Skip to content
DemoReal data from our own test repository, cernis-intelligence/agentcernis-webhook-test. A PR review that found a SQL injection replays on a loop, sped up. Nothing here is saved.Back to the siteGet started
Agent Cernis

PR review #1 log

The full recorded log of this scan, replayed.

Back to scan
00:00Starting PR review for cernis-intelligence/agentcernis-webhook-test#1
00:03Reusing threat model cached for this commit
00:04Setup
00:04Index
00:04Sweep
00:04Using cached threat model for this commit…
00:04Map
00:04Context: 1 source files, 2 mapped routes
00:04Investigating auth model (in the background)…
00:05Hunt
00:05Hunting (streaming gate + skeptic)…
00:05Scoping hunt to 1 changed file(s), expanded to 3 with import neighbors…
00:29SQL injection via unsanitized req.query.email interpolated into pool.query on GET /users
00:30SQL injection in GET /users: unsanitized req.query.email interpolated into SQL and run via simple query protocol
00:30Verify
00:30Validation replay: static_only — static_only (3 finding(s)).
00:35Report