRoleId> --add-users \"<newUid>\" --yes --env-id <envId>","category":"blocker","line_end":251,"severity":"low","line_start":251},{"id":"blocker:references/permission.md:252:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role get --id <devRoleId> --detail --env-id <envId>                # verify","category":"blocker","line_end":252,"severity":"low","line_start":252},{"id":"blocker:references/permission.md:260:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--policies '[\"StoragesAccess\"]' --env-id <envId>","category":"blocker","line_end":260,"severity":"low","line_start":260},{"id":"blocker:references/permission.md:261:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> --add-users \"<contractorUid>\" --yes --env-id <envId>","category":"blocker","line_end":261,"severity":"low","line_start":261},{"id":"blocker:references/permission.md:264:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb role update --id <roleId> --remove-users \"<contractorUid>\" --yes --env-id <envId>","category":"blocker","line_end":264,"severity":"low","line_start":264},{"id":"blocker:references/permission.md:265:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb user update <contractorUid> --status BLOCKED --env-id <envId>","category":"blocker","line_end":265,"severity":"low","line_start":265},{"id":"blocker:references/permission.md:274:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--env-id <envId>","category":"blocker","line_end":274,"severity":"low","line_start":274},{"id":"blocker:references/permission.md:279:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"--env-id <envId>","category":"blocker","line_end":279,"severity":"low","line_start":279},{"id":"blocker:references/permission.md:282:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission set table:orders --level private --yes --env-id <envId>","category":"blocker","line_end":282,"severity":"low","line_start":282},{"id":"blocker:references/permission.md:283:system-reconnaissance","file":"references/permission.md","pattern":"System reconnaissance","snippet":"tcb permission set function --level custom --rule '{\"*\":{\"invoke\":\"auth != null\"}}' --yes --env-id <","category":"blocker","line_end":283,"severity":"low","line_start":283},{"id":"blocker:references/storage.md:164:system-reconnaissance","file":"references/storage.md","pattern":"System reconnaissance","snippet":"--rule '{\"read\": true, \"write\": \"auth.openid == resource.openid\"}' -e <envId>","category":"blocker","line_end":164,"severity":"low","line_start":164},{"id":"blocker:references/storage.md:197:system-reconnaissance","file":"references/storage.md","pattern":"System reconnaissance","snippet":"--rule '{\"read\": true, \"write\": \"auth.openid == resource.openid\"}'","category":"blocker","line_end":197,"severity":"low","line_start":197},{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Manage CloudBase resources via `tcb` CLI — deterministic, scriptable, auditable.","category":"external_commands","line_end":10,"severity":"medium","line_start":10},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If this environment only installed the current skill, start from the CloudBase main entry and use th","category":"external_commands","line_end":15,"severity":"medium","line_start":15},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai","category":"external_commands","line_end":18,"severity":"medium","line_start":18},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Keep local `references/...` paths for files that ship with the current skill directory. When this fi","category":"external_commands","line_end":20,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Change Safety Protocol: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/","category":"external_commands","line_end":23,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Deployment Gate: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **`--help` first — never guess commands.**","category":"external_commands","line_end":28,"severity":"medium","line_start":28},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"run `tcb <command> --help` to check parameters and discover official doc links.","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Before any deployment, publish, custom domain, or CloudRun operation, you must first complete the ch","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use `--dry-run` for delete/overwrite operations. Show the preview to the user","category":"external_commands","line_end":40,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Always verify envId with the user before operations. Run `tcb env use <envId>`","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"If a command fails after 2-3 attempts, check the exit code (`$?`), read the","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"error message, consult `tcb docs search`, and try a different approach.","category":"external_commands","line_end":49,"severity":"medium","line_start":49},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- SDK-based in-app integration (web/miniprogram/node) → use `cloud-functions`,","category":"external_commands","line_end":61,"severity":"medium","line_start":61},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"`no-sql-web-sdk`, `auth-web`, etc.","category":"external_commands","line_end":62,"severity":"medium","line_start":62},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- CloudBase Agent SDK development → use `cloudbase-agent-ts`","category":"external_commands","line_end":65,"severity":"medium","line_start":65},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **Always load `references/core.md` first** — it covers authentication,","category":"external_commands","line_end":69,"severity":"medium","line_start":69},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"environment switching, `tcb docs` queries, and error diagnosis.","category":"external_commands","line_end":70,"severity":"medium","line_start":70},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"SDK skill (e.g., `cloud-functions`, `no-sql-web-sdk`) instead.","category":"external_commands","line_end":77,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Login, env switching, tcb docs, error diagnosis | `references/core.md` |","category":"external_commands","line_end":83,"severity":"medium","line_start":83},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Deploy/debug cloud functions | `references/functions.md` |","category":"external_commands","line_end":84,"severity":"medium","line_start":84},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Deploy web app (React/Vue/Next.js) | `references/app.md` |","category":"external_commands","line_end":85,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Deploy CloudRun service | `references/cloudrun.md` |","category":"external_commands","line_end":86,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Deploy static site | `references/hosting.md` |","category":"external_commands","line_end":87,"severity":"medium","line_start":87},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Upload/download files, ACL rules | `references/storage.md` |","category":"external_commands","line_end":88,"severity":"medium","line_start":88},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| NoSQL (MongoDB) database operations | `references/nosql.md` |","category":"external_commands","line_end":89,"severity":"medium","line_start":89},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| MySQL database operations | `references/mysql.md` |","category":"external_commands","line_end":90,"severity":"medium","line_start":90},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Roles, policies, access control | `references/permission.md` |","category":"external_commands","line_end":91,"severity":"medium","line_start":91},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| CORS, custom domains, routing rules | `references/access.md` |","category":"external_commands","line_end":92,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. `tcb login` → confirm envId with user → `tcb env use <envId>`","category":"external_commands","line_end":96,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. `tcb <command> --help` to verify syntax","category":"external_commands","line_end":97,"severity":"medium","line_start":97},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Execute the command (with `--dry-run` for destructive ops)","category":"external_commands","line_end":98,"severity":"medium","line_start":98},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Verify the result with the corresponding `list` / `detail` command","category":"external_commands","line_end":99,"severity":"medium","line_start":99},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] Loaded `references/core.md` before any domain module?","category":"external_commands","line_end":104,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] Used `--help` for unfamiliar commands?","category":"external_commands","line_end":106,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] Used `--dry-run` before destructive operations?","category":"external_commands","line_end":107,"severity":"medium","line_start":107},{"id":"network:SKILL.md:17:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- CloudBase main entry: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/sk","category":"network","line_end":17,"severity":"low","line_start":17},{"id":"network:SKILL.md:18:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- Current skill raw source: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/mai","category":"network","line_end":18,"severity":"low","line_start":18},{"id":"network:SKILL.md:23:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- Change Safety Protocol: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/","category":"network","line_end":23,"severity":"low","line_start":23},{"id":"network:SKILL.md:24:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- Deployment Gate: `https://cnb.cool/tencent/cloud/cloudbase/cloudbase-skills/-/git/raw/main/skills/","category":"network","line_end":24,"severity":"low","line_start":24},{"id":"blocker:SKILL.md:45:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"to avoid accidentally modifying production.","category":"blocker","line_end":45,"severity":"low","line_start":45},{"id":"blocker:SKILL.md:109:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Stayed within CLI scope — did not drift into SDK code?","category":"blocker","line_end":109,"severity":"low","line_start":109}],"finding_verdicts":[{"id":"blocker:references/access.md:79:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:82:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:85:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:214:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:259:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:280:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:293:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/access.md:17:network-reconnaissance","reason":"This line describes CORS and custom-domain configuration for CloudBase access. It does not perform network scanning or reconnaissance.","verdict":"false_positive","confidence":0.92},{"id":"network:references/app.md:131:hardcoded-url","reason":"The URL is api.example.com inside an app environment-variable example. It is a placeholder value, not an external endpoint used by the skill.","verdict":"false_positive","confidence":0.93},{"id":"blocker:references/app.md:29:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:32:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:57:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:60:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:69:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:83:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:86:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:89:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:92:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:103:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:106:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:109:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:152:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:153:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:155:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:156:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:157:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:158:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/app.md:186:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/cloudrun.md:234:database-connection-strings","reason":"The line shows a placeholder mysql:// value being stored with tcb secrets. No real database credential is included or transmitted outside CloudBase configuration.","verdict":"false_positive","confidence":0.91},{"id":"env_access:references/cloudrun.md:235:generic-api-secret-keys","reason":"The snippet sets placeholder secret names through tcb secrets for CloudRun configuration. There is no literal secret value or unauthorized outbound transfer.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:39:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:42:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:45:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:48:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:51:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:62:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:65:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:66:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:90:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:94:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:105:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:115:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:119:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:123:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:128:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:133:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:145:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:152:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:153:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:154:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:164:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:166:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:168:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:169:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:179:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:182:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:185:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:188:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:191:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:212:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:215:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:218:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:221:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:234:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:235:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:238:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:251:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:252:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:253:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:254:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:255:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:256:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/cloudrun.md:257:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:references/core.md:458:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/core.md:300:environment-variable-object","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/core.md:300:python-environment-access","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/core.md:58:generic-api-secret-keys","reason":"The snippet uses shell environment placeholders for CloudBase login and explicitly warns against hardcoding credentials. It documents safer credential injection, not secret harvesting.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/core.md:61:generic-api-secret-keys","reason":"The snippet uses shell environment placeholders for CloudBase login and explicitly warns against hardcoding credentials. It documents safer credential injection, not secret harvesting.","verdict":"false_positive","confidence":0.9},{"id":"sensitive:references/core.md:300:environment-file-access","reason":"The snippet references runtime environment variables in configuration documentation. It does not access a .env file, dump secret contents, or transmit credentials.","verdict":"false_positive","confidence":0.91},{"id":"blocker:references/core.md:106:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/core.md:128:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/core.md:137:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/core.md:395:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/core.md:458:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"scripts:references/functions.md:64:dynamic-function-constructor","reason":"The word Function appears in CloudBase function documentation. There is no JavaScript Function constructor, eval-like execution, or generated script body.","verdict":"false_positive","confidence":0.96},{"id":"scripts:references/functions.md:67:dynamic-function-constructor","reason":"The word Function appears in CloudBase function documentation. There is no JavaScript Function constructor, eval-like execution, or generated script body.","verdict":"false_positive","confidence":0.96},{"id":"network:references/functions.md:269:hardcoded-ip-address","reason":"The IP address is 10.0.0.1 in a DB_HOST configuration example. It is a private placeholder, not a command target or remote callback.","verdict":"false_positive","confidence":0.92},{"id":"env_access:references/functions.md:296:environment-variable-access-dot-notation","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:297:environment-variable-access-dot-notation","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:296:environment-variable-object","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:297:environment-variable-object","reason":"This documents runtime environment variables for deployed application code. It does not read local secrets or instruct exfiltration from the user environment.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:270:generic-api-secret-keys","reason":"The snippet uses placeholder API_KEY values and CI secret substitution for application configuration. It does not include a real key or expose one.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:290:generic-api-secret-keys","reason":"The snippet uses placeholder API_KEY values and CI secret substitution for application configuration. It does not include a real key or expose one.","verdict":"false_positive","confidence":0.9},{"id":"env_access:references/functions.md:296:generic-api-secret-keys","reason":"The snippet uses placeholder API_KEY values and CI secret substitution for application configuration. It does not include a real key or expose one.","verdict":"false_positive","confidence":0.9},{"id":"sensitive:references/functions.md:296:environment-file-access","reason":"The snippet references runtime environment variables in configuration documentation. It does not access a .env file, dump secret contents, or transmit credentials.","verdict":"false_positive","confidence":0.91},{"id":"sensitive:references/functions.md:297:environment-file-access","reason":"The snippet references runtime environment variables in configuration documentation. It does not access a .env file, dump secret contents, or transmit credentials.","verdict":"false_positive","confidence":0.91},{"id":"blocker:references/functions.md:451:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:29:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:35:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:38:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:45:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:48:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:51:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:54:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:57:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:68:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:71:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:74:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:85:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:88:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:91:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:102:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:105:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:108:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:117:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:120:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:123:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:126:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:135:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:148:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:149:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:150:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:151:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:152:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/hosting.md:172:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:67:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:93:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:100:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:103:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:113:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:149:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:165:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:178:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:187:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:190:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:219:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:240:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:247:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/mysql.md:256:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/nosql.md:231:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/nosql.md:245:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"scripts:references/permission.md:50:dynamic-function-constructor","reason":"The word Function appears in CloudBase function documentation. There is no JavaScript Function constructor, eval-like execution, or generated script body.","verdict":"false_positive","confidence":0.96},{"id":"blocker:references/permission.md:35:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:36:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:37:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:38:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:47:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:48:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:53:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:56:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:81:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:82:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:83:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:101:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:104:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:106:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:109:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:111:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:121:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:136:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:154:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:163:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:166:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:169:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:172:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:183:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:186:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:187:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:190:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:193:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:219:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:228:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:239:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:250:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:251:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:252:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:260:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:261:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:264:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:265:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:274:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:279:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:282:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/permission.md:283:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/storage.md:164:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:references/storage.md:197:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:10:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:15:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:18:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:28:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:49:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:61:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:62:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:65:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:69:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:70:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:83:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:87:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:88:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:89:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:90:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:91:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:97:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:99:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:107:ruby-shell-backtick-execution","reason":"The detector matched Markdown backticks or CLI examples, not Ruby shell execution. The text documents tcb command workflows with user confirmation and verification steps.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:17:hardcoded-url","reason":"The URL points to published CloudBase skill documentation and protocols. It is a reference link, not an exfiltration destination or network call.","verdict":"false_positive","confidence":0.93},{"id":"network:SKILL.md:18:hardcoded-url","reason":"The URL points to published CloudBase skill documentation and protocols. It is a reference link, not an exfiltration destination or network call.","verdict":"false_positive","confidence":0.93},{"id":"network:SKILL.md:23:hardcoded-url","reason":"The URL points to published CloudBase skill documentation and protocols. It is a reference link, not an exfiltration destination or network call.","verdict":"false_positive","confidence":0.93},{"id":"network:SKILL.md:24:hardcoded-url","reason":"The URL points to published CloudBase skill documentation and protocols. It is a reference link, not an exfiltration destination or network call.","verdict":"false_positive","confidence":0.93},{"id":"blocker:SKILL.md:45:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9},{"id":"blocker:SKILL.md:109:system-reconnaissance","reason":"This is CloudBase CLI documentation using placeholders such as envId, service names, or resource IDs. It is operational guidance, not host or system reconnaissance.","verdict":"false_positive","confidence":0.9}],"semantic_findings":[],"subject_marketplace_commit_sha":"24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec","subject_content_hash":"8194ca2224b4b53c90507fe22a24dce04beef040a97f5f3f8532533eeb282a49","subject_tree_hash":"f82954646e3af7b57e3ff69e76e5158522f65be78ef840c5f7318e88d1d2821b","subject_plugin_path":"skills/tencentcloudbase/cloudbase-cli","audit_payload_hash":"2c935685c79e20e1238d4af0a69200f8","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec","contentHash":"8194ca2224b4b53c90507fe22a24dce04beef040a97f5f3f8532533eeb282a49","treeHash":"f82954646e3af7b57e3ff69e76e5158522f65be78ef840c5f7318e88d1d2821b","pluginPath":"skills/tencentcloudbase/cloudbase-cli","auditPayloadHash":"2c935685c79e20e1238d4af0a69200f8"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":true}}