cloud__search_security_findings

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 7 props · 1 required

{
  "type": "object",
  "required": [
    "query"
  ],
  "properties": {
    "limit": {
      "type": "integer",
      "default": 100,
      "maximum": 1000,
      "minimum": 1
    },
    "query": {
      "type": "string",
      "description": "Search query string"
    },
    "severity": {
      "type": "array",
      "items": {
        "enum": [
          "critical",
          "high",
          "medium",
          "low",
          "informational"
        ],
        "type": "string"
      }
    },
    "time_range": {
      "enum": [
        "1h",
        "24h",
        "7d",
        "30d",
        "90d"
      ],
      "type": "string"
    },
    "resource_type": {
      "type": "array",
      "items": {
        "enum": [
          "ec2",
          "s3",
          "rds",
          "lambda",
          "iam",
          "vpc",
          "cloudtrail"
        ],
        "type": "string"
      }
    },
    "cloud_provider": {
      "type": "array",
      "items": {
        "enum": [
          "aws",
          "azure",
          "gcp"
        ],
        "type": "string"
      }
    },
    "compliance_framework": {
      "type": "array",
      "items": {
        "enum": [
          "SOC2",
          "PCI-DSS",
          "HIPAA",
          "CIS",
          "NIST"
        ],
        "type": "string"
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain