Test bot vulns hardcore

[Anandb71]

No description provided.

[arbor-cloud]

🔴 Arbor — Blast Radius Analysis

Risk	HIGH █░░░░░░░░░ 16%
Branch	test-bot-vulns-hardcore → main-1
Impact	2 files · 64 symbols · 6 in blast radius
Entry Points	5 production endpoints reached
Languages	Python

Changed Files

	File	Symbols	Direct	Transitive	Risk
🟡	backend/app/vulnerabilities_test.py	16	3	3	MEDIUM
⚪	backend/app/api/documents.py	48	—	—	NONE

🎯 Production Entry Points Reached

This change propagates to these entry points (HTTP handlers, jobs, CLI commands):

• batch_reanalyze
• get_document_file
• reanalyze_document
• reanalyze_single_document
• update_rules

✅ Before You Merge

• Manually verify the affected entry points: batch_reanalyze, get_document_file, reanalyze_document (+2).
• Trace the 6 affected callers for unintended side-effects.
• Request a senior engineer review before merging.

🔍 Security Analysis — REVIEW REQUIRED

1 security surface · 2 entry points reachable · Confidence: 80%

Category	File	Symbols
File I/O	backend/app/vulnerabilities_test.py	read_file

Security call paths

• analyze_document → save_file (1 hop) — changed code reaches save_file (File I/O) in 1 hop
• analyze_document → Document (1 hop) — changed code reaches Document (Database Access) in 1 hop
• get_document_file → read_file (1 hop) — changed code reaches read_file (File I/O) in 1 hop
• analyze_document → Entity (2 hops) — changed code reaches Entity (Database Access) in 2 hops
• analyze_document → DocumentEntity (2 hops) — changed code reaches DocumentEntity (Database Access) in 2 hops

• 🟡 Test affected entry points manually: get_document, get_document_file
• 💬 Verify behavior of downstream sensitive functions: read_file, Entity, DocumentEntity

📊 Analysis confidence: High · 1049 nodes · 4242ms

• Python use dynamic typing — cross-file call edges are best-effort (may miss some relationships)
• Graph has 1049 nodes and 156 edges — well-connected codebase
• 64 symbols changed, 6 upstream nodes analyzed

Suggestions to improve accuracy:

• Add type annotations (Python) or use TypeScript (JavaScript) for more precise analysis

---

_{Arbor · View full report → · 4242ms · 1049 nodes analyzed · Know what breaks before you merge}