JC·HARNESS

Example budget caps default to $5/$25 — should default to $0

Finding PUB-F002 · 491f52859557 · discovered by pentest-public-51classes-20260611

LOWconfirmedsecurity-misconfigurationopus48artifact backed
Target
OhanaSec/jc-pentest-harness
Target URL
not recorded
Run status
completed · api-multi-model
Framework
owasp-top-10
Priority score
0.2400
Reachability
unknown
Chain depth
1
PoC available
no
Asset
not recorded
Discovered
Jun 11, 2026, 02:20 PM

Description

Example budget caps default to non-zero values, allowing unexpected spend if the config is used as-is.

Validation

No validation rationale recorded.

Remediation

Default budget caps to $0; require explicit budget before live runs.

Evidence Boundary

This page shows persisted finding evidence, validator rationale, target context, and run linkage. Raw prompts, raw target responses, provider payloads, secrets, cookies, and authorization headers are not rendered publicly. Use the linked run page for class execution evidence, run logs, cost events, and pipeline errors.