Risk engine & zone frame fix #11
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,12 +1,12 @@ | ||
| { | ||
| "env": { | ||
| "ANTHROPIC_API_KEY": "aero_live_qiFbk-Et6G9qRZaElOvjjHgOWIz_O_i6Fts6W9cioFU", | ||
| "ANTHROPIC_BASE_URL": "https://capi.aerolink.lat/", | ||
| "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1" | ||
| }, | ||
| "permissions": { | ||
| "allow": [], | ||
| "deny": [] | ||
| }, | ||
| "apiKeyHelper": "echo 'aero_live_qiFbk-Et6G9qRZaElOvjjHgOWIz_O_i6Fts6W9cioFU'" | ||
| } | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,6 @@ | ||
| { | ||
| "schema_version": "1.0", | ||
| "description": "Ground-truth labels for ONEVO Phase 1A camera evaluation. Custom local test videos. label: 'shoplifting' (positive) or 'normal' (negative).", | ||
| "alert_threshold": 70, | ||
| "default_zone": { | ||
| "name": "Whole Frame (High Value)", | ||
|
|
@@ -26,24 +26,29 @@ | |
| }, | ||
| "clips": [ | ||
| { | ||
| "id": "shoplifting_1", | ||
| "file": "clips/1.mp4", | ||
| "label": "shoplifting" | ||
| }, | ||
| { | ||
| "id": "shoplifting_2", | ||
| "file": "clips/2.mp4", | ||
| "label": "shoplifting" | ||
| }, | ||
| { | ||
| "id": "normal_3", | ||
| "file": "clips/3.mp4", | ||
| "label": "normal" | ||
| }, | ||
| { | ||
| "id": "shoplifting_4", | ||
| "file": "clips/4.mp4", | ||
| "label": "shoplifting" | ||
| }, | ||
| { | ||
| "id": "shoplifting_testvideo", | ||
| "file": "clips/testvideo.mp4", | ||
| "label": "shoplifting" | ||
|
Comment on lines
+29
to
51
There was a problem hiding this comment. 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
python - <<'PY'
import json
from pathlib import Path
manifest = Path("cloud-ai/eval/ground_truth.json")
for clip in json.loads(manifest.read_text(encoding="utf-8"))["clips"]:
path = manifest.parent / clip["file"]
print(f"{clip['id']}: {path}")
assert path.is_file(), f"Missing evaluation clip: {path}"
PYRepository: baasith6/camera-phase-1 Length of output: 342 🏁 Script executed: #!/bin/bash
set -euo pipefail
echo "== candidate eval assets =="
if [ -d cloud-ai/eval ]; then
git ls-files cloud-ai/eval | sed -n '1,200p'
else
echo "cloud-ai/eval not tracked"
fi
echo
echo "== manifest contents =="
cat -n cloud-ai/eval/ground_truth.json | sed -n '1,120p'
echo
echo "== files named like expected clips in repo =="
git ls-files | rg '(^|/)clips/|1\.mp4$|2\.mp4$|3\.mp4$|4\.mp4$|testvideo\.mp4$' || trueRepository: baasith6/camera-phase-1 Length of output: 1896 🌐 Web query:
💡 Result: The specific path "camera-phase-1/cloud-ai/eval/clips/ground_truth.json" does not appear to be a standard or publicly documented file path associated with the user "baasith6" on GitHub [1]. The GitHub user "baasith6" (Abdul Baasith) is a developer whose public repositories focus on full-stack development, including projects like "RepoGraph-Protocol," agricultural AI vision backends ("agri-ai-vision-back"), and payment system integrations [1][2][3]. A search of his public repositories does not reveal a project named "camera-phase-1" or the specific file structure requested. It is possible that this path refers to: 1. A private repository belonging to the user. 2. A locally organized project structure that has not been pushed to a public GitHub repository. 3. A misremembered file path or project name. While there are many repositories on GitHub related to "camera," "ground truth," and "evaluation" (often involving computer vision, SLAM, or AI training pipelines), they are not linked to the user "baasith6" [4][5][6][7][8]. If this is a file you expect to exist in a public repository, you may want to verify the repository name or check if the repository is private. Citations:
🏁 Script executed: #!/bin/bash
set -euo pipefail
echo "== eval scripts mentioning clips =="
rg -n "ground_truth|clips/|VideoCapture|cv2|ground_truth\\.json|results\\.json" cloud-ai/eval -
echo
echo "== gitignored files under cloud-ai/eval or matching clip names =="
if [ -f .gitignore ]; then
cat -n .gitignore | rg 'cloud-ai|eval|\\.mp4$|\\.MP4$|clips' || true
fi
echo
echo "== tracked all files under cloud-ai =="
git ls-files cloud-ai | sed -n '1,200p'Repository: baasith6/camera-phase-1 Length of output: 1157 Add the evaluation clip assets referenced by
🤖 Prompt for AI Agents |
||
| } | ||
| ] | ||
| } | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔒 Security & Privacy | 🔴 Critical | ⚡ Quick win
Remove and rotate the hard-coded API credential.
This live-looking key is committed twice, including a helper that prints it directly. Revoke/rotate it immediately, remove both plaintext values from repository history, and load the credential from a secret manager or local environment variable instead.
🧰 Tools
🪛 Betterleaks (1.7.0)
[high] 3-3: Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
(generic-api-key)
🤖 Prompt for AI Agents
Source: Linters/SAST tools