schema_version = 1
detector_id = "mouseflow-api-credentials"
service = "mouseflow"
severity = "medium"
[[positive]]
text = "MOUSEFLOW_API_KEY=8IhAULcXl1"
credential = "8IhAULcXl1"
reason = "Canonical anchor + synthesized body satisfying detector's primary regex."
[[positive]]
text = "MOUSEFLOW_API_KEY=\"8IhAULcXl1\""
credential = "8IhAULcXl1"
reason = "Quoted-value variant of the canonical positive."
[[negative]]
text = "MOUSEFLOW_API_KEY=YOUR_API_KEY_HERE_PLACEHOLDER_VALUE"
reason = "Placeholder-keyword body — suppression gate matches PLACEHOLDER prefix."
[[negative]]
text = "MOUSEFLOW_API_KEY=8IhAULcXl1_EXAMPLE"
reason = "EXAMPLE token marker inside the body — suppression gate strips it."
[[evasion]]
text = "# MOUSEFLOW_API_KEY=8IhAULcXl1"
credential = "8IhAULcXl1"
reason = "Adversarial envelope — credential must still surface under this detector."
[perf]
fixture_bytes = 4096
max_microseconds = 35000
note = "Standard single-file budget."
[scale]
fixture_bytes = 1048576
min_findings = 1
max_seconds = 2.0
note = "1 MiB filler + planted credential."
readme_claim = "900 service-specific detectors"