aegis-secrets-data-exposure

Scope & Objectives

• Scan the full repository surface: source, configs, tests, fixtures, docs, scripts, CI definitions, container/mobile manifests.
• Trace VCS history (git), build output (dist/, build/, source maps), editor/backup leftovers, debug dumps, committed data files (CSV/SQL dumps).
• Inspect runtime configuration for information-disclosure switches: debug modes, actuator/debug endpoints, GraphQL introspection, directory listings, deployed .git, published source maps.
• Inspect API responses and logging paths for over-exposed fields, secrets, and PII; inspect storage patterns for cleartext sensitive data.
• Objectives: produce findings with file:line evidence, classify each via the severity rubric, mark every uncertain item Needs-Review. Never exfiltrate or bulk-download live data during validation; validate minimally per Exploitation & Reproduction.

Prerequisites & Vocabulary

Zero-background primer: the terms this module uses, one line each. Deeper plain-language explanations for every class live in the repository GUIDE.md glossary.