test: cluster e2e review target (eval RCE + secret)

test-cluster/bug.ts

@@ -0,0 +1,7 @@
+export function parseAmount(input: string): number {
+  // trust user input directly -> eval
+  return eval(input);
+}
+
+const API_KEY = "sk-live-1234567890abcdef";
+export function getToken(): string { return API_KEY; }