Group findings into action items by blast radius
classify_blast_radiusTurn a list of security findings into deduplicated action items, then classify each by fix scope: account-wide, per-region, per-resource, or per-person. Reduces hundreds of findings to a manageable set of coordinated actions.
Instructions
Collapses a list of findings into deduplicated action items and classifies each by how widely the fix applies: account-wide (fix once), per-region (rollout), per-resource (each resource), or per-person (human coordination).
This is what turns '400 findings' into '9 action items across 400 resources'. Pass a batchId to classify a whole scan, or pass findings inline to classify results from elsewhere.
Pure and offline: no scan, no network.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| batchId | No | Classify every finding in this batch. | |
| findings | No | Classify these findings instead of a batch. Ignored when batchId is given. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| groups | Yes | ||
| byScope | Yes | ||
| totalFindings | Yes | ||
| totalActionItems | Yes |