Test bot vulns boss

[Anandb71]

No description provided.

[arbor-cloud]

🔴 Arbor — Blast Radius Analysis

Risk	HIGH █░░░░░░░░░ 17%
Branch	test-bot-vulns-boss → main-1
Impact	3 files · 134 symbols · 5 in blast radius
Entry Points	3 production endpoints reached
Languages	Python

Changed Files

	File	Symbols	Direct	Transitive	Risk
🔴	backend/app/api/dashboard.py	70	5	—	HIGH
⚪	backend/app/vulnerabilities_test.py	16	—	—	NONE
⚪	backend/app/api/documents.py	48	—	—	NONE

🎯 Production Entry Points Reached

This change propagates to these entry points (HTTP handlers, jobs, CLI commands):

• custom_metric
• export_report
• get_dashboard_metrics

✅ Before You Merge

• Manually verify the affected entry points: custom_metric, export_report, get_dashboard_metrics.
• Trace the 5 affected callers for unintended side-effects.
• Request a senior engineer review before merging.

🔍 Security Analysis — REVIEW REQUIRED

1 security surface · 4 entry points reachable · Confidence: 80%

Category	File	Symbols
File I/O	backend/app/vulnerabilities_test.py	read_file

Security call paths

• analyze_document → Document (1 hop) — changed code reaches Document (Database Access) in 1 hop
• analyze_document → save_file (1 hop) — changed code reaches save_file (File I/O) in 1 hop
• get_document_file → read_file (1 hop) — changed code reaches read_file (File I/O) in 1 hop
• analyze_document → DocumentEntity (2 hops) — changed code reaches DocumentEntity (Database Access) in 2 hops
• analyze_document → Entity (2 hops) — changed code reaches Entity (Database Access) in 2 hops

• 🟡 Test affected entry points manually: get_document, target_name, get_document_file
• 💬 Verify behavior of downstream sensitive functions: read_file, DocumentEntity, Entity

📊 Analysis confidence: High · 1058 nodes · 4210ms

• Python use dynamic typing — cross-file call edges are best-effort (may miss some relationships)
• Graph has 1058 nodes and 159 edges — well-connected codebase
• 134 symbols changed, 5 upstream nodes analyzed

Suggestions to improve accuracy:

• Add type annotations (Python) or use TypeScript (JavaScript) for more precise analysis

---

_{Arbor · View full report → · 4210ms · 1058 nodes analyzed · Know what breaks before you merge}