CodeQL doesn't recognize re.sub as a path sanitizer. Switch to the os.path.normpath + startswith prefix check pattern that CodeQL's taint model explicitly recognizes as breaking the taint chain.
GET /api/graphs
autogpt_platform/CLAUDE.md
Getting Started (Released)