Explain what a flagged issue means, why it matters, and what to do.
Every explanation also states what the check genuinely cannot determine --
for example, that detecting an open Telnet port does not prove the password
is still the factory default.
Args:
finding_id (str): the id from a previous response.
response_format (ResponseFormat): 'markdown' or 'json'. Default 'markdown'.
Returns:
str: In markdown mode: severity, the affected device, what the finding
means, what to do about it, and the limits of the check.
In json mode:
{
"finding": { ... }, # same finding schema as scan_network
"device": { ... } | null # the affected device, if any
}
Examples:
- Use when: "Why is that a problem?" after a scan flagged something
- Use when: "Explain telnet_exposed:a4:cf:12:34:56:78"
- Don't use when: the user wants the device overview - use
edgedefense_get_device_detail
Error Handling:
If the id does not match, returns the list of currently available
finding ids so the right one can be selected immediately.