find-warden-bugs

Malicious tool definition detected

## Scope You receive scoped code chunks from Warden's diff pipeline. Analyze each chunk against the checks below.

**Red flags:** - Display-level filtering (e.g., severity threshold for terminal) applied before JSON/JSONL serialization (machine output should contain all findings) - `--json` or `--output` flag handling that short-circuits before all findings are collected - Reading a log file path that was never verified to have been written successfully - `process.cwd()` used to construct file paths when the working directory may differ from repo root - GitHub check annotations built from filtered findings i