drop circleci build log · parse step output + env vars referenced · runs locally
flags secret env echo · ssh key references · unexpected curl/wget · failed orb steps · non-zero exit codes
heuristic screener · circleci log format varies by executor and version — not definitive proof · best-effort step boundary detection