schema_version = 1
detector_id = "threads-api-token"
service = "threads"
severity = "high"
[[positive]]
text = "threadid=\": \" := ' ==\"' =:: '\" ' \"'\" \" = : : ' '= ' \" \" \" \": 7K4lq8YH2dZbHWOzNLjPPa3mCnnalyOSJlEGrPQvurQBHIAR9Y6G1D5CEsBOITC7AbByJxV8ZjRQuFECSQ5GnqrGsRSawQJxGZLH"
credential = "7K4lq8YH2dZbHWOzNLjPPa3mCnnalyOSJlEGrPQvurQBHIAR9Y6G1D5CEsBOITC7AbByJxV8ZjRQuFECSQ5GnqrGsRSawQJxGZLH"
reason = "Canonical anchor + synthesized body satisfying detector's primary regex."
[[positive]]
text = "threadid=\": \" := ' ==\"' =:: '\" ' \"'\" \" = : : ' '= ' \" \" \" \": 7K4lq8YH2dZbHWOzNLjPPa3mCnnalyOSJlEGrPQvurQBHIAR9Y6G1D5CEsBOITC7AbByJxV8ZjRQuFECSQ5GnqrGsRSawQJxGZLH"
credential = "7K4lq8YH2dZbHWOzNLjPPa3mCnnalyOSJlEGrPQvurQBHIAR9Y6G1D5CEsBOITC7AbByJxV8ZjRQuFECSQ5GnqrGsRSawQJxGZLH"
reason = "Quoted-value variant of the canonical positive."
[[negative]]
text = "threadid=\": \" := ' ==\"' =:: '\" ' \"'\" \" = : : ' '= ' \" \" \" \": YOUR_API_KEY_HERE_PLACEHOLDER_VALUE"
reason = "Placeholder-keyword body — suppression gate matches PLACEHOLDER prefix."
[[negative]]
text = "threadid=\": \" := ' ==\"' =:: '\" ' \"'\" \" = : : ' '= ' \" \" \" \": 7K4lqEXAMPLEEXAMPLExGZLH"
reason = "EXAMPLE token marker inside the body — suppression gate strips it."