⚠️ PR Security Scan — Issues Found

data/datalib/function/api/cb/cancel.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 15): Removes engine storage

  data remove storage datalib:engine cb_queue
  

data/datalib/function/api/cb/internal/exec.mcfunction

• 🟠 HIGH MACRO_CHAIN (line 9): Nested macro expansion (injection risk)

  $data modify storage datalib:engine _cb_last set value {x:$(x),y:$(y),z:$(z)}
  

• 🟠 HIGH MACRO_CHAIN (line 10): Nested macro expansion (injection risk)

  $forceload add $(x) $(z)
  

• 🟠 HIGH MACRO_CHAIN (line 11): Nested macro expansion (injection risk)

  $setblock $(x) $(y) $(z) minecraft:command_block{Command:"",auto:0b,TrackOutput:0b} replace
  

• 🟠 HIGH MACRO_CHAIN (line 12): Nested macro expansion (injection risk)

  $data modify block $(x) $(y) $(z) Command set value "$(cmd)"
  

• 🟠 HIGH MACRO_CHAIN (line 13): Nested macro expansion (injection risk)

  $data modify block $(x) $(y) $(z) auto set value 1b
  

data/datalib/function/api/cb/internal/reset_exec.mcfunction

• 🟠 HIGH MACRO_CHAIN (line 2): Nested macro expansion (injection risk)

  $data modify block $(x) $(y) $(z) auto set value 0b
  

• 🟠 HIGH MACRO_CHAIN (line 3): Nested macro expansion (injection risk)

  $setblock $(x) $(y) $(z) minecraft:air replace
  

• 🟠 HIGH MACRO_CHAIN (line 4): Nested macro expansion (injection risk)

  $forceload remove $(x) $(z)
  

data/datalib/function/systems/cb/internal/process_step.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 8): Removes engine storage

  data remove storage datalib:engine _cb_work[0]
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 19): Removes engine storage

  data remove storage datalib:engine _cb_entry
  

data/datalib/function/systems/cb/internal/queue_push.mcfunction

• 🟠 HIGH MACRO_CHAIN (line 7): Nested macro expansion (injection risk)

  $data modify storage datalib:engine cb_queue append value {cmd:"$(cmd)",x:$(x),y:$(y),z:$(z),ticks_left:$(delay)}
  

data/datalib/function/systems/cb/internal/seq_expand.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 11): Removes engine storage

  data remove storage datalib:engine _cb_seq
  

data/datalib/function/systems/cb/internal/seq_expand_loop.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 11): Removes engine storage

  data remove storage datalib:engine _cb_seq.cmds[0]
  

data/datalib/function/systems/cb/internal/seq_push_entry.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 7): Removes engine storage

  data remove storage datalib:engine _cb_seq_entry.cmds
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 8): Removes engine storage

  data remove storage datalib:engine _cb_seq_entry.interval
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 13): Removes engine storage

  data remove storage datalib:engine _cb_seq_entry
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 14): Removes engine storage

  data remove storage datalib:engine _cb_seq_cmd
  

data/datalib/function/systems/cb/internal/tick.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 7): Removes engine storage

  data remove storage datalib:engine cb_queue
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 11): Removes engine storage

  data remove storage datalib:engine _cb_work
  

data/dl_load/function/load/storages.mcfunction

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 69): Removes engine storage

  data remove storage datalib:engine fibers._pending
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 75): Removes engine storage

  data remove storage datalib:engine region_watches
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 81): Removes engine storage

  data remove storage datalib:engine batches
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 115): Removes engine storage

  data remove storage datalib:engine multiCommands
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 137): Removes engine storage

  data remove storage datalib:engine cb_queue
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 139): Removes engine storage

  data remove storage datalib:engine _cb_last
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 140): Removes engine storage

  data remove storage datalib:engine _cb_work
  

• 🔴 CRITICAL DATA_REMOVE_ENGINE (line 141): Removes engine storage

  data remove storage datalib:engine _cb_entry
  

This scan is automated. MEDIUM findings may be false positives.
CRITICAL and HIGH findings must be reviewed before merge.