{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "MINED111", "name": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or ", "shortDescription": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "fullDescription": {"text": "Either narrow the exception type, log the exception with `logger.exception(...)`, or re-raise after handling."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "JRN012", "name": "Runtime environment contract is missing referenced variables", "shortDescription": {"text": "Runtime environment contract is missing referenced variables"}, "fullDescription": {"text": "Add every required runtime variable to .env.example or deployment docs with safe placeholder values, then verify CI/deploy bootstraps from that contract."}, "properties": {"scanner": "repobility-journey-contract", "category": "quality", "severity": "medium", "confidence": 0.72, "cwe": "", "owasp": ""}}, {"id": "AGT012", "name": "Agent control bridge may listen on a network interface without visible auth", "shortDescription": {"text": "Agent control bridge may listen on a network interface without visible auth"}, "fullDescription": {"text": "Bind local agent bridges to 127.0.0.1 by default. If remote access is required, require a bearer token or mTLS, enforce origin/CSRF checks for browser clients, and document the threat model."}, "properties": {"scanner": "repobility-agent-runtime", "category": "quality", "severity": "medium", "confidence": 0.72, "cwe": "", "owasp": ""}}, {"id": "AGT015", "name": "Remote install command pipes network code directly to a shell", "shortDescription": {"text": "Remote install command pipes network code directly to a shell"}, "fullDescription": {"text": "Publish a package-manager install path or add checksum/signature verification before execution. For docs, show the inspect-then-run flow and pin the downloaded artifact version."}, "properties": {"scanner": "repobility-agent-runtime", "category": "dependency", "severity": "medium", "confidence": 0.7, "cwe": "", "owasp": ""}}, {"id": "SEC134", "name": "[SEC134] AI scaffold leftover \u2014 Lorem ipsum / example.com / John Doe in code: Lorem ipsum / John Doe / example.com left ", "shortDescription": {"text": "[SEC134] AI scaffold leftover \u2014 Lorem ipsum / example.com / John Doe in code: Lorem ipsum / John Doe / example.com left in non-test code. AI agents emit these as 'reasonable defaults' when they don't know real values; the human then forgets"}, "fullDescription": {"text": "Move dummy values to fixtures / seed files. In application code, require these to come from config or fail closed. Add a CI grep that rejects 'lorem ipsum' and 'example.com' outside test files."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC034", "name": "[SEC034] Log Injection / Log Forging \u2014 unsanitized user input in log: User input is logged without sanitizing newlines o", "shortDescription": {"text": "[SEC034] Log Injection / Log Forging \u2014 unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\\n` to forge fake log entries, hide tracks, or exploit downstream log parsers (S"}, "fullDescription": {"text": "Strip control characters before logging:\n  safe = user_input.replace('\\n','').replace('\\r','').replace('\\x00','')\n  logger.info('User action: %s', safe)\nAlways use parameterized logging (`%s` + args), never f-strings or string concat \u2014 that's also what mitigates log4shell-style attacks. For structured logging, use a JSON formatter that escapes values."}, "properties": {"scanner": "repobility-threat-engine", "category": "log_injection", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC015", "name": "[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.", "shortDescription": {"text": "[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable."}, "fullDescription": {"text": "Use secrets module (Python) or crypto.getRandomValues() (JS) for security-sensitive randomness."}, "properties": {"scanner": "repobility-threat-engine", "category": "crypto", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC005", "name": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.", "shortDescription": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "fullDescription": {"text": "Use subprocess with shell=False and a list of args. Never eval user input."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "medium", "confidence": 0.5, "cwe": "", "owasp": ""}}, {"id": "SEC042", "name": "[SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes an unsafe pattern. Currently s", "shortDescription": {"text": "[SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes an unsafe pattern. Currently safe when only trusted internal values are interpolated (e.g. self._table in Odoo), but a future contributor can extend t"}, "fullDescription": {"text": "Use psycopg2.sql.SQL() + sql.Identifier() for identifiers:\n  from psycopg2 import sql\n  cr.execute(sql.SQL('UPDATE {} SET x=%s').format(sql.Identifier(table)), (value,))\nNever use f-string in cr.execute(). Values go through %s parameters."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC001", "name": "[SEC001] Hardcoded Password: Hardcoded password found in source code.", "shortDescription": {"text": "[SEC001] Hardcoded Password: Hardcoded password found in source code."}, "fullDescription": {"text": "Use environment variables or a secrets manager."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "medium", "confidence": 0.3, "cwe": "", "owasp": ""}}, {"id": "SEC123", "name": "[SEC123] Production stack trace / debug output exposed: Debug mode left on in production exposes stack traces, environme", "shortDescription": {"text": "[SEC123] Production stack trace / debug output exposed: Debug mode left on in production exposes stack traces, environment variables, framework internals \u2014 sometimes triggers RCE (Django debug page with arbitrary template eval)."}, "fullDescription": {"text": "Set DEBUG=False / APP_DEBUG=false in production. Provide a generic 500 handler that logs to backend but returns a sanitized page to clients."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC014", "name": "[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks.", "shortDescription": {"text": "[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks."}, "fullDescription": {"text": "Enable SSL verification. Use verify=True (default) for requests. Pin certificates if needed."}, "properties": {"scanner": "repobility-threat-engine", "category": "crypto", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC045", "name": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a latera", "shortDescription": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use obj"}, "fullDescription": {"text": "For literal data structures: use ast.literal_eval(text) \u2014 only parses literals, raises on code.\nFor formula evaluation: use asteval or simpleeval (purpose-built sandboxes with allow-lists).\nFor Odoo: use odoo.tools.safe_eval(expr, locals_dict, mode='exec').\nIf you genuinely need to execute admin-stored code: require explicit super-admin permission AND log every execution with a stack trace."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC136", "name": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns ", "shortDescription": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, retur"}, "fullDescription": {"text": "Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC031", "name": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternati", "shortDescription": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process"}, "fullDescription": {"text": "Three options, pick one:\n  1. Rewrite the pattern to avoid nested quantifiers. E.g. `(a+)+` is      functionally equivalent to `a+` for matching purposes.\n  2. Use Google's re2 (`pip install google-re2`): linear-time, drop-in      replacement for `re` for most use cases.\n  3. Set a hard timeout: `signal.alarm(1)` before regex eval.\nTest patterns against `safe-regex` or `redos-detector` before shipping."}, "properties": {"scanner": "repobility-threat-engine", "category": "redos", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "ERR001", "name": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG ", "shortDescription": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "fullDescription": {"text": "Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types."}, "properties": {"scanner": "repobility-threat-engine", "category": "error_handling", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `compute` has cognitive complexity 22 (SonarSource scale). Cognitive compl", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `compute` has cognitive complexity 22 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all w"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 22."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED115", "name": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run t", "shortDescription": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) in"}, "fullDescription": {"text": "Replace with: `uses: actions/checkout@<40-char-sha>  # v4` and let Dependabot bump it on a scheduled cadence."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "low", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "WEB005", "name": "robots.txt does not advertise a sitemap", "shortDescription": {"text": "robots.txt does not advertise a sitemap"}, "fullDescription": {"text": "Add `Sitemap: https://your-domain.example/sitemap.xml` to robots.txt."}, "properties": {"scanner": "repobility-web-presence", "category": "quality", "severity": "low", "confidence": 0.74, "cwe": "", "owasp": ""}}, {"id": "SEC002", "name": "[SEC002] Hardcoded API Key: Hardcoded API key found in source code.", "shortDescription": {"text": "[SEC002] Hardcoded API Key: Hardcoded API key found in source code."}, "fullDescription": {"text": "Use environment variables. Add the pattern to .gitignore."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "low", "confidence": 0.4, "cwe": "", "owasp": ""}}, {"id": "SEC132", "name": "[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the la", "shortDescription": {"text": "[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template literals since ES6). Not a vulnerability on it"}, "fullDescription": {"text": "Python: `f\"prefix {var} suffix\"`. JS/TS: `` `prefix ${var} suffix` ``. Add a lint rule (pyupgrade UP032, eslint prefer-template) so future PRs catch this automatically."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "low", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED077", "name": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles.", "shortDescription": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-772 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED099", "name": "[MINED099] Hardcoded Secret: API key, AWS access key, GitHub token, Slack token, OpenAI key, or private key embedded dir", "shortDescription": {"text": "[MINED099] Hardcoded Secret: API key, AWS access key, GitHub token, Slack token, OpenAI key, or private key embedded directly in source. AI assistants frequently leak demo credentials."}, "fullDescription": {"text": "Move the secret to an environment variable or secret manager. Rotate the exposed credential immediately \u2014 assume it is compromised."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.1, "cwe": "", "owasp": ""}}, {"id": "MINED053", "name": "[MINED053] Placeholder Default Username (and 4 more): Same pattern found in 4 additional files. Review if needed.", "shortDescription": {"text": "[MINED053] Placeholder Default Username (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1392,CWE-798 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED007", "name": "[MINED007] Sql String Concat (and 4 more): Same pattern found in 4 additional files. Review if needed.", "shortDescription": {"text": "[MINED007] Sql String Concat (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-89 / A03:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC004", "name": "[SEC004] SQL Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[SEC004] SQL Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Use parameterized queries: cursor.execute('SELECT * FROM t WHERE id = ?', [id]). For dynamic table or column names, choose identifiers from a hard-coded allowlist and keep values in parameters."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED073", "name": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of ", "shortDescription": {"text": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of service."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1333,CWE-400 / A06:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED021", "name": "[MINED021] Path Traversal Os Join (and 4 more): Same pattern found in 4 additional files. Review if needed.", "shortDescription": {"text": "[MINED021] Path Traversal Os Join (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-22 / A01:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED014", "name": "[MINED014] Disabled Tls Verify (and 32 more): Same pattern found in 32 additional files. Review if needed.", "shortDescription": {"text": "[MINED014] Disabled Tls Verify (and 32 more): Same pattern found in 32 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-295 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED062", "name": "[MINED062] Python Dataclass No Fields (and 7 more): Same pattern found in 7 additional files. Review if needed.", "shortDescription": {"text": "[MINED062] Python Dataclass No Fields (and 7 more): Same pattern found in 7 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED079", "name": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk.", "shortDescription": {"text": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-193 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED063", "name": "[MINED063] Toctou Os Path Exists (and 14 more): Same pattern found in 14 additional files. Review if needed.", "shortDescription": {"text": "[MINED063] Toctou Os Path Exists (and 14 more): Same pattern found in 14 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-367 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED049", "name": "[MINED049] Print Pii (and 68 more): Same pattern found in 68 additional files. Review if needed.", "shortDescription": {"text": "[MINED049] Print Pii (and 68 more): Same pattern found in 68 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 / A09:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https (and 42 more): Same pattern found in 42 additional files. Review if needed.", "shortDescription": {"text": "[MINED043] Http Not Https (and 42 more): Same pattern found in 42 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC020", "name": "[SEC020] Secret Printed to Logs (and 77 more): Same pattern found in 77 additional files. Review if needed.", "shortDescription": {"text": "[SEC020] Secret Printed to Logs (and 77 more): Same pattern found in 77 additional files. Review if needed."}, "fullDescription": {"text": "Log only redacted, hashed, or last-four-style metadata. Rotate any secret that may have reached logs."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC103", "name": "[SEC103] LDAP injection \u2014 non-constant search filter (and 44 more): Same pattern found in 44 additional files. Review if", "shortDescription": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter (and 44 more): Same pattern found in 44 additional files. Review if needed."}, "fullDescription": {"text": "Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders)."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED055", "name": "[MINED055] Npm Install No Lockfile (and 36 more): Same pattern found in 36 additional files. Review if needed.", "shortDescription": {"text": "[MINED055] Npm Install No Lockfile (and 36 more): Same pattern found in 36 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1357 / A06:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED067", "name": "[MINED067] Python Requests No Timeout (and 188 more): Same pattern found in 188 additional files. Review if needed.", "shortDescription": {"text": "[MINED067] Python Requests No Timeout (and 188 more): Same pattern found in 188 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-400 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC078", "name": "[SEC078] Python: requests without timeout (and 188 more): Same pattern found in 188 additional files. Review if needed.", "shortDescription": {"text": "[SEC078] Python: requests without timeout (and 188 more): Same pattern found in 188 additional files. Review if needed."}, "fullDescription": {"text": "Add `timeout=10` (or appropriate value) to every requests call."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC029", "name": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 53 more): Same pattern found in 53 addi", "shortDescription": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 53 more): Same pattern found in 53 additional files. Review if needed."}, "fullDescription": {"text": "Validate the URL against an allowlist BEFORE fetching:\n  ALLOWED = {'images.example.com', 'cdn.example.com'}\n  host = urlparse(url).hostname\n  if host not in ALLOWED: abort(400)\nOr use a server-side proxy (Imgproxy / serve-files-only-from-S3) that isolates outbound network access from the request handler.\nBlock private CIDRs explicitly: 10/8, 172.16/12, 192.168/16, 169.254/16."}, "properties": {"scanner": "repobility-threat-engine", "category": "ssrf", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function (and 154 more): Same pattern found in 154 additional files. Review if needed.", "shortDescription": {"text": "[MINED050] Stub Only Function (and 154 more): Same pattern found in 154 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass (and 148 more): Same pattern found in 148 additional files. Review if needed.", "shortDescription": {"text": "[MINED001] Bare Except Pass (and 148 more): Same pattern found in 148 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED004", "name": "[MINED004] Weak Crypto (and 60 more): Same pattern found in 60 additional files. Review if needed.", "shortDescription": {"text": "[MINED004] Weak Crypto (and 60 more): Same pattern found in 60 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC128", "name": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 46 more): Same pattern found in 46 add", "shortDescription": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 46 more): Same pattern found in 46 additional files. Review if needed."}, "fullDescription": {"text": "Add `await` before each async call, or chain with `.then`. If you intentionally want fire-and-forget, prefix with `void` (TS) or assign to `_` (Python with `asyncio.create_task`) to make the intent explicit and survive lint."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED064", "name": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.", "shortDescription": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC013", "name": "[SEC013] Path Traversal \u2014 User Input in File Path (and 15 more): Same pattern found in 15 additional files. Review if ne", "shortDescription": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path (and 15 more): Same pattern found in 15 additional files. Review if needed."}, "fullDescription": {"text": "Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads."}, "properties": {"scanner": "repobility-threat-engine", "category": "path_traversal", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "CORE_NO_TESTS", "name": "No test files found in a documentation, catalog, or template-heavy repository", "shortDescription": {"text": "No test files found in a documentation, catalog, or template-heavy repository"}, "fullDescription": {"text": "If this repository ships runnable code, add focused tests for those examples or templates. If it is documentation/catalog content only, mark the finding as accepted or add a .repobilityignore note."}, "properties": {"scanner": "repobility-core", "category": "testing", "severity": "info", "confidence": 0.35, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "[MINED108] `self.rfile` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self", "shortDescription": {"text": "[MINED108] `self.rfile` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.rfile`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first "}, "fullDescription": {"text": "Initialize `self.rfile = <default>` in __init__, or add a class-level default."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "[MINED106] Phantom test coverage: test_race_condition: Test function `test_race_condition` runs code but contains no ass", "shortDescription": {"text": "[MINED106] Phantom test coverage: test_race_condition: Test function `test_race_condition` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "fullDescription": {"text": "Add an explicit assertion that captures the test's intent, or remove the test."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED009", "name": "[MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of Decimal.", "shortDescription": {"text": "[MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of Decimal."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-682 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED012", "name": "[MINED012] Curl Pipe Bash: curl ... | sh / bash \u2014 runs unverified network code.", "shortDescription": {"text": "[MINED012] Curl Pipe Bash: curl ... | sh / bash \u2014 runs unverified network code."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-494 / A08:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED034", "name": "[MINED034] Python Subprocess Shell True: subprocess(..., shell=True) enables command injection.", "shortDescription": {"text": "[MINED034] Python Subprocess Shell True: subprocess(..., shell=True) enables command injection."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-78 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC113", "name": "[SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first connect lets an active MITM impe", "shortDescription": {"text": "[SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first connect lets an active MITM impersonate the server. Common in `paramiko.AutoAddPolicy()`."}, "fullDescription": {"text": "Python: load `~/.ssh/known_hosts` and use `paramiko.RejectPolicy()`. Go: implement a `ssh.HostKeyCallback` that compares against a known fingerprint. Java JSch: load known_hosts via `jsch.setKnownHosts(...)`."}, "properties": {"scanner": "repobility-threat-engine", "category": "crypto", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC082", "name": "[SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / WarningPolicy disables SSH host-key", "shortDescription": {"text": "[SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / WarningPolicy disables SSH host-key verification \u2014 vulnerable to MITM. Ported from bandit B507 / dlint DUO133 (Apache-2.0 / BSD-3)."}, "fullDescription": {"text": "Use `paramiko.RejectPolicy()` and pre-populate known_hosts via `client.load_system_host_keys()`."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED006", "name": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working.", "shortDescription": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-705 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED036", "name": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping.", "shortDescription": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-78 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED127", "name": "[MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer signature (`cryptonight`). Could be", "shortDescription": {"text": "[MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer signature (`cryptonight`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate i"}, "fullDescription": {"text": "Verify the file's provenance \u2014 when was it added, by whom, in what PR. Search the repo for related indicators (binary blobs, outbound network calls, base64-encoded shell scripts)."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED133", "name": "[MINED133] Hardcoded Slack webhook URL in source: File contains a hardcoded `Slack` webhook URL: `https://hooks.slack.co", "shortDescription": {"text": "[MINED133] Hardcoded Slack webhook URL in source: File contains a hardcoded `Slack` webhook URL: `https://hooks.slack.com/services/XXX/YYY/ZZZ...`. Webhook URLs are unauthenticated POST endpoints \u2014 anyone with the URL can send messages. The"}, "fullDescription": {"text": "Move the URL to a secret manager / environment variable. Rotate the webhook immediately if this is a live URL (consider it compromised the moment it landed in git)."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "[MINED107] Missing import: `email` used but not imported: The file uses `email.something(...)` but never imports `email`", "shortDescription": {"text": "[MINED107] Missing import: `email` used but not imported: The file uses `email.something(...)` but never imports `email`. This raises NameError at runtime the first time the line executes."}, "fullDescription": {"text": "Add `import email` at the top of the file."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC039", "name": "[SEC039] Plaintext-equivalent password hash \u2014 unsalted single-pass digest: Single-pass digest of a password is cryptogra", "shortDescription": {"text": "[SEC039] Plaintext-equivalent password hash \u2014 unsalted single-pass digest: Single-pass digest of a password is cryptographically strong as a hash, but is rainbow-table-attackable when used for passwords: there's no salt and no key-stretchin"}, "fullDescription": {"text": "Use a purpose-built password hash:\n  - Python: passlib.hash.argon2.hash(password)\n  - Python: bcrypt.hashpw(password.encode(), bcrypt.gensalt())\n  - Python: hashlib.pbkdf2_hmac('sha256', password, salt, 600000)\n  - PHP: password_hash($password, PASSWORD_ARGON2ID)\n  - Node.js: argon2.hash(password) or bcrypt.hash(password, 12)\nWhen rotating, accept both old + new for one session each, then re-hash on next login."}, "properties": {"scanner": "repobility-threat-engine", "category": "crypto", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "scanner-f67fb14f06d93df9", "name": "Possibly dead Python function: validate_ssh", "shortDescription": {"text": "Possibly dead Python function: validate_ssh"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cae6dd616cb2467b", "name": "Possibly dead Python function: validate_winrm", "shortDescription": {"text": "Possibly dead Python function: validate_winrm"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43628518c79de31d", "name": "Possibly dead Python function: validate_smb", "shortDescription": {"text": "Possibly dead Python function: validate_smb"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d28b32068414def6", "name": "Possibly dead Python function: validate_snmpv3", "shortDescription": {"text": "Possibly dead Python function: validate_snmpv3"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d0ca3dc91933af9", "name": "Possibly dead Python function: compare_auth_vs_unauth", "shortDescription": {"text": "Possibly dead Python function: compare_auth_vs_unauth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6816ed201462d200", "name": "Possibly dead Python function: compare_with_spec", "shortDescription": {"text": "Possibly dead Python function: compare_with_spec"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74a433e6b1b51fcf", "name": "Possibly dead Python function: check_urls_virustotal", "shortDescription": {"text": "Possibly dead Python function: check_urls_virustotal"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b0cb014e9682ac9", "name": "Possibly dead Python function: test_introspection", "shortDescription": {"text": "Possibly dead Python function: test_introspection"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2432eded9007450e", "name": "Possibly dead Python function: test_query_depth", "shortDescription": {"text": "Possibly dead Python function: test_query_depth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1146da58f4e49e04", "name": "Possibly dead Python function: test_batch_queries", "shortDescription": {"text": "Possibly dead Python function: test_batch_queries"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82ba8ab04ba41e07", "name": "Possibly dead Python function: test_field_suggestions", "shortDescription": {"text": "Possibly dead Python function: test_field_suggestions"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aacf561e2cdcf8c8", "name": "Possibly dead Python function: test_unauthorized_access", "shortDescription": {"text": "Possibly dead Python function: test_unauthorized_access"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44c8f5794d71607f", "name": "Possibly dead Python function: test_alias_overloading", "shortDescription": {"text": "Possibly dead Python function: test_alias_overloading"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08f4cda6f76a04b0", "name": "Possibly dead Python function: list_auth_logs", "shortDescription": {"text": "Possibly dead Python function: list_auth_logs"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c9ccca0e145ebf6", "name": "Possibly dead Python function: analyze_auth_logs", "shortDescription": {"text": "Possibly dead Python function: analyze_auth_logs"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8617ad15d319103d", "name": "Possibly dead Python function: generate_server_cert", "shortDescription": {"text": "Possibly dead Python function: generate_server_cert"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fe6866d5ffcc0e4", "name": "Possibly dead Python function: verify_chart_signature", "shortDescription": {"text": "Possibly dead Python function: verify_chart_signature"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d51c600e63f79e8e", "name": "Possibly dead Python function: scan_with_kubesec", "shortDescription": {"text": "Possibly dead Python function: scan_with_kubesec"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa297612ea883549", "name": "Possibly dead Python function: process_ra", "shortDescription": {"text": "Possibly dead Python function: process_ra"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa2ae26e3f8c66c9", "name": "Possibly dead Python function: detect_tunnel", "shortDescription": {"text": "Possibly dead Python function: detect_tunnel"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f274a527913eb08", "name": "Possibly dead Python function: parse_netflow_capture", "shortDescription": {"text": "Possibly dead Python function: parse_netflow_capture"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2bb1d7c5130f1e4e", "name": "Possibly dead Python function: triangulate_image", "shortDescription": {"text": "Possibly dead Python function: triangulate_image"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22e97bf6eca0d44d", "name": "Possibly dead Python function: deploy_aws_credential_token", "shortDescription": {"text": "Possibly dead Python function: deploy_aws_credential_token"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63385066304d5c45", "name": "Possibly dead Python function: deploy_database_honeytoken", "shortDescription": {"text": "Possibly dead Python function: deploy_database_honeytoken"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-227d36dbeda5a1f3", "name": "Possibly dead Python function: deploy_dns_token_in_config", "shortDescription": {"text": "Possibly dead Python function: deploy_dns_token_in_config"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d51a5f03533fb100", "name": "Possibly dead Python function: list_network_policies", "shortDescription": {"text": "Possibly dead Python function: list_network_policies"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b5cbf2c6b651acc", "name": "insecure hash algorithm sha1 \u2014 skills/analyzing-linux-elf-malware/scripts/agent.py:21", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/analyzing-linux-elf-malware/scripts/agent.py:21"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff56cbe298e6fae5", "name": "dynamic urllib use detected \u2014 skills/analyzing-ransomware-network-indicators/scripts/agent.py:58", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/analyzing-ransomware-network-indicators/scripts/agent.py:58"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e3efa451b7a0a86", "name": "insecure hash algorithm sha1 \u2014 skills/building-automated-malware-submission-pipeline/scripts/agent.py:21", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/building-automated-malware-submission-pipeline/scripts/agent.py:21"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c69d3c6df4c00c51", "name": "dynamic urllib use detected \u2014 skills/building-devsecops-pipeline-with-gitlab-ci/scripts/process.py:27", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/building-devsecops-pipeline-with-gitlab-ci/scripts/process.py:27"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10268ee3ed77f486", "name": "use defused xml \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/agent.py:7", "shortDescription": {"text": "use defused xml \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/agent.py:7"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b826eebb5e8a77a8", "name": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26", "shortDescription": {"text": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ea2d0ea4f1531425", "name": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:28", "shortDescription": {"text": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:28"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a4b19cca91e9c55c", "name": "dynamic urllib use detected \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/process.py:126", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/process.py:126"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-425d5dda8f863e6e", "name": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40", "shortDescription": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-412b46fe4f884d68", "name": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:44", "shortDescription": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:44"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cda5740a9ed6218e", "name": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:89", "shortDescription": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:89"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4399ed63e9872a6e", "name": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:113", "shortDescription": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:113"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7de48c45226d4db0", "name": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:129", "shortDescription": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:129"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7f996b3d038e1399", "name": "disabled cert validation \u2014 skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-17bdbb56bd05fce0", "name": "disabled cert validation \u2014 skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7b581a10a6913ddb", "name": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:74", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:74"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4a9d499d923c7adf", "name": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:115", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:115"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-139f1d6308921078", "name": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:121", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:121"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bd491d20aae79b67", "name": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:25", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:25"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-697387024c5d852b", "name": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:30", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:30"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ab27e6768eba344", "name": "disabled cert validation \u2014 skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:28", "shortDescription": {"text": "disabled cert validation \u2014 skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:28"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f541451c7508d1d7", "name": "dynamic urllib use detected \u2014 skills/configuring-oauth2-authorization-flow/scripts/process.py:338", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/configuring-oauth2-authorization-flow/scripts/process.py:338"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbaa3bd33bdd3742", "name": "dynamic urllib use detected \u2014 skills/correlating-security-events-in-qradar/scripts/agent.py:32", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/correlating-security-events-in-qradar/scripts/agent.py:32"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a212b9264a23f472", "name": "dynamic urllib use detected \u2014 skills/correlating-threat-campaigns/scripts/agent.py:32", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/correlating-threat-campaigns/scripts/agent.py:32"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-108ef1d33827a636", "name": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:36", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:36"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d539b3d41d1ef438", "name": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:51", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:51"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc3be0c7af494010", "name": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:90", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:90"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecf9ca2c6e34eed2", "name": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:786", "shortDescription": {"text": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:786"}, "fullDescription": {"text": "Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar text-based serialization format.\n\nRule: python.lang.security.deserialization.pickle.avoid-pickle\nSeverity: WARNING\nOWASP: A08:2017 - Insecure Deserialization, A08:2021 - Software and Data Integrity Failures, A08:2025 - Software or Data Integrity Failures\nCWE: CWE-502: Deserialization of Untrusted Data\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fddd19ad64f9a0d6", "name": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:1069", "shortDescription": {"text": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:1069"}, "fullDescription": {"text": "Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar text-based serialization format.\n\nRule: python.lang.security.deserialization.pickle.avoid-pickle\nSeverity: WARNING\nOWASP: A08:2017 - Insecure Deserialization, A08:2021 - Software and Data Integrity Failures, A08:2025 - Software or Data Integrity Failures\nCWE: CWE-502: Deserialization of Untrusted Data\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-39920d5c575b4820", "name": "use defused xml \u2014 skills/detecting-credential-dumping-techniques/scripts/agent.py:7", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-credential-dumping-techniques/scripts/agent.py:7"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f595f75a85e7b0e", "name": "use defused xml \u2014 skills/detecting-golden-ticket-forgery/scripts/agent.py:6", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-golden-ticket-forgery/scripts/agent.py:6"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c49fb8167872c78", "name": "use defused xml \u2014 skills/detecting-living-off-the-land-attacks/scripts/agent.py:14", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-living-off-the-land-attacks/scripts/agent.py:14"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-935c3b6445dc8e29", "name": "use defused xml \u2014 skills/detecting-malicious-scheduled-tasks-with-sysmon/scripts/agent.py:8", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-malicious-scheduled-tasks-with-sysmon/scripts/agent.py:8"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f3c0106271d5c9e9", "name": "insecure hash algorithm sha1 \u2014 skills/detecting-mobile-malware-behavior/scripts/process.py:63", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/detecting-mobile-malware-behavior/scripts/process.py:63"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71325a4422e449fc", "name": "use defused xml \u2014 skills/detecting-pass-the-ticket-attacks/scripts/agent.py:6", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-pass-the-ticket-attacks/scripts/agent.py:6"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c9501abfc0b39b5c", "name": "use defused xml \u2014 skills/detecting-rdp-brute-force-attacks/scripts/agent.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-rdp-brute-force-attacks/scripts/agent.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1456df9a502350c", "name": "dynamic urllib use detected \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:175", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:175"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96ef99ee0a37a3ab", "name": "use defused xml \u2014 skills/detecting-wmi-persistence/scripts/agent.py:9", "shortDescription": {"text": "use defused xml \u2014 skills/detecting-wmi-persistence/scripts/agent.py:9"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0904d4a002bac14c", "name": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:107", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:107"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-457755819bd53d56", "name": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:137", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:137"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-038faa0136310c40", "name": "hardcoded password default argument \u2014 skills/exploiting-active-directory-with-bloodhound/scripts/agent.py:68", "shortDescription": {"text": "hardcoded password default argument \u2014 skills/exploiting-active-directory-with-bloodhound/scripts/agent.py:68"}, "fullDescription": {"text": "Hardcoded password is used as a default argument to 'query_neo4j'. This could be dangerous if a real password is not supplied.\n\nRule: python.lang.security.audit.hardcoded-password-default-argument.hardcoded-password-default-argument\nSeverity: WARNING\nOWASP: A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-798: Use of Hard-coded Credentials\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a255176fecbd611d", "name": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-13e6cf5b93dd53a5", "name": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:58", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:58"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-04964a83991916e0", "name": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:61", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:61"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2e0ceb96cc4a179", "name": "disabled cert validation \u2014 skills/exploiting-broken-function-level-authorization/scripts/agent.py:32", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-broken-function-level-authorization/scripts/agent.py:32"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0275be8ee71b66ff", "name": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:51", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:51"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a8ad4e6455dcaa7", "name": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:98", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:98"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14a2eba1805f6135", "name": "use defused xml \u2014 skills/exploiting-deeplink-vulnerabilities/scripts/process.py:15", "shortDescription": {"text": "use defused xml \u2014 skills/exploiting-deeplink-vulnerabilities/scripts/process.py:15"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a818fa8c49d8b12", "name": "disabled cert validation \u2014 skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3de0569abe67e890", "name": "use defused xml \u2014 skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py:18", "shortDescription": {"text": "use defused xml \u2014 skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py:18"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf74761d6fdb4c75", "name": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:70", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:70"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-669c8db7e49a64b3", "name": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:97", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:97"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8c2bce7e62affeb6", "name": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:118", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:118"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e38a37ff68521469", "name": "avoid pickle \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:136", "shortDescription": {"text": "avoid pickle \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:136"}, "fullDescription": {"text": "Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar text-based serialization format.\n\nRule: python.lang.security.deserialization.pickle.avoid-pickle\nSeverity: WARNING\nOWASP: A08:2017 - Insecure Deserialization, A08:2021 - Software and Data Integrity Failures, A08:2025 - Software or Data Integrity Failures\nCWE: CWE-502: Deserialization of Untrusted Data\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a3fadc5ca54c3138", "name": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:137", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:137"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a7341575601b8eab", "name": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2fd0b6137cd184b", "name": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:64", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:64"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c1bdb94cda5b1da", "name": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:66", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:66"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-570301dba3be6cea", "name": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:68", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:68"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2740457d6b22a95", "name": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8be08c37de0e07d3", "name": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:53", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:53"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1905aa694031b4c2", "name": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:78", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:78"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-269db5df0c3941df", "name": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:85", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:85"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee4cd448de40b0a9", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:29", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:29"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f4dd8952c799402", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:69", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:69"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c92b1e9336783500", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:96", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:96"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-35bbadc785c4f671", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:101", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:101"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9cb7dad71dd16ed", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:122", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:122"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-83241e13c0d7d21b", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:132", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:132"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e30f730afaf6ab2c", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:153", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:153"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-20cad192a492521f", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:154", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:154"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-918769eb45e8cbb5", "name": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:175", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:175"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-015057d83afa9e98", "name": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ddade997290f60bb", "name": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:77", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:77"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-94653a7c7d04b39c", "name": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-96950b5457d03bf4", "name": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:28", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:28"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fec6fc2724605fe2", "name": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:30", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:30"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b7c880cce17787b3", "name": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:49", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:49"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f623639a30464eca", "name": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:52", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:52"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c1a81fc123a1815", "name": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3bcfec8022189094", "name": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:147", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:147"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e43cb05a31b8122", "name": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:158", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:158"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6dfca331a27ec7c1", "name": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:161", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:161"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-875574385e500df7", "name": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:49", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:49"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9f190b72567a71b", "name": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:60", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:60"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9edd94293371cc3", "name": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:88", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:88"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b727b832050907c7", "name": "hardcoded password default argument \u2014 skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:29", "shortDescription": {"text": "hardcoded password default argument \u2014 skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:29"}, "fullDescription": {"text": "Hardcoded password is used as a default argument to '__init__'. This could be dangerous if a real password is not supplied.\n\nRule: python.lang.security.audit.hardcoded-password-default-argument.hardcoded-password-default-argument\nSeverity: WARNING\nOWASP: A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-798: Use of Hard-coded Credentials\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d2ee593b8cd0661", "name": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e5e01e8b755d8be", "name": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:54", "shortDescription": {"text": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:54"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3de062c5784374e4", "name": "insecure hash algorithm sha1 \u2014 skills/extracting-config-from-agent-tesla-rat/scripts/agent.py:30", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/extracting-config-from-agent-tesla-rat/scripts/agent.py:30"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1951e93557b476df", "name": "insecure hash algorithm sha1 \u2014 skills/extracting-iocs-from-malware-samples/scripts/agent.py:51", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/extracting-iocs-from-malware-samples/scripts/agent.py:51"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b73cba8a38b879a", "name": "use defused xml \u2014 skills/hardening-linux-endpoint-with-cis-benchmark/scripts/process.py:4", "shortDescription": {"text": "use defused xml \u2014 skills/hardening-linux-endpoint-with-cis-benchmark/scripts/process.py:4"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b703c2b8069c5b2b", "name": "use defused xml \u2014 skills/hardening-windows-endpoint-with-cis-benchmark/scripts/process.py:9", "shortDescription": {"text": "use defused xml \u2014 skills/hardening-windows-endpoint-with-cis-benchmark/scripts/process.py:9"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b66281054b92477", "name": "use defused xml \u2014 skills/hunting-for-dcsync-attacks/scripts/agent.py:9", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-dcsync-attacks/scripts/agent.py:9"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14431fb2915de911", "name": "use defused xml \u2014 skills/hunting-for-lateral-movement-via-wmi/scripts/agent.py:14", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-lateral-movement-via-wmi/scripts/agent.py:14"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66e6208423056e21", "name": "use defused xml \u2014 skills/hunting-for-living-off-the-land-binaries/scripts/process.py:18", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-living-off-the-land-binaries/scripts/process.py:18"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-28102c973ff5d380", "name": "use defused xml \u2014 skills/hunting-for-shadow-copy-deletion/scripts/agent.py:7", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-shadow-copy-deletion/scripts/agent.py:7"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67ba8579ae3827e7", "name": "use defused xml \u2014 skills/hunting-for-suspicious-scheduled-tasks/scripts/agent.py:7", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-suspicious-scheduled-tasks/scripts/agent.py:7"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa1b0ea70bf8e880", "name": "use defused xml \u2014 skills/hunting-for-t1098-account-manipulation/scripts/agent.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/hunting-for-t1098-account-manipulation/scripts/agent.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9b0fce8691325ee", "name": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/agent.py:7", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/agent.py:7"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-228b4c976a028159", "name": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/process.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/process.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2429a68370a4e3c0", "name": "use defused xml \u2014 skills/implementing-dmarc-dkim-spf-email-security/scripts/process.py:17", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-dmarc-dkim-spf-email-security/scripts/process.py:17"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c0444b82ddaefc6e", "name": "dynamic urllib use detected \u2014 skills/implementing-github-advanced-security-for-code-scanning/scripts/process.py:34", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/implementing-github-advanced-security-for-code-scanning/scripts/process.py:34"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9c8d81f80f59596", "name": "render template string \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:561", "shortDescription": {"text": "render template string \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:561"}, "fullDescription": {"text": "Found a template created with string formatting. This is susceptible to server-side template injection and cross-site scripting attacks.\n\nRule: python.flask.security.audit.render-template-string.render-template-string\nSeverity: WARNING\nOWASP: A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d0750c2e9830e16", "name": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/agent.py:8", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/agent.py:8"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-920801af82b6f1ff", "name": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:8", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:8"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1fa7728fddca212e", "name": "dynamic urllib use detected \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:42", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:42"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ebda1b116b24864", "name": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/agent.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/agent.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2f6566662bd3dc2", "name": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:10", "shortDescription": {"text": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:10"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e350641f32ed907c", "name": "dynamic urllib use detected \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:311", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:311"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b83d3f27505d963", "name": "avoid_app_run_with_bad_host \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470", "shortDescription": {"text": "avoid_app_run_with_bad_host \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "fullDescription": {"text": "Running flask app with host 0.0.0.0 could expose the server publicly.\n\nRule: python.flask.security.audit.app-run-param-config.avoid_app_run_with_bad_host\nSeverity: WARNING\nOWASP: A01:2021 - Broken Access Control, A01:2025 - Broken Access Control\nCWE: CWE-668: Exposure of Resource to Wrong Sphere\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5698dc018472649", "name": "debug enabled \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470", "shortDescription": {"text": "debug enabled \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "fullDescription": {"text": "Detected Flask app with debug=True. Do not deploy to production with this flag enabled as it will leak sensitive information. Instead, consider using Flask configuration variables or setting 'debug' using system environment variables.\n\nRule: python.flask.security.audit.debug-enabled.debug-enabled\nSeverity: WARNING\nOWASP: A, 0, 6, :, 2, 0, 1, 7,  , -,  , S, e, c, u, r, i, t, y,  , M, i, s, c, o, n, f, i, g, u, r, a, t, i, o, n\nCWE: CWE-489: Active Debug Code\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-336c9cd521acbd07", "name": "hardcoded password default argument \u2014 skills/implementing-vulnerability-management-with-greenbone/scripts/agent.py:23", "shortDescription": {"text": "hardcoded password default argument \u2014 skills/implementing-vulnerability-management-with-greenbone/scripts/agent.py:23"}, "fullDescription": {"text": "Hardcoded password is used as a default argument to 'connect_gvm'. This could be dangerous if a real password is not supplied.\n\nRule: python.lang.security.audit.hardcoded-password-default-argument.hardcoded-password-default-argument\nSeverity: WARNING\nOWASP: A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-798: Use of Hard-coded Credentials\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4074e02682becba5", "name": "hardcoded password default argument \u2014 skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py:85", "shortDescription": {"text": "hardcoded password default argument \u2014 skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py:85"}, "fullDescription": {"text": "Hardcoded password is used as a default argument to 'run_password_demo'. This could be dangerous if a real password is not supplied.\n\nRule: python.lang.security.audit.hardcoded-password-default-argument.hardcoded-password-default-argument\nSeverity: WARNING\nOWASP: A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-798: Use of Hard-coded Credentials\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae7062681ac41ff0", "name": "use defused xml \u2014 skills/intercepting-mobile-traffic-with-burpsuite/scripts/process.py:17", "shortDescription": {"text": "use defused xml \u2014 skills/intercepting-mobile-traffic-with-burpsuite/scripts/process.py:17"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9b202c65dff84db4", "name": "use defused xml \u2014 skills/performing-active-directory-compromise-investigation/scripts/process.py:11", "shortDescription": {"text": "use defused xml \u2014 skills/performing-active-directory-compromise-investigation/scripts/process.py:11"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b8da75f18b97ff5a", "name": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/agent.py:8", "shortDescription": {"text": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/agent.py:8"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95ccecf0d634022a", "name": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/process.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/process.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05f084cd2ac81c3c", "name": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/agent.py:6", "shortDescription": {"text": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/agent.py:6"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0cc97f3c66d9a198", "name": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/process.py:12", "shortDescription": {"text": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/process.py:12"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-703b6ef3214df675", "name": "insecure hash algorithm sha1 \u2014 skills/performing-dark-web-monitoring-for-threats/scripts/agent.py:90", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-dark-web-monitoring-for-threats/scripts/agent.py:90"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71a2e15fd3b14be6", "name": "use defused xml \u2014 skills/performing-dmarc-policy-enforcement-rollout/scripts/process.py:19", "shortDescription": {"text": "use defused xml \u2014 skills/performing-dmarc-policy-enforcement-rollout/scripts/process.py:19"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bfe868b0076bb2c3", "name": "insecure hash algorithm sha1 \u2014 skills/performing-endpoint-forensics-investigation/scripts/agent.py:109", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-endpoint-forensics-investigation/scripts/agent.py:109"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4deb6b8df031b092", "name": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:60", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:60"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58f1d2891ea00502", "name": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:78", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:78"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a946b76e795aab7", "name": "use defused xml \u2014 skills/performing-external-network-penetration-test/scripts/agent.py:46", "shortDescription": {"text": "use defused xml \u2014 skills/performing-external-network-penetration-test/scripts/agent.py:46"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66019454b62887da", "name": "insecure hash algorithm sha1 \u2014 skills/performing-hash-cracking-with-hashcat/scripts/process.py:128", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-hash-cracking-with-hashcat/scripts/process.py:128"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6fdc12d43b1e5deb", "name": "use defused xml \u2014 skills/performing-kerberoasting-attack/scripts/agent.py:119", "shortDescription": {"text": "use defused xml \u2014 skills/performing-kerberoasting-attack/scripts/agent.py:119"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-555c4d585d22a74b", "name": "use defused xml \u2014 skills/performing-lateral-movement-with-wmiexec/scripts/agent.py:14", "shortDescription": {"text": "use defused xml \u2014 skills/performing-lateral-movement-with-wmiexec/scripts/agent.py:14"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-10b82799913f24b3", "name": "use defused xml \u2014 skills/performing-log-analysis-for-forensic-investigation/scripts/agent.py:30", "shortDescription": {"text": "use defused xml \u2014 skills/performing-log-analysis-for-forensic-investigation/scripts/agent.py:30"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5345b64fdbee615b", "name": "insecure hash algorithm sha1 \u2014 skills/performing-malware-hash-enrichment-with-virustotal/scripts/agent.py:97", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-hash-enrichment-with-virustotal/scripts/agent.py:97"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26f9879e78d27b7b", "name": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/agent.py:72", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/agent.py:72"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-848f1c30a7a1bcd3", "name": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/process.py:65", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/process.py:65"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c12def8788358e1f", "name": "use defused xml \u2014 skills/performing-malware-persistence-investigation/scripts/agent.py:10", "shortDescription": {"text": "use defused xml \u2014 skills/performing-malware-persistence-investigation/scripts/agent.py:10"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a182a2584d4857fb", "name": "use defused xml \u2014 skills/performing-ot-network-security-assessment/scripts/agent.py:93", "shortDescription": {"text": "use defused xml \u2014 skills/performing-ot-network-security-assessment/scripts/agent.py:93"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14d48f01d4ad51a7", "name": "use defused xml \u2014 skills/performing-ot-vulnerability-scanning-safely/scripts/agent.py:95", "shortDescription": {"text": "use defused xml \u2014 skills/performing-ot-vulnerability-scanning-safely/scripts/agent.py:95"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-be92898b62ac72ee", "name": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:39", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:39"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1aac3922cddfbbd", "name": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:55", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:55"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0fa1f00d80bba411", "name": "dynamic urllib use detected \u2014 skills/performing-scada-hmi-security-assessment/scripts/agent.py:72", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/performing-scada-hmi-security-assessment/scripts/agent.py:72"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5289f0d242f94bb6", "name": "disabled cert validation \u2014 skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ac58afa0b440260c", "name": "insecure hash algorithm sha1 \u2014 skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:53", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:53"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0393633bdce45cc8", "name": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:100", "shortDescription": {"text": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:100"}, "fullDescription": {"text": "Found 'subprocess' function 'run' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.\n\nRule: python.lang.security.audit.subprocess-shell-true.subprocess-shell-true\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a75296ca4c53c32d", "name": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:131", "shortDescription": {"text": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:131"}, "fullDescription": {"text": "Found 'subprocess' function 'run' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.\n\nRule: python.lang.security.audit.subprocess-shell-true.subprocess-shell-true\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-16a8e79686f137db", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:21", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:21"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cc8735c17e1c07d9", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:43", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:43"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6890ff6ad7ed136d", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:72", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:72"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de153bd10f78df02", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:81", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:81"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-87fac1a743881c82", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:99", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:99"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ae2e3251897374d", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:151", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:151"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-418f74111d194786", "name": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:177", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:177"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6394dcbec1df206b", "name": "use defused xml \u2014 skills/performing-web-application-scanning-with-nikto/scripts/agent.py:12", "shortDescription": {"text": "use defused xml \u2014 skills/performing-web-application-scanning-with-nikto/scripts/agent.py:12"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-77dd39aff578e8ae", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:29", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:29"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-389f1cb4ea9c42e3", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:66", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:66"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2786cc2f91522269", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:101", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:101"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d427a18f0395addb", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:106", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:106"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a3d259c3adb8e7e6", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:132", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:132"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3543fa68de1682d8", "name": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:157", "shortDescription": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:157"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a37f5ae063b88f7", "name": "hardcoded password default argument \u2014 skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py:20", "shortDescription": {"text": "hardcoded password default argument \u2014 skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py:20"}, "fullDescription": {"text": "Hardcoded password is used as a default argument to '__init__'. This could be dangerous if a real password is not supplied.\n\nRule: python.lang.security.audit.hardcoded-password-default-argument.hardcoded-password-default-argument\nSeverity: WARNING\nOWASP: A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-798: Use of Hard-coded Credentials\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ab21a1b4ac8a0e1", "name": "use defused xml \u2014 skills/reverse-engineering-android-malware-with-jadx/scripts/agent.py:9", "shortDescription": {"text": "use defused xml \u2014 skills/reverse-engineering-android-malware-with-jadx/scripts/agent.py:9"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-46f5d869d8f6fd66", "name": "insecure hash algorithm sha1 \u2014 skills/reverse-engineering-malware-with-ghidra/scripts/agent.py:23", "shortDescription": {"text": "insecure hash algorithm sha1 \u2014 skills/reverse-engineering-malware-with-ghidra/scripts/agent.py:23"}, "fullDescription": {"text": "Detected SHA1 hash algorithm which is considered insecure. SHA1 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead.\n\nRule: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1\nSeverity: WARNING\nOWASP: A03:2017 - Sensitive Data Exposure, A02:2021 - Cryptographic Failures, A04:2025 - Cryptographic Failures\nCWE: CWE-327: Use of a Broken or Risky Cryptographic Algorithm\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98d00db1dfe1eb40", "name": "dynamic urllib use detected \u2014 skills/securing-container-registry-with-harbor/scripts/process.py:48", "shortDescription": {"text": "dynamic urllib use detected \u2014 skills/securing-container-registry-with-harbor/scripts/process.py:48"}, "fullDescription": {"text": "Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.\n\nRule: python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected\nSeverity: WARNING\nOWASP: A, 0, 1, :, 2, 0, 1, 7,  , -,  , I, n, j, e, c, t, i, o, n\nCWE: CWE-939: Improper Authorization in Handler for Custom URL Scheme\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3249b27dae73846d", "name": "use defused xml \u2014 skills/testing-android-intents-for-vulnerabilities/scripts/process.py:15", "shortDescription": {"text": "use defused xml \u2014 skills/testing-android-intents-for-vulnerabilities/scripts/process.py:15"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-144fc9cb2f6d4835", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:24", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:24"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a3cbc7a7853be958", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:46", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:46"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9792fc97d3b8856", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:71", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:71"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-60c3873edbf338f7", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:91", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:91"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e020e9c2914593f7", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:116", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:116"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee7f5c058f062e32", "name": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:139", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:139"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-93f7c218103f0f8e", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bece0aa71ecdd994", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:58", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:58"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-969f75e5491381b3", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:79", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:79"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7fe1ce23d730a3d", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:104", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:104"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-577da2e8808db004", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:130", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:130"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2349a0f0e9b6ed1d", "name": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:159", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:159"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f761cebba4e149e4", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:37", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:37"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1ea21f5875642d32", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:49", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:49"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d03b3136e9daebaf", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:78", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:78"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cb330c9903621a4a", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:100", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:100"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-78666fd1fe4097b4", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:122", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:122"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-daa5b7e9d9ea4736", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:140", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:140"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6662c57c23512ef0", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:155", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:155"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-99867b2febac57c9", "name": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:181", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:181"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a20bcdba591472cc", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f16be7a8e1eb8137", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:61", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:61"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0c6a791e5a11789e", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:77", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:77"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6ec1825fbafc65d4", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:102", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:102"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c36df730869cfbd2", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:105", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:105"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05a24aaf0867bbeb", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:124", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:124"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6069c271adb2433d", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:70", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:70"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-41d6be3f11156ea5", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:76", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:76"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a0d275655585a99f", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:87", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:87"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-51b835f711402c62", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:116", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:116"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-641b583cb5f0af71", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:119", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:119"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-10291594ee511bb1", "name": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:139", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:139"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-96fd2bca603ab386", "name": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fe84df023fec91f8", "name": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:94", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:94"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bc8d72e9896889bf", "name": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:96", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:96"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-415d5a272922db86", "name": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:130", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:130"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a1a8ac63c81d911", "name": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:172", "shortDescription": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:172"}, "fullDescription": {"text": "Certificate verification has been explicitly disabled. This permits insecure connections to insecure servers. Re-enable certification validation.\n\nRule: python.requests.security.disabled-cert-validation.disabled-cert-validation\nSeverity: ERROR\nOWASP: A03:2017 - Sensitive Data Exposure, A07:2021 - Identification and Authentication Failures, A07:2025 - Authentication Failures\nCWE: CWE-295: Improper Certificate Validation\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2018940fe825ca11", "name": "use defused xml \u2014 skills/triaging-vulnerabilities-with-ssvc-framework/scripts/process.py:13", "shortDescription": {"text": "use defused xml \u2014 skills/triaging-vulnerabilities-with-ssvc-framework/scripts/process.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-477ba3c16fba732f", "name": "Agent authority lacks a verifier contract: skills/exploiting-excessive-data-exposure-in-api/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-excessive-data-exposure-in-api/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2b6d2e62e95011b", "name": "Agent instruction/config may expose a secret: skills/implementing-api-schema-validation-security/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-schema-validation-security/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-523b7614b8db38a2", "name": "Agent instruction contains unpinned remote install: skills/implementing-api-schema-validation-security/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/implementing-api-schema-validation-security/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88c1dd98b4ad4f55", "name": "Agent authority lacks a verifier contract: skills/detecting-t1003-credential-dumping-with-edr/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-t1003-credential-dumping-with-edr/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b50ca1afeac5158c", "name": "Agent authority lacks a verifier contract: skills/performing-threat-landscape-assessment-for-sector/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-landscape-assessment-for-sector/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0cdb2ed9b5d12bf8", "name": "Agent instruction/config may expose a secret: skills/securing-helm-chart-deployments/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-helm-chart-deployments/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6aff9621022b47b6", "name": "Agent authority lacks a verifier contract: skills/exploiting-ipv6-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-ipv6-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7783ddd4d5b8f641", "name": "Agent authority lacks a verifier contract: skills/detecting-service-account-abuse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-service-account-abuse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a846d6a1aea6e76", "name": "Agent authority lacks a verifier contract: skills/performing-lateral-movement-with-wmiexec/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-lateral-movement-with-wmiexec/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd94eee8c13c2e83", "name": "Agent instruction/config may expose a secret: skills/implementing-image-provenance-verification-with-cosign/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-image-provenance-verification-with-cosign/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4355c847eea0db79", "name": "Agent authority lacks a verifier contract: skills/performing-kubernetes-cis-benchmark-with-kube-bench/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-kubernetes-cis-benchmark-with-kube-bench/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-864b4f98d6aa97a2", "name": "Agent instruction/config may expose a secret: skills/performing-log-source-onboarding-in-siem/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-log-source-onboarding-in-siem/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b47221a5db95e236", "name": "Agent authority lacks a verifier contract: skills/implementing-api-security-testing-with-42crunch/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f2af8689b492747", "name": "Agent instruction contains unpinned remote install: skills/implementing-api-security-testing-with-42crunch/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cefa7e4904d610f5", "name": "Agent instruction/config may expose a secret: skills/prioritizing-vulnerabilities-with-cvss-scoring/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/prioritizing-vulnerabilities-with-cvss-scoring/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bd4699b8e4241a16", "name": "Agent authority lacks a verifier contract: skills/implementing-stix-taxii-feed-integration/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-stix-taxii-feed-integration/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ed5f4c2ca1355fe", "name": "Agent authority lacks a verifier contract: skills/performing-container-image-hardening/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-container-image-hardening/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04fac5f8c3ef5234", "name": "Agent instruction/config may expose a secret: skills/configuring-aws-verified-access-for-ztna/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/configuring-aws-verified-access-for-ztna/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5b8608373af5b23c", "name": "Agent instruction/config may expose a secret: skills/implementing-disk-encryption-with-bitlocker/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-disk-encryption-with-bitlocker/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e59ec91e936ae6c2", "name": "Agent authority lacks a verifier contract: skills/analyzing-linux-system-artifacts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-linux-system-artifacts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd83b451954a44f4", "name": "Agent authority lacks a verifier contract: skills/hunting-for-unusual-network-connections/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-unusual-network-connections/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4343ee536aae7b2f", "name": "Agent instruction/config may expose a secret: skills/implementing-secret-scanning-with-gitleaks/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e52edb73194bd0c7", "name": "Agent authority lacks a verifier contract: skills/collecting-indicators-of-compromise/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/collecting-indicators-of-compromise/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e901b2cb3cefb9a", "name": "Agent authority lacks a verifier contract: skills/performing-kerberoasting-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-kerberoasting-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27c05850cc316c1d", "name": "Agent authority lacks a verifier contract: skills/detecting-kerberoasting-attacks/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-kerberoasting-attacks/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4433ed9c50aa63fc", "name": "Agent instruction/config may expose a secret: skills/detecting-network-anomalies-with-zeek/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-network-anomalies-with-zeek/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-02b4dc85db0180a8", "name": "Agent authority lacks a verifier contract: skills/performing-dns-enumeration-and-zone-transfer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-dns-enumeration-and-zone-transfer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-472ba2f5e82b8bd1", "name": "Agent authority lacks a verifier contract: skills/detecting-pass-the-hash-attacks/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-pass-the-hash-attacks/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-450caf0d503e795b", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6dab81c1024bda1", "name": "Agent instruction/config may expose a secret: skills/managing-cloud-identity-with-okta/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/managing-cloud-identity-with-okta/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-128cfcbfd521d2d5", "name": "Agent authority lacks a verifier contract: skills/conducting-internal-network-penetration-test/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-internal-network-penetration-test/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-079f33e544ece66d", "name": "Agent instruction/config may expose a secret: skills/performing-malware-persistence-investigation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-malware-persistence-investigation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8ce973e8c726f45b", "name": "Agent instruction/config may expose a secret: skills/detecting-cryptomining-in-cloud/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-cryptomining-in-cloud/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6c45faa5cf6151d9", "name": "Agent authority lacks a verifier contract: skills/detecting-cryptomining-in-cloud/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-cryptomining-in-cloud/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6a2dae33fe9255f", "name": "Agent instruction/config may expose a secret: skills/implementing-velociraptor-for-ir-collection/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-velociraptor-for-ir-collection/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-298bc81967250d85", "name": "Agent instruction/config may expose a secret: skills/securing-azure-with-microsoft-defender/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-azure-with-microsoft-defender/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6825a01905b6570", "name": "Agent instruction/config may expose a secret: skills/performing-cloud-incident-containment-procedures/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-incident-containment-procedures/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b649e005bb10260", "name": "Agent instruction/config may expose a secret: skills/building-adversary-infrastructure-tracking-system/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-adversary-infrastructure-tracking-system/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f1294ca11cf40a83", "name": "Agent instruction/config may expose a secret: skills/detecting-s3-data-exfiltration-attempts/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-s3-data-exfiltration-attempts/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-995114f7de753eb4", "name": "Agent authority lacks a verifier contract: skills/performing-network-packet-capture-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-network-packet-capture-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7da1c5d94dae3aa4", "name": "Agent instruction/config may expose a secret: skills/conducting-cloud-incident-response/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/conducting-cloud-incident-response/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f2a7d91e47fbaffe", "name": "Agent authority lacks a verifier contract: skills/conducting-cloud-incident-response/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-cloud-incident-response/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbf75f0198a97638", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-nitro-enclave-security/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-nitro-enclave-security/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cdfee656ed3d3b76", "name": "Agent instruction/config may expose a secret: skills/performing-cloud-asset-inventory-with-cartography/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-asset-inventory-with-cartography/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c740fd50fe0e7630", "name": "Agent authority lacks a verifier contract: skills/performing-active-directory-vulnerability-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-active-directory-vulnerability-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-348ca0d4b6d8ee64", "name": "Agent instruction/config may expose a secret: skills/performing-kubernetes-etcd-security-assessment/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-kubernetes-etcd-security-assessment/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-036d8c968e0ac2c3", "name": "Agent authority lacks a verifier contract: skills/hunting-for-suspicious-scheduled-tasks/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-suspicious-scheduled-tasks/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11ee6b35c9316666", "name": "Agent authority lacks a verifier contract: skills/extracting-iocs-from-malware-samples/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/extracting-iocs-from-malware-samples/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a1187a98c4fe061", "name": "Agent instruction/config may expose a secret: skills/detecting-aws-guardduty-findings-automation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-aws-guardduty-findings-automation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5bd38e734b666831", "name": "Agent authority lacks a verifier contract: skills/exploiting-race-condition-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-race-condition-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1da0669d5ebe8f69", "name": "Agent instruction/config may expose a secret: skills/performing-disk-forensics-investigation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-disk-forensics-investigation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d0662db6773d59db", "name": "Agent instruction/config may expose a secret: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-746f323ac32d8730", "name": "Agent authority lacks a verifier contract: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0fa8f06ba13cb52c", "name": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-in-cloud/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-in-cloud/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b0b74ea4b2953e4", "name": "Agent instruction/config may expose a secret: skills/reverse-engineering-ios-app-with-frida/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d1b48b258ae6d7f", "name": "Agent authority lacks a verifier contract: skills/reverse-engineering-ios-app-with-frida/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d4fdf1df61df799", "name": "Agent authority lacks a verifier contract: skills/mapping-mitre-attack-techniques/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/mapping-mitre-attack-techniques/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0c13a8e3338f02d", "name": "Agent instruction/config may expose a secret: skills/building-threat-actor-profile-from-osint/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-threat-actor-profile-from-osint/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-917f697279888e97", "name": "Agent instruction/config may expose a secret: skills/reverse-engineering-dotnet-malware-with-dnspy/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/reverse-engineering-dotnet-malware-with-dnspy/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-018e25abf12dcdb8", "name": "Agent authority lacks a verifier contract: skills/analyzing-macro-malware-in-office-documents/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-macro-malware-in-office-documents/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-591010d085951b61", "name": "Agent authority lacks a verifier contract: skills/hunting-for-beaconing-with-frequency-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-beaconing-with-frequency-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b0b220f24487b8f", "name": "Agent authority lacks a verifier contract: skills/detecting-ntlm-relay-with-event-correlation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-ntlm-relay-with-event-correlation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b05d637d1a17202", "name": "Agent authority lacks a verifier contract: skills/performing-clickjacking-attack-test/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-clickjacking-attack-test/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-be97a2adbdb675f7", "name": "Agent authority lacks a verifier contract: skills/performing-plc-firmware-security-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-plc-firmware-security-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-036add3213087b8b", "name": "Agent authority lacks a verifier contract: skills/reverse-engineering-malware-with-ghidra/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/reverse-engineering-malware-with-ghidra/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb5927fd753b1432", "name": "Agent instruction/config may expose a secret: skills/performing-jwt-none-algorithm-attack/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-24a61bf8778805e1", "name": "Agent authority lacks a verifier contract: skills/performing-jwt-none-algorithm-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81fe8053ae256b17", "name": "Agent instruction contains unpinned remote install: skills/testing-websocket-api-security/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/testing-websocket-api-security/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea4424b1f3e765ca", "name": "Agent authority lacks a verifier contract: skills/auditing-kubernetes-cluster-rbac/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/auditing-kubernetes-cluster-rbac/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae7e1ad47d42226e", "name": "Agent instruction/config may expose a secret: skills/performing-api-fuzzing-with-restler/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-api-fuzzing-with-restler/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4ffc337bb6d389c4", "name": "Agent instruction/config may expose a secret: skills/deploying-cloud-deception-with-decoy-resources/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/deploying-cloud-deception-with-decoy-resources/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c46f2b00c4ad4c1d", "name": "Agent authority lacks a verifier contract: skills/hunting-for-persistence-via-wmi-subscriptions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-persistence-via-wmi-subscriptions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-70123c873f5dbbb2", "name": "Agent authority lacks a verifier contract: skills/testing-for-business-logic-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-for-business-logic-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b0b2abffc076d0ae", "name": "Agent authority lacks a verifier contract: skills/auditing-gcp-iam-permissions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/auditing-gcp-iam-permissions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1efbc05eae4015cd", "name": "Agent authority lacks a verifier contract: skills/performing-arp-spoofing-attack-simulation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-arp-spoofing-attack-simulation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ed8a177f1c043a2", "name": "Agent authority lacks a verifier contract: skills/performing-cloud-forensics-investigation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-cloud-forensics-investigation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83a50f4d3f0f8bd4", "name": "Agent instruction/config may expose a secret: skills/conducting-cloud-penetration-testing/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/conducting-cloud-penetration-testing/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ec2860edb3c6492", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub-compliance/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub-compliance/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d29f0340747efacc", "name": "Agent instruction/config may expose a secret: skills/securing-kubernetes-on-cloud/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-kubernetes-on-cloud/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-07b8139dd9d62ae8", "name": "Agent authority lacks a verifier contract: skills/securing-kubernetes-on-cloud/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/securing-kubernetes-on-cloud/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9f9ed88149d7c9d", "name": "Agent instruction/config may expose a secret: skills/building-threat-intelligence-platform/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-threat-intelligence-platform/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-141498c65db1428d", "name": "Agent instruction/config may expose a secret: skills/securing-api-gateway-with-aws-waf/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-api-gateway-with-aws-waf/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-61e97aef077d230b", "name": "Agent instruction/config may expose a secret: skills/implementing-cloud-waf-rules/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-waf-rules/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-158f47c444c2d758", "name": "Agent authority lacks a verifier contract: skills/exploiting-active-directory-with-bloodhound/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-active-directory-with-bloodhound/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-722bf1bf5ae26290", "name": "Agent instruction/config may expose a secret: skills/performing-cloud-native-threat-hunting-with-aws-detective/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-native-threat-hunting-with-aws-detective/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-baa99caa75295021", "name": "Agent instruction/config may expose a secret: skills/securing-aws-iam-permissions/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-aws-iam-permissions/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-65de5b82769a3fde", "name": "Agent authority lacks a verifier contract: skills/securing-aws-iam-permissions/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/securing-aws-iam-permissions/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7267107a8f31296e", "name": "Agent authority lacks a verifier contract: skills/performing-bandwidth-throttling-attack-simulation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-bandwidth-throttling-attack-simulation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e6e3c6e5be8380c", "name": "Agent authority lacks a verifier contract: skills/performing-threat-intelligence-sharing-with-misp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-intelligence-sharing-with-misp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e633a1f5ba1bb4b", "name": "Agent authority lacks a verifier contract: skills/performing-physical-intrusion-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-physical-intrusion-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46d085e2b30625b0", "name": "Agent authority lacks a verifier contract: skills/testing-for-json-web-token-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-for-json-web-token-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddd41dc95dfd748b", "name": "Agent instruction/config may expose a secret: skills/deploying-active-directory-honeytokens/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/deploying-active-directory-honeytokens/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a38e0896d5bbb55", "name": "Agent instruction/config may expose a secret: skills/implementing-supply-chain-security-with-in-toto/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-supply-chain-security-with-in-toto/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-862dfc4e30555226", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-macie-for-data-classification/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-macie-for-data-classification/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-919875c339285fa4", "name": "Agent authority lacks a verifier contract: skills/testing-api-security-with-owasp-top-10/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-api-security-with-owasp-top-10/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1635f6cf77bb0a39", "name": "Agent instruction/config may expose a secret: skills/performing-automated-malware-analysis-with-cape/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0e5bac659b583a07", "name": "Agent authority lacks a verifier contract: skills/performing-automated-malware-analysis-with-cape/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97291f1bb6d46333", "name": "Agent instruction/config may expose a secret: skills/performing-csrf-attack-simulation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-csrf-attack-simulation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3e664e3cbe02171a", "name": "Agent authority lacks a verifier contract: skills/performing-csrf-attack-simulation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-csrf-attack-simulation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3552bd22cfbc9e74", "name": "Agent instruction/config may expose a secret: skills/exploiting-jwt-algorithm-confusion-attack/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/exploiting-jwt-algorithm-confusion-attack/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fcd16d7ad5a54ce7", "name": "Agent authority lacks a verifier contract: skills/exploiting-nopac-cve-2021-42278-42287/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-nopac-cve-2021-42278-42287/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e0cffa6b881f51d6", "name": "Agent instruction/config may expose a secret: skills/testing-oauth2-implementation-flaws/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/testing-oauth2-implementation-flaws/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d3e4bce38fd83afb", "name": "Agent instruction/config may expose a secret: skills/remediating-s3-bucket-misconfiguration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/remediating-s3-bucket-misconfiguration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-778062ddd2430550", "name": "Agent authority lacks a verifier contract: skills/performing-iot-security-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-iot-security-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-050605ae1181943a", "name": "Agent instruction contains unpinned remote install: skills/performing-iot-security-assessment/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/performing-iot-security-assessment/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ca884941f1f1e54", "name": "Agent authority lacks a verifier contract: skills/implementing-semgrep-for-custom-sast-rules/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-semgrep-for-custom-sast-rules/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42f540cf59d43209", "name": "Agent authority lacks a verifier contract: skills/hunting-for-registry-persistence-mechanisms/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-registry-persistence-mechanisms/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f6c20ee57a63654c", "name": "Agent instruction/config may expose a secret: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f5fdc0916c755ef", "name": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-faea0a82d1a51484", "name": "Agent authority lacks a verifier contract: skills/exploiting-kerberoasting-with-impacket/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-kerberoasting-with-impacket/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-114b0635d42a9515", "name": "Agent authority lacks a verifier contract: skills/implementing-iso-27001-information-security-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-iso-27001-information-security-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c5d7c1a57dee945", "name": "Agent instruction/config may expose a secret: skills/performing-ssl-tls-inspection-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-ssl-tls-inspection-configuration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-637e72e685d82d47", "name": "Agent instruction/config may expose a secret: skills/implementing-cloud-security-posture-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-security-posture-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-16d6e09d661b2d88", "name": "Agent authority lacks a verifier contract: skills/detecting-fileless-attacks-on-endpoints/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-fileless-attacks-on-endpoints/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-84718ac004081aef", "name": "Agent instruction/config may expose a secret: skills/securing-aws-lambda-execution-roles/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-aws-lambda-execution-roles/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d1938065f69171d3", "name": "Agent authority lacks a verifier contract: skills/detecting-insider-threat-behaviors/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-insider-threat-behaviors/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-921e8300b078f09e", "name": "Agent instruction/config may expose a secret: skills/detecting-cloud-threats-with-guardduty/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-cloud-threats-with-guardduty/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-351695ad950fc503", "name": "Agent instruction/config may expose a secret: skills/implementing-secrets-management-with-vault/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-secrets-management-with-vault/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9a76adb839df2224", "name": "Agent instruction/config may expose a secret: skills/detecting-compromised-cloud-credentials/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-compromised-cloud-credentials/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-527b960e7c361a34", "name": "Agent instruction/config may expose a secret: skills/performing-service-account-credential-rotation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-service-account-credential-rotation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a7462a98346b1106", "name": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-of-malware/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-of-malware/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5184c1c0ab3a418e", "name": "Agent instruction/config may expose a secret: skills/implementing-data-loss-prevention-with-microsoft-purview/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-data-loss-prevention-with-microsoft-purview/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1698fb55be8ea345", "name": "Agent authority lacks a verifier contract: skills/testing-mobile-api-authentication/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-mobile-api-authentication/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98c67e469d96b804", "name": "Agent authority lacks a verifier contract: skills/exploiting-constrained-delegation-abuse/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-constrained-delegation-abuse/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b0b4b79a0e7cece", "name": "Agent instruction/config may expose a secret: skills/analyzing-disk-image-with-autopsy/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ef4f230d1e4c287d", "name": "Agent authority lacks a verifier contract: skills/implementing-attack-surface-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-attack-surface-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bfa256a4c8af98e8", "name": "Agent authority lacks a verifier contract: skills/configuring-windows-event-logging-for-detection/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/configuring-windows-event-logging-for-detection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1eede3cf353037b8", "name": "Agent instruction/config may expose a secret: skills/implementing-canary-tokens-for-network-intrusion/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-canary-tokens-for-network-intrusion/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d408207eba2c4ea5", "name": "Agent authority lacks a verifier contract: skills/performing-web-cache-deception-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-web-cache-deception-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2314c0cce0fac5c6", "name": "Agent authority lacks a verifier contract: skills/conducting-pass-the-ticket-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-pass-the-ticket-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49d7da547c83c287", "name": "Agent instruction contains unpinned remote install: skills/scanning-container-images-with-grype/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/scanning-container-images-with-grype/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b00f9cddbdd908b5", "name": "Agent instruction contains unpinned remote install: skills/exploiting-bgp-hijacking-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/exploiting-bgp-hijacking-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e285238d5655dbe3", "name": "Agent authority lacks a verifier contract: skills/performing-ssl-stripping-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-ssl-stripping-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b1ffaf52ca9f184", "name": "Agent authority lacks a verifier contract: skills/detecting-wmi-persistence/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-wmi-persistence/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0bb036e4dad61786", "name": "Agent authority lacks a verifier contract: skills/performing-ssl-tls-security-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-ssl-tls-security-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68b4f903a43b7afd", "name": "Agent authority lacks a verifier contract: skills/implementing-gcp-vpc-firewall-rules/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-gcp-vpc-firewall-rules/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc24cb4ed2b8b313", "name": "Agent authority lacks a verifier contract: skills/exploiting-prototype-pollution-in-javascript/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-prototype-pollution-in-javascript/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4174ca62deb39730", "name": "Agent instruction/config may expose a secret: skills/detecting-arp-poisoning-in-network-traffic/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-arp-poisoning-in-network-traffic/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9062cf7a7a8c66f8", "name": "Agent authority lacks a verifier contract: skills/performing-thick-client-application-penetration-test/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-thick-client-application-penetration-test/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-771fbf0266abf514", "name": "Agent instruction contains unpinned remote install: skills/auditing-foundry-smart-contract-security/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/auditing-foundry-smart-contract-security/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a727beafe32d97f", "name": "Agent authority lacks a verifier contract: skills/performing-endpoint-vulnerability-remediation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-endpoint-vulnerability-remediation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1dcd6f982a63436e", "name": "Agent instruction/config may expose a secret: skills/performing-cloud-storage-forensic-acquisition/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-storage-forensic-acquisition/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2a13a5d9b42d9749", "name": "Agent authority lacks a verifier contract: skills/performing-malware-ioc-extraction/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-malware-ioc-extraction/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-315ad2fb188d8417", "name": "Agent instruction/config may expose a secret: skills/deploying-palo-alto-prisma-access-zero-trust/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/deploying-palo-alto-prisma-access-zero-trust/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1367bb14714beba8", "name": "Agent instruction/config may expose a secret: skills/implementing-rapid7-insightvm-for-scanning/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-rapid7-insightvm-for-scanning/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fde546bd9c52baea", "name": "Agent authority lacks a verifier contract: skills/performing-wifi-password-cracking-with-aircrack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-680a89da11636b9e", "name": "Agent authority lacks a verifier contract: skills/implementing-infrastructure-as-code-security-scanning/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-infrastructure-as-code-security-scanning/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03c346165e4fc8d5", "name": "Agent authority lacks a verifier contract: skills/performing-memory-forensics-with-volatility3-plugins/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-memory-forensics-with-volatility3-plugins/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-667dc98116d671c2", "name": "Agent authority lacks a verifier contract: skills/exploiting-type-juggling-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-type-juggling-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbbf58c4000918a6", "name": "Agent instruction/config may expose a secret: skills/testing-api-authentication-weaknesses/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/testing-api-authentication-weaknesses/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab86b6ff9d3d94f2", "name": "Agent authority lacks a verifier contract: skills/performing-nist-csf-maturity-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-nist-csf-maturity-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfc4a9c854dadde7", "name": "Agent authority lacks a verifier contract: skills/implementing-epss-score-for-vulnerability-prioritization/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-epss-score-for-vulnerability-prioritization/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-153253b4add28b6d", "name": "Agent instruction/config may expose a secret: skills/detecting-misconfigured-azure-storage/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-misconfigured-azure-storage/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0da3cd5d4b7cac33", "name": "Agent authority lacks a verifier contract: skills/performing-vulnerability-scanning-with-nessus/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-vulnerability-scanning-with-nessus/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f810769a29b8d0e6", "name": "Agent authority lacks a verifier contract: skills/performing-s7comm-protocol-security-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-s7comm-protocol-security-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-159103f2fe69b03b", "name": "Agent authority lacks a verifier contract: skills/executing-phishing-simulation-campaign/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/executing-phishing-simulation-campaign/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7535811906e4ae02", "name": "Agent authority lacks a verifier contract: skills/testing-for-host-header-injection/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-for-host-header-injection/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4c698ea3f7cd995", "name": "Agent instruction/config may expose a secret: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-304480449c3654b2", "name": "Agent instruction contains unpinned remote install: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-def47a63328f4336", "name": "Agent instruction/config may expose a secret: skills/performing-deception-technology-deployment/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-deception-technology-deployment/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-051420b8f7a85112", "name": "Agent authority lacks a verifier contract: skills/performing-deception-technology-deployment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-deception-technology-deployment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d850d0e711c43f8", "name": "Agent instruction/config may expose a secret: skills/performing-brand-monitoring-for-impersonation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6d1cf685ab48ee2", "name": "Agent authority lacks a verifier contract: skills/performing-brand-monitoring-for-impersonation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-264cccda8b8d13db", "name": "Agent authority lacks a verifier contract: skills/exploiting-broken-link-hijacking/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-broken-link-hijacking/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1922d09a0a1f00f3", "name": "Agent instruction/config may expose a secret: skills/detecting-serverless-function-injection/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-serverless-function-injection/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6a17a1b000bc362e", "name": "Agent instruction contains unpinned remote install: skills/detecting-serverless-function-injection/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/detecting-serverless-function-injection/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b98a66b0804af1c", "name": "Agent instruction/config may expose a secret: skills/implementing-zero-standing-privilege-with-cyberark/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-zero-standing-privilege-with-cyberark/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-108563e8e5812208", "name": "Agent instruction contains unpinned remote install: skills/implementing-bgp-security-with-rpki/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/implementing-bgp-security-with-rpki/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2198f02a50c4f74", "name": "Agent instruction/config may expose a secret: skills/implementing-cloud-vulnerability-posture-management/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-29d4c41d5b3a98bc", "name": "Agent authority lacks a verifier contract: skills/implementing-cloud-vulnerability-posture-management/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36150a34164bbd93", "name": "Agent instruction/config may expose a secret: skills/analyzing-cloud-storage-access-patterns/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b27da57637604ea4", "name": "Agent instruction/config may expose a secret: skills/performing-agentless-vulnerability-scanning/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-agentless-vulnerability-scanning/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8e14b9358e017c0b", "name": "Agent instruction/config may expose a secret: skills/implementing-network-access-control/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-network-access-control/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f273311b53f4ca10", "name": "Agent instruction/config may expose a secret: skills/implementing-fuzz-testing-in-cicd-with-aflplusplus/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-fuzz-testing-in-cicd-with-aflplusplus/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b33be32bbf6980a6", "name": "Agent authority lacks a verifier contract: skills/detecting-anomalies-in-industrial-control-systems/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-anomalies-in-industrial-control-systems/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-375bf28f1ff73212", "name": "Agent instruction/config may expose a secret: skills/implementing-cloud-trail-log-analysis/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-trail-log-analysis/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-18ba0de854fcc8ea", "name": "Agent instruction/config may expose a secret: skills/hunting-for-dcom-lateral-movement/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee840fd69b79b4f0", "name": "Agent authority lacks a verifier contract: skills/hunting-for-dcom-lateral-movement/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b702e165b44177c", "name": "Agent authority lacks a verifier contract: skills/detecting-dcsync-attack-in-active-directory/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-dcsync-attack-in-active-directory/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e04df10d23b874a", "name": "Agent authority lacks a verifier contract: skills/detecting-mimikatz-execution-patterns/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-mimikatz-execution-patterns/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-574630693f040adb", "name": "Agent authority lacks a verifier contract: skills/collecting-threat-intelligence-with-misp/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/collecting-threat-intelligence-with-misp/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e584014d45a534b7", "name": "Agent instruction contains unpinned remote install: skills/performing-api-security-testing-with-postman/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/performing-api-security-testing-with-postman/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a648a0e903cee4d7", "name": "Agent authority lacks a verifier contract: skills/exploiting-mass-assignment-in-rest-apis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-mass-assignment-in-rest-apis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8ff1821bc7dc46e", "name": "Agent instruction/config may expose a secret: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dbc49262564f44b8", "name": "Agent authority lacks a verifier contract: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90d2cc09bac13f24", "name": "Agent instruction/config may expose a secret: skills/configuring-identity-aware-proxy-with-google-iap/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/configuring-identity-aware-proxy-with-google-iap/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1bc7d1a8aa9fc8e6", "name": "Agent instruction/config may expose a secret: skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-66a1d6536a774d95", "name": "Agent instruction/config may expose a secret: skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-204f680cc41cc869", "name": "Agent authority lacks a verifier contract: skills/hunting-for-data-exfiltration-indicators/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-data-exfiltration-indicators/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e351b2b1cd9cc6f5", "name": "Agent authority lacks a verifier contract: skills/hunting-for-spearphishing-indicators/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-spearphishing-indicators/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-424bf48b2f250aad", "name": "Agent instruction/config may expose a secret: skills/configuring-zscaler-private-access-for-ztna/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/configuring-zscaler-private-access-for-ztna/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27c5a629a46fde3b", "name": "Agent authority lacks a verifier contract: skills/performing-purple-team-atomic-testing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-purple-team-atomic-testing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-41a2e0437225d332", "name": "Agent instruction/config may expose a secret: skills/implementing-api-gateway-security-controls/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-gateway-security-controls/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3c3d4374e3808307", "name": "Agent authority lacks a verifier contract: skills/performing-threat-modeling-with-owasp-threat-dragon/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-modeling-with-owasp-threat-dragon/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e7b2309c606138f5", "name": "Agent authority lacks a verifier contract: skills/detecting-modbus-protocol-anomalies/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-modbus-protocol-anomalies/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-78859ae2a0d79073", "name": "Agent instruction/config may expose a secret: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9f3e2cd32f801702", "name": "Agent authority lacks a verifier contract: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79d6f3c3b6926a49", "name": "Agent authority lacks a verifier contract: skills/executing-red-team-exercise/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/executing-red-team-exercise/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-baf768c7072a79e4", "name": "Agent instruction contains unpinned remote install: skills/performing-serverless-function-security-review/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/performing-serverless-function-security-review/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89bbeee469eac6e6", "name": "Agent authority lacks a verifier contract: skills/deobfuscating-powershell-obfuscated-malware/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/deobfuscating-powershell-obfuscated-malware/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a38553d3667c9ece", "name": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-leak-site-intelligence/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-leak-site-intelligence/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1b868b59d236ed39", "name": "Agent authority lacks a verifier contract: skills/implementing-file-integrity-monitoring-with-aide/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-file-integrity-monitoring-with-aide/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5426cc55bbff9add", "name": "Agent instruction/config may expose a secret: skills/detecting-fileless-malware-techniques/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-fileless-malware-techniques/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-797ce298752e2d1b", "name": "Agent instruction/config may expose a secret: skills/exploiting-websocket-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3ee75d76d79e00b7", "name": "Agent instruction contains unpinned remote install: skills/exploiting-websocket-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef3b287b16158100", "name": "Agent instruction/config may expose a secret: skills/implementing-gcp-binary-authorization/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-gcp-binary-authorization/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c6881c254052ec46", "name": "Agent authority lacks a verifier contract: skills/detecting-privilege-escalation-attempts/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-privilege-escalation-attempts/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7cfa05f4677ef925", "name": "Agent authority lacks a verifier contract: skills/performing-cloud-log-forensics-with-athena/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-cloud-log-forensics-with-athena/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-421269816cf347f4", "name": "Agent authority lacks a verifier contract: skills/conducting-man-in-the-middle-attack-simulation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-man-in-the-middle-attack-simulation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1457747b1e95e0a1", "name": "Agent instruction/config may expose a secret: skills/performing-aws-privilege-escalation-assessment/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-aws-privilege-escalation-assessment/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b18a180c2b9285e5", "name": "Agent authority lacks a verifier contract: skills/conducting-spearphishing-simulation-campaign/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-spearphishing-simulation-campaign/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6de5c8e702f58a7", "name": "Agent instruction/config may expose a secret: skills/performing-paste-site-monitoring-for-credentials/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-paste-site-monitoring-for-credentials/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cfad4c2ddd2420ba", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-iam-permission-boundaries/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-928f0272cb964b8b", "name": "Agent authority lacks a verifier contract: skills/implementing-aws-iam-permission-boundaries/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1161829ac53f1511", "name": "Agent authority lacks a verifier contract: skills/hunting-for-command-and-control-beaconing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-command-and-control-beaconing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-066bc44b426bcd82", "name": "Agent instruction contains unpinned remote install: skills/securing-container-registry-images/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/securing-container-registry-images/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79b3d037e5fe1bdb", "name": "Agent authority lacks a verifier contract: skills/implementing-device-posture-assessment-in-zero-trust/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-device-posture-assessment-in-zero-trust/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-324b1556d03a2a02", "name": "Agent instruction/config may expose a secret: skills/analyzing-windows-registry-for-artifacts/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-windows-registry-for-artifacts/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3060401ff72a3fa4", "name": "Agent authority lacks a verifier contract: skills/detecting-suspicious-powershell-execution/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-suspicious-powershell-execution/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7430d913fac033ee", "name": "Agent authority lacks a verifier contract: skills/auditing-tls-certificate-transparency-logs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/auditing-tls-certificate-transparency-logs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfa1eff92d4b8b8c", "name": "Agent instruction contains unpinned remote install: skills/hardening-docker-daemon-configuration/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/hardening-docker-daemon-configuration/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d1594b79fb9d3c3", "name": "Agent instruction/config may expose a secret: skills/exploiting-oauth-misconfiguration/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/exploiting-oauth-misconfiguration/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05b7ac3cd6b24562", "name": "Agent instruction/config may expose a secret: skills/auditing-cloud-with-cis-benchmarks/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/auditing-cloud-with-cis-benchmarks/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8230893f659eb2b2", "name": "Agent authority lacks a verifier contract: skills/performing-graphql-introspection-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-graphql-introspection-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7c21e708eafdb54", "name": "Agent instruction/config may expose a secret: skills/implementing-api-key-security-controls/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-key-security-controls/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6522ff6ac7257eeb", "name": "Agent authority lacks a verifier contract: skills/detecting-email-forwarding-rules-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-email-forwarding-rules-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ba19c5b508d5f67", "name": "Agent instruction/config may expose a secret: skills/testing-jwt-token-security/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/testing-jwt-token-security/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-307d17904576db0a", "name": "Agent instruction contains unpinned remote install: skills/implementing-privileged-session-monitoring/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/implementing-privileged-session-monitoring/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b74cc15c6d0c6db0", "name": "Agent authority lacks a verifier contract: skills/implementing-hipaa-security-rule-safeguards/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-hipaa-security-rule-safeguards/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81605e0593353c41", "name": "Agent instruction/config may expose a secret: skills/performing-sqlite-database-forensics/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-sqlite-database-forensics/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f25205b64985f560", "name": "Agent instruction/config may expose a secret: skills/implementing-hashicorp-vault-dynamic-secrets/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-hashicorp-vault-dynamic-secrets/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2e5a6376984782ff", "name": "Agent authority lacks a verifier contract: skills/performing-graphql-depth-limit-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-graphql-depth-limit-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-552c06eaca246a43", "name": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-with-wireshark/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-with-wireshark/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2ece3374594c9d9", "name": "Agent authority lacks a verifier contract: skills/performing-gcp-security-assessment-with-forseti/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-gcp-security-assessment-with-forseti/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8c4a1793634a073", "name": "Agent instruction/config may expose a secret: skills/performing-kubernetes-penetration-testing/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-kubernetes-penetration-testing/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-588a7e293a5af650", "name": "Agent instruction/config may expose a secret: skills/implementing-beyondcorp-zero-trust-access-model/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-beyondcorp-zero-trust-access-model/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cecf54f20773430d", "name": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-53eb50b6225e1e77", "name": "Agent authority lacks a verifier contract: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f602803fff8af63", "name": "Agent instruction/config may expose a secret: skills/implementing-mtls-for-zero-trust-services/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-mtls-for-zero-trust-services/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-04a4ffad6da290c2", "name": "Agent instruction/config may expose a secret: skills/implementing-patch-management-workflow/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-patch-management-workflow/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b991475d645d7b32", "name": "Agent authority lacks a verifier contract: skills/implementing-patch-management-workflow/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-patch-management-workflow/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e2d21f3385f67cb7", "name": "Agent authority lacks a verifier contract: skills/performing-ot-network-security-assessment/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-ot-network-security-assessment/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-26c5a56037b4cae9", "name": "Agent authority lacks a verifier contract: skills/testing-for-open-redirect-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/testing-for-open-redirect-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03bf52db10986baa", "name": "Agent instruction/config may expose a secret: skills/detecting-attacks-on-scada-systems/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-attacks-on-scada-systems/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-105c54dbe56afe89", "name": "Agent authority lacks a verifier contract: skills/detecting-attacks-on-scada-systems/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/detecting-attacks-on-scada-systems/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8224ff785e8d1682", "name": "Agent authority lacks a verifier contract: skills/performing-web-cache-poisoning-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-web-cache-poisoning-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e118ec89d52a2491", "name": "Agent instruction/config may expose a secret: skills/performing-cloud-penetration-testing-with-pacu/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-penetration-testing-with-pacu/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e4105eaf696a0647", "name": "Agent authority lacks a verifier contract: skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.m", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4543e5385e95491a", "name": "Agent instruction/config may expose a secret: skills/deploying-osquery-for-endpoint-monitoring/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/deploying-osquery-for-endpoint-monitoring/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5972bf7f727fe992", "name": "Agent instruction/config may expose a secret: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f040f594cb073977", "name": "Agent instruction contains unpinned remote install: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0309978a6ee1fb12", "name": "Agent instruction contains unpinned remote install: skills/performing-sca-dependency-scanning-with-snyk/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: skills/performing-sca-dependency-scanning-with-snyk/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49161214200b9a48", "name": "Agent instruction/config may expose a secret: skills/building-vulnerability-dashboard-with-defectdojo/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-vulnerability-dashboard-with-defectdojo/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-338410ea9bc05fcc", "name": "Agent authority lacks a verifier contract: skills/conducting-mobile-app-penetration-test/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-mobile-app-penetration-test/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-691ecb46dcdafac2", "name": "Agent instruction/config may expose a secret: skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1ccf5a7018966e17", "name": "Agent authority lacks a verifier contract: skills/conducting-domain-persistence-with-dcsync/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-domain-persistence-with-dcsync/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-743841f5a14580ee", "name": "Agent instruction/config may expose a secret: skills/performing-oauth-scope-minimization-review/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-oauth-scope-minimization-review/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-67a4161ea9c51d35", "name": "Agent instruction/config may expose a secret: skills/securing-container-registry-with-harbor/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-container-registry-with-harbor/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9cd671e0f7bae52d", "name": "Agent instruction/config may expose a secret: skills/extracting-config-from-agent-tesla-rat/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4c014f87d9ea2b43", "name": "Agent authority lacks a verifier contract: skills/extracting-config-from-agent-tesla-rat/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73997d18e9d86ab1", "name": "Agent instruction/config may expose a secret: skills/performing-http-parameter-pollution-attack/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-http-parameter-pollution-attack/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6b44b3f7683d1f8c", "name": "Agent authority lacks a verifier contract: skills/performing-http-parameter-pollution-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-http-parameter-pollution-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fd1040b7bda7cbce", "name": "Agent authority lacks a verifier contract: skills/exploiting-zerologon-vulnerability-cve-2020-1472/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-zerologon-vulnerability-cve-2020-1472/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6d22fb9e65f0eea", "name": "Agent authority lacks a verifier contract: skills/conducting-internal-reconnaissance-with-bloodhound-ce/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/conducting-internal-reconnaissance-with-bloodhound-ce/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96fba27871de0868", "name": "Agent instruction/config may expose a secret: skills/performing-active-directory-bloodhound-analysis/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2200de7d487dfffa", "name": "Agent authority lacks a verifier contract: skills/performing-active-directory-bloodhound-analysis/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a23f29a8144ea59a", "name": "Agent authority lacks a verifier contract: skills/implementing-usb-device-control-policy/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-usb-device-control-policy/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eddb276c0b306422", "name": "Agent authority lacks a verifier contract: skills/performing-vlan-hopping-attack/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-vlan-hopping-attack/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c08285f59b427cd", "name": "Agent authority lacks a verifier contract: skills/implementing-soar-playbook-for-phishing/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-soar-playbook-for-phishing/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc28b08ef429047e", "name": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-for-incidents/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-for-incidents/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a396eabbb76b6f62", "name": "Agent authority lacks a verifier contract: skills/deobfuscating-javascript-malware/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/deobfuscating-javascript-malware/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2dae6915730004e", "name": "Agent authority lacks a verifier contract: skills/implementing-vulnerability-management-with-greenbone/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/implementing-vulnerability-management-with-greenbone/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f2556792ed173bc", "name": "Agent instruction/config may expose a secret: skills/detecting-lateral-movement-in-network/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/detecting-lateral-movement-in-network/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-971a51e5bd5e93a0", "name": "Agent authority lacks a verifier contract: skills/investigating-phishing-email-incident/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/investigating-phishing-email-incident/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62b5e9b341de2cd6", "name": "Agent authority lacks a verifier contract: skills/performing-red-team-with-covenant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-red-team-with-covenant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ee0c89d34282a75", "name": "Agent instruction/config may expose a secret: skills/implementing-aws-config-rules-for-compliance/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-config-rules-for-compliance/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3191a7aebf9b8ed9", "name": "Agent authority lacks a verifier contract: skills/hunting-for-webshell-activity/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-webshell-activity/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8a892cb159dddf2", "name": "Agent instruction/config may expose a secret: skills/securing-serverless-functions/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/securing-serverless-functions/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2bc2cdae06ff6f6c", "name": "Agent authority lacks a verifier contract: skills/hunting-for-shadow-copy-deletion/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-shadow-copy-deletion/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a97f70ea243528c", "name": "Agent authority lacks a verifier contract: skills/hunting-for-scheduled-task-persistence/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-scheduled-task-persistence/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e251f2c960f89f04", "name": "Agent authority lacks a verifier contract: skills/hunting-for-dns-tunneling-with-zeek/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-dns-tunneling-with-zeek/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9cb47afd44f47b1", "name": "Agent authority lacks a verifier contract: skills/exploiting-api-injection-vulnerabilities/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/exploiting-api-injection-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8070fa245541d9fe", "name": "Agent authority lacks a verifier contract: skills/performing-privilege-escalation-on-linux/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-privilege-escalation-on-linux/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a645bf4fddc698b", "name": "Agent authority lacks a verifier contract: skills/hunting-for-living-off-the-cloud-techniques/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-living-off-the-cloud-techniques/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1cefd28ac747303", "name": "Agent authority lacks a verifier contract: skills/performing-web-application-firewall-bypass/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/performing-web-application-firewall-bypass/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ca6e345694a4430", "name": "Agent instruction/config may expose a secret: skills/building-cloud-siem-with-sentinel/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: skills/building-cloud-siem-with-sentinel/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-75f9e8ad3d3ade1b", "name": "SkillSpector LP3 (mcp-least-priv) in skills/achieving-cmmc-level-2-compliance/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/achieving-cmmc-level-2-compliance/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: achieving-cmmc-level-2-compliance\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-b9372981ae9f8c3d", "name": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: achieving-cmmc-level-2-compliance\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-c17faa92f10a0726", "name": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=capture, text=True, timeout=120)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-065ac8f34c1b35bf", "name": "SkillSpector LP3 (mcp-least-priv) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-d8d86f73af81ba23", "name": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-6b1fbcddd3313c76", "name": "SkillSpector MP2 (memory-poisoning) in skills/acquiring-disk-image-with-dd-and-dcfldd/references/api-reference.md", "shortDescription": {"text": "SkillSpector MP2 (memory-poisoning) in skills/acquiring-disk-image-with-dd-and-dcfldd/references/api-reference.md"}, "fullDescription": {"text": "Pad input\n\nSkill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: MP2  Category: memory-poisoning\nSeverity: MEDIUM  Confidence: 0.85\n\nRemediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-6f6d4fe0ee427a39", "name": "SkillSpector OH1 (output-handling) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-c1b6010a06e0c429", "name": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md", "shortDescription": {"text": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "fullDescription": {"text": "sudo\n\nCommands invoke sudo or root privileges. Verify this elevated access is necessary and justified.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: PE2  Category: priv-esc\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-ebd1cec286c2bc61", "name": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py", "shortDescription": {"text": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "fullDescription": {"text": "Run as root\n\nCommands invoke sudo or root privileges. Verify this elevated access is necessary and justified.\n\nSkill: acquiring-disk-image-with-dd-and-dcfldd\nRule: PE2  Category: priv-esc\nSeverity: MEDIUM  Confidence: 0.80\n\nRemediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.8}}, {"id": "scanner-a7b03d5163a07a84", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-active-directory-acl-abuse/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-active-directory-acl-abuse\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-e8e8696eb5dfa5f6", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-active-directory-acl-abuse\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-aa26ee5bb93d1bb9", "name": "SkillSpector PE1 (priv-esc) in skills/analyzing-active-directory-acl-abuse/scripts/agent.py", "shortDescription": {"text": "SkillSpector PE1 (priv-esc) in skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "fullDescription": {"text": "escalate privileges\n\nSkill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.\n\nSkill: analyzing-active-directory-acl-abuse\nRule: PE1  Category: priv-esc\nSeverity: LOW  Confidence: 0.80\n\nRemediation: Request only the minimum permissions required. Document why each permission is needed. Remove broad permissions like '*' or 'all'."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.8}}, {"id": "scanner-546a75cbb64ed4cc", "name": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/SKILL.md", "shortDescription": {"text": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "fullDescription": {"text": "BloodHound\n\nYARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).\n\nSkill: analyzing-active-directory-acl-abuse\nRule: YR4  Category: yara\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-f83c35fce06c9bfd", "name": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/references/api-reference.md", "shortDescription": {"text": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/references/api-reference.md"}, "fullDescription": {"text": "BloodHound\n\nYARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).\n\nSkill: analyzing-active-directory-acl-abuse\nRule: YR4  Category: yara\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-9ad4adafe9402c5b", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-android-malware-with-apktool\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-04c1da8f0a79c890", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-api-gateway-access-logs/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-api-gateway-access-logs/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-api-gateway-access-logs\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-df4b960a8af11144", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-api-gateway-access-logs\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-f7156e117dc9fb1d", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-api-gateway-access-logs/scripts/agent.py", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-api-gateway-access-logs/scripts/agent.py"}, "fullDescription": {"text": "/etc/passwd\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-api-gateway-access-logs\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-cdab8b70c2f54235", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-apt-group-with-mitre-navigator/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-apt-group-with-mitre-navigator/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-apt-group-with-mitre-navigator\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-54bc0ba6245b5ea4", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-apt-group-with-mitre-navigator\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-2dac6dbf9a6c104b", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-azure-activity-logs-for-threats/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-azure-activity-logs-for-threats/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-azure-activity-logs-for-threats\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-1bc871784777e165", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-azure-activity-logs-for-threats\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-e3a3d7b4aa5f31c4", "name": "SkillSpector RA2 (rogue-agent) in skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py"}, "fullDescription": {"text": "PList\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: analyzing-azure-activity-logs-for-threats\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-d4994f49407b29fa", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(\n        [\"vol3\", \"-f\", memory_dump, plugin],\n        capture_output=True, text=True,\n        timeout=120,\n    )\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-bootkit-and-rootkit-samples\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-008567785e55b5b0", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-bootkit-and-rootkit-samples/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-bootkit-and-rootkit-samples/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-bootkit-and-rootkit-samples\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-f02dfb6bb42d85c7", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-bootkit-and-rootkit-samples\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-36a6c343a30e8cb4", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(\n        [\"vol3\", \"-f\", memory_dump, plugin],\n        capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-bootkit-and-rootkit-samples\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-7320d46662beeaa2", "name": "SkillSpector RA1 (rogue-agent) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py", "shortDescription": {"text": "SkillSpector RA1 (rogue-agent) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "fullDescription": {"text": "self-modify\n\nSkill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.\n\nSkill: analyzing-bootkit-and-rootkit-samples\nRule: RA1  Category: rogue-agent\nSeverity: HIGH  Confidence: 0.90\n\nRemediation: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.9}}, {"id": "scanner-d7b2274e75f83c0d", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-browser-forensics-with-hindsight\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-1ca35541513a601c", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-browser-forensics-with-hindsight\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-0f5a9a5a1e86a234", "name": "SkillSpector YR1 (yara) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "fullDescription": {"text": "Chrome and other Chromium-based browsers (Microsoft Edge, Brave, Opera, Vivaldi). It extracts and correlates data from multiple browser database files to create a unified timeline of web activity. Hin\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-browser-forensics-with-hindsight\nRule: YR1  Category: yara\nSeverity: HIGH  Confidence: 0.75\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.75}}, {"id": "scanner-54f332bad079f6cf", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-campaign-attribution-evidence/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-campaign-attribution-evidence/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-campaign-attribution-evidence\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-b62fdc4c50878366", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-campaign-attribution-evidence/references/api-reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-campaign-attribution-evidence/references/api-reference.md"}, "fullDescription": {"text": "https://api.passivetotal.org/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-campaign-attribution-evidence\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-eb472752aa0bd151", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-campaign-attribution-evidence\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-668f506baa809c72", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-certificate-transparency-for-phishing/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-certificate-transparency-for-phishing/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-certificate-transparency-for-phishing\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-0e07faaf860a09c9", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-certificate-transparency-for-phishing\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-70c05ff5cd8c42f8", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-cloud-storage-access-patterns\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-da2010864da303c3", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cloud-storage-access-patterns/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-cloud-storage-access-patterns\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-cc48100ca25c6f89", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-cloud-storage-access-patterns\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-282daae6148424be", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-cloud-storage-access-patterns\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-322313680a83dc85", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-091fb0e67a0c43cd", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-565e5cc9bbddaef6", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "fullDescription": {"text": "cobaltstrike; CobaltStrike; CobaltStrike; CobaltStrike; cobaltstrike; cobaltstrike; CobaltStrike; cobaltstrike; CobaltStrike; CobaltStrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; coba\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-4826e756a174df06", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/assets/template.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/assets/template.md"}, "fullDescription": {"text": "CobaltStrike\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-d2d0540bd5a11b73", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/api-reference.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/api-reference.md"}, "fullDescription": {"text": "CobaltStrike; CobaltStrike; BeaconType; C2Server; BeaconType; C2Server\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-6ae4eea8457eedf4", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/standards.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/standards.md"}, "fullDescription": {"text": "cobaltstrike; cobaltstrike; BeaconType; C2Server\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-66256e40eefcb912", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py"}, "fullDescription": {"text": "BeaconType; C2Server; BeaconType; C2Server\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-d3e90bfa61ef242e", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py"}, "fullDescription": {"text": "cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; BeaconType; C2Server; BeaconType; C2Server\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobalt-strike-beacon-configuration\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-260dbd3ff1d0908f", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-64e2c800aaa687bc", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-5de8c744c458d8fc", "name": "SkillSpector P6 (prompt-injection) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py", "shortDescription": {"text": "SkillSpector P6 (prompt-injection) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "fullDescription": {"text": "return rules\n\nSkill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: P6  Category: prompt-injection\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Remove any instructions that reveal, print, or output system prompts or internal rules. System instructions should never be exposed to end users."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-8e76b2177fadc8c8", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "fullDescription": {"text": "cobaltstrike; cobaltstrike; CobaltStrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-8085a23107cc67da", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/references/api-reference.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/references/api-reference.md"}, "fullDescription": {"text": "CobaltStrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; cobaltstrike; CobaltStrike; cobaltstrike; cobaltstrike; cobaltstrike\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-07745b3a04d11b51", "name": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "fullDescription": {"text": "CobaltStrike; cobaltstrike; cobaltstrike; CobaltStrike; cobaltstrike; CobaltStrike\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cobaltstrike-malleable-c2-profiles\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-ec3001e5e6db3c98", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-command-and-control-communication/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-command-and-control-communication/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-command-and-control-communication\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-2a615ca579e4f874", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-command-and-control-communication/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-command-and-control-communication/SKILL.md"}, "fullDescription": {"text": "https://api.shodan.io/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-command-and-control-communication\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-e49fd0f736577689", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-command-and-control-communication\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-dacddd080a3cd4d7", "name": "SkillSpector P6 (prompt-injection) in skills/analyzing-command-and-control-communication/scripts/agent.py", "shortDescription": {"text": "SkillSpector P6 (prompt-injection) in skills/analyzing-command-and-control-communication/scripts/agent.py"}, "fullDescription": {"text": "return rules\n\nSkill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.\n\nSkill: analyzing-command-and-control-communication\nRule: P6  Category: prompt-injection\nSeverity: HIGH  Confidence: 0.85\n\nRemediation: Remove any instructions that reveal, print, or output system prompts or internal rules. System instructions should never be exposed to end users."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.85}}, {"id": "scanner-fda4b681659c8cf7", "name": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/SKILL.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/SKILL.md"}, "fullDescription": {"text": "CobaltStrike; CobaltStrike; CobaltStrike; Meterpreter; Meterpreter\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-command-and-control-communication\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-7b237355c3bbd7d9", "name": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/references/api-reference.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/references/api-reference.md"}, "fullDescription": {"text": "CobaltStrike; BeaconType; C2Server\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-command-and-control-communication\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-2e03fae5aa171dd5", "name": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/scripts/agent.py", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/scripts/agent.py"}, "fullDescription": {"text": "Meterpreter\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-command-and-control-communication\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-ebe610bbbde1cdbc", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-cyber-kill-chain/references/api-reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-cyber-kill-chain/references/api-reference.md"}, "fullDescription": {"text": "curl -X POST https://mitre-attack.github.io/attack-navigator/api/layers \\\n  -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-cyber-kill-chain\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-ecf7ba54a6efe736", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-cyber-kill-chain\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-e5ae1e2c3d30264d", "name": "SkillSpector YR1 (yara) in skills/analyzing-cyber-kill-chain/scripts/agent.py", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cyber-kill-chain/scripts/agent.py"}, "fullDescription": {"text": "mimikatz\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-cyber-kill-chain\nRule: YR1  Category: yara\nSeverity: HIGH  Confidence: 0.75\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.75}}, {"id": "scanner-d164ca0eb8977231", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-disk-image-with-autopsy\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-d1f2b3945b2bfecb", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-disk-image-with-autopsy/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-disk-image-with-autopsy\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-8657a161e461219f", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-disk-image-with-autopsy\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-2c0f2a25b12ce127", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-disk-image-with-autopsy\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-b34c4134d9ee9699", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-dns-logs-for-exfiltration/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-dns-logs-for-exfiltration/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-dns-logs-for-exfiltration\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-f85f950e11d4caaa", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-dns-logs-for-exfiltration/references/api-reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-dns-logs-for-exfiltration/references/api-reference.md"}, "fullDescription": {"text": "https://api.dnsdb.info/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-dns-logs-for-exfiltration\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-ae1f068b84880f88", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-dns-logs-for-exfiltration\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-a75dbdf81a6bce69", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-docker-container-forensics/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-docker-container-forensics\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-0fb9b06afb861e66", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-docker-container-forensics/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-docker-container-forensics/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-docker-container-forensics\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-bd9b23f6bfb5f705", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-docker-container-forensics\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-fe0813d56f30f842", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-docker-container-forensics/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-docker-container-forensics\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-660c020d7766a2bf", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md"}, "fullDescription": {"text": "/.ssh/authorized_keys\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-docker-container-forensics\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.90\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.9}}, {"id": "scanner-c63feaeb2a5b50db", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/scripts/agent.py", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "fullDescription": {"text": "/etc/passwd\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-docker-container-forensics\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.60\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.6}}, {"id": "scanner-0211d683798a4a3a", "name": "SkillSpector SC2 (supply-chain) in skills/analyzing-docker-container-forensics/SKILL.md", "shortDescription": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-docker-container-forensics/SKILL.md"}, "fullDescription": {"text": "curl -LO https://storage.googleapis.com/container-diff/latest/container-diff-linux-amd64\nchmod +x container-diff-linux-amd64\n\n# Compare committed image with original\n./container-diff-linux-amd64 diff\n\nRemote code is downloaded and executed. This bypasses code review and could introduce malicious code.\n\nSkill: analyzing-docker-container-forensics\nRule: SC2  Category: supply-chain\nSeverity: HIGH  Confidence: 0.90\n\nRemediation: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.9}}, {"id": "scanner-e7168333a2e317ab", "name": "SkillSpector YR1 (yara) in skills/analyzing-docker-container-forensics/SKILL.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-docker-container-forensics/SKILL.md"}, "fullDescription": {"text": "crontab - Modified (persistenc\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-docker-container-forensics\nRule: YR1  Category: yara\nSeverity: HIGH  Confidence: 0.75\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.75}}, {"id": "scanner-099d7e0c406d2b59", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "fullDescription": {"text": "stdout, _, rc = subprocess.run(\n        [\"dig\", record_type, domain, \"+short\"],\n        capture_output=True, text=True, timeout=10\n    ).stdout, \"\", 0\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-0f4f18f4f2c549e4", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-18767570e484f25e", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "fullDescription": {"text": "https://api.abuseipdb.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.50\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.5}}, {"id": "scanner-86a71f89693a70d6", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "fullDescription": {"text": "curl -G \"https://api.abuseipdb.com/api/v2/check\" \\\n  -H \"Key: YOUR_API_KEY\" \\\n  -H \"Accept: application/json\" \\\n  -d \"ipAddress=203.0.113.45\" -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-934fd564d398a71c", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-f63bc411f917a017", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(\n        [\"dig\", record_type, domain, \"+short\"],\n        capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-7dd8d4d00ebb07cd", "name": "SkillSpector SC2 (supply-chain) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md", "shortDescription": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "fullDescription": {"text": "curl -s \"https://api.abuseipdb.com/api/v2/check?ipAddress=${SENDING_IP}\" \\\n   -H \"Key: YOUR_API_KEY\" -H \"Accept: application/json\" | python\n\nRemote code is downloaded and executed. This bypasses code review and could introduce malicious code.\n\nSkill: analyzing-email-headers-for-phishing-investigation\nRule: SC2  Category: supply-chain\nSeverity: HIGH  Confidence: 0.90\n\nRemediation: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.9}}, {"id": "scanner-69dae0debac6f7cb", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-ethereum-smart-contract-vulnerabilities\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-c7db67b99093d31f", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-ethereum-smart-contract-vulnerabilities\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-d3386d96f6f36c73", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-ethereum-smart-contract-vulnerabilities\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-4a7437f64dfee6f5", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-ethereum-smart-contract-vulnerabilities\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-20e5e8ac9311ac56", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-golang-malware-with-ghidra/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-golang-malware-with-ghidra/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-golang-malware-with-ghidra\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-1d44b366aefa662f", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-golang-malware-with-ghidra\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-d973ba759c56f9f8", "name": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/api-reference.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/api-reference.md"}, "fullDescription": {"text": "Sliver | C2 implant\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-golang-malware-with-ghidra\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-ded798d8c7574ae8", "name": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/standards.md", "shortDescription": {"text": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/standards.md"}, "fullDescription": {"text": "Sliver C2 implant\n\nYARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).\n\nSkill: analyzing-golang-malware-with-ghidra\nRule: YR1  Category: yara\nSeverity: CRITICAL  Confidence: 0.85\n\nRemediation: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 0.85}}, {"id": "scanner-c30eaffdca496874", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-heap-spray-exploitation/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=300)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-heap-spray-exploitation\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-69cb24258cca91d3", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-heap-spray-exploitation/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-heap-spray-exploitation/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-heap-spray-exploitation\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-8a5e5ee95afdc3c8", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-heap-spray-exploitation\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-24a2210ecf1855e8", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-heap-spray-exploitation/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-heap-spray-exploitation\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-0345a197bd01cc59", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-indicators-of-compromise/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-indicators-of-compromise/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-indicators-of-compromise\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-212fb9b65164a55c", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/SKILL.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/SKILL.md"}, "fullDescription": {"text": "requests.post(\n    \"https://\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-indicators-of-compromise\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-fcfdc583460573cd", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "fullDescription": {"text": "curl -G \"https://api.abuseipdb.com/api/v2/check\" \\\n  -H \"Key: $ABUSE_KEY\" -H \"Accept: application/json\" \\\n  -d \"ipAddress=1.2.3.4\" -d\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-indicators-of-compromise\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-92fe0b7531a42c12", "name": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py", "shortDescription": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "fullDescription": {"text": "https://api.abuseipdb.com/\n\nData is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.\n\nSkill: analyzing-indicators-of-compromise\nRule: E1  Category: data-exfil\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-2f68e62609c734ee", "name": "SkillSpector E2 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "fullDescription": {"text": "os.environ.get(\"VT_API_KEY\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: analyzing-indicators-of-compromise\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-d26ef5fde2f7f148", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-indicators-of-compromise\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-717958e77bcdfdf4", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "fullDescription": {"text": "result = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout)\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-3d01e1e75d06dd93", "name": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/process.py", "shortDescription": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "fullDescription": {"text": "result = subprocess.run(\n                cmd,\n                capture_output=True,\n                text=True,\n                timeout=timeout,\n            )\n\nsubprocess module calls execute external commands. Without careful input validation, this enables command injection.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: AST4  Category: behavioral-ast\nSeverity: MEDIUM  Confidence: 0.60\n\nRemediation: Use subprocess.run() with shell=False and an explicit argument list. Validate all inputs and avoid passing user-controlled data to commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.6}}, {"id": "scanner-e54201b52731bf2e", "name": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ios-app-security-with-objection/SKILL.md", "shortDescription": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "fullDescription": {"text": "MCP Least Privilege\n\nWithout declared permissions the skill's intent is opaque and cannot be validated.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: LP3  Category: mcp-least-priv\nSeverity: MEDIUM  Confidence: 0.70\n\nRemediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.7}}, {"id": "scanner-38fb14d9030597bd", "name": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-cb99acb8123d750e", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "fullDescription": {"text": "subprocess.run(cmd, capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-6d54d0dbf891b513", "name": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/process.py", "shortDescription": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "fullDescription": {"text": "subprocess.run(\n                cmd,\n                capture_output\n\nModel output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: OH1  Category: output-handling\nSeverity: HIGH  Confidence: 0.95\n\nRemediation: Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.95}}, {"id": "scanner-8a73ee41e2dae72a", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "fullDescription": {"text": "keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-7c8b37fcab9dfc90", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/assets/template.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/assets/template.md"}, "fullDescription": {"text": "Keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-7c9b9e6e7c25eb01", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "fullDescription": {"text": "keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-b8112a4e9eb9ba8c", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "fullDescription": {"text": "Keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-917c18bab4dfdd80", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "fullDescription": {"text": "keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-c1c171b209211466", "name": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py", "shortDescription": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "fullDescription": {"text": "keychain\n\nCode accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: PE3  Category: priv-esc\nSeverity: HIGH  Confidence: 0.70\n\nRemediation: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-8524d2f13aa056cf", "name": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/SKILL.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "fullDescription": {"text": "plist\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-d1547653862a7e64", "name": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "fullDescription": {"text": "plist\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-475ee9d59f193782", "name": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/standards.md", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "fullDescription": {"text": "plist\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-adb1fa26e2371bf5", "name": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py", "shortDescription": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "fullDescription": {"text": "plist\n\nSkill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.\n\nSkill: analyzing-ios-app-security-with-objection\nRule: RA2  Category: rogue-agent\nSeverity: MEDIUM  Confidence: 0.75\n\nRemediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.75}}, {"id": "scanner-e637c415447867e4", "name": "Run SkillSpector's LLM-backed analysis in your own pipeline", "shortDescription": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "fullDescription": {"text": "Repobility ran SkillSpector's static rules server-side. The deeper LLM-backed analyzers \u2014 tool-poisoning (TP*), semantic security discovery (SSD*), developer-intent mismatch (SDI*) \u2014 are meant to run on YOUR machine with YOUR model; repobility never sends your code to an LLM. Recipe:\n\n# 1. Install SkillSpector in your own isolated env\npipx install \"skillspector @ git+https://github.com/NVIDIA/SkillSpector.git\"\n\n# 2. Point it at YOUR LLM pipeline (pick one) - your code stays on your machine\nexport SKILLSPECTOR_PROVIDER=anthropic && export ANTHROPIC_API_KEY=sk-ant-...\n# export SKILLSPECTOR_PROVIDER=openai   && export OPENAI_API_KEY=sk-...\n# export SKILLSPECTOR_PROVIDER=openai OPENAI_API_KEY=ollama OPENAI_BASE_URL=http://localhost:11434/v1 SKILLSPECTOR_MODEL=llama3.1:8b\n# export SKILLSPECTOR_PROVIDER=nv_build && export NVIDIA_INFERENCE_KEY=nvapi-...\n\n# 3. Run the LLM-backed scan per skill (omit --no-llm to enable the LLM analyzers)\nskillspector scan skills/achieving-cmmc-level-2-complianc"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bf9c9f0ba9a6e9a0", "name": "Privileged port 389 in use", "shortDescription": {"text": "Privileged port 389 in use"}, "fullDescription": {"text": "Port 389 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-638577cdafde8519", "name": "Privileged port 636 in use", "shortDescription": {"text": "Privileged port 636 in use"}, "fullDescription": {"text": "Port 636 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8616624dad731a6c", "name": "Privileged port 139 in use", "shortDescription": {"text": "Privileged port 139 in use"}, "fullDescription": {"text": "Port 139 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fade756ad884e3d", "name": "Privileged port 587 in use", "shortDescription": {"text": "Privileged port 587 in use"}, "fullDescription": {"text": "Port 587 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3724199996f8b334", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48f9a187706e0ec2", "name": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/SKILL.md:72", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/SKILL.md:72"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8866de2df9be032c", "name": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/process.py:33", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/process.py:33"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-97c8d848e6a11013", "name": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/agent.py:14", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/agent.py:14"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e69e7ccada40cd6c", "name": "Insecure pattern 'eval_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:117", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:117"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5451c846b5ea3078", "name": "Insecure pattern 'python_os_system' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:114", "shortDescription": {"text": "Insecure pattern 'python_os_system' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:114"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9c8d4562ece4f9f3", "name": "Insecure pattern 'exec_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:116", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:116"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-261cbe3c08df8840", "name": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/SKILL.md:139", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/SKILL.md:139"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6550de3c6e46215", "name": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/scripts/agent.py:67", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/scripts/agent.py:67"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a49c49252daa5ca", "name": "Insecure pattern 'eval_used' in skills/implementing-ticketing-system-for-incidents/SKILL.md:362", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/implementing-ticketing-system-for-incidents/SKILL.md:362"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31e285289a12ee39", "name": "Insecure pattern 'exec_used' in skills/implementing-devsecops-security-scanning/SKILL.md:153", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/implementing-devsecops-security-scanning/SKILL.md:153"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-abcea91858429314", "name": "Possible secret in skills/implementing-secret-scanning-with-gitleaks/SKILL.md", "shortDescription": {"text": "Possible secret in skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching aws_secret. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-5a357e0be724bde1", "name": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/SKILL.md:71", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/SKILL.md:71"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a54368952a0c2a8f", "name": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/scripts/agent.py:121", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/scripts/agent.py:121"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e49b1ab8c2d98fc", "name": "Insecure pattern 'eval_used' in skills/performing-security-headers-audit/scripts/agent.py:89", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-security-headers-audit/scripts/agent.py:89"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b2bf2d56d137168a", "name": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/SKILL.md:65", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/SKILL.md:65"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-613be3a88cdf5103", "name": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/scripts/agent.py:27", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/scripts/agent.py:27"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30aea01f44ba1570", "name": "Possible secret in skills/implementing-security-information-sharing-with-stix2/SKILL.md", "shortDescription": {"text": "Possible secret in skills/implementing-security-information-sharing-with-stix2/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-1149f105639cd89c", "name": "Insecure pattern 'weak_hash' in skills/implementing-security-information-sharing-with-stix2/scripts/agent.py:46", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/implementing-security-information-sharing-with-stix2/scripts/agent.py:46"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae165ae93e7cd72d", "name": "Insecure pattern 'eval_used' in skills/analyzing-pdf-malware-with-pdfid/SKILL.md:342", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/analyzing-pdf-malware-with-pdfid/SKILL.md:342"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee5aa0ddff04ea19", "name": "Insecure pattern 'tls_verify_false' in skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d1394c09c4fc7b16", "name": "Insecure pattern 'weak_hash' in skills/automating-ioc-enrichment/scripts/agent.py:165", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/automating-ioc-enrichment/scripts/agent.py:165"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e34675d046a04b65", "name": "Possible secret in skills/processing-stix-taxii-feeds/SKILL.md", "shortDescription": {"text": "Possible secret in skills/processing-stix-taxii-feeds/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-ba76bb7d557cf4ce", "name": "Insecure pattern 'weak_hash' in skills/processing-stix-taxii-feeds/scripts/agent.py:157", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/processing-stix-taxii-feeds/scripts/agent.py:157"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff9dfb7530cfe836", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-function-level-authorization/scripts/agent.py:32", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-function-level-authorization/scripts/agent.py:32"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-51515dffdd0d9e15", "name": "Insecure pattern 'eval_used' in skills/investigating-insider-threat-indicators/SKILL.md:104", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/investigating-insider-threat-indicators/SKILL.md:104"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5df52492ca4c0643", "name": "Insecure pattern 'eval_used' in skills/performing-threat-hunting-with-yara-rules/scripts/agent.py:58", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-threat-hunting-with-yara-rules/scripts/agent.py:58"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e185d2fd4ef69b63", "name": "Insecure pattern 'weak_hash' in skills/performing-malware-hash-enrichment-with-virustotal/SKILL.md:36", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-hash-enrichment-with-virustotal/SKILL.md:36"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d37e1709d309d807", "name": "Insecure pattern 'weak_hash' in skills/implementing-pci-dss-compliance-controls/scripts/agent.py:42", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/implementing-pci-dss-compliance-controls/scripts/agent.py:42"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82856413370cfe5a", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-12dd211c14f494e9", "name": "Insecure pattern 'weak_hash' in skills/performing-disk-forensics-investigation/scripts/agent.py:219", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-disk-forensics-investigation/scripts/agent.py:219"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-224329845d5267a8", "name": "Insecure pattern 'eval_used' in skills/detecting-ntlm-relay-with-event-correlation/SKILL.md:434", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/detecting-ntlm-relay-with-event-correlation/SKILL.md:434"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9da3a32b3ed97cee", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ae1d333a38c7c3af", "name": "Insecure pattern 'weak_hash' in skills/reverse-engineering-malware-with-ghidra/SKILL.md:185", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/reverse-engineering-malware-with-ghidra/SKILL.md:185"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c80c5a805583f48a", "name": "Insecure pattern 'weak_hash' in skills/exploiting-sql-injection-vulnerabilities/SKILL.md:160", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/exploiting-sql-injection-vulnerabilities/SKILL.md:160"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c6b76c628db5df34", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-020e2cb44a255dbe", "name": "Insecure pattern 'weak_hash' in skills/configuring-suricata-for-network-monitoring/SKILL.md:361", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/configuring-suricata-for-network-monitoring/SKILL.md:361"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66d2b3faf285c8de", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-broken-access-control/scripts/agent.py:24", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-broken-access-control/scripts/agent.py:24"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ddb369a72c9f375f", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b35a9536965f50b9", "name": "Insecure pattern 'eval_used' in skills/performing-false-positive-reduction-in-siem/SKILL.md:75", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-false-positive-reduction-in-siem/SKILL.md:75"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-07fda3723d17304f", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-server-side-request-forgery/scripts/agent.py:50", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-server-side-request-forgery/scripts/agent.py:50"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dc034dd6b70b15d0", "name": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-platform/scripts/agent.py:19", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-platform/scripts/agent.py:19"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59a21a2eb5196469", "name": "Possible secret in skills/exploiting-active-directory-with-bloodhound/scripts/agent.py", "shortDescription": {"text": "Possible secret in skills/exploiting-active-directory-with-bloodhound/scripts/agent.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-72015d374dd7a774", "name": "Possible secret in skills/deploying-active-directory-honeytokens/scripts/agent.py", "shortDescription": {"text": "Possible secret in skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-20e295cca0ce6bea", "name": "Insecure pattern 'weak_hash' in skills/deploying-active-directory-honeytokens/scripts/agent.py:52", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/deploying-active-directory-honeytokens/scripts/agent.py:52"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7da6a313ba510655", "name": "Insecure pattern 'weak_hash' in skills/reverse-engineering-android-malware-with-jadx/SKILL.md:353", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/reverse-engineering-android-malware-with-jadx/SKILL.md:353"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c1e761591a1063ce", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:35", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:35"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-de922eda452beba2", "name": "Insecure pattern 'eval_used' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/SKILL.md:74", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/SKILL.md:74"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dcbc14ca909ac66f", "name": "Insecure pattern 'weak_hash' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/scripts/agent.py:19", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/scripts/agent.py:19"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4f753eff8e529ab", "name": "Insecure pattern 'eval_used' in skills/implementing-mitre-attack-coverage-mapping/SKILL.md:279", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/implementing-mitre-attack-coverage-mapping/SKILL.md:279"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-44b66e45fe756481", "name": "Insecure pattern 'eval_used' in skills/performing-user-behavior-analytics/SKILL.md:71", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-user-behavior-analytics/SKILL.md:71"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d8ebb09427272a76", "name": "Insecure pattern 'weak_hash' in skills/performing-iot-security-assessment/SKILL.md:153", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-iot-security-assessment/SKILL.md:153"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7bad5208ce739b08", "name": "Insecure pattern 'weak_hash' in skills/analyzing-linux-elf-malware/scripts/agent.py:197", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-elf-malware/scripts/agent.py:197"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a3ec8b16c3dda4a", "name": "Possible secret in skills/implementing-secrets-management-with-vault/SKILL.md", "shortDescription": {"text": "Possible secret in skills/implementing-secrets-management-with-vault/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d9525237dd661c75", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-insecure-deserialization/scripts/agent.py:51", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-insecure-deserialization/scripts/agent.py:51"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-06655c2cfa4e45e4", "name": "Insecure pattern 'eval_used' in skills/building-detection-rule-with-splunk-spl/SKILL.md:82", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/building-detection-rule-with-splunk-spl/SKILL.md:82"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8fe1f4543d7b838d", "name": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities/SKILL.md:110", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities/SKILL.md:110"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d94f0bf2e1dd4d39", "name": "Insecure pattern 'document_write' in skills/testing-for-xss-vulnerabilities/SKILL.md:109", "shortDescription": {"text": "Insecure pattern 'document_write' in skills/testing-for-xss-vulnerabilities/SKILL.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ed528f916c508e1", "name": "Insecure pattern 'dangerous_innerhtml' in skills/testing-for-xss-vulnerabilities/SKILL.md:111", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/testing-for-xss-vulnerabilities/SKILL.md:111"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1882adb57d9fd1ac", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities/scripts/agent.py:70", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities/scripts/agent.py:70"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3b3934b6aed6a426", "name": "Insecure pattern 'tls_verify_false' in skills/performing-api-inventory-and-discovery/SKILL.md:185", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-api-inventory-and-discovery/SKILL.md:185"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca546fd1ffc84dd3", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3cc5e9095e806d4", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-sensitive-data-exposure/scripts/agent.py:37", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-sensitive-data-exposure/scripts/agent.py:37"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7b785458a6ad80c0", "name": "Insecure pattern 'weak_hash' in skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:191", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:191"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2450efaeec021f46", "name": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/SKILL.md:58", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/SKILL.md:58"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-771cee32e76ee6e7", "name": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/scripts/process.py:323", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/scripts/process.py:323"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4fddc067874d0f66", "name": "Possible secret in skills/performing-wifi-password-cracking-with-aircrack/SKILL.md", "shortDescription": {"text": "Possible secret in skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7e9527548895a18a", "name": "Insecure pattern 'weak_hash' in skills/analyzing-malware-persistence-with-autoruns/scripts/agent.py:57", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-malware-persistence-with-autoruns/scripts/agent.py:57"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-58d0fbf3c1ed787b", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:51", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:51"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1bc99a8c5bb53f17", "name": "Insecure pattern 'weak_hash' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:16", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:16"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ace672ac61fbb84", "name": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/SKILL.md:131", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/SKILL.md:131"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b3741ea487ef3591", "name": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/scripts/agent.py:106", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/scripts/agent.py:106"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa9bd90ea5d25b69", "name": "Insecure pattern 'tls_verify_false' in skills/performing-vulnerability-scanning-with-nessus/scripts/agent.py:24", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-vulnerability-scanning-with-nessus/scripts/agent.py:24"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7fca54e1c2b0f4e3", "name": "Insecure pattern 'weak_hash' in skills/building-soc-playbook-for-ransomware/scripts/agent.py:113", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/building-soc-playbook-for-ransomware/scripts/agent.py:113"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89bfaa8b41196b11", "name": "Insecure pattern 'weak_hash' in skills/validating-backup-integrity-for-recovery/SKILL.md:202", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/validating-backup-integrity-for-recovery/SKILL.md:202"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3704feaa5253ba20", "name": "Insecure pattern 'eval_used' in skills/building-incident-response-dashboard/scripts/agent.py:106", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/building-incident-response-dashboard/scripts/agent.py:106"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8da85104656ac0a9", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-link-hijacking/scripts/agent.py:51", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-link-hijacking/scripts/agent.py:51"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bb4df92168306c4e", "name": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/SKILL.md:106", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/SKILL.md:106"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d14121b3c61a1bc1", "name": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/SKILL.md:118", "shortDescription": {"text": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/SKILL.md:118"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3ea5045eb5cb8550", "name": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/SKILL.md:108", "shortDescription": {"text": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/SKILL.md:108"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8aac54851ed23b5e", "name": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/SKILL.md:109", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/SKILL.md:109"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-660a1f994edeb512", "name": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/SKILL.md:107", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/SKILL.md:107"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-37d5086e1e4483ff", "name": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/SKILL.md:42", "shortDescription": {"text": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/SKILL.md:42"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eee91101cfbb2952", "name": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/scripts/agent.py:30", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/scripts/agent.py:30"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5d703caf953766b8", "name": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/scripts/agent.py:46", "shortDescription": {"text": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/scripts/agent.py:46"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-672e3947bdfc80f5", "name": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/scripts/agent.py:32", "shortDescription": {"text": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/scripts/agent.py:32"}, "fullDescription": {"text": "Found a known-risky pattern (python_os_system). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-098dbebaee35fe00", "name": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/scripts/agent.py:34", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/scripts/agent.py:34"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-151fabbecf1aed53", "name": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/scripts/agent.py:31", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/scripts/agent.py:31"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f8ca4bbcfae16278", "name": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/scripts/agent.py:47", "shortDescription": {"text": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/scripts/agent.py:47"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9627bbc7c57e84db", "name": "Insecure pattern 'subprocess_shell_true' in skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:99", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:99"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5c1c7564f3909843", "name": "Possible secret in skills/implementing-network-access-control/SKILL.md", "shortDescription": {"text": "Possible secret in skills/implementing-network-access-control/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-c50db86de04f5371", "name": "Insecure pattern 'weak_hash' in skills/implementing-network-access-control/SKILL.md:162", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/implementing-network-access-control/SKILL.md:162"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2a36838bb138d143", "name": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/SKILL.md:72", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/SKILL.md:72"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4cae52d5e54c71de", "name": "Possible secret in skills/performing-cryptographic-audit-of-application/scripts/process.py", "shortDescription": {"text": "Possible secret in skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "fullDescription": {"text": "Detected pattern matching openai_or_anthropic_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-377c5f68f60fce93", "name": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/process.py:47", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/process.py:47"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce37f4e50a06e1f2", "name": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/agent.py:28", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/agent.py:28"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dedd065a35c44b49", "name": "Insecure pattern 'weak_hash' in skills/analyzing-indicators-of-compromise/SKILL.md:87", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-indicators-of-compromise/SKILL.md:87"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47a2a1e2be9521ba", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5ca531ffe0592518", "name": "Insecure pattern 'weak_hash' in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md:44", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md:44"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c41aa87af7233c00", "name": "Possible secret in skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py", "shortDescription": {"text": "Possible secret in skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-91df70e770c8b88f", "name": "Possible secret in skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md", "shortDescription": {"text": "Possible secret in skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-00e798a1fe1b4676", "name": "Insecure pattern 'tls_verify_false' in skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15ba18ac3154ad63", "name": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/SKILL.md:98", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/SKILL.md:98"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c34b286b12e06e6b", "name": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/scripts/agent.py:20", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/scripts/agent.py:20"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4c05c9303e2d8ebe", "name": "Insecure pattern 'eval_used' in skills/performing-serverless-function-security-review/SKILL.md:217", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-serverless-function-security-review/SKILL.md:217"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-29f3c7ed4189107d", "name": "Insecure pattern 'exec_used' in skills/performing-serverless-function-security-review/SKILL.md:217", "shortDescription": {"text": "Insecure pattern 'exec_used' in skills/performing-serverless-function-security-review/SKILL.md:217"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-081a53b510f89614", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-11bfb3caa87fead3", "name": "Insecure pattern 'tls_verify_false' in skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-18333df95c3b24d2", "name": "Insecure pattern 'tls_verify_false' in skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:29", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:29"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbe8ab8dd1ceba37", "name": "Insecure pattern 'debug_true' in skills/implementing-scim-provisioning-with-okta/scripts/process.py:470", "shortDescription": {"text": "Insecure pattern 'debug_true' in skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4521ba6968b96e68", "name": "Insecure pattern 'weak_hash' in skills/performing-endpoint-forensics-investigation/scripts/process.py:60", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-endpoint-forensics-investigation/scripts/process.py:60"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c57d2fbacb1658a", "name": "Insecure pattern 'weak_hash' in skills/performing-network-traffic-analysis-with-zeek/SKILL.md:81", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-network-traffic-analysis-with-zeek/SKILL.md:81"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ef021498f7502bb", "name": "Insecure pattern 'eval_used' in skills/detecting-anomalous-authentication-patterns/SKILL.md:584", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/detecting-anomalous-authentication-patterns/SKILL.md:584"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1477b0db332d609f", "name": "Insecure pattern 'tls_verify_false' in skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-32e7cb9fbe699f34", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-oauth-misconfiguration/scripts/agent.py:29", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-oauth-misconfiguration/scripts/agent.py:29"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2e54fde5ea14d603", "name": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-enrichment-in-splunk/scripts/agent.py:87", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-enrichment-in-splunk/scripts/agent.py:87"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5bfa7f3b84369304", "name": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-feed-integration/SKILL.md:189", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-feed-integration/SKILL.md:189"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d703cd088667c2cd", "name": "Insecure pattern 'eval_used' in skills/implementing-siem-use-cases-for-detection/SKILL.md:243", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/implementing-siem-use-cases-for-detection/SKILL.md:243"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-18f4486135d16780", "name": "Insecure pattern 'new_function_used' in skills/performing-content-security-policy-bypass/SKILL.md:85", "shortDescription": {"text": "Insecure pattern 'new_function_used' in skills/performing-content-security-policy-bypass/SKILL.md:85"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6f432a356215d544", "name": "Insecure pattern 'eval_used' in skills/performing-content-security-policy-bypass/scripts/agent.py:149", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/performing-content-security-policy-bypass/scripts/agent.py:149"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-faaf47ab85464052", "name": "Insecure pattern 'tls_verify_false' in skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f915d9a91972fb56", "name": "Insecure pattern 'weak_hash' in skills/performing-firmware-extraction-with-binwalk/scripts/agent.py:341", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-firmware-extraction-with-binwalk/scripts/agent.py:341"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9b27516d813e2514", "name": "Insecure pattern 'tls_verify_false' in skills/performing-web-cache-poisoning-attack/scripts/agent.py:29", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-web-cache-poisoning-attack/scripts/agent.py:29"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-61a3c5635aca4094", "name": "Insecure pattern 'weak_hash' in skills/analyzing-windows-amcache-artifacts/SKILL.md:121", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-windows-amcache-artifacts/SKILL.md:121"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f128a10bdfb50b0a", "name": "Insecure pattern 'weak_hash' in skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md:266", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md:266"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00d45a035714a6d3", "name": "Insecure pattern 'weak_hash' in skills/configuring-tls-1-3-for-secure-communications/scripts/process.py:146", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/configuring-tls-1-3-for-secure-communications/scripts/process.py:146"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-664f15d296308c32", "name": "Possible secret in skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py", "shortDescription": {"text": "Possible secret in skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-00624cee66073a3e", "name": "Possible secret in skills/securing-container-registry-with-harbor/scripts/agent.py", "shortDescription": {"text": "Possible secret in skills/securing-container-registry-with-harbor/scripts/agent.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-303dbfbd60a6d9e3", "name": "Insecure pattern 'weak_hash' in skills/performing-vlan-hopping-attack/SKILL.md:198", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-vlan-hopping-attack/SKILL.md:198"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f8105f82ae48544", "name": "Insecure pattern 'eval_used' in skills/analyzing-windows-event-logs-in-splunk/SKILL.md:104", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/analyzing-windows-event-logs-in-splunk/SKILL.md:104"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6e3fd94b85c12824", "name": "Insecure pattern 'eval_used' in skills/deobfuscating-javascript-malware/SKILL.md:117", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/deobfuscating-javascript-malware/SKILL.md:117"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0de7545b452b4b03", "name": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/SKILL.md:119", "shortDescription": {"text": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/SKILL.md:119"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c376a4cde2b8482d", "name": "Insecure pattern 'document_write' in skills/deobfuscating-javascript-malware/SKILL.md:120", "shortDescription": {"text": "Insecure pattern 'document_write' in skills/deobfuscating-javascript-malware/SKILL.md:120"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11160960b02d32e5", "name": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/scripts/agent.py:94", "shortDescription": {"text": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/scripts/agent.py:94"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e6ba41d4a2e8f698", "name": "Insecure pattern 'weak_hash' in skills/performing-malware-triage-with-yara/SKILL.md:311", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-triage-with-yara/SKILL.md:311"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8e68f6173780ab3", "name": "Insecure pattern 'weak_hash' in skills/investigating-phishing-email-incident/SKILL.md:160", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/investigating-phishing-email-incident/SKILL.md:160"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9cfa87a2aa233675", "name": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-with-covenant/scripts/agent.py:42", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-with-covenant/scripts/agent.py:42"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-da0afc2a04e4c7d5", "name": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:143", "shortDescription": {"text": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:143"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dfffa49603ca746f", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f052df5cc7ece6ac", "name": "Insecure pattern 'weak_hash' in skills/building-ioc-enrichment-pipeline-with-opencti/scripts/agent.py:119", "shortDescription": {"text": "Insecure pattern 'weak_hash' in skills/building-ioc-enrichment-pipeline-with-opencti/scripts/agent.py:119"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9613aa283b92b5e4", "name": "Insecure pattern 'tls_verify_false' in skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-97244cafdc63731d", "name": "Insecure pattern 'tls_verify_false' in skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47", "shortDescription": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47"}, "fullDescription": {"text": "Found a known-risky pattern (tls_verify_false). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3b610b8d09925933", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0beb0742a8ffc80d", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05c8d792ec02190b", "name": "Very large file: skills/implementing-gdpr-data-subject-access-request/scripts/agent.py (1503 lines)", "shortDescription": {"text": "Very large file: skills/implementing-gdpr-data-subject-access-request/scripts/agent.py (1503 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d3e103d8b4ce5ae", "name": "Very large file: skills/performing-privacy-impact-assessment/scripts/agent.py (1413 lines)", "shortDescription": {"text": "Very large file: skills/performing-privacy-impact-assessment/scripts/agent.py (1413 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c283c7ba0130b0f9", "name": "Very large file: skills/deploying-active-directory-honeytokens/scripts/agent.py (1321 lines)", "shortDescription": {"text": "Very large file: skills/deploying-active-directory-honeytokens/scripts/agent.py (1321 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa9b919be997e083", "name": "Very large file: skills/performing-post-quantum-cryptography-migration/scripts/agent.py (1568 lines)", "shortDescription": {"text": "Very large file: skills/performing-post-quantum-cryptography-migration/scripts/agent.py (1568 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "54 test file(s) for 985 source file(s) (ratio 0.05). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 8917 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 28 placeholder/mock markers across 10 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11825279136b53a3", "name": "CI is configured but no tests are detected", "shortDescription": {"text": "CI is configured but no tests are detected"}, "fullDescription": {"text": "A CI pipeline exists, but the scan found no test files to gate. Opus labeled this generated-code pattern as config theater: release machinery exists, but it has little behavioral signal."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a2c147f603caf86c", "name": "Network/subprocess call without timeout or try/except \u2014 skills/securing-helm-chart-deployments/scripts/process.py:94", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/securing-helm-chart-deployments/scripts/process.py:94"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c2e1ff3f24ced2a0", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-image-provenance-verification-with-cosign/sc", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-image-provenance-verification-with-cosign/scripts/process.py:17"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b861ef4abbe2ffaf", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-kubernetes-network-policy-with-calico/script", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-kubernetes-network-policy-with-calico/scripts/process.py:21"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3910c5c4cdfc3e89", "name": "Legacy-named symbol `users_with_backup` in skills/implementing-hardware-security-key-authentication/scripts/agent.py:881", "shortDescription": {"text": "Legacy-named symbol `users_with_backup` in skills/implementing-hardware-security-key-authentication/scripts/agent.py:881"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d70c301cc4d8859", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-access-recertification-with-saviynt/scripts/pr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-access-recertification-with-saviynt/scripts/process.py:36"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf1a714137fdb912", "name": "Legacy-named symbol `svc_backup` in skills/implementing-privileged-access-management-with-cyberark/scripts/process.py:36", "shortDescription": {"text": "Legacy-named symbol `svc_backup` in skills/implementing-privileged-access-management-with-cyberark/scripts/process.py:366"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67755f15d67169eb", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-siem-correlation-rules-for-apt/scripts/agent", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-siem-correlation-rules-for-apt/scripts/agent.py:174"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2696cf7f5d209f2f", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-pod-security-admission-controller/scripts/pr", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-pod-security-admission-controller/scripts/process.py:31"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-698fa1ccfd5e30ad", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-opa-gatekeeper-for-policy-enforcement/script", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-opa-gatekeeper-for-policy-enforcement/scripts/process.py:152"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12ca7b1ba64149da", "name": "Network/subprocess call without timeout or try/except \u2014 skills/building-incident-response-playbook/scripts/agent.py:145", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-incident-response-playbook/scripts/agent.py:145"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e91e41de7fc8fb0", "name": "Legacy-named symbol `phone_v2` in skills/performing-mobile-device-forensics-with-cellebrite/scripts/agent.py:87", "shortDescription": {"text": "Legacy-named symbol `phone_v2` in skills/performing-mobile-device-forensics-with-cellebrite/scripts/agent.py:87"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0fdcfab9c5d3923a", "name": "Legacy-named symbol `df_copy` in skills/analyzing-api-gateway-access-logs/scripts/agent.py:100", "shortDescription": {"text": "Legacy-named symbol `df_copy` in skills/analyzing-api-gateway-access-logs/scripts/agent.py:100"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a208d026f3b7a88a", "name": "Legacy-named symbol `remove_revoked_deprecated` in skills/mapping-mitre-attack-techniques/scripts/agent.py:27", "shortDescription": {"text": "Legacy-named symbol `remove_revoked_deprecated` in skills/mapping-mitre-attack-techniques/scripts/agent.py:27"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1001c44bc91498e0", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-just-in-time-access-provisioning/scripts/pro", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-just-in-time-access-provisioning/scripts/process.py:168"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-704ec3f8532adaf4", "name": "Legacy-named symbol `days_unused` in skills/implementing-just-in-time-access-provisioning/scripts/agent.py:76", "shortDescription": {"text": "Legacy-named symbol `days_unused` in skills/implementing-just-in-time-access-provisioning/scripts/agent.py:76"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4ef3ef6cb9f708c", "name": "Legacy-named symbol `directory_v1` in skills/implementing-google-workspace-admin-security/scripts/agent.py:26", "shortDescription": {"text": "Legacy-named symbol `directory_v1` in skills/implementing-google-workspace-admin-security/scripts/agent.py:26"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89ca80b7f28138de", "name": "Legacy-named symbol `is_legacy` in skills/implementing-zero-trust-network-access-with-zscaler/scripts/process.py:372", "shortDescription": {"text": "Legacy-named symbol `is_legacy` in skills/implementing-zero-trust-network-access-with-zscaler/scripts/process.py:372"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78b73b085731a295", "name": "Legacy-named symbol `malware_ir_v2` in skills/triaging-security-incident-with-ir-playbook/scripts/process.py:38", "shortDescription": {"text": "Legacy-named symbol `malware_ir_v2` in skills/triaging-security-incident-with-ir-playbook/scripts/process.py:38"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ba0f3a13e662184", "name": "Legacy-named symbol `asset_v1` in skills/auditing-gcp-iam-permissions/scripts/agent.py:8", "shortDescription": {"text": "Legacy-named symbol `asset_v1` in skills/auditing-gcp-iam-permissions/scripts/agent.py:8"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c16df1553d75d92", "name": "Legacy-named symbol `net_v1` in skills/securing-kubernetes-on-cloud/scripts/agent.py:121", "shortDescription": {"text": "Legacy-named symbol `net_v1` in skills/securing-kubernetes-on-cloud/scripts/agent.py:121"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8b89cf62e5cbd42", "name": "Legacy-named symbol `manifest_copy` in skills/implementing-digital-signatures-with-ed25519/scripts/process.py:216", "shortDescription": {"text": "Legacy-named symbol `manifest_copy` in skills/implementing-digital-signatures-with-ed25519/scripts/process.py:216"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1975e4a451ca3aa5", "name": "Legacy-named symbol `svc_backup` in skills/performing-service-account-audit/scripts/process.py:247", "shortDescription": {"text": "Legacy-named symbol `svc_backup` in skills/performing-service-account-audit/scripts/process.py:247"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c1d0db84de04023", "name": "Legacy-named symbol `add_backup_copy` in skills/implementing-ransomware-backup-strategy/scripts/process.py:76", "shortDescription": {"text": "Legacy-named symbol `add_backup_copy` in skills/implementing-ransomware-backup-strategy/scripts/process.py:76"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fdc244a74ef94357", "name": "Legacy-named symbol `immutable_backup` in skills/implementing-ransomware-backup-strategy/scripts/agent.py:145", "shortDescription": {"text": "Legacy-named symbol `immutable_backup` in skills/implementing-ransomware-backup-strategy/scripts/agent.py:145"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41999abed715806a", "name": "Legacy-named symbol `restore_from_backup` in skills/performing-ransomware-tabletop-exercise/scripts/agent.py:41", "shortDescription": {"text": "Legacy-named symbol `restore_from_backup` in skills/performing-ransomware-tabletop-exercise/scripts/agent.py:41"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a60f01328f0b65ec", "name": "Legacy-named symbol `exchange_legacy` in skills/deploying-active-directory-honeytokens/scripts/agent.py:59", "shortDescription": {"text": "Legacy-named symbol `exchange_legacy` in skills/deploying-active-directory-honeytokens/scripts/agent.py:59"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6056cd94231c8055", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scri", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scripts/process.py:54"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-342a7abd0a77c3c0", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scri", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scripts/agent.py:33"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e36c45ef4eacefb2", "name": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-azure-service-principal-abuse/scripts/agent.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-azure-service-principal-abuse/scripts/agent.py:30"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67291f8eccda914d", "name": "Legacy-named symbol `dlp_v2` in skills/implementing-cloud-dlp-for-data-protection/scripts/agent.py:15", "shortDescription": {"text": "Legacy-named symbol `dlp_v2` in skills/implementing-cloud-dlp-for-data-protection/scripts/agent.py:15"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-952dd45290da7c61", "name": "Network/subprocess call without timeout or try/except \u2014 skills/scanning-infrastructure-with-nessus/scripts/process.py:49", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/scanning-infrastructure-with-nessus/scripts/process.py:49"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a09f3fce76e1ad2a", "name": "Legacy-named symbol `check_cloudhsm_backup` in skills/configuring-hsm-for-key-storage/scripts/agent.py:74", "shortDescription": {"text": "Legacy-named symbol `check_cloudhsm_backup` in skills/configuring-hsm-for-key-storage/scripts/agent.py:74"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bde2e4b35d4a81a", "name": "Legacy-named symbol `svc_backup` in skills/exploiting-kerberoasting-with-impacket/scripts/process.py:311", "shortDescription": {"text": "Legacy-named symbol `svc_backup` in skills/exploiting-kerberoasting-with-impacket/scripts/process.py:311"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b599f9840fa1e65", "name": "Legacy-named symbol `usb_mass_copy` in skills/detecting-insider-threat-behaviors/scripts/agent.py:19", "shortDescription": {"text": "Legacy-named symbol `usb_mass_copy` in skills/detecting-insider-threat-behaviors/scripts/agent.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b93106eac52060b", "name": "Legacy-named symbol `iam_v1` in skills/performing-service-account-credential-rotation/scripts/process.py:105", "shortDescription": {"text": "Legacy-named symbol `iam_v1` in skills/performing-service-account-credential-rotation/scripts/process.py:105"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e27b660650e380d1", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-service-account-credential-rotation/scripts/ag", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-service-account-credential-rotation/scripts/agent.py:59"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-966b23b6bf447570", "name": "Legacy-named symbol `alerts_v2` in skills/implementing-data-loss-prevention-with-microsoft-purview/scripts/agent.py:60", "shortDescription": {"text": "Legacy-named symbol `alerts_v2` in skills/implementing-data-loss-prevention-with-microsoft-purview/scripts/agent.py:60"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc7162323fbc4789", "name": "Legacy-named symbol `days_old` in skills/detecting-typosquatting-packages-in-npm-pypi/scripts/agent.py:271", "shortDescription": {"text": "Legacy-named symbol `days_old` in skills/detecting-typosquatting-packages-in-npm-pypi/scripts/agent.py:271"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ab6eae7fdf578c2", "name": "Legacy-named symbol `net_v1` in skills/implementing-container-network-policies-with-calico/scripts/agent.py:46", "shortDescription": {"text": "Legacy-named symbol `net_v1` in skills/implementing-container-network-policies-with-calico/scripts/agent.py:46"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8847c0a89b602bb1", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-mobile-app-certificate-pinning-bypass/scripts/", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-mobile-app-certificate-pinning-bypass/scripts/process.py:145"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8676648e8db6b45", "name": "Legacy-named symbol `compute_v1` in skills/implementing-gcp-vpc-firewall-rules/scripts/agent.py:10", "shortDescription": {"text": "Legacy-named symbol `compute_v1` in skills/implementing-gcp-vpc-firewall-rules/scripts/agent.py:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4cd4b8cb405af340", "name": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-privilege-escalation-in-kubernetes-pods/scripts", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-privilege-escalation-in-kubernetes-pods/scripts/process.py:24"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-706a700b98b2948c", "name": "Legacy-named symbol `list_objects_v2` in skills/performing-cloud-storage-forensic-acquisition/scripts/agent.py:41", "shortDescription": {"text": "Legacy-named symbol `list_objects_v2` in skills/performing-cloud-storage-forensic-acquisition/scripts/agent.py:41"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-004ddd6259ce59a8", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-wifi-password-cracking-with-aircrack/scripts/a", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-wifi-password-cracking-with-aircrack/scripts/agent.py:49"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b8a57e226b0ba2d6", "name": "Legacy-named symbol `verify_backup` in skills/recovering-from-ransomware-attack/scripts/agent.py:46", "shortDescription": {"text": "Legacy-named symbol `verify_backup` in skills/recovering-from-ransomware-attack/scripts/agent.py:46"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-29cc33578e1eeb2e", "name": "Network/subprocess call without timeout or try/except \u2014 skills/building-soc-playbook-for-ransomware/scripts/agent.py:76", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-soc-playbook-for-ransomware/scripts/agent.py:76"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75d8dd20a655ab22", "name": "Legacy-named symbol `admin_legacy` in skills/performing-deception-technology-deployment/scripts/agent.py:23", "shortDescription": {"text": "Legacy-named symbol `admin_legacy` in skills/performing-deception-technology-deployment/scripts/agent.py:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0d3191b79265718", "name": "Stub function `log_message` (body is just `pass`/`return`) \u2014 skills/performing-deception-technology-deployment/scripts/a", "shortDescription": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 skills/performing-deception-technology-deployment/scripts/agent.py:151"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0824e4b92e990c3c", "name": "Legacy-named symbol `validate_backup` in skills/validating-backup-integrity-for-recovery/scripts/agent.py:196", "shortDescription": {"text": "Legacy-named symbol `validate_backup` in skills/validating-backup-integrity-for-recovery/scripts/agent.py:196"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4beef40ebf147077", "name": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:35"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5315cb02f4936a79", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-aws-account-enumeration-with-scout-suite/scrip", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-aws-account-enumeration-with-scout-suite/scripts/process.py:37"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c56f46d072d1ae2", "name": "Legacy-named symbol `tls_v1` in skills/performing-cryptographic-audit-of-application/scripts/agent.py:69", "shortDescription": {"text": "Legacy-named symbol `tls_v1` in skills/performing-cryptographic-audit-of-application/scripts/agent.py:69"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-042e153a9fc7e366", "name": "Legacy-named symbol `iap_v1` in skills/configuring-identity-aware-proxy-with-google-iap/scripts/agent.py:10", "shortDescription": {"text": "Legacy-named symbol `iap_v1` in skills/configuring-identity-aware-proxy-with-google-iap/scripts/agent.py:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8b6c995eced040b", "name": "Legacy-named symbol `svc_backup` in skills/deploying-ransomware-canary-files/scripts/agent.py:56", "shortDescription": {"text": "Legacy-named symbol `svc_backup` in skills/deploying-ransomware-canary-files/scripts/agent.py:56"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-688ad3fea4f0e447", "name": "Legacy-named symbol `x_mitre_deprecated` in skills/building-threat-hunt-hypothesis-framework/scripts/agent.py:125", "shortDescription": {"text": "Legacy-named symbol `x_mitre_deprecated` in skills/building-threat-hunt-hypothesis-framework/scripts/agent.py:125"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b98a4bc006ace1ac", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-device-posture-assessment-in-zero-trust/scri", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-device-posture-assessment-in-zero-trust/scripts/process.py:49"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b20f0b47f852fa97", "name": "Legacy-named symbol `includeDeprecated` in skills/performing-graphql-introspection-attack/scripts/agent.py:22", "shortDescription": {"text": "Legacy-named symbol `includeDeprecated` in skills/performing-graphql-introspection-attack/scripts/agent.py:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f15ae233305ab63", "name": "Legacy-named symbol `securitycenter_v1` in skills/performing-gcp-security-assessment-with-forseti/scripts/agent.py:12", "shortDescription": {"text": "Legacy-named symbol `securitycenter_v1` in skills/performing-gcp-security-assessment-with-forseti/scripts/agent.py:12"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53f82e2235d932ac", "name": "Network/subprocess call without timeout or try/except \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/p", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/process.py:47"}, "fullDescription": {"text": "`requests.get(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7cf0e3d99d9d4600", "name": "Legacy-named symbol `sbom_path_old` in skills/analyzing-sbom-for-supply-chain-vulnerabilities/scripts/agent.py:649", "shortDescription": {"text": "Legacy-named symbol `sbom_path_old` in skills/analyzing-sbom-for-supply-chain-vulnerabilities/scripts/agent.py:649"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1489fb1bcd823744", "name": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-container-escape-with-falco-rules/scripts/proce", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-container-escape-with-falco-rules/scripts/process.py:162"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9da285e580bd3a89", "name": "Legacy-named symbol `restic_backup` in skills/implementing-immutable-backup-with-restic/scripts/agent.py:24", "shortDescription": {"text": "Legacy-named symbol `restic_backup` in skills/implementing-immutable-backup-with-restic/scripts/agent.py:24"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a4deb8b01c8b393", "name": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-aqua-security-for-container-scanning/scripts", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-aqua-security-for-container-scanning/scripts/process.py:25"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eee4b5a5ea70c9b1", "name": "Network/subprocess call without timeout or try/except \u2014 skills/performing-sca-dependency-scanning-with-snyk/scripts/proc", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-sca-dependency-scanning-with-snyk/scripts/process.py:256"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c0a96cd0b4f7d39", "name": "Network/subprocess call without timeout or try/except \u2014 skills/building-vulnerability-dashboard-with-defectdojo/scripts/", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-vulnerability-dashboard-with-defectdojo/scripts/process.py:63"}, "fullDescription": {"text": "`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/detecting-t1003-credential-dumping-with-edr/scripts/process.py:parse_events, skills/hunting-for-suspicious-scheduled-tasks/scripts/process.py:parse_events, skills/detecting-t1548-abuse-elevation-control-mechanism/scripts/process.py:parse_events, skills/hunting-for-dns-tunneling-with-zeek/scripts/process.py:parse_zeek_dns\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/detecting-t1003-credential-dumping-with-edr/scripts/process.py:detect_credential_dumping, skills/detecting-t1548-abuse-elevation-control-mechanism/scripts/process.py:detect_elevation_abuse\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f341860ab6a90be6", "name": "Near-duplicate function bodies in 17 places", "shortDescription": {"text": "Near-duplicate function bodies in 17 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/detecting-service-account-abuse/scripts/process.py:parse_logs, skills/hunting-for-unusual-network-connections/scripts/process.py:parse_logs, skills/detecting-kerberoasting-attacks/scripts/process.py:parse_logs, skills/detecting-pass-the-hash-attacks/scripts/process.py:parse_logs\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-122053f21232d80c", "name": "Near-duplicate function bodies in 14 places", "shortDescription": {"text": "Near-duplicate function bodies in 14 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/detecting-service-account-abuse/scripts/process.py:analyze_event, skills/hunting-for-unusual-network-connections/scripts/process.py:analyze_event, skills/detecting-kerberoasting-attacks/scripts/process.py:analyze_event, skills/hunting-for-registry-persistence-mechanisms/scripts/process.py:analyze_event\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/analyzing-golang-malware-with-ghidra/scripts/agent.py:compute_hash, skills/analyzing-lnk-file-and-jump-list-artifacts/scripts/agent.py:compute_hash, skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py:compute_hash\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nskills/detecting-evasion-techniques-in-endpoint-logs/scripts/agent.py:analyze_evtx_for_evasion, skills/detecting-dll-sideloading-attacks/scripts/agent.py:parse_sysmon_dll_loads, skills/detecting-fileless-attacks-on-endpoints/scripts/agent.py:parse_powershell_scriptblock, skills/detecting-process-hollowing-technique/scripts/agent.py:detect_hollowing_sysmon\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab0af7851343cacc", "name": "Flask mutation route `register_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authenticati", "shortDescription": {"text": "Flask mutation route `register_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:565"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-567e98ea3d6d917f", "name": "Flask mutation route `register_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentic", "shortDescription": {"text": "Flask mutation route `register_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:606"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5f2ee5f86828fd1e", "name": "Flask mutation route `authenticate_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authenti", "shortDescription": {"text": "Flask mutation route `authenticate_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:663"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ef1da8f8d3311843", "name": "Flask mutation route `authenticate_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authe", "shortDescription": {"text": "Flask mutation route `authenticate_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:691"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5b56bc6cd0c0b747", "name": "Flask mutation route `revoke_key` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/s", "shortDescription": {"text": "Flask mutation route `revoke_key` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:800"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-496419302d293bef", "name": "Flask mutation route `update_key_label` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentica", "shortDescription": {"text": "Flask mutation route `update_key_label` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:823"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-07ec8b74bf503c7f", "name": "Flask mutation route `recover_account` without `@login_required` \u2014 skills/implementing-hardware-security-key-authenticat", "shortDescription": {"text": "Flask mutation route `recover_account` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:844"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d81567606189b74c", "name": "Flask mutation route `create_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/p", "shortDescription": {"text": "Flask mutation route `create_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:169"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-00ef4cde0426aa28", "name": "Flask mutation route `replace_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/", "shortDescription": {"text": "Flask mutation route `replace_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:237"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1868a52be306de8a", "name": "Flask mutation route `patch_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/pr", "shortDescription": {"text": "Flask mutation route `patch_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:265"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-27965f08074f4de9", "name": "Flask mutation route `delete_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/p", "shortDescription": {"text": "Flask mutation route `delete_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:301"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d5d99f08d8a2784", "name": "Flask mutation route `create_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/", "shortDescription": {"text": "Flask mutation route `create_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:315"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffe49422f4135e02", "name": "Flask mutation route `patch_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/p", "shortDescription": {"text": "Flask mutation route `patch_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:373"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-40f5ea8d213e0df5", "name": "Flask mutation route `delete_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/", "shortDescription": {"text": "Flask mutation route `delete_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:411"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30730"}, "properties": {"repository": "mukul975/Anthropic-Cybersecurity-Skills", "repoUrl": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git", "branch": "main"}, "results": [{"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468742, "scanner": "repobility-ast-engine", "fingerprint": "f0e108c352366e5f16415fdfc43fe19d36b29234886b83b24d7d4e2646f8f384", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f0e108c352366e5f16415fdfc43fe19d36b29234886b83b24d7d4e2646f8f384"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-hardware-security-module-integration/scripts/agent.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468740, "scanner": "repobility-ast-engine", "fingerprint": "353dd00a1c2bf7e8b781cfba48cfe9d91e1c16a29a723c7f0bd481cec577c9c5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|353dd00a1c2bf7e8b781cfba48cfe9d91e1c16a29a723c7f0bd481cec577c9c5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-jwt-signing-and-verification/scripts/process.py"}, "region": {"startLine": 204}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468738, "scanner": "repobility-ast-engine", "fingerprint": "2bea50e95d76c9d554112ac8286266f31c17803a450ca391686444caf4efc37f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2bea50e95d76c9d554112ac8286266f31c17803a450ca391686444caf4efc37f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-bluetooth-low-energy-attacks/scripts/agent.py"}, "region": {"startLine": 259}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468737, "scanner": "repobility-ast-engine", "fingerprint": "ce99010743941c36bdbebd2c778322eda06566ea8c3c3f045f7d7b6fe2871d55", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ce99010743941c36bdbebd2c778322eda06566ea8c3c3f045f7d7b6fe2871d55"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-bluetooth-low-energy-attacks/scripts/agent.py"}, "region": {"startLine": 266}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468736, "scanner": "repobility-ast-engine", "fingerprint": "d1adaf02d5927877bd144e81369d49e1fb807544364f337106b390f426705ce9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d1adaf02d5927877bd144e81369d49e1fb807544364f337106b390f426705ce9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-deepfake-audio-in-vishing-attacks/scripts/agent.py"}, "region": {"startLine": 340}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468735, "scanner": "repobility-ast-engine", "fingerprint": "8c8b19fba61d5945d7547151c99fb0daa9c7c6ad275959984953c669d624de33", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8c8b19fba61d5945d7547151c99fb0daa9c7c6ad275959984953c669d624de33"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-deepfake-audio-in-vishing-attacks/scripts/agent.py"}, "region": {"startLine": 298}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468734, "scanner": "repobility-ast-engine", "fingerprint": "be5b003ac631be2c39c7668d0f1990e77e6b7471e6828528397c03118c268bbe", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|be5b003ac631be2c39c7668d0f1990e77e6b7471e6828528397c03118c268bbe"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-gdpr-data-subject-access-request/scripts/agent.py"}, "region": {"startLine": 453}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468732, "scanner": "repobility-ast-engine", "fingerprint": "b370d9c3cd1a59be8d05574a5ef8f5f39e2e4360c83da0b7dbaba78f0471911a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b370d9c3cd1a59be8d05574a5ef8f5f39e2e4360c83da0b7dbaba78f0471911a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-web-application-scanning-with-nikto/scripts/process.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468731, "scanner": "repobility-ast-engine", "fingerprint": "ab4983216405e44b8257b4cd81aee933d1363c05542578ad7ea09c2cb8b39864", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ab4983216405e44b8257b4cd81aee933d1363c05542578ad7ea09c2cb8b39864"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-external-network-penetration-test/scripts/agent.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468725, "scanner": "repobility-ast-engine", "fingerprint": "a76d96ea9b6a9954a740dcb23da8d5d252ba0d351837913f7cf46d467eb6e8d6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a76d96ea9b6a9954a740dcb23da8d5d252ba0d351837913f7cf46d467eb6e8d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-smb-vulnerabilities-with-metasploit/scripts/agent.py"}, "region": {"startLine": 78}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468721, "scanner": "repobility-ast-engine", "fingerprint": "da781093e21d888096c030b8405d2568c1726abdc084a82b9520373d7b27735f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|da781093e21d888096c030b8405d2568c1726abdc084a82b9520373d7b27735f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/scripts/agent.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468720, "scanner": "repobility-ast-engine", "fingerprint": "3fa395d9aba0f855fc93e6f8d75487028f01674f3c328c74b3e38d11d90a14bf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3fa395d9aba0f855fc93e6f8d75487028f01674f3c328c74b3e38d11d90a14bf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/scripts/agent.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468719, "scanner": "repobility-ast-engine", "fingerprint": "8de84ebabe6303f6c486afd19712f214db40833beb82015086dab62b4d26761e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8de84ebabe6303f6c486afd19712f214db40833beb82015086dab62b4d26761e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/scripts/agent.py"}, "region": {"startLine": 148}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468718, "scanner": "repobility-ast-engine", "fingerprint": "93d69047cb29b329fdb2bc57f06beb062d2677a7213071c66139804ff9b0fbde", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|93d69047cb29b329fdb2bc57f06beb062d2677a7213071c66139804ff9b0fbde"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/scripts/agent.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468716, "scanner": "repobility-ast-engine", "fingerprint": "7c591f0db1574c41e52f75d14907f93c446d8a99d6ab6d88b92f822055cbe147", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7c591f0db1574c41e52f75d14907f93c446d8a99d6ab6d88b92f822055cbe147"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-kerberoasting-attacks/scripts/agent.py"}, "region": {"startLine": 136}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468715, "scanner": "repobility-ast-engine", "fingerprint": "906ef5f9783f1242ff55e241fb1dd65ea4e81bb7e694ec69c81a8e21835d5089", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|906ef5f9783f1242ff55e241fb1dd65ea4e81bb7e694ec69c81a8e21835d5089"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-kerberoasting-attacks/scripts/agent.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468713, "scanner": "repobility-ast-engine", "fingerprint": "533a66b18d1ee6e5a3277f6583d737a28965264eeead08330889f3bb70827f5e", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|533a66b18d1ee6e5a3277f6583d737a28965264eeead08330889f3bb70827f5e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-kerberoasting-attack/scripts/process.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468709, "scanner": "repobility-ast-engine", "fingerprint": "0baea72e1a59b1ad485e51ff8623f73f2c4e942bf7993bfac4bc096870536e70", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0baea72e1a59b1ad485e51ff8623f73f2c4e942bf7993bfac4bc096870536e70"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-soar-automation-with-phantom/scripts/agent.py"}, "region": {"startLine": 177}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468707, "scanner": "repobility-ast-engine", "fingerprint": "61c24be114c068160ca868a403f684990ebd90de3893164da4f9beea951f22c2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|61c24be114c068160ca868a403f684990ebd90de3893164da4f9beea951f22c2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/prioritizing-vulnerabilities-with-cvss-scoring/scripts/process.py"}, "region": {"startLine": 208}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468697, "scanner": "repobility-ast-engine", "fingerprint": "6685511fc23c3618c7a6e966ac822fef76a76ab77a083b963c528f2f61c3a2f1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6685511fc23c3618c7a6e966ac822fef76a76ab77a083b963c528f2f61c3a2f1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-lateral-movement-with-wmiexec/scripts/agent.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468696, "scanner": "repobility-ast-engine", "fingerprint": "4d2285481026c5086af88c78e0114972c58631d41d028e2ef92727dd8bfaee73", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4d2285481026c5086af88c78e0114972c58631d41d028e2ef92727dd8bfaee73"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-flow-data-with-netflow/scripts/agent.py"}, "region": {"startLine": 48}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468689, "scanner": "repobility-ast-engine", "fingerprint": "264af7d9d2471e8a7f24e3c4725287d12e2cc0310915078759d0190f01fe05d2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|264af7d9d2471e8a7f24e3c4725287d12e2cc0310915078759d0190f01fe05d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-open-source-intelligence-gathering/scripts/agent.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468687, "scanner": "repobility-ast-engine", "fingerprint": "c0df17728548ba15645f9fa169cc0b3084faf73918c66cb35d417d68ee11c65a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c0df17728548ba15645f9fa169cc0b3084faf73918c66cb35d417d68ee11c65a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-open-source-intelligence-gathering/scripts/process.py"}, "region": {"startLine": 409}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468686, "scanner": "repobility-ast-engine", "fingerprint": "8097e54a0745e925fdcbab6df34f3375d23cff577e8bd840c4a8b59e98dffbac", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8097e54a0745e925fdcbab6df34f3375d23cff577e8bd840c4a8b59e98dffbac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-open-source-intelligence-gathering/scripts/process.py"}, "region": {"startLine": 272}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 468685, "scanner": "repobility-ast-engine", "fingerprint": "2c42850971eb23e5a53ec57314fa5a2297c072ed96a7e8a937729b1c0147f7d7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2c42850971eb23e5a53ec57314fa5a2297c072ed96a7e8a937729b1c0147f7d7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-open-source-intelligence-gathering/scripts/process.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "JRN012", "level": "warning", "message": {"text": "Runtime environment contract is missing referenced variables"}, "properties": {"repobilityId": 468682, "scanner": "repobility-journey-contract", "fingerprint": "850b22013d11138cd0cf0fb31172b3399ac387a7ed16c1e216b2039010c00f17", "category": "quality", "severity": "medium", "confidence": 0.72, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source code references runtime environment variables that are absent from env templates or deployment docs.", "evidence": {"rule_id": "JRN012", "scanner": "repobility-journey-contract", "references": ["https://repobility.com/library/authorization/"], "correlation_key": "fp|850b22013d11138cd0cf0fb31172b3399ac387a7ed16c1e216b2039010c00f17", "missing_env_vars": ["ABUSEIPDB_API_KEY", "ABUSEIPDB_KEY", "ALERT_RECIPIENTS", "ANYRUN_API_KEY", "APPDATA", "AUTH_LOG", "AUTOPSY_CASE_DIR", "AWS_ACCESS_KEY_ID", "AWS_DEFAULT_REGION", "AWS_PROFILE", "AWS_REGION", "AWS_SECRET_ACCESS_KEY", "AZURE_CLIENT_ID", "AZURE_CLIENT_SECRET", "AZURE_SUBSCRIPTION_ID", "AZURE_TENANT_ID", "AZURE_WORKSPACE_ID", "CANARYTOKENS_API_URL", "CANARY_EMAIL", "CANARY_WEBHOOK", "CAPE_API_KEY", "CAPE_API_TOKEN", "CAPE_URL", "CASE_ID", "COMPUTERNAME", "CONNECTOR_ID", "CUCKOO_API", "CUCKOO_STORAGE", "CUCKOO_URL", "CYBERARK_PVWA_URL", "CYBERARK_URL", "DD_API_KEY", "DD_URL", "DEFECTDOJO_API_KEY", "DEFECTDOJO_URL", "DEHASHED_API_KEY", "DEHASHED_EMAIL", "DOCKER_CONTENT_TRUST", "DOCKER_DAEMON_JSON", "ES_HOSTS", "ETCD_ENDPOINT", "EXAMINER_NAME", "EXCEPTION_DB_PATH", "FAIL2BAN_CLIENT", "FAIL2BAN_LOG", "FALCON_BASE_URL", "FALCON_CLIENT_ID", "FALCON_CLIENT_SECRET", "FALCO_URL", "GITHUB_ORG", "GITHUB_TOKEN", "GITLAB_GROUP_ID", "GITLAB_TOKEN", "GITLAB_URL", "GITLEAKS_PATH", "GOPHISH_API_KEY", "GOPHISH_API_URL", "GREYNOISE_API_KEY", "GUARDICORE_API_URL", "HIBP_API_KEY", "INSIGHTVM_HOST", "INSIGHTVM_PASSWORD", "INSIGHTVM_PORT", "INSIGHTVM_URL", "INSIGHTVM_USER", "JIRA_PROJECT", "KISMET_URL", "KONG_ADMIN_URL", "KUBECONFIG", "LOCALAPPDATA", "MIMECAST_BASE_URL", "MISP_API_KEY", "MISP_KEY", "MISP_URL", "MISP_VERIFY", "MOBILE_AUDIT_DIR", "MOBSF_API_KEY", "MOBSF_URL", "NEO4J_PASSWORD", "NEO4J_URI", "NEO4J_USER", "NESSUS_ACCESS_KEY", "NESSUS_SECRET_KEY", "NESSUS_URL", "NVD_API_KEY", "OKTA_API_TOKEN", "OKTA_ORG_URL", "OPA_PATH", "OPA_URL", "OPENCTI_TOKEN", "OPENCTI_URL", "OPENTAXII_URL", "PP_SECRET", "PP_SERVICE_PRINCIPAL", "PROGRAMDATA", "PROOFPOINT_PRINCIPAL", "PROOFPOINT_SECRET", "QRADAR_HOST", "QRADAR_TOKEN", "QUALYS_URL", "QUARANTINE_DIR", "QUARANTINE_SECURITY_GROUP", "RESTIC_PASSWORD", "SCAN_IMAGES", "SCOUTSUITE_PATH", "SECURITYTRAILS_API_KEY", "SEMGREP_PATH", "SENTINEL_WORKSPACE_ID", "SHODAN_API_KEY", "SKIP_TLS_VERIFY", "SLA_DB_PATH", "SMTP_PORT", "SNORT_BIN", "SNORT_CONF", "SNORT_DAQ_DIR", "SNORT_LOG_DIR", "SNORT_RULES_DIR", "SNS_TOPIC_ARN", "SOAP_WSDL_URL", "SOFTHSM2_LIB", "SPIDERFOOT_URL", "SPLUNK_HEC_TOKEN", "SPLUNK_HEC_URL", "SPLUNK_HOST", "SPLUNK_PASSWORD", "SPLUNK_PORT", "SPLUNK_URL", "SPLUNK_USERNAME", "SURICATA_BIN", "SURICATA_CONF", "SURICATA_EVE_LOG", "SURICATA_OUTPUT_DIR", "SURICATA_RULES_DIR", "SYSLOG_PATH", "TARGET_URL", "TAXII_PASS", "TAXII_PASSWORD", "TAXII_USER", "TEMP", "THEHIVE_API_KEY", "THEHIVE_URL", "THINKST_API_KEY", "THINKST_DOMAIN", "TOR_PROXY", "URLSCAN_API_KEY", "USERNAME", "USERPROFILE", "VAULT_ADDR", "VAULT_NAMESPACE", "VAULT_TOKEN", "VELOCIRAPTOR_API_CONFIG", "VELOCIRAPTOR_API_KEY", "VELOCIRAPTOR_API_URL", "VELOCIRAPTOR_CERT", "VIRUSTOTAL_API_KEY", "VT_API_KEY", "XSOAR_API_KEY", "XSOAR_URL", "ZEEK_BIN", "ZEEK_LOG_DIR", "ZEEK_OUTPUT_DIR", "ZPA_BASE_URL"], "documented_env_vars": ["AI_RMF", "ATLAS", "CISA", "CONTRIBUTING", "CSPM", "CTID", "CVSS", "D3FEND", "DFIR", "DNP3", "E8B84B", "F1005", "F1007", "F1025", "F1XXX", "FA0001", "FA0002", "GARS", "ISAC", "ISC2", "LICENSE", "LOTL", "LSASS", "MEASURE", "MISP", "MITRE", "NIST", "OSINT", "OWASP", "PSMD", "RBAC", "REST", "SCADA", "SECURITY", "SIEM", "SKILL", "SSRF", "STIX", "T0047", "T1003", "T1071", "T1566", "T1XXX", "TA0001", "TA0002", "TA0003", "TA0004", "TA0005", "TA0006", "TA0007", "TA0008", "TA0009", "TA0010", "TA0011", "TA0040", "TA0042", "TA0043", "TA0112", "TAXII", "VLAN", "YAML"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 239}}}]}, {"ruleId": "AGT012", "level": "warning", "message": {"text": "Agent control bridge may listen on a network interface without visible auth"}, "properties": {"repobilityId": 468681, "scanner": "repobility-agent-runtime", "fingerprint": "c261594ed93b2aa1174795e94f544f8167b6d56d4c8678bc76e869d176ee4956", "category": "quality", "severity": "medium", "confidence": 0.72, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File combines agent-control wording with an HTTP/SSE/WebSocket listener on an all-interface host and no visible auth guard.", "evidence": {"rule_id": "AGT012", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|c261594ed93b2aa1174795e94f544f8167b6d56d4c8678bc76e869d176ee4956"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-cloud-with-cis-benchmarks/scripts/agent.py"}, "region": {"startLine": 98}}}]}, {"ruleId": "AGT015", "level": "warning", "message": {"text": "Remote install command pipes network code directly to a shell"}, "properties": {"repobilityId": 468680, "scanner": "repobility-agent-runtime", "fingerprint": "791d52b059c5e4d8eef7b632587f8e36b55afee9a24c84b28ea98241f0fcf4f5", "category": "dependency", "severity": "medium", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "File contains a remote download piped directly to a shell without visible checksum or signature verification.", "evidence": {"rule_id": "AGT015", "scanner": "repobility-agent-runtime", "references": [], "correlation_key": "fp|791d52b059c5e4d8eef7b632587f8e36b55afee9a24c84b28ea98241f0fcf4f5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-sbom-for-supply-chain-vulnerabilities/references/api-reference.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "SEC134", "level": "warning", "message": {"text": "[SEC134] AI scaffold leftover \u2014 Lorem ipsum / example.com / John Doe in code: Lorem ipsum / John Doe / example.com left in non-test code. AI agents emit these as 'reasonable defaults' when they don't know real values; the human then forgets to swap them. In production, these break demo flows, send mail to a real example.com host (it's owned by IANA), and leak that the codebase had an AI scaffolding pass."}, "properties": {"repobilityId": 468674, "scanner": "repobility-threat-engine", "fingerprint": "139101402145c57ee0f245f0bd2f733a7f8c000ed916af12663542638b44066f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "\"Acme Corp\"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC134", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|139101402145c57ee0f245f0bd2f733a7f8c000ed916af12663542638b44066f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-dark-web-monitoring-for-threats/scripts/process.py"}, "region": {"startLine": 15}}}]}, {"ruleId": "SEC034", "level": "warning", "message": {"text": "[SEC034] Log Injection / Log Forging \u2014 unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\\n` to forge fake log entries, hide tracks, or exploit downstream log parsers (SIEM, splunk). Combined with template injection this can escalate to RCE (CVE-2021-44228 log4shell). CWE-117."}, "properties": {"repobilityId": 468663, "scanner": "repobility-threat-engine", "fingerprint": "8716c9d039a49ea012b9f935b8251e7d7567306ea7409c16afc5cb8415427c87", "category": "log_injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "logger.info(f\"Encrypted {input", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC034", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|8716c9d039a49ea012b9f935b8251e7d7567306ea7409c16afc5cb8415427c87"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-envelope-encryption-with-aws-kms/scripts/process.py"}, "region": {"startLine": 268}}}]}, {"ruleId": "SEC034", "level": "warning", "message": {"text": "[SEC034] Log Injection / Log Forging \u2014 unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\\n` to forge fake log entries, hide tracks, or exploit downstream log parsers (SIEM, splunk). Combined with template injection this can escalate to RCE (CVE-2021-44228 log4shell). CWE-117."}, "properties": {"repobilityId": 468662, "scanner": "repobility-threat-engine", "fingerprint": "814b91bf2c321fb60a0a2e6f2cfd94112dbcc3acbe96b705d9ca285cf47d4c1b", "category": "log_injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "logger.info(f\"Signed {input", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC034", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|814b91bf2c321fb60a0a2e6f2cfd94112dbcc3acbe96b705d9ca285cf47d4c1b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-digital-signatures-with-ed25519/scripts/process.py"}, "region": {"startLine": 137}}}]}, {"ruleId": "SEC034", "level": "warning", "message": {"text": "[SEC034] Log Injection / Log Forging \u2014 unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\\n` to forge fake log entries, hide tracks, or exploit downstream log parsers (SIEM, splunk). Combined with template injection this can escalate to RCE (CVE-2021-44228 log4shell). CWE-117."}, "properties": {"repobilityId": 468661, "scanner": "repobility-threat-engine", "fingerprint": "2fc61f7b8ed3e870748466a73b427048f62bd0e6d2e2b3a6cb1730b963ebff59", "category": "log_injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "logger.info(f\"Encrypted {input", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC034", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|2fc61f7b8ed3e870748466a73b427048f62bd0e6d2e2b3a6cb1730b963ebff59"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "SEC015", "level": "warning", "message": {"text": "[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable."}, "properties": {"repobilityId": 468659, "scanner": "repobility-threat-engine", "fingerprint": "63dcb4e5e97ce46c5d4d1589e50b650426a737e35597860161e2bbb1029b26f6", "category": "crypto", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Security-sensitive keyword found nearby \u2014 weak PRNG is risky here", "evidence": {"match": "def generate_random_key", "reason": "Security-sensitive keyword found nearby \u2014 weak PRNG is risky here", "rule_id": "SEC015", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|99|sec015"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aes-encryption-for-data-at-rest/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "SEC015", "level": "warning", "message": {"text": "[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable."}, "properties": {"repobilityId": 468658, "scanner": "repobility-threat-engine", "fingerprint": "f93de1c8e961d0c4d52ebe2e86ba665be1fcb40bbaf482a582bf5ccb9d21d427", "category": "crypto", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Security-sensitive keyword found nearby \u2014 weak PRNG is risky here Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "def create_session", "reason": "Security-sensitive keyword found nearby \u2014 weak PRNG is risky here", "rule_id": "SEC015", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|12|sec015", "duplicate_count": 1, "duplicate_rule_ids": ["SEC015"], "duplicate_scanners": ["repobility-threat-engine"], "duplicate_fingerprints": ["3be6ee270f3573be4d19717e939b8137a4730e6ff1565d3556776a6fe8c534a4", "f93de1c8e961d0c4d52ebe2e86ba665be1fcb40bbaf482a582bf5ccb9d21d427"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/extracting-memory-artifacts-with-rekall/scripts/agent.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "SEC005", "level": "warning", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468656, "scanner": "repobility-threat-engine", "fingerprint": "d9839396f3943c19cb14ca7650ad66f48c7831796446aa5d5a591901b1a941bd", "category": "injection", "severity": "medium", "confidence": 0.5, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "shell=True detected \u2014 verify command source is not user-controllable", "evidence": {"match": "subprocess.run(\n            command, shell=True", "reason": "shell=True detected \u2014 verify command source is not user-controllable", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.5, "correlation_key": "code|injection|token|99|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "SEC042", "level": "warning", "message": {"text": "[SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes an unsafe pattern. Currently safe when only trusted internal values are interpolated (e.g. self._table in Odoo), but a future contributor can extend the f-string to user input without noticing. CWE-89. Identifiers (table/column names) need a separate escaping path from values."}, "properties": {"repobilityId": 468645, "scanner": "repobility-threat-engine", "fingerprint": "1f62ddcc55d38374a00b820cc1f4acd45cc37a2998f8455134479e1ca1846b0d", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "cursor.execute(f\"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC042", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|154|sec042"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-mobile-device-forensics-with-cellebrite/scripts/agent.py"}, "region": {"startLine": 154}}}]}, {"ruleId": "SEC042", "level": "warning", "message": {"text": "[SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes an unsafe pattern. Currently safe when only trusted internal values are interpolated (e.g. self._table in Odoo), but a future contributor can extend the f-string to user input without noticing. CWE-89. Identifiers (table/column names) need a separate escaping path from values."}, "properties": {"repobilityId": 468644, "scanner": "repobility-threat-engine", "fingerprint": "db406737f91d155b858355e9bfda844dd6103ede977afa4c59f375c5eb8b6ce9", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "cursor.execute(f\"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC042", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|112|sec042"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "SEC042", "level": "warning", "message": {"text": "[SEC042] SQL identifier injection via f-string in cursor execute: f-string SQL normalizes an unsafe pattern. Currently safe when only trusted internal values are interpolated (e.g. self._table in Odoo), but a future contributor can extend the f-string to user input without noticing. CWE-89. Identifiers (table/column names) need a separate escaping path from values."}, "properties": {"repobilityId": 468643, "scanner": "repobility-threat-engine", "fingerprint": "ca0016be852e7b78a58c89842ad9706568ca24c622cc9b53f92ebf420b0fa94a", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "cursor.execute(f\"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC042", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|76|sec042"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/agent.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "SEC001", "level": "warning", "message": {"text": "[SEC001] Hardcoded Password: Hardcoded password found in source code."}, "properties": {"repobilityId": 468637, "scanner": "repobility-threat-engine", "fingerprint": "171e85b0433e794a2e057b0d40df89842d80e8ea20400a4a0995fce156278b45", "category": "credential_exposure", "severity": "medium", "confidence": 0.3, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Low entropy value (3.4 bits) \u2014 may be placeholder or common string", "evidence": {"match": "password=\"<redacted>\"", "reason": "Low entropy value (3.4 bits) \u2014 may be placeholder or common string", "rule_id": "SEC001", "scanner": "repobility-threat-engine", "confidence": 0.3, "correlation_key": "secret|token|8|password redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "SEC001", "level": "warning", "message": {"text": "[SEC001] Hardcoded Password: Hardcoded password found in source code."}, "properties": {"repobilityId": 468636, "scanner": "repobility-threat-engine", "fingerprint": "f93dca8555ab3ee269f468bcd1dad2f21e07a76c9d331bd2ae8f17714b88256e", "category": "credential_exposure", "severity": "medium", "confidence": 0.3, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Low entropy value (3.7 bits) \u2014 may be placeholder or common string", "evidence": {"match": "password = \"<redacted>\"", "reason": "Low entropy value (3.7 bits) \u2014 may be placeholder or common string", "rule_id": "SEC001", "scanner": "repobility-threat-engine", "confidence": 0.3, "correlation_key": "secret|token|31|password redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py"}, "region": {"startLine": 320}}}]}, {"ruleId": "SEC001", "level": "warning", "message": {"text": "[SEC001] Hardcoded Password: Hardcoded password found in source code."}, "properties": {"repobilityId": 468635, "scanner": "repobility-threat-engine", "fingerprint": "ec220a890e0d54caef82f60e4860815a3d5b8777581a898a2026a90fd9737500", "category": "credential_exposure", "severity": "medium", "confidence": 0.3, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Low entropy value (2.6 bits) \u2014 may be placeholder or common string", "evidence": {"match": "password=\"<redacted>\"", "reason": "Low entropy value (2.6 bits) \u2014 may be placeholder or common string", "rule_id": "SEC001", "scanner": "repobility-threat-engine", "confidence": 0.3, "correlation_key": "secret|token|6|password redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-active-directory-with-bloodhound/scripts/agent.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "SEC123", "level": "warning", "message": {"text": "[SEC123] Production stack trace / debug output exposed: Debug mode left on in production exposes stack traces, environment variables, framework internals \u2014 sometimes triggers RCE (Django debug page with arbitrary template eval)."}, "properties": {"repobilityId": 468633, "scanner": "repobility-threat-engine", "fingerprint": "56c763330f6c295248c2516b02a143b103080ad974f0f57b7fe4458f8ddccfdd", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "debug=True", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC123", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|56c763330f6c295248c2516b02a143b103080ad974f0f57b7fe4458f8ddccfdd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/scripts/agent.py"}, "region": {"startLine": 145}}}]}, {"ruleId": "SEC014", "level": "warning", "message": {"text": "[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks."}, "properties": {"repobilityId": 468616, "scanner": "repobility-threat-engine", "fingerprint": "30d40102f0400abcd20c0b38e5c30fe33d4eab1ad802372ecf58d653a3f549da", "category": "crypto", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "verify=False", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC014", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|40|sec014"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "SEC014", "level": "warning", "message": {"text": "[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks."}, "properties": {"repobilityId": 468615, "scanner": "repobility-threat-engine", "fingerprint": "d0cf5f5b9285f5bbf7c6a2f694403ac154c29ff9ece88ea2d949494c5513f58d", "category": "crypto", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "verify=False", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC014", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|26|sec014"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "SEC014", "level": "warning", "message": {"text": "[SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing man-in-the-middle attacks."}, "properties": {"repobilityId": 468614, "scanner": "repobility-threat-engine", "fingerprint": "5ddbb72a880a76fc579534f82abee03d736cc04e562aa4a899447376938bb5b1", "category": "crypto", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "CERT_NONE", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC014", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|37|sec014"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-c2-infrastructure-with-sliver-framework/scripts/process.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 468609, "scanner": "repobility-threat-engine", "fingerprint": "a8b3397f8147a809aa5bf385730bdcadba618f289505f2714b778aa6bb467a19", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found Collapsed 1 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "(eval(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|106|sec045", "duplicate_count": 1, "duplicate_rule_ids": ["SEC045"], "duplicate_scanners": ["repobility-threat-engine"], "duplicate_fingerprints": ["54fc29c95297d6156b9f0b1b3f3e8525de10448a92ac9a1f1beee7a8ad7b6e50", "a8b3397f8147a809aa5bf385730bdcadba618f289505f2714b778aa6bb467a19"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-incident-response-dashboard/scripts/agent.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 468608, "scanner": "repobility-threat-engine", "fingerprint": "fafeb90336d0894b1ab345653cb8a6be408ae4f9d4113f85c90d8b7713632e3c", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "\"eval(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|117|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py"}, "region": {"startLine": 117}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 468606, "scanner": "repobility-threat-engine", "fingerprint": "c7361d9645a78cccec5a22f793619061701dce01576a4ecb45a585887eb8dfaa", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n        data = graph_get(token, \"/reports/authenticationMethods/userRegistrationDetails\")", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|c7361d9645a78cccec5a22f793619061701dce01576a4ecb45a585887eb8dfaa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-azure-active-directory-configuration/scripts/agent.py"}, "region": {"startLine": 113}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 468605, "scanner": "repobility-threat-engine", "fingerprint": "cb5de742b17e41ae6e31e68a566ba786c3236e61b99d3b8955f5e86e5bd3c2ee", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n            pf = windowsprefetch.Prefetch(pf_path)\n        except Exception:\n            return", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|cb5de742b17e41ae6e31e68a566ba786c3236e61b99d3b8955f5e86e5bd3c2ee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-prefetch-with-python/scripts/agent.py"}, "region": {"startLine": 52}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 468604, "scanner": "repobility-threat-engine", "fingerprint": "30fab0919f916243890e18055e9aacc2123f4a67010edeba5c8d8ac1749ddf58", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n        decoded_bytes = base64.b64decode(encoded_string)\n        decoded = decoded_bytes.decode", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|30fab0919f916243890e18055e9aacc2123f4a67010edeba5c8d8ac1749ddf58"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-powershell-empire-artifacts/scripts/agent.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "SEC031", "level": "warning", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more."}, "properties": {"repobilityId": 468586, "scanner": "repobility-threat-engine", "fingerprint": "6e9bfa28abd058aa38ea12668fb9e2d1a7c80028e1aef450b7228e61aa8f80c5", "category": "redos", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "re.compile(r\"@v?\\d+(\\.\\d+)*", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|6e9bfa28abd058aa38ea12668fb9e2d1a7c80028e1aef450b7228e61aa8f80c5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-github-actions-workflows/scripts/process.py"}, "region": {"startLine": 35}}}]}, {"ruleId": "SEC031", "level": "warning", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more."}, "properties": {"repobilityId": 468585, "scanner": "repobility-threat-engine", "fingerprint": "7bc54af8dd546fa1613c6b6575d3f2e61b97e31e0af7192fe094fa99af70dfd7", "category": "redos", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "re.findall(\n            r'(?:HKLM|HKCU|HKCR)(?:\\\\[^\\s\\'\"<>|]+)+", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|7bc54af8dd546fa1613c6b6575d3f2e61b97e31e0af7192fe094fa99af70dfd7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-powershell-obfuscated-malware/scripts/process.py"}, "region": {"startLine": 253}}}]}, {"ruleId": "SEC031", "level": "warning", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more."}, "properties": {"repobilityId": 468584, "scanner": "repobility-threat-engine", "fingerprint": "a080c08400df96650517306ac792778e4fbfca56f722c983a52e16aba4d9a44f", "category": "redos", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "re.compile(r\"^([a-zA-Z0-9_]+(?:/[a-zA-Z0-9_.-]+)+", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|a080c08400df96650517306ac792778e4fbfca56f722c983a52e16aba4d9a44f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/scripts/agent.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 468562, "scanner": "repobility-threat-engine", "fingerprint": "b007ddae8bc36702104b3b8464b6de39e67abcd675e716a41db804549787b921", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n            pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|b007ddae8bc36702104b3b8464b6de39e67abcd675e716a41db804549787b921"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-lnk-files-for-artifacts/scripts/agent.py"}, "region": {"startLine": 113}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 468561, "scanner": "repobility-threat-engine", "fingerprint": "e76c12cd721cfcee969a852847ff6778891492cc62ef52d32e529de04d40f0c8", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n            pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|e76c12cd721cfcee969a852847ff6778891492cc62ef52d32e529de04d40f0c8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-office365-audit-logs-for-compromise/scripts/agent.py"}, "region": {"startLine": 81}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 468560, "scanner": "repobility-threat-engine", "fingerprint": "e924a0c8bfe14fa2ea779feb5ece688a8aff7841813f4dc35363c049bf0bc14b", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n        pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|e924a0c8bfe14fa2ea779feb5ece688a8aff7841813f4dc35363c049bf0bc14b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `compute` has cognitive complexity 22 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: elif=1, for=1, if=8, nested_bonus=12."}, "properties": {"repobilityId": 468540, "scanner": "repobility-threat-engine", "fingerprint": "72d2e54e99f5162d17b320685b11e687082860fca8a87052eca164b703b73e01", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 22 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "compute", "breakdown": {"if": 8, "for": 1, "elif": 1, "nested_bonus": 12}, "complexity": 22, "correlation_key": "fp|72d2e54e99f5162d17b320685b11e687082860fca8a87052eca164b703b73e01"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/scripts/process.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED115", "level": "note", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect many repos. Treat official first-party action tags as lower risk, but pin security-sensitive third-party actions to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 468772, "scanner": "repobility-supply-chain", "fingerprint": "4272ba1461794862c9b3710bd79a0e0564cfbb364bcf0d9dce6d5e762a52dadf", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|4272ba1461794862c9b3710bd79a0e0564cfbb364bcf0d9dce6d5e762a52dadf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-index.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED115", "level": "note", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect many repos. Treat official first-party action tags as lower risk, but pin security-sensitive third-party actions to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 468771, "scanner": "repobility-supply-chain", "fingerprint": "b17a241ce8d05dbf9ac4e0453285524a9f9da436c80c160fc41a1c04c85ee71c", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b17a241ce8d05dbf9ac4e0453285524a9f9da436c80c160fc41a1c04c85ee71c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sync-marketplace-version.yml"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED115", "level": "note", "message": {"text": "[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect many repos. Treat official first-party action tags as lower risk, but pin security-sensitive third-party actions to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"repobilityId": 468770, "scanner": "repobility-supply-chain", "fingerprint": "d6d26deab56109548c920b8f93674181d4a36ab43cd8e978964f321e2e3bcadd", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|d6d26deab56109548c920b8f93674181d4a36ab43cd8e978964f321e2e3bcadd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-skills.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "WEB005", "level": "note", "message": {"text": "robots.txt does not advertise a sitemap"}, "properties": {"repobilityId": 468683, "scanner": "repobility-web-presence", "fingerprint": "5e8d200db1673ae765af4d0d633f4cf20a0a0e353a93297e68aa122cb938eb4c", "category": "quality", "severity": "low", "confidence": 0.74, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Discovered robots file or route lacks a Sitemap directive.", "evidence": {"rule_id": "WEB005", "scanner": "repobility-web-presence", "references": ["https://www.rfc-editor.org/rfc/rfc9309", "https://www.sitemaps.org/protocol.html"], "correlation_key": "fp|5e8d200db1673ae765af4d0d633f4cf20a0a0e353a93297e68aa122cb938eb4c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "SEC002", "level": "note", "message": {"text": "[SEC002] Hardcoded API Key: Hardcoded API key found in source code."}, "properties": {"repobilityId": 468666, "scanner": "repobility-threat-engine", "fingerprint": "f04bea24af207eda9f8db75045618f25ddad4ac3936a7ce7e3fd09ffd090927e", "category": "credential_exposure", "severity": "low", "confidence": 0.4, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Could not extract value for entropy analysis Collapsed 2 duplicate scanner signal(s) for the same underlying issue.", "evidence": {"match": "AKIAIOSFODNN7EXAMPLE", "reason": "Could not extract value for entropy analysis", "rule_id": "SEC002", "scanner": "repobility-threat-engine", "confidence": 0.4, "correlation_key": "secret|token|6|akiaiosfodnn7example", "duplicate_count": 2, "duplicate_rule_ids": ["SEC002", "SEC010", "SEC048"], "duplicate_scanners": ["repobility-threat-engine"], "duplicate_fingerprints": ["6190b400f0f6f2a09fc96c1ab1f97bcbae688de34171ed6f4a463e492042a17c", "6610e593bac5c86ba6b75e3a25d484f8863b651289215e80206c953591ac5b0b", "f04bea24af207eda9f8db75045618f25ddad4ac3936a7ce7e3fd09ffd090927e"]}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeypot-for-ransomware-detection/scripts/process.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "SEC132", "level": "note", "message": {"text": "[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template literals since ES6). Not a vulnerability on its own, but a style signature of cross-language AI rewrites \u2014 the model wrote idiomatic Java/C# and then translated mechanically. When this style appears in only *some* files of a repo, it's a strong indicator of an AI-driven rewrite that needs a human review p"}, "properties": {"repobilityId": 468665, "scanner": "repobility-threat-engine", "fingerprint": "c8cb0e0c95822145f3050d261a45428595a32907df9673f27537f691d3a0804f", "category": "quality", "severity": "low", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "\"Use env variable: env: VAR: ${{ \" + ctx + \" }} then ${VAR}\"", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC132", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|c8cb0e0c95822145f3050d261a45428595a32907df9673f27537f691d3a0804f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-github-actions-workflows/scripts/process.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "SEC132", "level": "note", "message": {"text": "[SEC132] String concat where the language has interpolation (AI style drift): String built by concatenation where the language has cleaner interpolation (Python f-strings since 3.6, JS template literals since ES6). Not a vulnerability on its own, but a style signature of cross-language AI rewrites \u2014 the model wrote idiomatic Java/C# and then translated mechanically. When this style appears in only *some* files of a repo, it's a strong indicator of an AI-driven rewrite that needs a human review p"}, "properties": {"repobilityId": 468664, "scanner": "repobility-threat-engine", "fingerprint": "e03071fd82fbed3199ee64404346ba440a9c89978abfcfe6f9fdaa8b07da344a", "category": "quality", "severity": "low", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "\"-----BEGIN CERTIFICATE-----\\n\"\n                    + cert_pem\n                    + \"\\n-----END CER", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC132", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|e03071fd82fbed3199ee64404346ba440a9c89978abfcfe6f9fdaa8b07da344a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-google-workspace-sso-configuration/scripts/process.py"}, "region": {"startLine": 93}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `render` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=2, for=2, if=3, nested_bonus=1."}, "properties": {"repobilityId": 468541, "scanner": "repobility-threat-engine", "fingerprint": "45079bc858cb694e85815fa63f6b2f0605c200c9251f2ee8797ec845b59f7cad", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 8 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "render", "breakdown": {"if": 3, "for": 2, "else": 2, "nested_bonus": 1}, "complexity": 8, "correlation_key": "fp|45079bc858cb694e85815fa63f6b2f0605c200c9251f2ee8797ec845b59f7cad"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/scripts/process.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED077", "level": "none", "message": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "properties": {"repobilityId": 468675, "scanner": "repobility-threat-engine", "fingerprint": "fbd22bd1586fbccd3316a9bb1a77c4e4e0e720eaae12e424eca36d2b1f541e19", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-open-no-context", "owasp": null, "cwe_ids": ["CWE-772"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348081+00:00", "triaged_in_corpus": 12, "observations_count": 7864, "ai_coder_pattern_id": 123}, "scanner": "repobility-threat-engine", "correlation_key": "fp|fbd22bd1586fbccd3316a9bb1a77c4e4e0e720eaae12e424eca36d2b1f541e19"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-jwt-none-algorithm-attack/scripts/agent.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "MINED099", "level": "none", "message": {"text": "[MINED099] Hardcoded Secret: API key, AWS access key, GitHub token, Slack token, OpenAI key, or private key embedded directly in source. AI assistants frequently leak demo credentials."}, "properties": {"repobilityId": 468667, "scanner": "repobility-threat-engine", "fingerprint": "5c1e8eafef3c3b7b25089adbb7c745b2d1724bc6b7f2c687de07151a64a63c5b", "category": "quality", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe pattern 'example' detected on same line", "evidence": {"mined": true, "mining": {"slug": "hardcoded-secret", "owasp": "A07:2021", "cwe_ids": ["CWE-798"], "languages": [], "precision": 1.0, "promoted_at": "2026-05-18T15:01:13.611213+00:00", "triaged_in_corpus": 8, "observations_count": 88419, "ai_coder_pattern_id": 9}, "scanner": "repobility-threat-engine", "correlation_key": "fp|5c1e8eafef3c3b7b25089adbb7c745b2d1724bc6b7f2c687de07151a64a63c5b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeypot-for-ransomware-detection/scripts/process.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "SEC015", "level": "none", "message": {"text": "[SEC015] Insecure Randomness for Security (and 6 more): Same pattern found in 6 additional files. Review if needed."}, "properties": {"repobilityId": 468660, "scanner": "repobility-threat-engine", "fingerprint": "e130211b74a08d1080b6cb546902b3a4312c21821463e53d99ea67f635ba5c2b", "category": "crypto", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 6 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 6 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC015", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|e130211b74a08d1080b6cb546902b3a4312c21821463e53d99ea67f635ba5c2b"}}}, {"ruleId": "SEC005", "level": "none", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468655, "scanner": "repobility-threat-engine", "fingerprint": "011651b06deff9688aa6eeda9939c740f6317d470dcca547eefb55904a2250b6", "category": "injection", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Pattern inside a data structure (list/tuple/dict) \u2014 likely a detection rule, not executable code", "evidence": {"match": "os.popen(", "reason": "Pattern inside a data structure (list/tuple/dict) \u2014 likely a detection rule, not executable code", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "code|injection|token|89|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-template-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "MINED053", "level": "none", "message": {"text": "[MINED053] Placeholder Default Username (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 468654, "scanner": "repobility-threat-engine", "fingerprint": "2a5e6013168ecdd14abf1165a3073513361887dfda6c1efafa61956934b96e74", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "placeholder-default-username", "owasp": null, "cwe_ids": ["CWE-1392", "CWE-798"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348025+00:00", "triaged_in_corpus": 10, "observations_count": 456953, "ai_coder_pattern_id": 44}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|2a5e6013168ecdd14abf1165a3073513361887dfda6c1efafa61956934b96e74", "aggregated_count": 4}}}, {"ruleId": "MINED053", "level": "none", "message": {"text": "[MINED053] Placeholder Default Username: foo@bar.com / john.doe@example.com / admin/admin / changeme \u2014 typical AI placeholder credentials."}, "properties": {"repobilityId": 468653, "scanner": "repobility-threat-engine", "fingerprint": "a903b7c4b32c65cfc268e23ef36b61620a5acf3449c9c623f74d0121d62e3e5a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "placeholder-default-username", "owasp": null, "cwe_ids": ["CWE-1392", "CWE-798"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348025+00:00", "triaged_in_corpus": 10, "observations_count": 456953, "ai_coder_pattern_id": 44}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a903b7c4b32c65cfc268e23ef36b61620a5acf3449c9c623f74d0121d62e3e5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-json-web-token-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 28}}}]}, {"ruleId": "MINED053", "level": "none", "message": {"text": "[MINED053] Placeholder Default Username: foo@bar.com / john.doe@example.com / admin/admin / changeme \u2014 typical AI placeholder credentials."}, "properties": {"repobilityId": 468652, "scanner": "repobility-threat-engine", "fingerprint": "c75813e3e8f044b0de0e674f58f84ad00934e77db9f07b4109e234f7e73c8615", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "placeholder-default-username", "owasp": null, "cwe_ids": ["CWE-1392", "CWE-798"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348025+00:00", "triaged_in_corpus": 10, "observations_count": 456953, "ai_coder_pattern_id": 44}, "scanner": "repobility-threat-engine", "correlation_key": "fp|c75813e3e8f044b0de0e674f58f84ad00934e77db9f07b4109e234f7e73c8615"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-active-directory-penetration-test/scripts/process.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "MINED053", "level": "none", "message": {"text": "[MINED053] Placeholder Default Username: foo@bar.com / john.doe@example.com / admin/admin / changeme \u2014 typical AI placeholder credentials."}, "properties": {"repobilityId": 468651, "scanner": "repobility-threat-engine", "fingerprint": "1b0f324f142bc3424750dc3fa2e74f2f67544333f0c252937265c24ad3610510", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "placeholder-default-username", "owasp": null, "cwe_ids": ["CWE-1392", "CWE-798"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348025+00:00", "triaged_in_corpus": 10, "observations_count": 456953, "ai_coder_pattern_id": 44}, "scanner": "repobility-threat-engine", "correlation_key": "fp|1b0f324f142bc3424750dc3fa2e74f2f67544333f0c252937265c24ad3610510"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-nopac-cve-2021-42278-42287/scripts/process.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "MINED007", "level": "none", "message": {"text": "[MINED007] Sql String Concat (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 468650, "scanner": "repobility-threat-engine", "fingerprint": "d701a84fb17e29db3c3fd03a7bb4db8922761aaa6fab15fb2cd7dd897f5fd9b1", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "sql-string-concat", "owasp": "A03:2021", "cwe_ids": ["CWE-89"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347914+00:00", "triaged_in_corpus": 20, "observations_count": 210457, "ai_coder_pattern_id": 12}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|d701a84fb17e29db3c3fd03a7bb4db8922761aaa6fab15fb2cd7dd897f5fd9b1", "aggregated_count": 4}}}, {"ruleId": "SEC042", "level": "none", "message": {"text": "[SEC042] SQL identifier injection via f-string in cursor execute (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 468646, "scanner": "repobility-threat-engine", "fingerprint": "ee6f9f9f53d849377984d0cef60f9f5d6d7ea50fe3000ff9feaa25fd2a72fc41", "category": "injection", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC042", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|ee6f9f9f53d849377984d0cef60f9f5d6d7ea50fe3000ff9feaa25fd2a72fc41"}}}, {"ruleId": "SEC004", "level": "none", "message": {"text": "[SEC004] SQL Injection Risk (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 468642, "scanner": "repobility-threat-engine", "fingerprint": "575280bd44f3612039656f3101833e51970ad9a64759bd5bf38524ceac8420c6", "category": "injection", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC004", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|575280bd44f3612039656f3101833e51970ad9a64759bd5bf38524ceac8420c6"}}}, {"ruleId": "SEC001", "level": "none", "message": {"text": "[SEC001] Hardcoded Password (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 468638, "scanner": "repobility-threat-engine", "fingerprint": "e158e289a4d91766d0048c61fc6e8ee0c2ed3018179cec6f4930cddb66a47665", "category": "credential_exposure", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC001", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|e158e289a4d91766d0048c61fc6e8ee0c2ed3018179cec6f4930cddb66a47665"}}}, {"ruleId": "MINED073", "level": "none", "message": {"text": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of service."}, "properties": {"repobilityId": 468634, "scanner": "repobility-threat-engine", "fingerprint": "b4402d5e6ab8308eb0a23065277693fecf0262fc055b9e7d1af6020906ed3074", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "redos-greedy-quantifier", "owasp": "A06:2021", "cwe_ids": ["CWE-1333", "CWE-400"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348072+00:00", "triaged_in_corpus": 12, "observations_count": 12702, "ai_coder_pattern_id": 35}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b4402d5e6ab8308eb0a23065277693fecf0262fc055b9e7d1af6020906ed3074"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-powershell-obfuscated-malware/scripts/process.py"}, "region": {"startLine": 253}}}]}, {"ruleId": "MINED021", "level": "none", "message": {"text": "[MINED021] Path Traversal Os Join (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 468629, "scanner": "repobility-threat-engine", "fingerprint": "fbf78b5692d2330f519dc602dca84d330a6cc9a7c3e6d01afb5bef56d7e681c8", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "path-traversal-os-join", "owasp": "A01:2021", "cwe_ids": ["CWE-22"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347947+00:00", "triaged_in_corpus": 15, "observations_count": 45678, "ai_coder_pattern_id": 31}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|fbf78b5692d2330f519dc602dca84d330a6cc9a7c3e6d01afb5bef56d7e681c8", "aggregated_count": 4}}}, {"ruleId": "MINED014", "level": "none", "message": {"text": "[MINED014] Disabled Tls Verify (and 32 more): Same pattern found in 32 additional files. Review if needed."}, "properties": {"repobilityId": 468625, "scanner": "repobility-threat-engine", "fingerprint": "b82b32c606163eab33130eb34e24c8ae4393822df0849645f64c72bc537a3d85", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 32 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "disabled-tls-verify", "owasp": "A02:2021", "cwe_ids": ["CWE-295"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347930+00:00", "triaged_in_corpus": 15, "observations_count": 86916, "ai_coder_pattern_id": 16}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|b82b32c606163eab33130eb34e24c8ae4393822df0849645f64c72bc537a3d85", "aggregated_count": 32}}}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields (and 7 more): Same pattern found in 7 additional files. Review if needed."}, "properties": {"repobilityId": 468621, "scanner": "repobility-threat-engine", "fingerprint": "0b02df8724bdd7ab7ca32aab93e3d6c680820bdca4abe8cd0f226b9328a812e5", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 7 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|0b02df8724bdd7ab7ca32aab93e3d6c680820bdca4abe8cd0f226b9328a812e5", "aggregated_count": 7}}}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 468620, "scanner": "repobility-threat-engine", "fingerprint": "b9b754d1f69c522bb6d4f95b9b3a19521277a15fcf3dd01925cc665c1a45ac8a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b9b754d1f69c522bb6d4f95b9b3a19521277a15fcf3dd01925cc665c1a45ac8a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-multi-factor-authentication-with-duo/scripts/process.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 468619, "scanner": "repobility-threat-engine", "fingerprint": "75d2bc3c739cb0bf367257c1cd7b239c4f625bbf0cfbdfb380b764c7b9aa6d94", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|75d2bc3c739cb0bf367257c1cd7b239c4f625bbf0cfbdfb380b764c7b9aa6d94"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-social-engineering-pretext-call/scripts/process.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 468618, "scanner": "repobility-threat-engine", "fingerprint": "5defde8e4a3ea0ce642814f2ad9e170f3dc5e9a8b22038b03d34dcd6a81fd5a8", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|5defde8e4a3ea0ce642814f2ad9e170f3dc5e9a8b22038b03d34dcd6a81fd5a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-phishing-reporting-button-workflow/scripts/process.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "SEC014", "level": "none", "message": {"text": "[SEC014] SSL Verification Disabled (and 43 more): Same pattern found in 43 additional files. Review if needed."}, "properties": {"repobilityId": 468617, "scanner": "repobility-threat-engine", "fingerprint": "03261593e601500af66e59b1264670c287991d893e78adf11ba4049d4c1cb5b9", "category": "crypto", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 43 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 43 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC014", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|03261593e601500af66e59b1264670c287991d893e78adf11ba4049d4c1cb5b9"}}}, {"ruleId": "MINED079", "level": "none", "message": {"text": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk."}, "properties": {"repobilityId": 468613, "scanner": "repobility-threat-engine", "fingerprint": "2a369c184e9c5aadedee4ed076d5496c521e4a9209705cfa8a9b8db4bd607ff1", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "off-by-one-slice", "owasp": null, "cwe_ids": ["CWE-193"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348121+00:00", "triaged_in_corpus": 12, "observations_count": 6443, "ai_coder_pattern_id": 19}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2a369c184e9c5aadedee4ed076d5496c521e4a9209705cfa8a9b8db4bd607ff1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-supply-chain-attack-simulation/scripts/agent.py"}, "region": {"startLine": 19}}}]}, {"ruleId": "MINED079", "level": "none", "message": {"text": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk."}, "properties": {"repobilityId": 468612, "scanner": "repobility-threat-engine", "fingerprint": "975166fd4294ef160da6d41c58a30229ca39e52ac265be3350c95b523e2234b5", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "off-by-one-slice", "owasp": null, "cwe_ids": ["CWE-193"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348121+00:00", "triaged_in_corpus": 12, "observations_count": 6443, "ai_coder_pattern_id": 19}, "scanner": "repobility-threat-engine", "correlation_key": "fp|975166fd4294ef160da6d41c58a30229ca39e52ac265be3350c95b523e2234b5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-tls-certificate-transparency-logs/scripts/agent.py"}, "region": {"startLine": 43}}}]}, {"ruleId": "SEC045", "level": "none", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data (and 6 more): Same pattern found in 6 additional files. Review if needed."}, "properties": {"repobilityId": 468610, "scanner": "repobility-threat-engine", "fingerprint": "c80ff157c0dd4f06d29a253eef2e040bc846fc539581945c90fe13c6ec14dd22", "category": "injection", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 6 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 6 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|c80ff157c0dd4f06d29a253eef2e040bc846fc539581945c90fe13c6ec14dd22"}}}, {"ruleId": "SEC136", "level": "none", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors (and 7 more): Same pattern found in 7 additional files. Review if needed."}, "properties": {"repobilityId": 468607, "scanner": "repobility-threat-engine", "fingerprint": "a6e414132aaef257df8da565c6555d9157daba151047ec8dcf13dacdee8cfd7b", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 7 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 7 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|a6e414132aaef257df8da565c6555d9157daba151047ec8dcf13dacdee8cfd7b"}}}, {"ruleId": "MINED063", "level": "none", "message": {"text": "[MINED063] Toctou Os Path Exists (and 14 more): Same pattern found in 14 additional files. Review if needed."}, "properties": {"repobilityId": 468603, "scanner": "repobility-threat-engine", "fingerprint": "efe4c1a53dabc239c232de39e34df3ae588bd55c712f433b9a4082716b0e878b", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 14 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "toctou-os-path-exists", "owasp": null, "cwe_ids": ["CWE-367"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348048+00:00", "triaged_in_corpus": 12, "observations_count": 90754, "ai_coder_pattern_id": 41}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|efe4c1a53dabc239c232de39e34df3ae588bd55c712f433b9a4082716b0e878b", "aggregated_count": 14}}}, {"ruleId": "MINED063", "level": "none", "message": {"text": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use."}, "properties": {"repobilityId": 468602, "scanner": "repobility-threat-engine", "fingerprint": "73fcb3128d6bd3529584bcf2d8843e1ee31b26c94c971da2db030dfe7bad3274", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "toctou-os-path-exists", "owasp": null, "cwe_ids": ["CWE-367"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348048+00:00", "triaged_in_corpus": 12, "observations_count": 90754, "ai_coder_pattern_id": 41}, "scanner": "repobility-threat-engine", "correlation_key": "fp|73fcb3128d6bd3529584bcf2d8843e1ee31b26c94c971da2db030dfe7bad3274"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-traffic-for-incidents/scripts/agent.py"}, "region": {"startLine": 132}}}]}, {"ruleId": "MINED063", "level": "none", "message": {"text": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use."}, "properties": {"repobilityId": 468601, "scanner": "repobility-threat-engine", "fingerprint": "6276a0f3a6475138b8a7fca0347684c9b8008856e1605c88bc7068d9d4e4ef25", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "toctou-os-path-exists", "owasp": null, "cwe_ids": ["CWE-367"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348048+00:00", "triaged_in_corpus": 12, "observations_count": 90754, "ai_coder_pattern_id": 41}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6276a0f3a6475138b8a7fca0347684c9b8008856e1605c88bc7068d9d4e4ef25"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-malware-behavior-with-cuckoo-sandbox/scripts/agent.py"}, "region": {"startLine": 65}}}]}, {"ruleId": "MINED063", "level": "none", "message": {"text": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use."}, "properties": {"repobilityId": 468600, "scanner": "repobility-threat-engine", "fingerprint": "9aae9becc5fcc4d7d58af8a579a24116ac4dcdc548206a4a26d86bfb643ffa58", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "toctou-os-path-exists", "owasp": null, "cwe_ids": ["CWE-367"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348048+00:00", "triaged_in_corpus": 12, "observations_count": 90754, "ai_coder_pattern_id": 41}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9aae9becc5fcc4d7d58af8a579a24116ac4dcdc548206a4a26d86bfb643ffa58"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-system-artifacts/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii (and 68 more): Same pattern found in 68 additional files. Review if needed."}, "properties": {"repobilityId": 468599, "scanner": "repobility-threat-engine", "fingerprint": "57dc9523d92ab3a4dac65fe68a016798fbc832eb539167436cd21714e1a0e1c0", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 68 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|57dc9523d92ab3a4dac65fe68a016798fbc832eb539167436cd21714e1a0e1c0", "aggregated_count": 68}}}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 468598, "scanner": "repobility-threat-engine", "fingerprint": "726de4e2c90fbc4eb8cbf9083ec4f4977c77bbe22ad001e5ea68523c455bf222", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|726de4e2c90fbc4eb8cbf9083ec4f4977c77bbe22ad001e5ea68523c455bf222"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-event-logs-in-splunk/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 468597, "scanner": "repobility-threat-engine", "fingerprint": "764289ede0be10dbe9462d493b16c66ed561da70f8ed8378ed7fa74c9baa24cc", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|764289ede0be10dbe9462d493b16c66ed561da70f8ed8378ed7fa74c9baa24cc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-kubernetes-audit-logs/scripts/agent.py"}, "region": {"startLine": 174}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 468596, "scanner": "repobility-threat-engine", "fingerprint": "7846f0c34df2976722d33577ac7ee234343af073c2d46d1ac1a61566b2f1dda8", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|7846f0c34df2976722d33577ac7ee234343af073c2d46d1ac1a61566b2f1dda8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 251}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https (and 42 more): Same pattern found in 42 additional files. Review if needed."}, "properties": {"repobilityId": 468595, "scanner": "repobility-threat-engine", "fingerprint": "27889287870c027ebebeea48f05f306b3fd71dd3dbeb30f791cdf11fe01d7ab5", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 42 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|27889287870c027ebebeea48f05f306b3fd71dd3dbeb30f791cdf11fe01d7ab5", "aggregated_count": 42}}}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468594, "scanner": "repobility-threat-engine", "fingerprint": "5d24333246868bde54ffd29c81073fd55600c8cc71efe303a36426a833faa687", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|5d24333246868bde54ffd29c81073fd55600c8cc71efe303a36426a833faa687"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-aws-s3-bucket-permissions/scripts/agent.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468593, "scanner": "repobility-threat-engine", "fingerprint": "58e1602cd16845d229dc778ffd843379875ce8ac687b345a476e086d062de7c1", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|58e1602cd16845d229dc778ffd843379875ce8ac687b345a476e086d062de7c1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-elf-malware/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 468592, "scanner": "repobility-threat-engine", "fingerprint": "d0b7215c124870dcf31ac43786f3ab5884d4a57bf591c6332f10ce0c658aafab", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|d0b7215c124870dcf31ac43786f3ab5884d4a57bf591c6332f10ce0c658aafab"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "SEC020", "level": "none", "message": {"text": "[SEC020] Secret Printed to Logs (and 77 more): Same pattern found in 77 additional files. Review if needed."}, "properties": {"repobilityId": 468591, "scanner": "repobility-threat-engine", "fingerprint": "905a24964d429a402550ce6c763220495d21d1dc43e71deee79ee8e8423604dc", "category": "credential_exposure", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 77 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 77 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|905a24964d429a402550ce6c763220495d21d1dc43e71deee79ee8e8423604dc"}}}, {"ruleId": "SEC031", "level": "none", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS) (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "properties": {"repobilityId": 468587, "scanner": "repobility-threat-engine", "fingerprint": "9c716ea233350dd9b06c2e4fa3d5c462b7a96881e289ce6e747cbc3c051d89fb", "category": "redos", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|9c716ea233350dd9b06c2e4fa3d5c462b7a96881e289ce6e747cbc3c051d89fb"}}}, {"ruleId": "SEC103", "level": "none", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter (and 44 more): Same pattern found in 44 additional files. Review if needed."}, "properties": {"repobilityId": 468583, "scanner": "repobility-threat-engine", "fingerprint": "dcf216c7da791523c93153fc51030c4a18ec3cf1abef6c5c524de3d01aafe95a", "category": "injection", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 44 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 44 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|dcf216c7da791523c93153fc51030c4a18ec3cf1abef6c5c524de3d01aafe95a"}}}, {"ruleId": "MINED055", "level": "none", "message": {"text": "[MINED055] Npm Install No Lockfile (and 36 more): Same pattern found in 36 additional files. Review if needed."}, "properties": {"repobilityId": 468579, "scanner": "repobility-threat-engine", "fingerprint": "1a6b039cfd8bdaa4ae020896c69488d92283f47380e3aeb83e6122843006a330", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 36 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "npm-install-no-lockfile", "owasp": "A06:2021", "cwe_ids": ["CWE-1357"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348030+00:00", "triaged_in_corpus": 12, "observations_count": 317602, "ai_coder_pattern_id": 42}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|1a6b039cfd8bdaa4ae020896c69488d92283f47380e3aeb83e6122843006a330", "aggregated_count": 36}}}, {"ruleId": "MINED055", "level": "none", "message": {"text": "[MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versions on every build) instead of npm ci."}, "properties": {"repobilityId": 468578, "scanner": "repobility-threat-engine", "fingerprint": "582e266852e0d8a1c194cc6210e6c71a5038efab6bd41450e4ba21652f167d76", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "npm-install-no-lockfile", "owasp": "A06:2021", "cwe_ids": ["CWE-1357"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348030+00:00", "triaged_in_corpus": 12, "observations_count": 317602, "ai_coder_pattern_id": 42}, "scanner": "repobility-threat-engine", "correlation_key": "fp|582e266852e0d8a1c194cc6210e6c71a5038efab6bd41450e4ba21652f167d76"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-identity-federation-with-saml-azure-ad/scripts/process.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "MINED055", "level": "none", "message": {"text": "[MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versions on every build) instead of npm ci."}, "properties": {"repobilityId": 468577, "scanner": "repobility-threat-engine", "fingerprint": "42caf436ed858fd76e4242b4dbc60b9ea9142d928de5d645d7d9c763aec1bb5c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "npm-install-no-lockfile", "owasp": "A06:2021", "cwe_ids": ["CWE-1357"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348030+00:00", "triaged_in_corpus": 12, "observations_count": 317602, "ai_coder_pattern_id": 42}, "scanner": "repobility-threat-engine", "correlation_key": "fp|42caf436ed858fd76e4242b4dbc60b9ea9142d928de5d645d7d9c763aec1bb5c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "MINED055", "level": "none", "message": {"text": "[MINED055] Npm Install No Lockfile: Production image runs npm install (resolves new versions on every build) instead of npm ci."}, "properties": {"repobilityId": 468576, "scanner": "repobility-threat-engine", "fingerprint": "b728be05b64a6517c0a6f084436a926e9b7becb6447e3a1aa76e5db9a4913eff", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "npm-install-no-lockfile", "owasp": "A06:2021", "cwe_ids": ["CWE-1357"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348030+00:00", "triaged_in_corpus": 12, "observations_count": 317602, "ai_coder_pattern_id": 42}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b728be05b64a6517c0a6f084436a926e9b7becb6447e3a1aa76e5db9a4913eff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/scripts/process.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout (and 188 more): Same pattern found in 188 additional files. Review if needed."}, "properties": {"repobilityId": 468575, "scanner": "repobility-threat-engine", "fingerprint": "5fcdd6c71ceafb315e2229e837a502bbbc39c89a4244ccc8049b1ae79606ead1", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 188 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|5fcdd6c71ceafb315e2229e837a502bbbc39c89a4244ccc8049b1ae79606ead1", "aggregated_count": 188}}}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468574, "scanner": "repobility-threat-engine", "fingerprint": "ef50097bafb35b9c45edfd123cdac0afb729097eb9cafc28e5badb728e73facc", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ef50097bafb35b9c45edfd123cdac0afb729097eb9cafc28e5badb728e73facc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468573, "scanner": "repobility-threat-engine", "fingerprint": "a75188412b0dab208202a86dc8af4897327106d9500614ea8b1b6761bc24a24d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a75188412b0dab208202a86dc8af4897327106d9500614ea8b1b6761bc24a24d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/scripts/agent.py"}, "region": {"startLine": 28}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 468572, "scanner": "repobility-threat-engine", "fingerprint": "168a85ab51336af22b0ab1d96b36813bab3128dd719129260aa1b5e58ba968f4", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|168a85ab51336af22b0ab1d96b36813bab3128dd719129260aa1b5e58ba968f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "SEC078", "level": "none", "message": {"text": "[SEC078] Python: requests without timeout (and 188 more): Same pattern found in 188 additional files. Review if needed."}, "properties": {"repobilityId": 468571, "scanner": "repobility-threat-engine", "fingerprint": "dacee1a83bb30978167bef4c7561032abdf4d9975be77d711722984c6779aab9", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 188 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 188 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|dacee1a83bb30978167bef4c7561032abdf4d9975be77d711722984c6779aab9"}}}, {"ruleId": "SEC029", "level": "none", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 53 more): Same pattern found in 53 additional files. Review if needed."}, "properties": {"repobilityId": 468567, "scanner": "repobility-threat-engine", "fingerprint": "513531df8f47d43ad477af2a5e7e47afb63075c588b46b9f385d765e8fd35f94", "category": "ssrf", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 53 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 53 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|513531df8f47d43ad477af2a5e7e47afb63075c588b46b9f385d765e8fd35f94"}}}, {"ruleId": "ERR001", "level": "none", "message": {"text": "[ERR001] Silent Exception Swallowing (and 33 more): Same pattern found in 33 additional files. Review if needed."}, "properties": {"repobilityId": 468563, "scanner": "repobility-threat-engine", "fingerprint": "75d433e4e0f1c1addf7284dc7ac198e222a64770dfc5d76e1340cef2a7a24c8d", "category": "error_handling", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 33 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 33 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|75d433e4e0f1c1addf7284dc7ac198e222a64770dfc5d76e1340cef2a7a24c8d"}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function (and 154 more): Same pattern found in 154 additional files. Review if needed."}, "properties": {"repobilityId": 468559, "scanner": "repobility-threat-engine", "fingerprint": "8133113ed388bf88751d301f280098a47c2a63e89eccfb1924e01a924082e2fa", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 154 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|8133113ed388bf88751d301f280098a47c2a63e89eccfb1924e01a924082e2fa", "aggregated_count": 154}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468558, "scanner": "repobility-threat-engine", "fingerprint": "edf62f66e4db042271e2b5a15472b6c64b32df68a1fae3e46db74b9a1efc43c5", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|edf62f66e4db042271e2b5a15472b6c64b32df68a1fae3e46db74b9a1efc43c5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "region": {"startLine": 98}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468557, "scanner": "repobility-threat-engine", "fingerprint": "c18fb3844811d507896e2289f3c031b7b5027d9a491d5c0ea16c2405f2231fe3", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|c18fb3844811d507896e2289f3c031b7b5027d9a491d5c0ea16c2405f2231fe3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 468556, "scanner": "repobility-threat-engine", "fingerprint": "4d7db5cb2f881b89837e233d09f50e967e448219ba123707766074e5fcc5c743", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|4d7db5cb2f881b89837e233d09f50e967e448219ba123707766074e5fcc5c743"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "region": {"startLine": 144}}}]}, {"ruleId": "MINED001", "level": "none", "message": {"text": "[MINED001] Bare Except Pass (and 148 more): Same pattern found in 148 additional files. Review if needed."}, "properties": {"repobilityId": 468555, "scanner": "repobility-threat-engine", "fingerprint": "2ee144b7fd87eb7c0f00ce2857d85e498591291cc7e9ff0181fc83997a210c86", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 148 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|2ee144b7fd87eb7c0f00ce2857d85e498591291cc7e9ff0181fc83997a210c86", "aggregated_count": 148}}}, {"ruleId": "MINED004", "level": "none", "message": {"text": "[MINED004] Weak Crypto (and 60 more): Same pattern found in 60 additional files. Review if needed."}, "properties": {"repobilityId": 468551, "scanner": "repobility-threat-engine", "fingerprint": "41ea0f1c085994bf991bacf4db858eb1dc4d058bc9b9213064418f0535011b3d", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 60 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|41ea0f1c085994bf991bacf4db858eb1dc4d058bc9b9213064418f0535011b3d", "aggregated_count": 60}}}, {"ruleId": "SEC128", "level": "none", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 46 more): Same pattern found in 46 additional files. Review if needed."}, "properties": {"repobilityId": 468547, "scanner": "repobility-threat-engine", "fingerprint": "24826d1477709fe0946d8cbd83806467cdf95a1abc490e56d5c203dabeab9c2e", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 46 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 46 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|24826d1477709fe0946d8cbd83806467cdf95a1abc490e56d5c203dabeab9c2e"}}}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 1354 more): Same pattern found in 1354 additional files. Review if needed."}, "properties": {"repobilityId": 468543, "scanner": "repobility-threat-engine", "fingerprint": "07472010cc40787cc6f993eb21d73dd0de97854ff76ec979f7440b66d127f120", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1354 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "compute", "breakdown": {"if": 8, "for": 1, "elif": 1, "nested_bonus": 12}, "aggregated": true, "complexity": 22, "correlation_key": "fp|07472010cc40787cc6f993eb21d73dd0de97854ff76ec979f7440b66d127f120", "aggregated_count": 1354}}}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 468539, "scanner": "repobility-threat-engine", "fingerprint": "f086a80cf8cbd186b8724e8cd4c89c7b3c99a23e727c1e5d028a4b07ac5d2699", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f086a80cf8cbd186b8724e8cd4c89c7b3c99a23e727c1e5d028a4b07ac5d2699"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-syslog-centralization-with-rsyslog/scripts/agent.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 468538, "scanner": "repobility-threat-engine", "fingerprint": "b234b43debc7924706c30cbc0cb018531ecf369b85cc68aabf894ccfd00e0f43", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b234b43debc7924706c30cbc0cb018531ecf369b85cc68aabf894ccfd00e0f43"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/scripts/process.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "SEC013", "level": "none", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path (and 15 more): Same pattern found in 15 additional files. Review if needed."}, "properties": {"repobilityId": 468537, "scanner": "repobility-threat-engine", "fingerprint": "a2106bff769f02cd186f9140bff3b25702fe4363da9083c88364eef263f86843", "category": "path_traversal", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 15 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 15 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|a2106bff769f02cd186f9140bff3b25702fe4363da9083c88364eef263f86843"}}}, {"ruleId": "CORE_NO_TESTS", "level": "none", "message": {"text": "No test files found in a documentation, catalog, or template-heavy repository"}, "properties": {"repobilityId": 468533, "scanner": "repobility-core", "fingerprint": "69cfb3536a8ccff500ccafcd681fc8d4bc9f4eda6689da02ddec81654bd9fd15", "category": "testing", "severity": "info", "confidence": 0.35, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Repository shape is documentation, catalog, skill, or template-heavy rather than a conventional runnable application.", "evidence": {"reason": "Repository shape is documentation, catalog, skill, or template-heavy rather than a conventional runnable application.", "rule_id": "CORE_NO_TESTS", "scanner": "repobility-core", "confidence": 0.35, "correlation_key": "repo|testing|core_no_tests"}}}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.rfile` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.rfile`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468766, "scanner": "repobility-ast-engine", "fingerprint": "0c8deaeb5c051e13ff1b634380229fdca8cbb6d31273a452e442f9c1c8d34be4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0c8deaeb5c051e13ff1b634380229fdca8cbb6d31273a452e442f9c1c8d34be4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 135}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.headers` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.headers`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468765, "scanner": "repobility-ast-engine", "fingerprint": "e59ce586cc99f7fb86173ccecfbd0a3277f324ead3ceed6a21595dfa828ff7f3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e59ce586cc99f7fb86173ccecfbd0a3277f324ead3ceed6a21595dfa828ff7f3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.wfile` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.wfile`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468764, "scanner": "repobility-ast-engine", "fingerprint": "7d67eed54fa8d5d912e7015d4732a1e3fa012819da014a25b3db05dece14d65f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7d67eed54fa8d5d912e7015d4732a1e3fa012819da014a25b3db05dece14d65f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.client_address` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.client_address`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468763, "scanner": "repobility-ast-engine", "fingerprint": "12cfcd2caf2eb108c9ff1fcb969c0acc339a26935b936160180ba0c2e89e1b08", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|12cfcd2caf2eb108c9ff1fcb969c0acc339a26935b936160180ba0c2e89e1b08"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.path` used but never assigned in __init__: Method `do_POST` of class `HoneypotHTTPHandler` reads `self.path`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468762, "scanner": "repobility-ast-engine", "fingerprint": "b36c2e8daa877db60816ec69776676a38227712bb4ea5c1a05677e2d8f6706d9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b36c2e8daa877db60816ec69776676a38227712bb4ea5c1a05677e2d8f6706d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 141}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.path` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.path`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468761, "scanner": "repobility-ast-engine", "fingerprint": "493b17ddaeb9cd25499c5bb52c02ab4256677647eb97e0240c573c2acf5876fc", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|493b17ddaeb9cd25499c5bb52c02ab4256677647eb97e0240c573c2acf5876fc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 127}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.wfile` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.wfile`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468760, "scanner": "repobility-ast-engine", "fingerprint": "085f13ce7d3a409e8624ed63f20f8c87aade3a97acfc08a5838806376c95db28", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|085f13ce7d3a409e8624ed63f20f8c87aade3a97acfc08a5838806376c95db28"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 131}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.headers` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.headers`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468759, "scanner": "repobility-ast-engine", "fingerprint": "7406303771afc80a1b47fcd6b6db7b0c32a647a6ff5915cec7d75a74a1bf1a34", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7406303771afc80a1b47fcd6b6db7b0c32a647a6ff5915cec7d75a74a1bf1a34"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.client_address` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.client_address`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468758, "scanner": "repobility-ast-engine", "fingerprint": "77a08e7efe7895e01f94f6f8f5e3049be55d342b1a570834eb2ee0eb7f73d2ce", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|77a08e7efe7895e01f94f6f8f5e3049be55d342b1a570834eb2ee0eb7f73d2ce"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 120}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.client_address` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.client_address`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468757, "scanner": "repobility-ast-engine", "fingerprint": "00002b57a946e960707a96d2879fd4e7e70bca39a49865b7c0ea27ab742e1e7a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|00002b57a946e960707a96d2879fd4e7e70bca39a49865b7c0ea27ab742e1e7a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 119}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.path` used but never assigned in __init__: Method `do_GET` of class `HoneypotHTTPHandler` reads `self.path`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 468756, "scanner": "repobility-ast-engine", "fingerprint": "d1f7a865450a7143c04f648e9e97614110978f44f58bc549350802b293f0c8b9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d1f7a865450a7143c04f648e9e97614110978f44f58bc549350802b293f0c8b9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/scripts/agent.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_race_condition: Test function `test_race_condition` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468733, "scanner": "repobility-ast-engine", "fingerprint": "ff36244c55f3e8628d39db8950c6845ad2fca59d160285599c4df3455f74bffc", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ff36244c55f3e8628d39db8950c6845ad2fca59d160285599c4df3455f74bffc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-race-condition-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_idor_via_function: Test function `test_idor_via_function` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468730, "scanner": "repobility-ast-engine", "fingerprint": "e08274c3712211bfdef0ea4e3e43fecaf54e5bef09e342762c4ccc7ff0afb613", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e08274c3712211bfdef0ea4e3e43fecaf54e5bef09e342762c4ccc7ff0afb613"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-function-level-authorization/scripts/agent.py"}, "region": {"startLine": 71}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_privilege_escalation: Test function `test_privilege_escalation` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468729, "scanner": "repobility-ast-engine", "fingerprint": "588a31a0b37811be625ec8b6190d9cc9fc53fee317413e46701639862d668d7b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|588a31a0b37811be625ec8b6190d9cc9fc53fee317413e46701639862d668d7b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-function-level-authorization/scripts/agent.py"}, "region": {"startLine": 54}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_method_switching: Test function `test_method_switching` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468728, "scanner": "repobility-ast-engine", "fingerprint": "be8e537af3c3f254097297f539c943b8ba0cba09ddc5d26b70cde3d1bb4d407d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|be8e537af3c3f254097297f539c943b8ba0cba09ddc5d26b70cde3d1bb4d407d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-function-level-authorization/scripts/agent.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_endpoint_access: Test function `test_endpoint_access` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468727, "scanner": "repobility-ast-engine", "fingerprint": "d3b0ce145e244cfb9851124803f07c112fd4a0896c6fe34dfd0717399716639b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d3b0ce145e244cfb9851124803f07c112fd4a0896c6fe34dfd0717399716639b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-function-level-authorization/scripts/agent.py"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_path_traversal_bypass: Test function `test_path_traversal_bypass` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468724, "scanner": "repobility-ast-engine", "fingerprint": "6bd63036452bc89711b2622fb86acc9a97762e23af397d8f41d6e1724fc86fd0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6bd63036452bc89711b2622fb86acc9a97762e23af397d8f41d6e1724fc86fd0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 97}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_http_method_bypass: Test function `test_http_method_bypass` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468723, "scanner": "repobility-ast-engine", "fingerprint": "7b6215b731a8ef0041f7624f157b1df612a246db7e8d15c0068c0b111669d0ac", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7b6215b731a8ef0041f7624f157b1df612a246db7e8d15c0068c0b111669d0ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 83}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_endpoint: Test function `test_endpoint` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468722, "scanner": "repobility-ast-engine", "fingerprint": "5f69b2d7203f63e0204d3a533690eed9f1e311e443c3a0152551c4f0385b8090", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5f69b2d7203f63e0204d3a533690eed9f1e311e443c3a0152551c4f0385b8090"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_token_endpoint: Test function `test_token_endpoint` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468708, "scanner": "repobility-ast-engine", "fingerprint": "4419e2b03229714b44d95bdbed70fb53aae8b7d12fe0ca6a1b097593c9f93956", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4419e2b03229714b44d95bdbed70fb53aae8b7d12fe0ca6a1b097593c9f93956"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-oauth2-authorization-flow/scripts/agent.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_freemarker_rce: Test function `test_freemarker_rce` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468706, "scanner": "repobility-ast-engine", "fingerprint": "24d7d05802d8a90b4820c2f588d6513ad5a998152c74cb70805b6fecbbfc9645", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|24d7d05802d8a90b4820c2f588d6513ad5a998152c74cb70805b6fecbbfc9645"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-template-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 132}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_twig_rce: Test function `test_twig_rce` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468705, "scanner": "repobility-ast-engine", "fingerprint": "1f6a23d800cec58f085c583268568ca5082997a92565da9cc30430bba6ad3f68", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1f6a23d800cec58f085c583268568ca5082997a92565da9cc30430bba6ad3f68"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-template-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_jinja2_rce: Test function `test_jinja2_rce` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468704, "scanner": "repobility-ast-engine", "fingerprint": "e950ce20d0f903bf0177bc4489778aa15bd102ce458fd21b0041a78d3e33999a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e950ce20d0f903bf0177bc4489778aa15bd102ce458fd21b0041a78d3e33999a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-template-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_ssti_detection: Test function `test_ssti_detection` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468703, "scanner": "repobility-ast-engine", "fingerprint": "e3fba5e2fac60d114f0fe87171a5845f62343e87797113cfcc253baf03ca2877", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e3fba5e2fac60d114f0fe87171a5845f62343e87797113cfcc253baf03ca2877"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-template-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_internal_origins: Test function `test_internal_origins` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468702, "scanner": "repobility-ast-engine", "fingerprint": "9d5d9d40e82dffb2cf910a5f40b40ed6294a11db28ebd0f5f8e88dfbb397ebf0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9d5d9d40e82dffb2cf910a5f40b40ed6294a11db28ebd0f5f8e88dfbb397ebf0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-cors-misconfiguration/scripts/agent.py"}, "region": {"startLine": 132}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_null_origin: Test function `test_null_origin` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468701, "scanner": "repobility-ast-engine", "fingerprint": "d259da6ba95dc4f20547fe51010acd1f33072cc327f7ace96455638af934c14d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d259da6ba95dc4f20547fe51010acd1f33072cc327f7ace96455638af934c14d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-cors-misconfiguration/scripts/agent.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_wildcard_with_credentials: Test function `test_wildcard_with_credentials` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468700, "scanner": "repobility-ast-engine", "fingerprint": "bb056f36bf1222693d0f288f0a63d237e26c6833b6eb9766657fe5d64dcc1e92", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bb056f36bf1222693d0f288f0a63d237e26c6833b6eb9766657fe5d64dcc1e92"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-cors-misconfiguration/scripts/agent.py"}, "region": {"startLine": 93}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_preflight: Test function `test_preflight` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468699, "scanner": "repobility-ast-engine", "fingerprint": "3bec8b8fcbc6e311a58cd843983e73bd1187fce191955e1d69e1265edb9fb182", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3bec8b8fcbc6e311a58cd843983e73bd1187fce191955e1d69e1265edb9fb182"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-cors-misconfiguration/scripts/agent.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_origin_reflection: Test function `test_origin_reflection` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468698, "scanner": "repobility-ast-engine", "fingerprint": "71a5d7009ee21da4f943aeb36eb3659207962a6d3e94849a3b094cc5d42eb843", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|71a5d7009ee21da4f943aeb36eb3659207962a6d3e94849a3b094cc5d42eb843"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-cors-misconfiguration/scripts/agent.py"}, "region": {"startLine": 35}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_alias_overloading: Test function `test_alias_overloading` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468695, "scanner": "repobility-ast-engine", "fingerprint": "ec6f9be1040597c483ecd534336e3877af445809f0e417aa7c56a35509e9898a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ec6f9be1040597c483ecd534336e3877af445809f0e417aa7c56a35509e9898a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_unauthorized_access: Test function `test_unauthorized_access` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468694, "scanner": "repobility-ast-engine", "fingerprint": "e13e4ae56adac8fe221d05f50064921560ba589d06cb95a6ce1fcd36b224feca", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e13e4ae56adac8fe221d05f50064921560ba589d06cb95a6ce1fcd36b224feca"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 109}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_field_suggestions: Test function `test_field_suggestions` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468693, "scanner": "repobility-ast-engine", "fingerprint": "c2ae7b0e400495ffb3eb4c91aa99bdefe3ddff8fff9e000ad3d0aba70c9fef70", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c2ae7b0e400495ffb3eb4c91aa99bdefe3ddff8fff9e000ad3d0aba70c9fef70"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 92}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_batch_queries: Test function `test_batch_queries` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468692, "scanner": "repobility-ast-engine", "fingerprint": "f52fcece682fd7736f27107438b86ced654a26c80894d00c0a175cb5322dc7fc", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f52fcece682fd7736f27107438b86ced654a26c80894d00c0a175cb5322dc7fc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 72}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_query_depth: Test function `test_query_depth` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468691, "scanner": "repobility-ast-engine", "fingerprint": "797855529636c1ed882a4a031f487c6fa2a1330cb857ff62f1225daf1439cdcb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|797855529636c1ed882a4a031f487c6fa2a1330cb857ff62f1225daf1439cdcb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_introspection: Test function `test_introspection` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468690, "scanner": "repobility-ast-engine", "fingerprint": "96e7af3d32d11797754b1f6444c7b600aadc6f9b44163997908278c2674cf7cb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|96e7af3d32d11797754b1f6444c7b600aadc6f9b44163997908278c2674cf7cb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_endpoint: Test function `test_endpoint` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 468684, "scanner": "repobility-ast-engine", "fingerprint": "67b3c4efd1bb8b217d0609d38719489cccc2461ccfbf5f0361bd8413bef1743d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|67b3c4efd1bb8b217d0609d38719489cccc2461ccfbf5f0361bd8413bef1743d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "MINED009", "level": "error", "message": {"text": "[MINED009] Floats For Money: Variable named price/amount/cost typed as float instead of Decimal."}, "properties": {"repobilityId": 468679, "scanner": "repobility-threat-engine", "fingerprint": "6cc8ec7e8b86c0c011cc41405dec31a84ba033ae864f7609b67b63f10ed33adb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "floats-for-money", "owasp": null, "cwe_ids": ["CWE-682"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347918+00:00", "triaged_in_corpus": 15, "observations_count": 208571, "ai_coder_pattern_id": 20}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6cc8ec7e8b86c0c011cc41405dec31a84ba033ae864f7609b67b63f10ed33adb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-api-for-mass-assignment-vulnerability/scripts/agent.py"}, "region": {"startLine": 148}}}]}, {"ruleId": "MINED012", "level": "error", "message": {"text": "[MINED012] Curl Pipe Bash: curl ... | sh / bash \u2014 runs unverified network code."}, "properties": {"repobilityId": 468678, "scanner": "repobility-threat-engine", "fingerprint": "3d92ad2b11f7529a94b12f42dfa246b6e12ef5857622b496429f6ef541601d0e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "curl-pipe-bash", "owasp": "A08:2021", "cwe_ids": ["CWE-494"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347926+00:00", "triaged_in_corpus": 15, "observations_count": 135001, "ai_coder_pattern_id": 25}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3d92ad2b11f7529a94b12f42dfa246b6e12ef5857622b496429f6ef541601d0e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-container-registry-images/scripts/agent.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "MINED012", "level": "error", "message": {"text": "[MINED012] Curl Pipe Bash: curl ... | sh / bash \u2014 runs unverified network code."}, "properties": {"repobilityId": 468677, "scanner": "repobility-threat-engine", "fingerprint": "a0642e8dfcfc43aecf0902a99e792153ee354438705e1611d7a4b8f28ee07901", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "curl-pipe-bash", "owasp": "A08:2021", "cwe_ids": ["CWE-494"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347926+00:00", "triaged_in_corpus": 15, "observations_count": 135001, "ai_coder_pattern_id": 25}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a0642e8dfcfc43aecf0902a99e792153ee354438705e1611d7a4b8f28ee07901"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/scanning-container-images-with-grype/scripts/agent.py"}, "region": {"startLine": 35}}}]}, {"ruleId": "MINED034", "level": "error", "message": {"text": "[MINED034] Python Subprocess Shell True: subprocess(..., shell=True) enables command injection."}, "properties": {"repobilityId": 468676, "scanner": "repobility-threat-engine", "fingerprint": "bd7cbb8678732105e8347eb6c1fe3411fdaf590669956b29e601d80f7f32dbaa", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-subprocess-shell-true", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347977+00:00", "triaged_in_corpus": 15, "observations_count": 3478, "ai_coder_pattern_id": 118}, "scanner": "repobility-threat-engine", "correlation_key": "fp|bd7cbb8678732105e8347eb6c1fe3411fdaf590669956b29e601d80f7f32dbaa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "SEC113", "level": "error", "message": {"text": "[SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first connect lets an active MITM impersonate the server. Common in `paramiko.AutoAddPolicy()`."}, "properties": {"repobilityId": 468671, "scanner": "repobility-threat-engine", "fingerprint": "77b619de3f7007fa8d576ea47d7667658f3a15b3c6d8975b0a511206d2bdb45f", "category": "crypto", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".set_missing_host_key_policy(paramiko.AutoAddPolicy", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC113", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|40|sec113"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-agentless-vulnerability-scanning/scripts/process.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "SEC113", "level": "error", "message": {"text": "[SEC113] SSH host-key verification disabled (MITM): Accepting any SSH host key on first connect lets an active MITM impersonate the server. Common in `paramiko.AutoAddPolicy()`."}, "properties": {"repobilityId": 468670, "scanner": "repobility-threat-engine", "fingerprint": "48d966f54539100bf67359df04636ac6c588537380df9046bf1f43b901f1edd5", "category": "crypto", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".set_missing_host_key_policy(paramiko.AutoAddPolicy", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC113", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|152|sec113"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-syslog-centralization-with-rsyslog/scripts/agent.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "SEC082", "level": "error", "message": {"text": "[SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / WarningPolicy disables SSH host-key verification \u2014 vulnerable to MITM. Ported from bandit B507 / dlint DUO133 (Apache-2.0 / BSD-3)."}, "properties": {"repobilityId": 468669, "scanner": "repobility-threat-engine", "fingerprint": "4f2aadb39a838756ab7b3595c7951659a2d1685fc75d1094ea73104d6e0bf66a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "paramiko.AutoAddPolicy(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC082", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|4f2aadb39a838756ab7b3595c7951659a2d1685fc75d1094ea73104d6e0bf66a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-agentless-vulnerability-scanning/scripts/process.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "SEC082", "level": "error", "message": {"text": "[SEC082] Python: paramiko AutoAddPolicy or no host-key verification: AutoAddPolicy / WarningPolicy disables SSH host-key verification \u2014 vulnerable to MITM. Ported from bandit B507 / dlint DUO133 (Apache-2.0 / BSD-3)."}, "properties": {"repobilityId": 468668, "scanner": "repobility-threat-engine", "fingerprint": "93542efadb9f4267b07b9946e770c39bbc641a281ba8025b39d2f2a64f3ab6f4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "paramiko.AutoAddPolicy(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC082", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|93542efadb9f4267b07b9946e770c39bbc641a281ba8025b39d2f2a64f3ab6f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-syslog-centralization-with-rsyslog/scripts/agent.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "SEC005", "level": "error", "message": {"text": "[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input."}, "properties": {"repobilityId": 468657, "scanner": "repobility-threat-engine", "fingerprint": "5e3ab30712a1b2360873b0ab51682b53b82ea59368f12549f224f42424e6752a", "category": "injection", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Command source appears controllable (config/plugin/argv/user input)", "evidence": {"match": "eval(Request", "reason": "Command source appears controllable (config/plugin/argv/user input)", "rule_id": "SEC005", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|injection|token|62|sec005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-hunting-with-yara-rules/scripts/agent.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "SEC004", "level": "error", "message": {"text": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection."}, "properties": {"repobilityId": 468641, "scanner": "repobility-threat-engine", "fingerprint": "cb1fa15dd24aa551ca6213f42479ebdd36e87474600a9e341204c2c897b3dbef", "category": "injection", "severity": "high", "confidence": 0.5, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "evidence": {"match": ".execute(f\"SELECT", "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "rule_id": "SEC004", "scanner": "repobility-threat-engine", "confidence": 0.5, "correlation_key": "code|injection|token|125|sec004"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py"}, "region": {"startLine": 125}}}]}, {"ruleId": "SEC004", "level": "error", "message": {"text": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection."}, "properties": {"repobilityId": 468640, "scanner": "repobility-threat-engine", "fingerprint": "dff67189b918cbe93cce7db12b96de49f9a7ab239e76aac1c8b54c543a0cf1e8", "category": "injection", "severity": "high", "confidence": 0.5, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "evidence": {"match": ".execute(f\"SELECT", "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "rule_id": "SEC004", "scanner": "repobility-threat-engine", "confidence": 0.5, "correlation_key": "code|injection|token|85|sec004"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/agent.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "SEC004", "level": "error", "message": {"text": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection."}, "properties": {"repobilityId": 468639, "scanner": "repobility-threat-engine", "fingerprint": "eed34d5e9aedef6363d8327c71c0b88c0204601c61d03a6af7a60265b4a9b33e", "category": "injection", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "SQL string interpolation is near request/data/parameter input; user-controlled taint is plausible.", "evidence": {"match": ".execute(f\"SELECT", "reason": "SQL string interpolation is near request/data/parameter input; user-controlled taint is plausible.", "rule_id": "SEC004", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "code|injection|token|149|sec004"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-sqlite-database-forensics/scripts/agent.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "MINED006", "level": "error", "message": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "properties": {"repobilityId": 468632, "scanner": "repobility-threat-engine", "fingerprint": "97609d7c8c1c1f4e3dcc0240b7ff19722472fbf4d4399344b77872f0ee40c400", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "overcatch-baseexception", "owasp": null, "cwe_ids": ["CWE-705"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347911+00:00", "triaged_in_corpus": 15, "observations_count": 230624, "ai_coder_pattern_id": 8}, "scanner": "repobility-threat-engine", "correlation_key": "fp|97609d7c8c1c1f4e3dcc0240b7ff19722472fbf4d4399344b77872f0ee40c400"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeypot-for-ransomware-detection/scripts/process.py"}, "region": {"startLine": 236}}}]}, {"ruleId": "MINED006", "level": "error", "message": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "properties": {"repobilityId": 468631, "scanner": "repobility-threat-engine", "fingerprint": "6df0ea54764027e85af6a61f45a369f72f68a7a8ee5a0f23641473fc4748bee2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "overcatch-baseexception", "owasp": null, "cwe_ids": ["CWE-705"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347911+00:00", "triaged_in_corpus": 15, "observations_count": 230624, "ai_coder_pattern_id": 8}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6df0ea54764027e85af6a61f45a369f72f68a7a8ee5a0f23641473fc4748bee2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-startup-folder-persistence/scripts/agent.py"}, "region": {"startLine": 230}}}]}, {"ruleId": "MINED006", "level": "error", "message": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "properties": {"repobilityId": 468630, "scanner": "repobility-threat-engine", "fingerprint": "a5079ce22c578686acec59657a9b89995f9e9d270119696e05b10d58476c7542", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "overcatch-baseexception", "owasp": null, "cwe_ids": ["CWE-705"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347911+00:00", "triaged_in_corpus": 15, "observations_count": 230624, "ai_coder_pattern_id": 8}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a5079ce22c578686acec59657a9b89995f9e9d270119696e05b10d58476c7542"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py"}, "region": {"startLine": 131}}}]}, {"ruleId": "MINED021", "level": "error", "message": {"text": "[MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain \"../\" \u2014 directory escape."}, "properties": {"repobilityId": 468628, "scanner": "repobility-threat-engine", "fingerprint": "3dc32a2bf42fd71600e4857eb8c50872796e0686fb6a44f32cc4710016e399ed", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "path-traversal-os-join", "owasp": "A01:2021", "cwe_ids": ["CWE-22"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347947+00:00", "triaged_in_corpus": 15, "observations_count": 45678, "ai_coder_pattern_id": 31}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3dc32a2bf42fd71600e4857eb8c50872796e0686fb6a44f32cc4710016e399ed"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-fileless-attacks-on-endpoints/scripts/process.py"}, "region": {"startLine": 53}}}]}, {"ruleId": "MINED021", "level": "error", "message": {"text": "[MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain \"../\" \u2014 directory escape."}, "properties": {"repobilityId": 468627, "scanner": "repobility-threat-engine", "fingerprint": "6602b98ba6718e08a5585cf7ab5d96296441d74ea18d12add28ba65d8e3646d0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "path-traversal-os-join", "owasp": "A01:2021", "cwe_ids": ["CWE-22"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347947+00:00", "triaged_in_corpus": 15, "observations_count": 45678, "ai_coder_pattern_id": 31}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6602b98ba6718e08a5585cf7ab5d96296441d74ea18d12add28ba65d8e3646d0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-osquery-for-endpoint-monitoring/scripts/process.py"}, "region": {"startLine": 83}}}]}, {"ruleId": "MINED021", "level": "error", "message": {"text": "[MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain \"../\" \u2014 directory escape."}, "properties": {"repobilityId": 468626, "scanner": "repobility-threat-engine", "fingerprint": "2d8359e56fb9767c9c86610c6b536a171ce959c2cc801e034b0fe189b3d7481b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "path-traversal-os-join", "owasp": "A01:2021", "cwe_ids": ["CWE-22"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347947+00:00", "triaged_in_corpus": 15, "observations_count": 45678, "ai_coder_pattern_id": 31}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2d8359e56fb9767c9c86610c6b536a171ce959c2cc801e034b0fe189b3d7481b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/collecting-volatile-evidence-from-compromised-host/scripts/agent.py"}, "region": {"startLine": 153}}}]}, {"ruleId": "MINED014", "level": "error", "message": {"text": "[MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in node, InsecureSkipVerify:true in Go."}, "properties": {"repobilityId": 468624, "scanner": "repobility-threat-engine", "fingerprint": "f67535c1bb531dca4e885c5f19695c604789c47c2e658d5c36c389efd2e8effa", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "disabled-tls-verify", "owasp": "A02:2021", "cwe_ids": ["CWE-295"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347930+00:00", "triaged_in_corpus": 15, "observations_count": 86916, "ai_coder_pattern_id": 16}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f67535c1bb531dca4e885c5f19695c604789c47c2e658d5c36c389efd2e8effa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-external-reconnaissance-with-osint/scripts/agent.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "MINED014", "level": "error", "message": {"text": "[MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in node, InsecureSkipVerify:true in Go."}, "properties": {"repobilityId": 468623, "scanner": "repobility-threat-engine", "fingerprint": "51e0ffdde5d35e2de61f83a62231b9ca76ecf8e772271afd521e95a68ae96910", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "disabled-tls-verify", "owasp": "A02:2021", "cwe_ids": ["CWE-295"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347930+00:00", "triaged_in_corpus": 15, "observations_count": 86916, "ai_coder_pattern_id": 16}, "scanner": "repobility-threat-engine", "correlation_key": "fp|51e0ffdde5d35e2de61f83a62231b9ca76ecf8e772271afd521e95a68ae96910"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "MINED014", "level": "error", "message": {"text": "[MINED014] Disabled Tls Verify: verify=False in requests, rejectUnauthorized:false in node, InsecureSkipVerify:true in Go."}, "properties": {"repobilityId": 468622, "scanner": "repobility-threat-engine", "fingerprint": "76a5662f470b253a423307b5f1c0cdc2dbff9f1c5fea917e075bdd47c9bff7ba", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "disabled-tls-verify", "owasp": "A02:2021", "cwe_ids": ["CWE-295"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347930+00:00", "triaged_in_corpus": 15, "observations_count": 86916, "ai_coder_pattern_id": 16}, "scanner": "repobility-threat-engine", "correlation_key": "fp|76a5662f470b253a423307b5f1c0cdc2dbff9f1c5fea917e075bdd47c9bff7ba"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "MINED036", "level": "error", "message": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "properties": {"repobilityId": 468611, "scanner": "repobility-threat-engine", "fingerprint": "fbee6be033d36de8ad31b82128d0a490a2a9513afe55877cd51885d3f6f867c4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "correlation_key": "fp|fbee6be033d36de8ad31b82128d0a490a2a9513afe55877cd51885d3f6f867c4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 468590, "scanner": "repobility-threat-engine", "fingerprint": "5bff7fa9a2cec583692ff720b0e013b1d96ce304b12b96b7732b2cfeb08d153b", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(f\"  [{f['severity']}] {f['type']}: {f.get('app', f.get('token_name', '')", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|token|9|print f f severity f type : f.get app f.get token_name"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-cloudflare-access-for-zero-trust/scripts/agent.py"}, "region": {"startLine": 91}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 468589, "scanner": "repobility-threat-engine", "fingerprint": "aca94086aa22c2aa1e454d3e712681808c9d1f13fb21adc22f3dd89b12644b00", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(\"  auditor = FederationAuditor(tenant_id, client_id, secret)", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|token|21|print auditor federationauditor tenant_id client_id secret"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-identity-federation-with-saml-azure-ad/scripts/process.py"}, "region": {"startLine": 213}}}]}, {"ruleId": "SEC020", "level": "error", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 468588, "scanner": "repobility-threat-engine", "fingerprint": "dcc8be284fd2da7cedc51cf966cc38adfb6a50a1c716925ab54f6b96ca07b508", "category": "credential_exposure", "severity": "high", "confidence": 0.85, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Credential-bearing variable appears to be printed or logged", "evidence": {"match": "print(f\"[+] Password spray events: {len(findings['password_spray'])", "reason": "Credential-bearing variable appears to be printed or logged", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.85, "correlation_key": "secret|token|14|print f + password spray events: len findings password_spray"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-event-logs-in-splunk/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 468582, "scanner": "repobility-threat-engine", "fingerprint": "3c614aabed6115643fbf7f8b4620ccfb04b65fb1c58712846b0b31e1665767fa", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(rb\"%PDF-(\\d+\\.\\d+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|68|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-pdf-malware-with-pdfid/scripts/agent.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 468581, "scanner": "repobility-threat-engine", "fingerprint": "ff4fbcc3e04b9955ea98c385d45bf33b8fd393b5e132143deeb54a2e1725655d", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(rb'go(\\d+\\.\\d+(?:\\.\\d+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|37|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/scripts/process.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 468580, "scanner": "repobility-threat-engine", "fingerprint": "00bc3b276d8a0826db9e7bf24b74f8bae6ba4a4879e6ac5813a39eb5518dd753", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(r\"spf=(\\w+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|64|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468570, "scanner": "repobility-threat-engine", "fingerprint": "9f13a09e81aaaa32a44102e08786c31fe64510dda692a4c19e1c7f4c60e37fba", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|9f13a09e81aaaa32a44102e08786c31fe64510dda692a4c19e1c7f4c60e37fba"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-automated-malware-submission-pipeline/scripts/agent.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468569, "scanner": "repobility-threat-engine", "fingerprint": "07ec73352ec1bc5b459c0cf226f0fe5eea8f0ad373ea65510ae31b1c39dbb9a2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|07ec73352ec1bc5b459c0cf226f0fe5eea8f0ad373ea65510ae31b1c39dbb9a2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/automating-ioc-enrichment/scripts/agent.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 468568, "scanner": "repobility-threat-engine", "fingerprint": "79c3d822034583429747b9dcad27de99ff715b72b890515dd3bebea7c298958c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|79c3d822034583429747b9dcad27de99ff715b72b890515dd3bebea7c298958c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ransomware-leak-site-intelligence/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468566, "scanner": "repobility-threat-engine", "fingerprint": "bab21749ce70665a0cf4b4f28a97543652006dbc8531266b6290a2ca4e46667a", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(ATTACK_ENTERPRISE_URL", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|bab21749ce70665a0cf4b4f28a97543652006dbc8531266b6290a2ca4e46667a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-threat-actor-ttps-with-mitre-attack/scripts/agent.py"}, "region": {"startLine": 27}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468565, "scanner": "repobility-threat-engine", "fingerprint": "8500df7fd067b5423ddb73cb379f7618e678117dd3fba3997ab92248d8a0880d", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "urllib.request.urlopen(r", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|8500df7fd067b5423ddb73cb379f7618e678117dd3fba3997ab92248d8a0880d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ransomware-network-indicators/scripts/agent.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 468564, "scanner": "repobility-threat-engine", "fingerprint": "4f494cd1a3f873ef83c3b163c406ea161ffe948881787524639a855cc694544d", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.get(ATTACK_ENTERPRISE_URL", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|4f494cd1a3f873ef83c3b163c406ea161ffe948881787524639a855cc694544d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468554, "scanner": "repobility-threat-engine", "fingerprint": "e8206384e8fbe526b035e170a4e3b0bafc0a327f49ec6188006f052c2a5f7dd4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e8206384e8fbe526b035e170a4e3b0bafc0a327f49ec6188006f052c2a5f7dd4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "region": {"startLine": 97}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468553, "scanner": "repobility-threat-engine", "fingerprint": "0f8413e18465e7d016811dc1912a1ca35c2ac43619b2edc109bb9947124fb07d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|0f8413e18465e7d016811dc1912a1ca35c2ac43619b2edc109bb9947124fb07d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 468552, "scanner": "repobility-threat-engine", "fingerprint": "b67984e004e242dde47b0c76d3002f58c220f8df43b82ef77c8a6b4cb61dafba", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b67984e004e242dde47b0c76d3002f58c220f8df43b82ef77c8a6b4cb61dafba"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 468550, "scanner": "repobility-threat-engine", "fingerprint": "a9a0d3facc42d3b144de57fb3bb05c5a534d46dc53d67504ae197ed3ba073b00", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a9a0d3facc42d3b144de57fb3bb05c5a534d46dc53d67504ae197ed3ba073b00"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 468549, "scanner": "repobility-threat-engine", "fingerprint": "f84722841cdf3cf254b5911c8932f70e1b7969657b5e8b6ba661a1df2d80e051", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f84722841cdf3cf254b5911c8932f70e1b7969657b5e8b6ba661a1df2d80e051"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "region": {"startLine": 129}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 468548, "scanner": "repobility-threat-engine", "fingerprint": "2690bce9e948f328ee383ffaf4d521d93aee54a5d14b262b0d5d89f1c08ed665", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2690bce9e948f328ee383ffaf4d521d93aee54a5d14b262b0d5d89f1c08ed665"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468546, "scanner": "repobility-threat-engine", "fingerprint": "9535a4adab0c8120542c54a33df515bbe02f99c75caeb3744c34df5721a11d3a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "sha256.update(chunk)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|9535a4adab0c8120542c54a33df515bbe02f99c75caeb3744c34df5721a11d3a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 150}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468545, "scanner": "repobility-threat-engine", "fingerprint": "3ad585085c7a1f0c697f92a688662fec37567c30c271ad216fe7d0f79ddc388d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "sha256.update(chunk)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|3ad585085c7a1f0c697f92a688662fec37567c30c271ad216fe7d0f79ddc388d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 468544, "scanner": "repobility-threat-engine", "fingerprint": "dd9f7569774c4f5292097c2e3e35a7d512c8c47b753e02ad7a4dbb3253e52060", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "h.update(block)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|dd9f7569774c4f5292097c2e3e35a7d512c8c47b753e02ad7a4dbb3253e52060"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "COMP001", "level": "error", "message": {"text": "[COMP001] High cognitive complexity: Function `parse_acl` has cognitive complexity 45 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: break=2, for=2, if=11, nested_bonus=29, ternary=1."}, "properties": {"repobilityId": 468542, "scanner": "repobility-threat-engine", "fingerprint": "b31757ec0fee09eaaefc3c487e2423380c4783573ce6bbd95869abfc05c47411", "category": "quality", "severity": "high", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 45 (severity threshold for high: 25+).", "evidence": {"scanner": "repobility-threat-engine", "function": "parse_acl", "breakdown": {"if": 11, "for": 2, "break": 2, "ternary": 1, "nested_bonus": 29}, "complexity": 45, "correlation_key": "fp|b31757ec0fee09eaaefc3c487e2423380c4783573ce6bbd95869abfc05c47411"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 468536, "scanner": "repobility-threat-engine", "fingerprint": "046f098e4c3d928226837631e505087d45186564a1eba1d9b9946d55bb06496c", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(args.input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|190|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cyber-risk-assessment-with-nist-800-30/scripts/process.py"}, "region": {"startLine": 190}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 468535, "scanner": "repobility-threat-engine", "fingerprint": "a338cefa1b700a6c5e1fe30800b8b632236652ae4fdbc35104d9a0ca8bdb5fea", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(args.input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|151|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-ioc-defanging-and-sharing-pipeline/scripts/agent.py"}, "region": {"startLine": 151}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 468534, "scanner": "repobility-threat-engine", "fingerprint": "f1d660eee3a88681e0e34e30296490167dfdbcc87f034112deb6a30a98d658fc", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(args.input", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|166|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/scripts/process.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer signature (`cryptonight`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468782, "scanner": "repobility-supply-chain", "fingerprint": "7740bce851ff03bea842f4580d6d5ab108009fa1200c90d75fc24c0593312331", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|7740bce851ff03bea842f4580d6d5ab108009fa1200c90d75fc24c0593312331"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-ebpf-security-monitoring/scripts/agent.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature (`xmrig`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468781, "scanner": "repobility-supply-chain", "fingerprint": "3e2042c695b481c58ecaf144fafdf4412a9a18984142cec4252f93e0759e9e79", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3e2042c695b481c58ecaf144fafdf4412a9a18984142cec4252f93e0759e9e79"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-ebpf-security-monitoring/scripts/agent.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `cryptonight`: Source contains a known cryptominer signature (`cryptonight`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468780, "scanner": "repobility-supply-chain", "fingerprint": "83e6f7650689b736215a2a5709a001762a9bc82a7eccc0e974393df244263ee6", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|83e6f7650689b736215a2a5709a001762a9bc82a7eccc0e974393df244263ee6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-workload-protection/scripts/agent.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature (`xmrig`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468779, "scanner": "repobility-supply-chain", "fingerprint": "36a0eb4ad5a581225b35604c7146b4f16347be101f75e890662db1f49ef73be1", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|36a0eb4ad5a581225b35604c7146b4f16347be101f75e890662db1f49ef73be1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-workload-protection/scripts/agent.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED133", "level": "error", "message": {"text": "[MINED133] Hardcoded Slack webhook URL in source: File contains a hardcoded `Slack` webhook URL: `https://hooks.slack.com/services/XXX/YYY/ZZZ...`. Webhook URLs are unauthenticated POST endpoints \u2014 anyone with the URL can send messages. They are also a common data-exfiltration channel for compromised packages (malicious post-install collects env vars + POSTs them)."}, "properties": {"repobilityId": 468778, "scanner": "repobility-supply-chain", "fingerprint": "37acd10413f67961c48da21e2c3119c598b65940e79bf51977f9fc8ac855190a", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "exfil-webhook-url", "owasp": null, "cwe_ids": ["CWE-200", "CWE-540"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|37acd10413f67961c48da21e2c3119c598b65940e79bf51977f9fc8ac855190a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-tls-certificate-transparency-logs/scripts/agent.py"}, "region": {"startLine": 905}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `xmrig`: Source contains a known cryptominer signature (`xmrig`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468777, "scanner": "repobility-supply-chain", "fingerprint": "2e16f8904b09bf8b1c7c2f7d4a2b28b19cc37d84ca0246186a58168d30112b20", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|2e16f8904b09bf8b1c7c2f7d4a2b28b19cc37d84ca0246186a58168d30112b20"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-runtime-security-with-tetragon/scripts/process.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `supportxmr`: Source contains a known cryptominer signature (`supportxmr`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468776, "scanner": "repobility-supply-chain", "fingerprint": "53faf4bb095e5099c4213828f9b8f818285b2e07d95a868ad4985322d9f4a251", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|53faf4bb095e5099c4213828f9b8f818285b2e07d95a868ad4985322d9f4a251"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/scripts/agent.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `moneroocean`: Source contains a known cryptominer signature (`moneroocean`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468775, "scanner": "repobility-supply-chain", "fingerprint": "e490c6e0d72d4c4c44f54664e6a634194afefdfedd0820b1843939ccf5cac7d9", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e490c6e0d72d4c4c44f54664e6a634194afefdfedd0820b1843939ccf5cac7d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/scripts/agent.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `minergate.com`: Source contains a known cryptominer signature (`minergate.com`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468774, "scanner": "repobility-supply-chain", "fingerprint": "5c224e1bcf1b18c2bffaed900c032dc4b0999a95475ec0b4f31ca9bbd6d399a9", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5c224e1bcf1b18c2bffaed900c032dc4b0999a95475ec0b4f31ca9bbd6d399a9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/scripts/agent.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED127", "level": "error", "message": {"text": "[MINED127] Cryptominer signature: `pool.minexmr.com`: Source contains a known cryptominer signature (`pool.minexmr.com`). Could be a deliberate malicious payload, a compromised dependency, or a copy-paste from a tutorial \u2014 but it warrants immediate investigation. Mining pool URLs in production code are almost never legitimate."}, "properties": {"repobilityId": 468773, "scanner": "repobility-supply-chain", "fingerprint": "ca215cfa1e51923ec6e5659a86a6421ee4d96d046361f7eba1387880a374db28", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "cryptominer-signature", "owasp": null, "cwe_ids": ["CWE-506"], "languages": ["any"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ca215cfa1e51923ec6e5659a86a6421ee4d96d046361f7eba1387880a374db28"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/scripts/agent.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `email` used but not imported: The file uses `email.something(...)` but never imports `email`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468769, "scanner": "repobility-ast-engine", "fingerprint": "87f46a8340a615bcb2d2a6cc17d8aeb85392127447064766c5d20cb3c282b059", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|87f46a8340a615bcb2d2a6cc17d8aeb85392127447064766c5d20cb3c282b059"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-spearphishing-indicators/scripts/agent.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)` but never imports `xml`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468768, "scanner": "repobility-ast-engine", "fingerprint": "8032403c85962a799a32e6930dee141f8042b4be994c92cf81aa03c9664dbf17", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8032403c85962a799a32e6930dee141f8042b4be994c92cf81aa03c9664dbf17"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-dcom-lateral-movement/scripts/agent.py"}, "region": {"startLine": 52}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `operator` used but not imported: The file uses `operator.something(...)` but never imports `operator`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468767, "scanner": "repobility-ast-engine", "fingerprint": "57f04c00ac5cd971c664c3da5a296adf1d4f3f828319f862e725916c53ed6856", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|57f04c00ac5cd971c664c3da5a296adf1d4f3f828319f862e725916c53ed6856"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `inspect` used but not imported: The file uses `inspect.something(...)` but never imports `inspect`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468755, "scanner": "repobility-ast-engine", "fingerprint": "936c38a24015ba81ff6d190d697cb944a49c7b8b998ccd8d72da7ad3fcbcaec4", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|936c38a24015ba81ff6d190d697cb944a49c7b8b998ccd8d72da7ad3fcbcaec4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-docker-bench-security-assessment/scripts/agent.py"}, "region": {"startLine": 101}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `datetime` used but not imported: The file uses `datetime.something(...)` but never imports `datetime`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468754, "scanner": "repobility-ast-engine", "fingerprint": "f4a8492769fbb1e0af00c86119f3fc9a77977c5ea0d588eae04479f8cdfdd518", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f4a8492769fbb1e0af00c86119f3fc9a77977c5ea0d588eae04479f8cdfdd518"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-ioc-extraction/scripts/agent.py"}, "region": {"startLine": 105}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `platform` used but not imported: The file uses `platform.something(...)` but never imports `platform`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468753, "scanner": "repobility-ast-engine", "fingerprint": "b3d9747e2a9766ff83082a569793e125bbe4f17f51be173ab3d81da69ca7a693", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b3d9747e2a9766ff83082a569793e125bbe4f17f51be173ab3d81da69ca7a693"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-pass-the-ticket-attack/scripts/agent.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(...)` but never imports `queue`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468752, "scanner": "repobility-ast-engine", "fingerprint": "396ce893076706ce484ffe2f30cc4e49360cf147f0eb7854758855f3a4b57519", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|396ce893076706ce484ffe2f30cc4e49360cf147f0eb7854758855f3a4b57519"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-soar-playbook-with-palo-alto-xsoar/scripts/process.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `http` used but not imported: The file uses `http.something(...)` but never imports `http`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468751, "scanner": "repobility-ast-engine", "fingerprint": "09756087491492278b30d7a8141e4b435416566f16886daf873deadce981da46", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|09756087491492278b30d7a8141e4b435416566f16886daf873deadce981da46"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-traffic-of-malware/scripts/agent.py"}, "region": {"startLine": 162}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `stat` used but not imported: The file uses `stat.something(...)` but never imports `stat`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468750, "scanner": "repobility-ast-engine", "fingerprint": "6bef0749ad55a1029d46130715afdc6ed8daef17b731be99c5d4a5177d7b9fc4", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6bef0749ad55a1029d46130715afdc6ed8daef17b731be99c5d4a5177d7b9fc4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-host-based-intrusion-detection/scripts/agent.py"}, "region": {"startLine": 79}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `signal` used but not imported: The file uses `signal.something(...)` but never imports `signal`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468749, "scanner": "repobility-ast-engine", "fingerprint": "7ad1efa1ce901bd2808aaa3540c8628ece512c977eee3170f069f12dcfc747af", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7ad1efa1ce901bd2808aaa3540c8628ece512c977eee3170f069f12dcfc747af"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-alert-triage-with-elastic-siem/scripts/agent.py"}, "region": {"startLine": 53}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `queue` used but not imported: The file uses `queue.something(...)` but never imports `queue`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468748, "scanner": "repobility-ast-engine", "fingerprint": "727b71d8adbaf8b65a76a6235694c4015c15fbfba1ca2560a6ba4cdc1dcce44b", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|727b71d8adbaf8b65a76a6235694c4015c15fbfba1ca2560a6ba4cdc1dcce44b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-alert-triage-with-elastic-siem/scripts/process.py"}, "region": {"startLine": 287}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `stat` used but not imported: The file uses `stat.something(...)` but never imports `stat`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468747, "scanner": "repobility-ast-engine", "fingerprint": "1134c41232a6dd16b07d20f90132d9586e58b7115b5927f21466337dde74eb74", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1134c41232a6dd16b07d20f90132d9586e58b7115b5927f21466337dde74eb74"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-persistence-mechanisms-in-linux/scripts/agent.py"}, "region": {"startLine": 125}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)` but never imports `xml`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468746, "scanner": "repobility-ast-engine", "fingerprint": "889216aaa716541ef6ee7ad7e0611d672f76125d59f3cda4741d8dc0c33093ac", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|889216aaa716541ef6ee7ad7e0611d672f76125d59f3cda4741d8dc0c33093ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-living-off-the-land-binaries/scripts/agent.py"}, "region": {"startLine": 136}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `copy` used but not imported: The file uses `copy.something(...)` but never imports `copy`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468745, "scanner": "repobility-ast-engine", "fingerprint": "80584830ebabb41a2b8eeabb3d41cf8a1c63d7234016580f0eaf9b2ddd097b2a", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|80584830ebabb41a2b8eeabb3d41cf8a1c63d7234016580f0eaf9b2ddd097b2a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-ransomware-backup-strategy/scripts/process.py"}, "region": {"startLine": 304}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `csv` used but not imported: The file uses `csv.something(...)` but never imports `csv`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468744, "scanner": "repobility-ast-engine", "fingerprint": "56c3d9ee9a7d0524f540f98df1ab67453fcf61cd56baa5162f597b11402386a0", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|56c3d9ee9a7d0524f540f98df1ab67453fcf61cd56baa5162f597b11402386a0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-digital-signatures-with-ed25519/scripts/process.py"}, "region": {"startLine": 290}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)` but never imports `xml`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468743, "scanner": "repobility-ast-engine", "fingerprint": "d5e7736b1729d3d9a7d1ad86909fd128e41a8ccd5a6e587340728008b3d2f6f4", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d5e7736b1729d3d9a7d1ad86909fd128e41a8ccd5a6e587340728008b3d2f6f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-ntlm-relay-with-event-correlation/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `stat` used but not imported: The file uses `stat.something(...)` but never imports `stat`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468741, "scanner": "repobility-ast-engine", "fingerprint": "26c8ad1c04cde093e3822198473b7773b2e3af9c1b0cdbbbf8fa3e023c85bd64", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|26c8ad1c04cde093e3822198473b7773b2e3af9c1b0cdbbbf8fa3e023c85bd64"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-ransomware-encryption-behavior/scripts/agent.py"}, "region": {"startLine": 191}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `inspect` used but not imported: The file uses `inspect.something(...)` but never imports `inspect`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468739, "scanner": "repobility-ast-engine", "fingerprint": "98327556da22c29ae3ff9fc4657d757557b1e51d71617aac8e3a25c383c5245d", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|98327556da22c29ae3ff9fc4657d757557b1e51d71617aac8e3a25c383c5245d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-jwt-signing-and-verification/scripts/process.py"}, "region": {"startLine": 254}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `collections` used but not imported: The file uses `collections.something(...)` but never imports `collections`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468726, "scanner": "repobility-ast-engine", "fingerprint": "a07842f2f2ba1444b02fa78f9c4a7c23e802dd986680475d655e4449ddba9fc0", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a07842f2f2ba1444b02fa78f9c4a7c23e802dd986680475d655e4449ddba9fc0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/processing-stix-taxii-feeds/scripts/agent.py"}, "region": {"startLine": 27}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `select` used but not imported: The file uses `select.something(...)` but never imports `select`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468717, "scanner": "repobility-ast-engine", "fingerprint": "046e730f16f690b3d0f8b629730fd63ba84d3463b88dc8ed4c63e85b8f57d020", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|046e730f16f690b3d0f8b629730fd63ba84d3463b88dc8ed4c63e85b8f57d020"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/scripts/agent.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)` but never imports `xml`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468714, "scanner": "repobility-ast-engine", "fingerprint": "d2f357009c4eaae50c23c09308da740bf3d052645f9c57cf2ff6c7b4d4f07323", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d2f357009c4eaae50c23c09308da740bf3d052645f9c57cf2ff6c7b4d4f07323"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-kerberoasting-attacks/scripts/agent.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `email` used but not imported: The file uses `email.something(...)` but never imports `email`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468712, "scanner": "repobility-ast-engine", "fingerprint": "474e731ecb2696117fac4421ec5c1d583fa3b67d7a662ba4deaef1c8a7ea1945", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|474e731ecb2696117fac4421ec5c1d583fa3b67d7a662ba4deaef1c8a7ea1945"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ai-driven-osint-correlation/scripts/agent.py"}, "region": {"startLine": 248}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `xml` used but not imported: The file uses `xml.something(...)` but never imports `xml`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468711, "scanner": "repobility-ast-engine", "fingerprint": "cf18120796a480592ae2b43a660a181f5baadbbab955c4f929d0b830526f38c7", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cf18120796a480592ae2b43a660a181f5baadbbab955c4f929d0b830526f38c7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-anomalous-powershell-execution/scripts/agent.py"}, "region": {"startLine": 66}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `collections` used but not imported: The file uses `collections.something(...)` but never imports `collections`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468710, "scanner": "repobility-ast-engine", "fingerprint": "e3b29488673416fbf68c441778209258b7819bfbf3781e04dcfbd7b436c62d9e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e3b29488673416fbf68c441778209258b7819bfbf3781e04dcfbd7b436c62d9e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-stix-taxii-feed-integration/scripts/agent.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `email` used but not imported: The file uses `email.something(...)` but never imports `email`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 468688, "scanner": "repobility-ast-engine", "fingerprint": "3cf4aade503cdd04e5b72fb67c18478d20d6c4e291f9e958e7ccf9a53a33d60e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3cf4aade503cdd04e5b72fb67c18478d20d6c4e291f9e958e7ccf9a53a33d60e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-open-source-intelligence-gathering/scripts/agent.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "SEC039", "level": "error", "message": {"text": "[SEC039] Plaintext-equivalent password hash \u2014 unsalted single-pass digest: Single-pass digest of a password is cryptographically strong as a hash, but is rainbow-table-attackable when used for passwords: there's no salt and no key-stretching. Attackers with the hash database can crack 90%+ of common passwords offline in hours. CWE-916 (use of password hash without computational effort)."}, "properties": {"repobilityId": 468673, "scanner": "repobility-threat-engine", "fingerprint": "7d4e77265f665af1669ba7a137771f6533fc4c4d9ce25287c561544ecd5184a5", "category": "crypto", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "hashlib.md5(pwd", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC039", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|127|sec039"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-hash-cracking-with-hashcat/scripts/process.py"}, "region": {"startLine": 127}}}]}, {"ruleId": "SEC039", "level": "error", "message": {"text": "[SEC039] Plaintext-equivalent password hash \u2014 unsalted single-pass digest: Single-pass digest of a password is cryptographically strong as a hash, but is rainbow-table-attackable when used for passwords: there's no salt and no key-stretching. Attackers with the hash database can crack 90%+ of common passwords offline in hours. CWE-916 (use of password hash without computational effort)."}, "properties": {"repobilityId": 468672, "scanner": "repobility-threat-engine", "fingerprint": "889ad7630d41c48081890e74d613a05a23f1b2c12fc8dd61ac760f255c0ef3c5", "category": "crypto", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "hashlib.sha1(password", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC039", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|crypto|token|90|sec039"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-dark-web-monitoring-for-threats/scripts/agent.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "MINED007", "level": "error", "message": {"text": "[MINED007] Sql String Concat: cursor.execute(f\"... {user_input} ...\") \u2014 SQL injection."}, "properties": {"repobilityId": 468649, "scanner": "repobility-threat-engine", "fingerprint": "24472e841fc80c90126a00b8a14803df8187514388d9d1903c21be0ade060a77", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "sql-string-concat", "owasp": "A03:2021", "cwe_ids": ["CWE-89"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347914+00:00", "triaged_in_corpus": 20, "observations_count": 210457, "ai_coder_pattern_id": 12}, "scanner": "repobility-threat-engine", "correlation_key": "fp|24472e841fc80c90126a00b8a14803df8187514388d9d1903c21be0ade060a77"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-mobile-device-forensics-with-cellebrite/scripts/agent.py"}, "region": {"startLine": 154}}}]}, {"ruleId": "MINED007", "level": "error", "message": {"text": "[MINED007] Sql String Concat: cursor.execute(f\"... {user_input} ...\") \u2014 SQL injection."}, "properties": {"repobilityId": 468648, "scanner": "repobility-threat-engine", "fingerprint": "f6876c50ec566d46575b6da2047f9094726d185a3e7b2034834a589fbb015565", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "sql-string-concat", "owasp": "A03:2021", "cwe_ids": ["CWE-89"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347914+00:00", "triaged_in_corpus": 20, "observations_count": 210457, "ai_coder_pattern_id": 12}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f6876c50ec566d46575b6da2047f9094726d185a3e7b2034834a589fbb015565"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED007", "level": "error", "message": {"text": "[MINED007] Sql String Concat: cursor.execute(f\"... {user_input} ...\") \u2014 SQL injection."}, "properties": {"repobilityId": 468647, "scanner": "repobility-threat-engine", "fingerprint": "d46dab3f663fc9288b7998dd971f703515a9969ffb010f205c397bbfb61d30ea", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "sql-string-concat", "owasp": "A03:2021", "cwe_ids": ["CWE-89"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347914+00:00", "triaged_in_corpus": 20, "observations_count": 210457, "ai_coder_pattern_id": 12}, "scanner": "repobility-threat-engine", "correlation_key": "fp|d46dab3f663fc9288b7998dd971f703515a9969ffb010f205c397bbfb61d30ea"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/scripts/agent.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-f67fb14f06d93df9", "level": "note", "message": {"text": "Possibly dead Python function: validate_ssh"}, "properties": {"repobilityId": "856e75e450e1c396", "scanner": "scanner-primary", "fingerprint": "f67fb14f06d93df9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-authenticated-vulnerability-scan/scripts/process.py:55"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cae6dd616cb2467b", "level": "note", "message": {"text": "Possibly dead Python function: validate_winrm"}, "properties": {"repobilityId": "cff9a9c758118b18", "scanner": "scanner-primary", "fingerprint": "cae6dd616cb2467b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-authenticated-vulnerability-scan/scripts/process.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43628518c79de31d", "level": "note", "message": {"text": "Possibly dead Python function: validate_smb"}, "properties": {"repobilityId": "9c05e1c659f1fda6", "scanner": "scanner-primary", "fingerprint": "43628518c79de31d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-authenticated-vulnerability-scan/scripts/process.py:169"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d28b32068414def6", "level": "note", "message": {"text": "Possibly dead Python function: validate_snmpv3"}, "properties": {"repobilityId": "747cd5c387d6140d", "scanner": "scanner-primary", "fingerprint": "d28b32068414def6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-authenticated-vulnerability-scan/scripts/process.py:202"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d0ca3dc91933af9", "level": "note", "message": {"text": "Possibly dead Python function: compare_auth_vs_unauth"}, "properties": {"repobilityId": "59674bc2f70adb6f", "scanner": "scanner-primary", "fingerprint": "6d0ca3dc91933af9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-authenticated-vulnerability-scan/scripts/agent.py:110"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6816ed201462d200", "level": "note", "message": {"text": "Possibly dead Python function: compare_with_spec"}, "properties": {"repobilityId": "68e9bf57f499a47b", "scanner": "scanner-primary", "fingerprint": "6816ed201462d200", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:107"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74a433e6b1b51fcf", "level": "note", "message": {"text": "Possibly dead Python function: check_urls_virustotal"}, "properties": {"repobilityId": "36417245fd351658", "scanner": "scanner-primary", "fingerprint": "74a433e6b1b51fcf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-phishing-reporting-button-workflow/scripts/agent.py:100"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b0cb014e9682ac9", "level": "note", "message": {"text": "Possibly dead Python function: test_introspection"}, "properties": {"repobilityId": "e43e722d0aa0250e", "scanner": "scanner-primary", "fingerprint": "0b0cb014e9682ac9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:34"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2432eded9007450e", "level": "note", "message": {"text": "Possibly dead Python function: test_query_depth"}, "properties": {"repobilityId": "47fbde8ccea6e566", "scanner": "scanner-primary", "fingerprint": "2432eded9007450e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:57"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1146da58f4e49e04", "level": "note", "message": {"text": "Possibly dead Python function: test_batch_queries"}, "properties": {"repobilityId": "74fded6e543d7fe2", "scanner": "scanner-primary", "fingerprint": "1146da58f4e49e04", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:72"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82ba8ab04ba41e07", "level": "note", "message": {"text": "Possibly dead Python function: test_field_suggestions"}, "properties": {"repobilityId": "d60d5d599296c507", "scanner": "scanner-primary", "fingerprint": "82ba8ab04ba41e07", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aacf561e2cdcf8c8", "level": "note", "message": {"text": "Possibly dead Python function: test_unauthorized_access"}, "properties": {"repobilityId": "1d0b2b5ac7fe9a06", "scanner": "scanner-primary", "fingerprint": "aacf561e2cdcf8c8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:109"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44c8f5794d71607f", "level": "note", "message": {"text": "Possibly dead Python function: test_alias_overloading"}, "properties": {"repobilityId": "74ddb43bcb1a00ad", "scanner": "scanner-primary", "fingerprint": "44c8f5794d71607f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-security-assessment/scripts/agent.py:139"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08f4cda6f76a04b0", "level": "note", "message": {"text": "Possibly dead Python function: list_auth_logs"}, "properties": {"repobilityId": "27aca58c3374269b", "scanner": "scanner-primary", "fingerprint": "08f4cda6f76a04b0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-multi-factor-authentication-with-duo/scripts/agent.py:53"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c9ccca0e145ebf6", "level": "note", "message": {"text": "Possibly dead Python function: analyze_auth_logs"}, "properties": {"repobilityId": "b566d0dc5228621d", "scanner": "scanner-primary", "fingerprint": "7c9ccca0e145ebf6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-multi-factor-authentication-with-duo/scripts/agent.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8617ad15d319103d", "level": "note", "message": {"text": "Possibly dead Python function: generate_server_cert"}, "properties": {"repobilityId": "7835423d2361474f", "scanner": "scanner-primary", "fingerprint": "8617ad15d319103d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-certificate-authority-with-openssl/scripts/agent.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4fe6866d5ffcc0e4", "level": "note", "message": {"text": "Possibly dead Python function: verify_chart_signature"}, "properties": {"repobilityId": "7aed12ed51506338", "scanner": "scanner-primary", "fingerprint": "4fe6866d5ffcc0e4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-helm-chart-deployments/scripts/agent.py:99"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d51c600e63f79e8e", "level": "note", "message": {"text": "Possibly dead Python function: scan_with_kubesec"}, "properties": {"repobilityId": "2c9722f357f89527", "scanner": "scanner-primary", "fingerprint": "d51c600e63f79e8e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-helm-chart-deployments/scripts/agent.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa297612ea883549", "level": "note", "message": {"text": "Possibly dead Python function: process_ra"}, "properties": {"repobilityId": "8475d5c7a170139a", "scanner": "scanner-primary", "fingerprint": "fa297612ea883549", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-ipv6-vulnerabilities/scripts/agent.py:53"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa2ae26e3f8c66c9", "level": "note", "message": {"text": "Possibly dead Python function: detect_tunnel"}, "properties": {"repobilityId": "fb33e5c021ee89f9", "scanner": "scanner-primary", "fingerprint": "fa2ae26e3f8c66c9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-ipv6-vulnerabilities/scripts/agent.py:118"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f274a527913eb08", "level": "note", "message": {"text": "Possibly dead Python function: parse_netflow_capture"}, "properties": {"repobilityId": "55ab5e235e58594a", "scanner": "scanner-primary", "fingerprint": "0f274a527913eb08", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-flow-data-with-netflow/scripts/agent.py:23"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2bb1d7c5130f1e4e", "level": "note", "message": {"text": "Possibly dead Python function: triangulate_image"}, "properties": {"repobilityId": "02e4ab8ea9a79e43", "scanner": "scanner-primary", "fingerprint": "2bb1d7c5130f1e4e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-image-provenance-verification-with-cosign/scripts/agent.py:78"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22e97bf6eca0d44d", "level": "note", "message": {"text": "Possibly dead Python function: deploy_aws_credential_token"}, "properties": {"repobilityId": "c646d75ffea270a2", "scanner": "scanner-primary", "fingerprint": "22e97bf6eca0d44d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeytokens-for-breach-detection/scripts/agent.py:65"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-63385066304d5c45", "level": "note", "message": {"text": "Possibly dead Python function: deploy_database_honeytoken"}, "properties": {"repobilityId": "59ddc8529cdf6b38", "scanner": "scanner-primary", "fingerprint": "63385066304d5c45", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeytokens-for-breach-detection/scripts/agent.py:84"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-227d36dbeda5a1f3", "level": "note", "message": {"text": "Possibly dead Python function: deploy_dns_token_in_config"}, "properties": {"repobilityId": "a82ea0c6203b6f9a", "scanner": "scanner-primary", "fingerprint": "227d36dbeda5a1f3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-honeytokens-for-breach-detection/scripts/agent.py:116"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d51a5f03533fb100", "level": "note", "message": {"text": "Possibly dead Python function: list_network_policies"}, "properties": {"repobilityId": "d95e7c83eb501cfc", "scanner": "scanner-primary", "fingerprint": "d51a5f03533fb100", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-kubernetes-network-policy-with-calico/scripts/agent.py:25"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b5cbf2c6b651acc", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/analyzing-linux-elf-malware/scripts/agent.py:21"}, "properties": {"repobilityId": "3c3fcf56d83d7f0f", "scanner": "scanner-primary", "fingerprint": "3b5cbf2c6b651acc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-ff56cbe298e6fae5", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/analyzing-ransomware-network-indicators/scripts/agent.py:58"}, "properties": {"repobilityId": "e8e0b2c1e15827bd", "scanner": "scanner-primary", "fingerprint": "ff56cbe298e6fae5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-4e3efa451b7a0a86", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/building-automated-malware-submission-pipeline/scripts/agent.py:21"}, "properties": {"repobilityId": "692f85bedf3b83ad", "scanner": "scanner-primary", "fingerprint": "4e3efa451b7a0a86", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-c69d3c6df4c00c51", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/building-devsecops-pipeline-with-gitlab-ci/scripts/process.py:27"}, "properties": {"repobilityId": "860d34dfa5c15628", "scanner": "scanner-primary", "fingerprint": "c69d3c6df4c00c51", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-10268ee3ed77f486", "level": "error", "message": {"text": "use defused xml \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/agent.py:7"}, "properties": {"repobilityId": "4a3cfb9510bc20c7", "scanner": "scanner-primary", "fingerprint": "10268ee3ed77f486", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b826eebb5e8a77a8", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26"}, "properties": {"repobilityId": "50cdee41c25726d6", "scanner": "scanner-primary", "fingerprint": "b826eebb5e8a77a8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-ea2d0ea4f1531425", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:28"}, "properties": {"repobilityId": "47f30e3aff84fa3c", "scanner": "scanner-primary", "fingerprint": "ea2d0ea4f1531425", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a4b19cca91e9c55c", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/building-red-team-c2-infrastructure-with-havoc/scripts/process.py:126"}, "properties": {"repobilityId": "b4b726518bdcef05", "scanner": "scanner-primary", "fingerprint": "a4b19cca91e9c55c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-425d5dda8f863e6e", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40"}, "properties": {"repobilityId": "eff52a48149667a8", "scanner": "scanner-primary", "fingerprint": "425d5dda8f863e6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-412b46fe4f884d68", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:44"}, "properties": {"repobilityId": "0dff8b09e4b0a9d6", "scanner": "scanner-primary", "fingerprint": "412b46fe4f884d68", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-cda5740a9ed6218e", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:89"}, "properties": {"repobilityId": "862dd47c8cc6727d", "scanner": "scanner-primary", "fingerprint": "cda5740a9ed6218e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-4399ed63e9872a6e", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:113"}, "properties": {"repobilityId": "f17d772e268c1092", "scanner": "scanner-primary", "fingerprint": "4399ed63e9872a6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-7de48c45226d4db0", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:129"}, "properties": {"repobilityId": "aa03421e8cf47760", "scanner": "scanner-primary", "fingerprint": "7de48c45226d4db0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-7f996b3d038e1399", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126"}, "properties": {"repobilityId": "3d0735c0bf87e345", "scanner": "scanner-primary", "fingerprint": "7f996b3d038e1399", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-17bdbb56bd05fce0", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82"}, "properties": {"repobilityId": "a63504fde3a05ff5", "scanner": "scanner-primary", "fingerprint": "17bdbb56bd05fce0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-7b581a10a6913ddb", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:74"}, "properties": {"repobilityId": "138641da3a3494ae", "scanner": "scanner-primary", "fingerprint": "7b581a10a6913ddb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-4a9d499d923c7adf", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:115"}, "properties": {"repobilityId": "235ad75879988eb8", "scanner": "scanner-primary", "fingerprint": "4a9d499d923c7adf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-139f1d6308921078", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-mobile-app-penetration-test/scripts/agent.py:121"}, "properties": {"repobilityId": "bbe7de65c68adc38", "scanner": "scanner-primary", "fingerprint": "139f1d6308921078", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-bd491d20aae79b67", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:25"}, "properties": {"repobilityId": "b4cc473a7da5a0f3", "scanner": "scanner-primary", "fingerprint": "bd491d20aae79b67", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-697387024c5d852b", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-social-engineering-penetration-test/scripts/agent.py:30"}, "properties": {"repobilityId": "fe5b626f4d09bb12", "scanner": "scanner-primary", "fingerprint": "697387024c5d852b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-0ab27e6768eba344", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:28"}, "properties": {"repobilityId": "47664b2a9b830e4d", "scanner": "scanner-primary", "fingerprint": "0ab27e6768eba344", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-f541451c7508d1d7", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/configuring-oauth2-authorization-flow/scripts/process.py:338"}, "properties": {"repobilityId": "840e5f41d3a2f569", "scanner": "scanner-primary", "fingerprint": "f541451c7508d1d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-bbaa3bd33bdd3742", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/correlating-security-events-in-qradar/scripts/agent.py:32"}, "properties": {"repobilityId": "d3a93c64f4e22098", "scanner": "scanner-primary", "fingerprint": "bbaa3bd33bdd3742", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-a212b9264a23f472", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/correlating-threat-campaigns/scripts/agent.py:32"}, "properties": {"repobilityId": "ff19de54b3e0ac4b", "scanner": "scanner-primary", "fingerprint": "a212b9264a23f472", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-108ef1d33827a636", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:36"}, "properties": {"repobilityId": "c9e8a1c56a4cf0c6", "scanner": "scanner-primary", "fingerprint": "108ef1d33827a636", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-d539b3d41d1ef438", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:51"}, "properties": {"repobilityId": "f390e4e648a03620", "scanner": "scanner-primary", "fingerprint": "d539b3d41d1ef438", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-dc3be0c7af494010", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/deploying-edr-agent-with-crowdstrike/scripts/process.py:90"}, "properties": {"repobilityId": "f9a899188a6e4793", "scanner": "scanner-primary", "fingerprint": "dc3be0c7af494010", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-ecf9ca2c6e34eed2", "level": "warning", "message": {"text": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:786"}, "properties": {"repobilityId": "ad46d8820238fb75", "scanner": "scanner-primary", "fingerprint": "ecf9ca2c6e34eed2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-fddd19ad64f9a0d6", "level": "warning", "message": {"text": "avoid pickle \u2014 skills/detecting-command-and-control-over-dns/scripts/agent.py:1069"}, "properties": {"repobilityId": "75a287bf10c5422b", "scanner": "scanner-primary", "fingerprint": "fddd19ad64f9a0d6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-39920d5c575b4820", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-credential-dumping-techniques/scripts/agent.py:7"}, "properties": {"repobilityId": "3d225c02b6ef140b", "scanner": "scanner-primary", "fingerprint": "39920d5c575b4820", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-3f595f75a85e7b0e", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-golden-ticket-forgery/scripts/agent.py:6"}, "properties": {"repobilityId": "1382fec813a901f5", "scanner": "scanner-primary", "fingerprint": "3f595f75a85e7b0e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-9c49fb8167872c78", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-living-off-the-land-attacks/scripts/agent.py:14"}, "properties": {"repobilityId": "a5e28dab4c61e6e6", "scanner": "scanner-primary", "fingerprint": "9c49fb8167872c78", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-935c3b6445dc8e29", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-malicious-scheduled-tasks-with-sysmon/scripts/agent.py:8"}, "properties": {"repobilityId": "7ff0be6fa1861bf2", "scanner": "scanner-primary", "fingerprint": "935c3b6445dc8e29", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-f3c0106271d5c9e9", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/detecting-mobile-malware-behavior/scripts/process.py:63"}, "properties": {"repobilityId": "12713f47568b8e1b", "scanner": "scanner-primary", "fingerprint": "f3c0106271d5c9e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-71325a4422e449fc", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-pass-the-ticket-attacks/scripts/agent.py:6"}, "properties": {"repobilityId": "f6815bd6d047ceb3", "scanner": "scanner-primary", "fingerprint": "71325a4422e449fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-c9501abfc0b39b5c", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-rdp-brute-force-attacks/scripts/agent.py:13"}, "properties": {"repobilityId": "3140bffb567baed2", "scanner": "scanner-primary", "fingerprint": "c9501abfc0b39b5c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b1456df9a502350c", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:175"}, "properties": {"repobilityId": "fc3b1c0cb6b58ca3", "scanner": "scanner-primary", "fingerprint": "b1456df9a502350c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-96ef99ee0a37a3ab", "level": "error", "message": {"text": "use defused xml \u2014 skills/detecting-wmi-persistence/scripts/agent.py:9"}, "properties": {"repobilityId": "7bc10b07cd778118", "scanner": "scanner-primary", "fingerprint": "96ef99ee0a37a3ab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-0904d4a002bac14c", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:107"}, "properties": {"repobilityId": "5c3fec1054d61b1a", "scanner": "scanner-primary", "fingerprint": "0904d4a002bac14c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-457755819bd53d56", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/evaluating-threat-intelligence-platforms/scripts/agent.py:137"}, "properties": {"repobilityId": "6902e4eeef73dce9", "scanner": "scanner-primary", "fingerprint": "457755819bd53d56", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-038faa0136310c40", "level": "warning", "message": {"text": "hardcoded password default argument \u2014 skills/exploiting-active-directory-with-bloodhound/scripts/agent.py:68"}, "properties": {"repobilityId": "5c27bcd078be52d7", "scanner": "scanner-primary", "fingerprint": "038faa0136310c40", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-a255176fecbd611d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47"}, "properties": {"repobilityId": "95205101167d1862", "scanner": "scanner-primary", "fingerprint": "a255176fecbd611d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-13e6cf5b93dd53a5", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:58"}, "properties": {"repobilityId": "eccc7a32f7643a42", "scanner": "scanner-primary", "fingerprint": "13e6cf5b93dd53a5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-04964a83991916e0", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:61"}, "properties": {"repobilityId": "2b020d658cbd6c66", "scanner": "scanner-primary", "fingerprint": "04964a83991916e0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-b2e0ceb96cc4a179", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-broken-function-level-authorization/scripts/agent.py:32"}, "properties": {"repobilityId": "9960f3cb0de901d9", "scanner": "scanner-primary", "fingerprint": "b2e0ceb96cc4a179", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-0275be8ee71b66ff", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:51"}, "properties": {"repobilityId": "685dc80cd71f92ba", "scanner": "scanner-primary", "fingerprint": "0275be8ee71b66ff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-8a8ad4e6455dcaa7", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-broken-link-hijacking/scripts/agent.py:98"}, "properties": {"repobilityId": "bcb6eb8a8388f5f4", "scanner": "scanner-primary", "fingerprint": "8a8ad4e6455dcaa7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-14a2eba1805f6135", "level": "error", "message": {"text": "use defused xml \u2014 skills/exploiting-deeplink-vulnerabilities/scripts/process.py:15"}, "properties": {"repobilityId": "a8ae1edd4babf249", "scanner": "scanner-primary", "fingerprint": "14a2eba1805f6135", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-8a818fa8c49d8b12", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80"}, "properties": {"repobilityId": "f455874464dde680", "scanner": "scanner-primary", "fingerprint": "8a818fa8c49d8b12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-3de0569abe67e890", "level": "error", "message": {"text": "use defused xml \u2014 skills/exploiting-insecure-data-storage-in-mobile/scripts/process.py:18"}, "properties": {"repobilityId": "d3992c4cbc6ea053", "scanner": "scanner-primary", "fingerprint": "3de0569abe67e890", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-bf74761d6fdb4c75", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:70"}, "properties": {"repobilityId": "1481234414d383de", "scanner": "scanner-primary", "fingerprint": "bf74761d6fdb4c75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-669c8db7e49a64b3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:97"}, "properties": {"repobilityId": "f7a98096c03e253f", "scanner": "scanner-primary", "fingerprint": "669c8db7e49a64b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-8c2bce7e62affeb6", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:118"}, "properties": {"repobilityId": "133221998fd88c99", "scanner": "scanner-primary", "fingerprint": "8c2bce7e62affeb6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-e38a37ff68521469", "level": "warning", "message": {"text": "avoid pickle \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:136"}, "properties": {"repobilityId": "6f50f8c801d99bdf", "scanner": "scanner-primary", "fingerprint": "e38a37ff68521469", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-a3fadc5ca54c3138", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-insecure-deserialization/scripts/agent.py:137"}, "properties": {"repobilityId": "c200883f25f324a9", "scanner": "scanner-primary", "fingerprint": "a3fadc5ca54c3138", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a7341575601b8eab", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29"}, "properties": {"repobilityId": "24ee1299f48e2318", "scanner": "scanner-primary", "fingerprint": "a7341575601b8eab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-b2fd0b6137cd184b", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:64"}, "properties": {"repobilityId": "f6f3e1c5d658567a", "scanner": "scanner-primary", "fingerprint": "b2fd0b6137cd184b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-9c1bdb94cda5b1da", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:66"}, "properties": {"repobilityId": "7a50889270e905cf", "scanner": "scanner-primary", "fingerprint": "9c1bdb94cda5b1da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-570301dba3be6cea", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:68"}, "properties": {"repobilityId": "5eb9af9e76984da6", "scanner": "scanner-primary", "fingerprint": "570301dba3be6cea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d2740457d6b22a95", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45"}, "properties": {"repobilityId": "c23d6690aa0175b8", "scanner": "scanner-primary", "fingerprint": "d2740457d6b22a95", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-8be08c37de0e07d3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:53"}, "properties": {"repobilityId": "435d110d32a0147f", "scanner": "scanner-primary", "fingerprint": "8be08c37de0e07d3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-1905aa694031b4c2", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:78"}, "properties": {"repobilityId": "2ee603c7197ff04e", "scanner": "scanner-primary", "fingerprint": "1905aa694031b4c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-269db5df0c3941df", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:85"}, "properties": {"repobilityId": "ef19089e55bec87a", "scanner": "scanner-primary", "fingerprint": "269db5df0c3941df", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-ee4cd448de40b0a9", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:29"}, "properties": {"repobilityId": "5f557b2fb4111db7", "scanner": "scanner-primary", "fingerprint": "ee4cd448de40b0a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-8f4dd8952c799402", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:69"}, "properties": {"repobilityId": "f6825131c449e506", "scanner": "scanner-primary", "fingerprint": "8f4dd8952c799402", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-c92b1e9336783500", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:96"}, "properties": {"repobilityId": "58f9a29e40c8cff2", "scanner": "scanner-primary", "fingerprint": "c92b1e9336783500", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-35bbadc785c4f671", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:101"}, "properties": {"repobilityId": "02c0c534d36f0181", "scanner": "scanner-primary", "fingerprint": "35bbadc785c4f671", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d9cb7dad71dd16ed", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:122"}, "properties": {"repobilityId": "b7c78fd5797506f7", "scanner": "scanner-primary", "fingerprint": "d9cb7dad71dd16ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-83241e13c0d7d21b", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:132"}, "properties": {"repobilityId": "7c24af883390bb26", "scanner": "scanner-primary", "fingerprint": "83241e13c0d7d21b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-e30f730afaf6ab2c", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:153"}, "properties": {"repobilityId": "9d2837d8c186b15b", "scanner": "scanner-primary", "fingerprint": "e30f730afaf6ab2c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-20cad192a492521f", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:154"}, "properties": {"repobilityId": "32063556db7fe3c5", "scanner": "scanner-primary", "fingerprint": "20cad192a492521f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-918769eb45e8cbb5", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-oauth-misconfiguration/scripts/agent.py:175"}, "properties": {"repobilityId": "651774fbfc8b03bb", "scanner": "scanner-primary", "fingerprint": "918769eb45e8cbb5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-015057d83afa9e98", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41"}, "properties": {"repobilityId": "84f464f6392ceb84", "scanner": "scanner-primary", "fingerprint": "015057d83afa9e98", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-ddade997290f60bb", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:77"}, "properties": {"repobilityId": "90f9badf1590b342", "scanner": "scanner-primary", "fingerprint": "ddade997290f60bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-94653a7c7d04b39c", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26"}, "properties": {"repobilityId": "42234bd9a6bf6885", "scanner": "scanner-primary", "fingerprint": "94653a7c7d04b39c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-96950b5457d03bf4", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:28"}, "properties": {"repobilityId": "cfdcc38d9612d52b", "scanner": "scanner-primary", "fingerprint": "96950b5457d03bf4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-fec6fc2724605fe2", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:30"}, "properties": {"repobilityId": "bfb12be41b1b5f73", "scanner": "scanner-primary", "fingerprint": "fec6fc2724605fe2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-b7c880cce17787b3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:49"}, "properties": {"repobilityId": "af6369a09dab75b2", "scanner": "scanner-primary", "fingerprint": "b7c880cce17787b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-f623639a30464eca", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-server-side-request-forgery/scripts/agent.py:52"}, "properties": {"repobilityId": "674be9b6c6994ac4", "scanner": "scanner-primary", "fingerprint": "f623639a30464eca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-9c1a81fc123a1815", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146"}, "properties": {"repobilityId": "f5d5eeb70605d63b", "scanner": "scanner-primary", "fingerprint": "9c1a81fc123a1815", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-3bcfec8022189094", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:147"}, "properties": {"repobilityId": "be83a8758aafb18a", "scanner": "scanner-primary", "fingerprint": "3bcfec8022189094", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-7e43cb05a31b8122", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:158"}, "properties": {"repobilityId": "d13d9bc18ba7e667", "scanner": "scanner-primary", "fingerprint": "7e43cb05a31b8122", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6dfca331a27ec7c1", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-template-injection-vulnerabilities/scripts/agent.py:161"}, "properties": {"repobilityId": "44ae7df4303ca01e", "scanner": "scanner-primary", "fingerprint": "6dfca331a27ec7c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-875574385e500df7", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:49"}, "properties": {"repobilityId": "d2141f2bfdba65cb", "scanner": "scanner-primary", "fingerprint": "875574385e500df7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d9f190b72567a71b", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:60"}, "properties": {"repobilityId": "a863e1e1d70f9e5f", "scanner": "scanner-primary", "fingerprint": "d9f190b72567a71b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d9edd94293371cc3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:88"}, "properties": {"repobilityId": "602267409ae4c0c9", "scanner": "scanner-primary", "fingerprint": "d9edd94293371cc3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-b727b832050907c7", "level": "warning", "message": {"text": "hardcoded password default argument \u2014 skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:29"}, "properties": {"repobilityId": "85b35ee42b22760b", "scanner": "scanner-primary", "fingerprint": "b727b832050907c7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-1d2ee593b8cd0661", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33"}, "properties": {"repobilityId": "1f66cb6f14def4be", "scanner": "scanner-primary", "fingerprint": "1d2ee593b8cd0661", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-3e5e01e8b755d8be", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/exploiting-websocket-vulnerabilities/scripts/agent.py:54"}, "properties": {"repobilityId": "e154b7f6d8ae4ef7", "scanner": "scanner-primary", "fingerprint": "3e5e01e8b755d8be", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-3de062c5784374e4", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/extracting-config-from-agent-tesla-rat/scripts/agent.py:30"}, "properties": {"repobilityId": "d4b3c29f9b01c702", "scanner": "scanner-primary", "fingerprint": "3de062c5784374e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-1951e93557b476df", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/extracting-iocs-from-malware-samples/scripts/agent.py:51"}, "properties": {"repobilityId": "f4ab4c702dc5d006", "scanner": "scanner-primary", "fingerprint": "1951e93557b476df", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-0b73cba8a38b879a", "level": "error", "message": {"text": "use defused xml \u2014 skills/hardening-linux-endpoint-with-cis-benchmark/scripts/process.py:4"}, "properties": {"repobilityId": "82f537a250636db6", "scanner": "scanner-primary", "fingerprint": "0b73cba8a38b879a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b703c2b8069c5b2b", "level": "error", "message": {"text": "use defused xml \u2014 skills/hardening-windows-endpoint-with-cis-benchmark/scripts/process.py:9"}, "properties": {"repobilityId": "74f991c388976946", "scanner": "scanner-primary", "fingerprint": "b703c2b8069c5b2b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-6b66281054b92477", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-dcsync-attacks/scripts/agent.py:9"}, "properties": {"repobilityId": "2cd3abeba489e8c6", "scanner": "scanner-primary", "fingerprint": "6b66281054b92477", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-14431fb2915de911", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-lateral-movement-via-wmi/scripts/agent.py:14"}, "properties": {"repobilityId": "b8e04183934562aa", "scanner": "scanner-primary", "fingerprint": "14431fb2915de911", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-66e6208423056e21", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-living-off-the-land-binaries/scripts/process.py:18"}, "properties": {"repobilityId": "0d31d88d42a9257e", "scanner": "scanner-primary", "fingerprint": "66e6208423056e21", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-28102c973ff5d380", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-shadow-copy-deletion/scripts/agent.py:7"}, "properties": {"repobilityId": "4acc708e1ac325bf", "scanner": "scanner-primary", "fingerprint": "28102c973ff5d380", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-67ba8579ae3827e7", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-suspicious-scheduled-tasks/scripts/agent.py:7"}, "properties": {"repobilityId": "2086e23451d0c4f3", "scanner": "scanner-primary", "fingerprint": "67ba8579ae3827e7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-fa1b0ea70bf8e880", "level": "error", "message": {"text": "use defused xml \u2014 skills/hunting-for-t1098-account-manipulation/scripts/agent.py:13"}, "properties": {"repobilityId": "9e22fc5def8366b8", "scanner": "scanner-primary", "fingerprint": "fa1b0ea70bf8e880", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-d9b0fce8691325ee", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/agent.py:7"}, "properties": {"repobilityId": "a4c98c88cf14b66d", "scanner": "scanner-primary", "fingerprint": "d9b0fce8691325ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-228b4c976a028159", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-application-whitelisting-with-applocker/scripts/process.py:13"}, "properties": {"repobilityId": "72368f8738b4e2d4", "scanner": "scanner-primary", "fingerprint": "228b4c976a028159", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-2429a68370a4e3c0", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-dmarc-dkim-spf-email-security/scripts/process.py:17"}, "properties": {"repobilityId": "8d30ef9470428d5c", "scanner": "scanner-primary", "fingerprint": "2429a68370a4e3c0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-c0444b82ddaefc6e", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/implementing-github-advanced-security-for-code-scanning/scripts/process.py:34"}, "properties": {"repobilityId": "277e3e28c06f1e21", "scanner": "scanner-primary", "fingerprint": "c0444b82ddaefc6e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-e9c8d81f80f59596", "level": "warning", "message": {"text": "render template string \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:561"}, "properties": {"repobilityId": "faa272bba29e2291", "scanner": "scanner-primary", "fingerprint": "e9c8d81f80f59596", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "flask"]}}, {"ruleId": "scanner-6d0750c2e9830e16", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/agent.py:8"}, "properties": {"repobilityId": "5f2f2f6d871631f5", "scanner": "scanner-primary", "fingerprint": "6d0750c2e9830e16", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-920801af82b6f1ff", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:8"}, "properties": {"repobilityId": "fd2608ced78ca6a3", "scanner": "scanner-primary", "fingerprint": "920801af82b6f1ff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-1fa7728fddca212e", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/implementing-next-generation-firewall-with-palo-alto/scripts/process.py:42"}, "properties": {"repobilityId": "a4f078244ced310a", "scanner": "scanner-primary", "fingerprint": "1fa7728fddca212e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-8ebda1b116b24864", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/agent.py:13"}, "properties": {"repobilityId": "40c7eb83d2e20577", "scanner": "scanner-primary", "fingerprint": "8ebda1b116b24864", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b2f6566662bd3dc2", "level": "error", "message": {"text": "use defused xml \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:10"}, "properties": {"repobilityId": "28d6365dc729915c", "scanner": "scanner-primary", "fingerprint": "b2f6566662bd3dc2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-e350641f32ed907c", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/implementing-saml-sso-with-okta/scripts/process.py:311"}, "properties": {"repobilityId": "3a9bd1611a6b8dcd", "scanner": "scanner-primary", "fingerprint": "e350641f32ed907c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-3b83d3f27505d963", "level": "warning", "message": {"text": "avoid_app_run_with_bad_host \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "properties": {"repobilityId": "1916fe8ca7558aff", "scanner": "scanner-primary", "fingerprint": "3b83d3f27505d963", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "flask"]}}, {"ruleId": "scanner-a5698dc018472649", "level": "warning", "message": {"text": "debug enabled \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "properties": {"repobilityId": "9595a8bb1c5ae76a", "scanner": "scanner-primary", "fingerprint": "a5698dc018472649", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "flask"]}}, {"ruleId": "scanner-336c9cd521acbd07", "level": "warning", "message": {"text": "hardcoded password default argument \u2014 skills/implementing-vulnerability-management-with-greenbone/scripts/agent.py:23"}, "properties": {"repobilityId": "c70c52a1413ae1c7", "scanner": "scanner-primary", "fingerprint": "336c9cd521acbd07", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-4074e02682becba5", "level": "warning", "message": {"text": "hardcoded password default argument \u2014 skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py:85"}, "properties": {"repobilityId": "8b00e32e1649f633", "scanner": "scanner-primary", "fingerprint": "4074e02682becba5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-ae7062681ac41ff0", "level": "error", "message": {"text": "use defused xml \u2014 skills/intercepting-mobile-traffic-with-burpsuite/scripts/process.py:17"}, "properties": {"repobilityId": "42ca9804a6831ec5", "scanner": "scanner-primary", "fingerprint": "ae7062681ac41ff0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-9b202c65dff84db4", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-active-directory-compromise-investigation/scripts/process.py:11"}, "properties": {"repobilityId": "c5329b168f0905cb", "scanner": "scanner-primary", "fingerprint": "9b202c65dff84db4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-b8da75f18b97ff5a", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/agent.py:8"}, "properties": {"repobilityId": "e488ac74d8926b0b", "scanner": "scanner-primary", "fingerprint": "b8da75f18b97ff5a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-95ccecf0d634022a", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-active-directory-vulnerability-assessment/scripts/process.py:13"}, "properties": {"repobilityId": "a9951ffdf471febe", "scanner": "scanner-primary", "fingerprint": "95ccecf0d634022a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-05f084cd2ac81c3c", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/agent.py:6"}, "properties": {"repobilityId": "aa06353b4eba7a4f", "scanner": "scanner-primary", "fingerprint": "05f084cd2ac81c3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-0cc97f3c66d9a198", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-authenticated-scan-with-openvas/scripts/process.py:12"}, "properties": {"repobilityId": "562428987c7860ae", "scanner": "scanner-primary", "fingerprint": "0cc97f3c66d9a198", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-703b6ef3214df675", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-dark-web-monitoring-for-threats/scripts/agent.py:90"}, "properties": {"repobilityId": "361f1d262e762376", "scanner": "scanner-primary", "fingerprint": "703b6ef3214df675", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-71a2e15fd3b14be6", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-dmarc-policy-enforcement-rollout/scripts/process.py:19"}, "properties": {"repobilityId": "07b1a1051f31e387", "scanner": "scanner-primary", "fingerprint": "71a2e15fd3b14be6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-bfe868b0076bb2c3", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-endpoint-forensics-investigation/scripts/agent.py:109"}, "properties": {"repobilityId": "1249cab02538bb2d", "scanner": "scanner-primary", "fingerprint": "bfe868b0076bb2c3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-4deb6b8df031b092", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:60"}, "properties": {"repobilityId": "4a88e4e9dde892a6", "scanner": "scanner-primary", "fingerprint": "4deb6b8df031b092", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-58f1d2891ea00502", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/performing-endpoint-vulnerability-remediation/scripts/process.py:78"}, "properties": {"repobilityId": "9ea9478844ad48e0", "scanner": "scanner-primary", "fingerprint": "58f1d2891ea00502", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-7a946b76e795aab7", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-external-network-penetration-test/scripts/agent.py:46"}, "properties": {"repobilityId": "f83760a4de739242", "scanner": "scanner-primary", "fingerprint": "7a946b76e795aab7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-66019454b62887da", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-hash-cracking-with-hashcat/scripts/process.py:128"}, "properties": {"repobilityId": "1c1ca86ce0b190e3", "scanner": "scanner-primary", "fingerprint": "66019454b62887da", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-6fdc12d43b1e5deb", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-kerberoasting-attack/scripts/agent.py:119"}, "properties": {"repobilityId": "26ca1712bed64131", "scanner": "scanner-primary", "fingerprint": "6fdc12d43b1e5deb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-555c4d585d22a74b", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-lateral-movement-with-wmiexec/scripts/agent.py:14"}, "properties": {"repobilityId": "21ce6e1ced286e8c", "scanner": "scanner-primary", "fingerprint": "555c4d585d22a74b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-10b82799913f24b3", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-log-analysis-for-forensic-investigation/scripts/agent.py:30"}, "properties": {"repobilityId": "bfb2c6849e5c7a78", "scanner": "scanner-primary", "fingerprint": "10b82799913f24b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-5345b64fdbee615b", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-hash-enrichment-with-virustotal/scripts/agent.py:97"}, "properties": {"repobilityId": "e2689990a215b62f", "scanner": "scanner-primary", "fingerprint": "5345b64fdbee615b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-26f9879e78d27b7b", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/agent.py:72"}, "properties": {"repobilityId": "99bae05c84eb3f96", "scanner": "scanner-primary", "fingerprint": "26f9879e78d27b7b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-848f1c30a7a1bcd3", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-malware-ioc-extraction/scripts/process.py:65"}, "properties": {"repobilityId": "b8d1fdf5593f8c5b", "scanner": "scanner-primary", "fingerprint": "848f1c30a7a1bcd3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-c12def8788358e1f", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-malware-persistence-investigation/scripts/agent.py:10"}, "properties": {"repobilityId": "73415ca76db5ba81", "scanner": "scanner-primary", "fingerprint": "c12def8788358e1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-a182a2584d4857fb", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-ot-network-security-assessment/scripts/agent.py:93"}, "properties": {"repobilityId": "4df0fec41768cf10", "scanner": "scanner-primary", "fingerprint": "a182a2584d4857fb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-14d48f01d4ad51a7", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-ot-vulnerability-scanning-safely/scripts/agent.py:95"}, "properties": {"repobilityId": "eebea3b44e9e30bc", "scanner": "scanner-primary", "fingerprint": "14d48f01d4ad51a7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-be92898b62ac72ee", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:39"}, "properties": {"repobilityId": "14504b4c05ffb70d", "scanner": "scanner-primary", "fingerprint": "be92898b62ac72ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-b1aac3922cddfbbd", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-red-team-with-covenant/scripts/agent.py:55"}, "properties": {"repobilityId": "847f3a47c6b16260", "scanner": "scanner-primary", "fingerprint": "b1aac3922cddfbbd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-0fa1f00d80bba411", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/performing-scada-hmi-security-assessment/scripts/agent.py:72"}, "properties": {"repobilityId": "be7dad95a0b88cbf", "scanner": "scanner-primary", "fingerprint": "0fa1f00d80bba411", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-5289f0d242f94bb6", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42"}, "properties": {"repobilityId": "dc0befa4e05fcb04", "scanner": "scanner-primary", "fingerprint": "5289f0d242f94bb6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-ac58afa0b440260c", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:53"}, "properties": {"repobilityId": "608cc46da21d65ec", "scanner": "scanner-primary", "fingerprint": "ac58afa0b440260c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-0393633bdce45cc8", "level": "error", "message": {"text": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:100"}, "properties": {"repobilityId": "2d7e52c56b141957", "scanner": "scanner-primary", "fingerprint": "0393633bdce45cc8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-a75296ca4c53c32d", "level": "error", "message": {"text": "subprocess shell true \u2014 skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:131"}, "properties": {"repobilityId": "afdc93b9f8cde2af", "scanner": "scanner-primary", "fingerprint": "a75296ca4c53c32d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-16a8e79686f137db", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:21"}, "properties": {"repobilityId": "91f1573a21d9c132", "scanner": "scanner-primary", "fingerprint": "16a8e79686f137db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-cc8735c17e1c07d9", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:43"}, "properties": {"repobilityId": "d88a59ecfbd924ac", "scanner": "scanner-primary", "fingerprint": "cc8735c17e1c07d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6890ff6ad7ed136d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:72"}, "properties": {"repobilityId": "4c092cfb81e45971", "scanner": "scanner-primary", "fingerprint": "6890ff6ad7ed136d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-de153bd10f78df02", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:81"}, "properties": {"repobilityId": "53035d18c0b94f0b", "scanner": "scanner-primary", "fingerprint": "de153bd10f78df02", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-87fac1a743881c82", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:99"}, "properties": {"repobilityId": "9e702cdc5f2832c5", "scanner": "scanner-primary", "fingerprint": "87fac1a743881c82", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-5ae2e3251897374d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:151"}, "properties": {"repobilityId": "42631f939ffaa5d9", "scanner": "scanner-primary", "fingerprint": "5ae2e3251897374d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-418f74111d194786", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-application-penetration-test/scripts/agent.py:177"}, "properties": {"repobilityId": "d59e6b1a8faadff2", "scanner": "scanner-primary", "fingerprint": "418f74111d194786", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6394dcbec1df206b", "level": "error", "message": {"text": "use defused xml \u2014 skills/performing-web-application-scanning-with-nikto/scripts/agent.py:12"}, "properties": {"repobilityId": "d1f57931360520ff", "scanner": "scanner-primary", "fingerprint": "6394dcbec1df206b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-77dd39aff578e8ae", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:29"}, "properties": {"repobilityId": "4b4bb3d1e6d29223", "scanner": "scanner-primary", "fingerprint": "77dd39aff578e8ae", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-389f1cb4ea9c42e3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:66"}, "properties": {"repobilityId": "fc970c4aaa492e3d", "scanner": "scanner-primary", "fingerprint": "389f1cb4ea9c42e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-2786cc2f91522269", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:101"}, "properties": {"repobilityId": "f6e4b06e13ff6f30", "scanner": "scanner-primary", "fingerprint": "2786cc2f91522269", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d427a18f0395addb", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:106"}, "properties": {"repobilityId": "fb3ef4e00cb4fe8f", "scanner": "scanner-primary", "fingerprint": "d427a18f0395addb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a3d259c3adb8e7e6", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:132"}, "properties": {"repobilityId": "0e7450c077a29765", "scanner": "scanner-primary", "fingerprint": "a3d259c3adb8e7e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-3543fa68de1682d8", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/performing-web-cache-poisoning-attack/scripts/agent.py:157"}, "properties": {"repobilityId": "7673ccf1b39b522e", "scanner": "scanner-primary", "fingerprint": "3543fa68de1682d8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6a37f5ae063b88f7", "level": "warning", "message": {"text": "hardcoded password default argument \u2014 skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py:20"}, "properties": {"repobilityId": "50ac33c9e84c913f", "scanner": "scanner-primary", "fingerprint": "6a37f5ae063b88f7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-4ab21a1b4ac8a0e1", "level": "error", "message": {"text": "use defused xml \u2014 skills/reverse-engineering-android-malware-with-jadx/scripts/agent.py:9"}, "properties": {"repobilityId": "75ac5217c7b23b0f", "scanner": "scanner-primary", "fingerprint": "4ab21a1b4ac8a0e1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-46f5d869d8f6fd66", "level": "warning", "message": {"text": "insecure hash algorithm sha1 \u2014 skills/reverse-engineering-malware-with-ghidra/scripts/agent.py:23"}, "properties": {"repobilityId": "6c6e06ae910178bc", "scanner": "scanner-primary", "fingerprint": "46f5d869d8f6fd66", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-98d00db1dfe1eb40", "level": "warning", "message": {"text": "dynamic urllib use detected \u2014 skills/securing-container-registry-with-harbor/scripts/process.py:48"}, "properties": {"repobilityId": "8a8b466d17bfac7d", "scanner": "scanner-primary", "fingerprint": "98d00db1dfe1eb40", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-3249b27dae73846d", "level": "error", "message": {"text": "use defused xml \u2014 skills/testing-android-intents-for-vulnerabilities/scripts/process.py:15"}, "properties": {"repobilityId": "451d84bb0a964704", "scanner": "scanner-primary", "fingerprint": "3249b27dae73846d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-144fc9cb2f6d4835", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:24"}, "properties": {"repobilityId": "442386ae49d2908f", "scanner": "scanner-primary", "fingerprint": "144fc9cb2f6d4835", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a3cbc7a7853be958", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:46"}, "properties": {"repobilityId": "907c33d0c61d838e", "scanner": "scanner-primary", "fingerprint": "a3cbc7a7853be958", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-e9792fc97d3b8856", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:71"}, "properties": {"repobilityId": "4e879b12fa71e28d", "scanner": "scanner-primary", "fingerprint": "e9792fc97d3b8856", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-60c3873edbf338f7", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:91"}, "properties": {"repobilityId": "e2faabe34304c05a", "scanner": "scanner-primary", "fingerprint": "60c3873edbf338f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-e020e9c2914593f7", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:116"}, "properties": {"repobilityId": "b632120abdbe94b0", "scanner": "scanner-primary", "fingerprint": "e020e9c2914593f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-ee7f5c058f062e32", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-broken-access-control/scripts/agent.py:139"}, "properties": {"repobilityId": "78950eb39cf5fa65", "scanner": "scanner-primary", "fingerprint": "ee7f5c058f062e32", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-93f7c218103f0f8e", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30"}, "properties": {"repobilityId": "fa1ad3b3f97486a5", "scanner": "scanner-primary", "fingerprint": "93f7c218103f0f8e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-bece0aa71ecdd994", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:58"}, "properties": {"repobilityId": "0eca6132b468057b", "scanner": "scanner-primary", "fingerprint": "bece0aa71ecdd994", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-969f75e5491381b3", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:79"}, "properties": {"repobilityId": "85a1eecd90f2c970", "scanner": "scanner-primary", "fingerprint": "969f75e5491381b3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-f7fe1ce23d730a3d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:104"}, "properties": {"repobilityId": "c81af1146d98bd0d", "scanner": "scanner-primary", "fingerprint": "f7fe1ce23d730a3d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-577da2e8808db004", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:130"}, "properties": {"repobilityId": "9b1e782eff9a47be", "scanner": "scanner-primary", "fingerprint": "577da2e8808db004", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-2349a0f0e9b6ed1d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:159"}, "properties": {"repobilityId": "375c5371571da3e4", "scanner": "scanner-primary", "fingerprint": "2349a0f0e9b6ed1d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-f761cebba4e149e4", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:37"}, "properties": {"repobilityId": "25cd76b3f67e98eb", "scanner": "scanner-primary", "fingerprint": "f761cebba4e149e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-1ea21f5875642d32", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:49"}, "properties": {"repobilityId": "4c07e72b215485cf", "scanner": "scanner-primary", "fingerprint": "1ea21f5875642d32", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-d03b3136e9daebaf", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:78"}, "properties": {"repobilityId": "a411f49254ea60fe", "scanner": "scanner-primary", "fingerprint": "d03b3136e9daebaf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-cb330c9903621a4a", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:100"}, "properties": {"repobilityId": "0d7482ae0f98ccf3", "scanner": "scanner-primary", "fingerprint": "cb330c9903621a4a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-78666fd1fe4097b4", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:122"}, "properties": {"repobilityId": "85c20a3ed1e55eeb", "scanner": "scanner-primary", "fingerprint": "78666fd1fe4097b4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-daa5b7e9d9ea4736", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:140"}, "properties": {"repobilityId": "64e3e2bb623cef99", "scanner": "scanner-primary", "fingerprint": "daa5b7e9d9ea4736", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6662c57c23512ef0", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:155"}, "properties": {"repobilityId": "49779d43bf3e2900", "scanner": "scanner-primary", "fingerprint": "6662c57c23512ef0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-99867b2febac57c9", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-sensitive-data-exposure/scripts/agent.py:181"}, "properties": {"repobilityId": "15db1c01f1ba175f", "scanner": "scanner-primary", "fingerprint": "99867b2febac57c9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a20bcdba591472cc", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36"}, "properties": {"repobilityId": "67e1ffd4df2da1a7", "scanner": "scanner-primary", "fingerprint": "a20bcdba591472cc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-f16be7a8e1eb8137", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:61"}, "properties": {"repobilityId": "be3e2892f6ea2a1b", "scanner": "scanner-primary", "fingerprint": "f16be7a8e1eb8137", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-0c6a791e5a11789e", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:77"}, "properties": {"repobilityId": "f898b5bf4209da90", "scanner": "scanner-primary", "fingerprint": "0c6a791e5a11789e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6ec1825fbafc65d4", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:102"}, "properties": {"repobilityId": "b2b4b37d4b9bfe4a", "scanner": "scanner-primary", "fingerprint": "6ec1825fbafc65d4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-c36df730869cfbd2", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:105"}, "properties": {"repobilityId": "2237c39c624e2fc1", "scanner": "scanner-primary", "fingerprint": "c36df730869cfbd2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-05a24aaf0867bbeb", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:124"}, "properties": {"repobilityId": "b256809c2f01cc45", "scanner": "scanner-primary", "fingerprint": "05a24aaf0867bbeb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6069c271adb2433d", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:70"}, "properties": {"repobilityId": "8d329807660470bd", "scanner": "scanner-primary", "fingerprint": "6069c271adb2433d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-41d6be3f11156ea5", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:76"}, "properties": {"repobilityId": "5ce956bbbd09bd54", "scanner": "scanner-primary", "fingerprint": "41d6be3f11156ea5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-a0d275655585a99f", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:87"}, "properties": {"repobilityId": "4b32d25fc3327c5b", "scanner": "scanner-primary", "fingerprint": "a0d275655585a99f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-51b835f711402c62", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:116"}, "properties": {"repobilityId": "d8da41b45fadef57", "scanner": "scanner-primary", "fingerprint": "51b835f711402c62", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-641b583cb5f0af71", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:119"}, "properties": {"repobilityId": "9d4aa091c4b2c4b8", "scanner": "scanner-primary", "fingerprint": "641b583cb5f0af71", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-10291594ee511bb1", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xss-vulnerabilities/scripts/agent.py:139"}, "properties": {"repobilityId": "0eaf66a56b8296c0", "scanner": "scanner-primary", "fingerprint": "10291594ee511bb1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-96fd2bca603ab386", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75"}, "properties": {"repobilityId": "f01412ba754c8e6f", "scanner": "scanner-primary", "fingerprint": "96fd2bca603ab386", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-fe84df023fec91f8", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:94"}, "properties": {"repobilityId": "78c98bfe159a5961", "scanner": "scanner-primary", "fingerprint": "fe84df023fec91f8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-bc8d72e9896889bf", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:96"}, "properties": {"repobilityId": "2c9f1b2dab4fbf56", "scanner": "scanner-primary", "fingerprint": "bc8d72e9896889bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-415d5a272922db86", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:130"}, "properties": {"repobilityId": "086a55203304e9b8", "scanner": "scanner-primary", "fingerprint": "415d5a272922db86", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-6a1a8ac63c81d911", "level": "error", "message": {"text": "disabled cert validation \u2014 skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:172"}, "properties": {"repobilityId": "2d13847dd70dca36", "scanner": "scanner-primary", "fingerprint": "6a1a8ac63c81d911", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "requests"]}}, {"ruleId": "scanner-2018940fe825ca11", "level": "error", "message": {"text": "use defused xml \u2014 skills/triaging-vulnerabilities-with-ssvc-framework/scripts/process.py:13"}, "properties": {"repobilityId": "dd7429a9169728bb", "scanner": "scanner-primary", "fingerprint": "2018940fe825ca11", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-477ba3c16fba732f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-excessive-data-exposure-in-api/SKILL.md"}, "properties": {"repobilityId": "86a09db1b035a5fa", "scanner": "scanner-primary", "fingerprint": "477ba3c16fba732f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-excessive-data-exposure-in-api/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2b6d2e62e95011b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-schema-validation-security/SKILL.md"}, "properties": {"repobilityId": "e4cdf0b0f12e3822", "scanner": "scanner-primary", "fingerprint": "d2b6d2e62e95011b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-schema-validation-security/SKILL.md"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-523b7614b8db38a2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/implementing-api-schema-validation-security/SKILL.md"}, "properties": {"repobilityId": "5daa1917d21bb868", "scanner": "scanner-primary", "fingerprint": "523b7614b8db38a2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-schema-validation-security/SKILL.md"}, "region": {"startLine": 405}}}]}, {"ruleId": "scanner-88c1dd98b4ad4f55", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-t1003-credential-dumping-with-edr/SKILL.md"}, "properties": {"repobilityId": "d9ab9ff61328d7da", "scanner": "scanner-primary", "fingerprint": "88c1dd98b4ad4f55", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-t1003-credential-dumping-with-edr/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b50ca1afeac5158c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-landscape-assessment-for-sector/SKILL.md"}, "properties": {"repobilityId": "eef62f53b223c8d4", "scanner": "scanner-primary", "fingerprint": "b50ca1afeac5158c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-landscape-assessment-for-sector/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0cdb2ed9b5d12bf8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-helm-chart-deployments/SKILL.md"}, "properties": {"repobilityId": "9de09ac08e0cffd9", "scanner": "scanner-primary", "fingerprint": "0cdb2ed9b5d12bf8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-helm-chart-deployments/SKILL.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-6aff9621022b47b6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-ipv6-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "5e22b890da0d6ffe", "scanner": "scanner-primary", "fingerprint": "6aff9621022b47b6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-ipv6-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7783ddd4d5b8f641", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-service-account-abuse/SKILL.md"}, "properties": {"repobilityId": "206050b1296fc7bd", "scanner": "scanner-primary", "fingerprint": "7783ddd4d5b8f641", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-service-account-abuse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a846d6a1aea6e76", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-lateral-movement-with-wmiexec/SKILL.md"}, "properties": {"repobilityId": "e376237fca0c14a5", "scanner": "scanner-primary", "fingerprint": "2a846d6a1aea6e76", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-lateral-movement-with-wmiexec/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd94eee8c13c2e83", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-image-provenance-verification-with-cosign/SKILL.md"}, "properties": {"repobilityId": "2d9d92ca9bbd8621", "scanner": "scanner-primary", "fingerprint": "cd94eee8c13c2e83", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-image-provenance-verification-with-cosign/SKILL.md"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-4355c847eea0db79", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-kubernetes-cis-benchmark-with-kube-bench/SKILL.md"}, "properties": {"repobilityId": "64460af582590384", "scanner": "scanner-primary", "fingerprint": "4355c847eea0db79", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-kubernetes-cis-benchmark-with-kube-bench/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-864b4f98d6aa97a2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-log-source-onboarding-in-siem/SKILL.md"}, "properties": {"repobilityId": "76d6ff95f840691f", "scanner": "scanner-primary", "fingerprint": "864b4f98d6aa97a2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-log-source-onboarding-in-siem/SKILL.md"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-b47221a5db95e236", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "properties": {"repobilityId": "f9f3534a23cf6c8e", "scanner": "scanner-primary", "fingerprint": "b47221a5db95e236", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f2af8689b492747", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "properties": {"repobilityId": "319333488bc6ee36", "scanner": "scanner-primary", "fingerprint": "5f2af8689b492747", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-security-testing-with-42crunch/SKILL.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-cefa7e4904d610f5", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/prioritizing-vulnerabilities-with-cvss-scoring/SKILL.md"}, "properties": {"repobilityId": "5b3e560ca8b34454", "scanner": "scanner-primary", "fingerprint": "cefa7e4904d610f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/prioritizing-vulnerabilities-with-cvss-scoring/SKILL.md"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-bd4699b8e4241a16", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-stix-taxii-feed-integration/SKILL.md"}, "properties": {"repobilityId": "098c6acc9318ed35", "scanner": "scanner-primary", "fingerprint": "bd4699b8e4241a16", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-stix-taxii-feed-integration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2ed5f4c2ca1355fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-container-image-hardening/SKILL.md"}, "properties": {"repobilityId": "0b9c97ac0f4a2eba", "scanner": "scanner-primary", "fingerprint": "2ed5f4c2ca1355fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-container-image-hardening/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04fac5f8c3ef5234", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/configuring-aws-verified-access-for-ztna/SKILL.md"}, "properties": {"repobilityId": "3c2d7f2123495b90", "scanner": "scanner-primary", "fingerprint": "04fac5f8c3ef5234", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-aws-verified-access-for-ztna/SKILL.md"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-5b8608373af5b23c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-disk-encryption-with-bitlocker/SKILL.md"}, "properties": {"repobilityId": "d5ec4bc5899d0fdc", "scanner": "scanner-primary", "fingerprint": "5b8608373af5b23c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-disk-encryption-with-bitlocker/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-e59ec91e936ae6c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-linux-system-artifacts/SKILL.md"}, "properties": {"repobilityId": "4a2649bdb9a8a1fc", "scanner": "scanner-primary", "fingerprint": "e59ec91e936ae6c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-system-artifacts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd83b451954a44f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-unusual-network-connections/SKILL.md"}, "properties": {"repobilityId": "261263209ef4a26a", "scanner": "scanner-primary", "fingerprint": "fd83b451954a44f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-unusual-network-connections/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4343ee536aae7b2f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "properties": {"repobilityId": "d96aaba85324809d", "scanner": "scanner-primary", "fingerprint": "4343ee536aae7b2f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-e52edb73194bd0c7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/collecting-indicators-of-compromise/SKILL.md"}, "properties": {"repobilityId": "8a534862dcc4793b", "scanner": "scanner-primary", "fingerprint": "e52edb73194bd0c7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/collecting-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e901b2cb3cefb9a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-kerberoasting-attack/SKILL.md"}, "properties": {"repobilityId": "e4f61a017f74d8b2", "scanner": "scanner-primary", "fingerprint": "2e901b2cb3cefb9a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-kerberoasting-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27c05850cc316c1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-kerberoasting-attacks/SKILL.md"}, "properties": {"repobilityId": "5be7b8e31f9bf938", "scanner": "scanner-primary", "fingerprint": "27c05850cc316c1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-kerberoasting-attacks/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4433ed9c50aa63fc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-network-anomalies-with-zeek/SKILL.md"}, "properties": {"repobilityId": "835872efd0e020f0", "scanner": "scanner-primary", "fingerprint": "4433ed9c50aa63fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-network-anomalies-with-zeek/SKILL.md"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-02b4dc85db0180a8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-dns-enumeration-and-zone-transfer/SKILL.md"}, "properties": {"repobilityId": "bcb6a485a8929903", "scanner": "scanner-primary", "fingerprint": "02b4dc85db0180a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-dns-enumeration-and-zone-transfer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-472ba2f5e82b8bd1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-pass-the-hash-attacks/SKILL.md"}, "properties": {"repobilityId": "8818501e0850fc61", "scanner": "scanner-primary", "fingerprint": "472ba2f5e82b8bd1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-pass-the-hash-attacks/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-450caf0d503e795b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub/SKILL.md"}, "properties": {"repobilityId": "598c57cbd47c5f7a", "scanner": "scanner-primary", "fingerprint": "450caf0d503e795b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-security-hub/SKILL.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-b6dab81c1024bda1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/managing-cloud-identity-with-okta/SKILL.md"}, "properties": {"repobilityId": "b1878fb5839ebf27", "scanner": "scanner-primary", "fingerprint": "b6dab81c1024bda1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/managing-cloud-identity-with-okta/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-128cfcbfd521d2d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-internal-network-penetration-test/SKILL.md"}, "properties": {"repobilityId": "4379a0b91983483c", "scanner": "scanner-primary", "fingerprint": "128cfcbfd521d2d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-internal-network-penetration-test/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-079f33e544ece66d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-malware-persistence-investigation/SKILL.md"}, "properties": {"repobilityId": "a4cce0a4349fec13", "scanner": "scanner-primary", "fingerprint": "079f33e544ece66d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-persistence-investigation/SKILL.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-8ce973e8c726f45b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-cryptomining-in-cloud/SKILL.md"}, "properties": {"repobilityId": "b7466c9840ac5919", "scanner": "scanner-primary", "fingerprint": "8ce973e8c726f45b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/SKILL.md"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-6c45faa5cf6151d9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-cryptomining-in-cloud/SKILL.md"}, "properties": {"repobilityId": "06be3ffb2de089e6", "scanner": "scanner-primary", "fingerprint": "6c45faa5cf6151d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cryptomining-in-cloud/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6a2dae33fe9255f", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-velociraptor-for-ir-collection/SKILL.md"}, "properties": {"repobilityId": "b3a47ef43a5f2332", "scanner": "scanner-primary", "fingerprint": "f6a2dae33fe9255f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-velociraptor-for-ir-collection/SKILL.md"}, "region": {"startLine": 262}}}]}, {"ruleId": "scanner-298bc81967250d85", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-azure-with-microsoft-defender/SKILL.md"}, "properties": {"repobilityId": "d59bf93513d2627d", "scanner": "scanner-primary", "fingerprint": "298bc81967250d85", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-azure-with-microsoft-defender/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-b6825a01905b6570", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-incident-containment-procedures/SKILL.md"}, "properties": {"repobilityId": "e54a16290e93e277", "scanner": "scanner-primary", "fingerprint": "b6825a01905b6570", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-incident-containment-procedures/SKILL.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-2b649e005bb10260", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-adversary-infrastructure-tracking-system/SKILL.md"}, "properties": {"repobilityId": "b6d28837bffc5ab8", "scanner": "scanner-primary", "fingerprint": "2b649e005bb10260", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-adversary-infrastructure-tracking-system/SKILL.md"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-f1294ca11cf40a83", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-s3-data-exfiltration-attempts/SKILL.md"}, "properties": {"repobilityId": "5b9704d7bde989df", "scanner": "scanner-primary", "fingerprint": "f1294ca11cf40a83", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-s3-data-exfiltration-attempts/SKILL.md"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-995114f7de753eb4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-network-packet-capture-analysis/SKILL.md"}, "properties": {"repobilityId": "48a7a6dcd46f67b0", "scanner": "scanner-primary", "fingerprint": "995114f7de753eb4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-network-packet-capture-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7da1c5d94dae3aa4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/conducting-cloud-incident-response/SKILL.md"}, "properties": {"repobilityId": "043da4006755e71f", "scanner": "scanner-primary", "fingerprint": "7da1c5d94dae3aa4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cloud-incident-response/SKILL.md"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-f2a7d91e47fbaffe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-cloud-incident-response/SKILL.md"}, "properties": {"repobilityId": "412c2d8678814ea2", "scanner": "scanner-primary", "fingerprint": "f2a7d91e47fbaffe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cloud-incident-response/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbf75f0198a97638", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-nitro-enclave-security/SKILL.md"}, "properties": {"repobilityId": "dba7e987885eb4d2", "scanner": "scanner-primary", "fingerprint": "bbf75f0198a97638", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-nitro-enclave-security/SKILL.md"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-cdfee656ed3d3b76", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-asset-inventory-with-cartography/SKILL.md"}, "properties": {"repobilityId": "b657e265a34f6424", "scanner": "scanner-primary", "fingerprint": "cdfee656ed3d3b76", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-asset-inventory-with-cartography/SKILL.md"}, "region": {"startLine": 252}}}]}, {"ruleId": "scanner-c740fd50fe0e7630", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-active-directory-vulnerability-assessment/SKILL.md"}, "properties": {"repobilityId": "2aa1136785ead951", "scanner": "scanner-primary", "fingerprint": "c740fd50fe0e7630", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-active-directory-vulnerability-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-348ca0d4b6d8ee64", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-kubernetes-etcd-security-assessment/SKILL.md"}, "properties": {"repobilityId": "a95fd92cb200e64d", "scanner": "scanner-primary", "fingerprint": "348ca0d4b6d8ee64", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-kubernetes-etcd-security-assessment/SKILL.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-036d8c968e0ac2c3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-suspicious-scheduled-tasks/SKILL.md"}, "properties": {"repobilityId": "c99decd02bba4cef", "scanner": "scanner-primary", "fingerprint": "036d8c968e0ac2c3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-suspicious-scheduled-tasks/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11ee6b35c9316666", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/extracting-iocs-from-malware-samples/SKILL.md"}, "properties": {"repobilityId": "823c6caa8af54f91", "scanner": "scanner-primary", "fingerprint": "11ee6b35c9316666", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/extracting-iocs-from-malware-samples/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a1187a98c4fe061", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-aws-guardduty-findings-automation/SKILL.md"}, "properties": {"repobilityId": "83e103f75187b4f5", "scanner": "scanner-primary", "fingerprint": "2a1187a98c4fe061", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-aws-guardduty-findings-automation/SKILL.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-5bd38e734b666831", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-race-condition-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "b5c37decaf88cf1d", "scanner": "scanner-primary", "fingerprint": "5bd38e734b666831", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-race-condition-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1da0669d5ebe8f69", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-disk-forensics-investigation/SKILL.md"}, "properties": {"repobilityId": "d6194c920f391cdd", "scanner": "scanner-primary", "fingerprint": "1da0669d5ebe8f69", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-disk-forensics-investigation/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-d0662db6773d59db", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "properties": {"repobilityId": "a828b80d02301de9", "scanner": "scanner-primary", "fingerprint": "d0662db6773d59db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-746f323ac32d8730", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "properties": {"repobilityId": "ae60f29dcf068497", "scanner": "scanner-primary", "fingerprint": "746f323ac32d8730", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-abuse-detection-with-rate-limiting/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0fa8f06ba13cb52c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-in-cloud/SKILL.md"}, "properties": {"repobilityId": "e7a3fbd2ff9a0968", "scanner": "scanner-primary", "fingerprint": "0fa8f06ba13cb52c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-trust-in-cloud/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b0b74ea4b2953e4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "properties": {"repobilityId": "7eb1bf0122ca48b1", "scanner": "scanner-primary", "fingerprint": "7b0b74ea4b2953e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-6d1b48b258ae6d7f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "properties": {"repobilityId": "4da2249d56c4730f", "scanner": "scanner-primary", "fingerprint": "6d1b48b258ae6d7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-ios-app-with-frida/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d4fdf1df61df799", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/mapping-mitre-attack-techniques/SKILL.md"}, "properties": {"repobilityId": "9e84b79134382892", "scanner": "scanner-primary", "fingerprint": "4d4fdf1df61df799", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/mapping-mitre-attack-techniques/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0c13a8e3338f02d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-threat-actor-profile-from-osint/SKILL.md"}, "properties": {"repobilityId": "584d4a0206a2a727", "scanner": "scanner-primary", "fingerprint": "d0c13a8e3338f02d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-threat-actor-profile-from-osint/SKILL.md"}, "region": {"startLine": 248}}}]}, {"ruleId": "scanner-917f697279888e97", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/reverse-engineering-dotnet-malware-with-dnspy/SKILL.md"}, "properties": {"repobilityId": "696f99d2a08995d2", "scanner": "scanner-primary", "fingerprint": "917f697279888e97", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-dotnet-malware-with-dnspy/SKILL.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-018e25abf12dcdb8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-macro-malware-in-office-documents/SKILL.md"}, "properties": {"repobilityId": "4787a00df8594b0a", "scanner": "scanner-primary", "fingerprint": "018e25abf12dcdb8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-macro-malware-in-office-documents/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-591010d085951b61", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-beaconing-with-frequency-analysis/SKILL.md"}, "properties": {"repobilityId": "7b23a2eac1212e7e", "scanner": "scanner-primary", "fingerprint": "591010d085951b61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-beaconing-with-frequency-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b0b220f24487b8f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-ntlm-relay-with-event-correlation/SKILL.md"}, "properties": {"repobilityId": "cf260a5359ffeb0a", "scanner": "scanner-primary", "fingerprint": "4b0b220f24487b8f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-ntlm-relay-with-event-correlation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b05d637d1a17202", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-clickjacking-attack-test/SKILL.md"}, "properties": {"repobilityId": "c6123b543c677c3b", "scanner": "scanner-primary", "fingerprint": "7b05d637d1a17202", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-clickjacking-attack-test/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be97a2adbdb675f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-plc-firmware-security-analysis/SKILL.md"}, "properties": {"repobilityId": "2dd777f039fa4c2d", "scanner": "scanner-primary", "fingerprint": "be97a2adbdb675f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-plc-firmware-security-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-036add3213087b8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/reverse-engineering-malware-with-ghidra/SKILL.md"}, "properties": {"repobilityId": "db4552c9394a78ac", "scanner": "scanner-primary", "fingerprint": "036add3213087b8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-malware-with-ghidra/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb5927fd753b1432", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "properties": {"repobilityId": "a825a9acc433c59a", "scanner": "scanner-primary", "fingerprint": "cb5927fd753b1432", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-24a61bf8778805e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "properties": {"repobilityId": "bf32cadcb6d7a076", "scanner": "scanner-primary", "fingerprint": "24a61bf8778805e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-jwt-none-algorithm-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81fe8053ae256b17", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/testing-websocket-api-security/SKILL.md"}, "properties": {"repobilityId": "4376e3586cadc237", "scanner": "scanner-primary", "fingerprint": "81fe8053ae256b17", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-websocket-api-security/SKILL.md"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-ea4424b1f3e765ca", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/auditing-kubernetes-cluster-rbac/SKILL.md"}, "properties": {"repobilityId": "8491ed708f98bf18", "scanner": "scanner-primary", "fingerprint": "ea4424b1f3e765ca", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-kubernetes-cluster-rbac/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae7e1ad47d42226e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-api-fuzzing-with-restler/SKILL.md"}, "properties": {"repobilityId": "5a79ade6b21e6080", "scanner": "scanner-primary", "fingerprint": "ae7e1ad47d42226e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-api-fuzzing-with-restler/SKILL.md"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-4ffc337bb6d389c4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/deploying-cloud-deception-with-decoy-resources/SKILL.md"}, "properties": {"repobilityId": "b8a56ff5a723cfd4", "scanner": "scanner-primary", "fingerprint": "4ffc337bb6d389c4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-cloud-deception-with-decoy-resources/SKILL.md"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-c46f2b00c4ad4c1d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-persistence-via-wmi-subscriptions/SKILL.md"}, "properties": {"repobilityId": "0597f39f06dcc463", "scanner": "scanner-primary", "fingerprint": "c46f2b00c4ad4c1d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-persistence-via-wmi-subscriptions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-70123c873f5dbbb2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-for-business-logic-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "1893b22170027220", "scanner": "scanner-primary", "fingerprint": "70123c873f5dbbb2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-business-logic-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0b2abffc076d0ae", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/auditing-gcp-iam-permissions/SKILL.md"}, "properties": {"repobilityId": "3f9fcb008edc28c6", "scanner": "scanner-primary", "fingerprint": "b0b2abffc076d0ae", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-gcp-iam-permissions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1efbc05eae4015cd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-arp-spoofing-attack-simulation/SKILL.md"}, "properties": {"repobilityId": "dc5486b37ea4934e", "scanner": "scanner-primary", "fingerprint": "1efbc05eae4015cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-arp-spoofing-attack-simulation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ed8a177f1c043a2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-cloud-forensics-investigation/SKILL.md"}, "properties": {"repobilityId": "dafd5738a53cf9c0", "scanner": "scanner-primary", "fingerprint": "3ed8a177f1c043a2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-forensics-investigation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83a50f4d3f0f8bd4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/conducting-cloud-penetration-testing/SKILL.md"}, "properties": {"repobilityId": "39976c64828f2b6e", "scanner": "scanner-primary", "fingerprint": "83a50f4d3f0f8bd4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cloud-penetration-testing/SKILL.md"}, "region": {"startLine": 183}}}]}, {"ruleId": "scanner-0ec2860edb3c6492", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-security-hub-compliance/SKILL.md"}, "properties": {"repobilityId": "b3b624f47d40dcc0", "scanner": "scanner-primary", "fingerprint": "0ec2860edb3c6492", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-security-hub-compliance/SKILL.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-d29f0340747efacc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-kubernetes-on-cloud/SKILL.md"}, "properties": {"repobilityId": "3d7c23861414c3ed", "scanner": "scanner-primary", "fingerprint": "d29f0340747efacc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-kubernetes-on-cloud/SKILL.md"}, "region": {"startLine": 125}}}]}, {"ruleId": "scanner-07b8139dd9d62ae8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/securing-kubernetes-on-cloud/SKILL.md"}, "properties": {"repobilityId": "1ce19cad64138338", "scanner": "scanner-primary", "fingerprint": "07b8139dd9d62ae8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-kubernetes-on-cloud/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9f9ed88149d7c9d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-threat-intelligence-platform/SKILL.md"}, "properties": {"repobilityId": "baddcfda6938b7ce", "scanner": "scanner-primary", "fingerprint": "b9f9ed88149d7c9d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-threat-intelligence-platform/SKILL.md"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-141498c65db1428d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-api-gateway-with-aws-waf/SKILL.md"}, "properties": {"repobilityId": "b21b411a512217a4", "scanner": "scanner-primary", "fingerprint": "141498c65db1428d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-api-gateway-with-aws-waf/SKILL.md"}, "region": {"startLine": 320}}}]}, {"ruleId": "scanner-61e97aef077d230b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-waf-rules/SKILL.md"}, "properties": {"repobilityId": "bbd9c5efd60b673c", "scanner": "scanner-primary", "fingerprint": "61e97aef077d230b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-waf-rules/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-158f47c444c2d758", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-active-directory-with-bloodhound/SKILL.md"}, "properties": {"repobilityId": "7eeaeeebe50f61b2", "scanner": "scanner-primary", "fingerprint": "158f47c444c2d758", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-active-directory-with-bloodhound/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-722bf1bf5ae26290", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-native-threat-hunting-with-aws-detective/SKILL.md"}, "properties": {"repobilityId": "60cb2f9e38e90eca", "scanner": "scanner-primary", "fingerprint": "722bf1bf5ae26290", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-native-threat-hunting-with-aws-detective/SKILL.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-baa99caa75295021", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-aws-iam-permissions/SKILL.md"}, "properties": {"repobilityId": "a6ec0fb30094c990", "scanner": "scanner-primary", "fingerprint": "baa99caa75295021", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-aws-iam-permissions/SKILL.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-65de5b82769a3fde", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/securing-aws-iam-permissions/SKILL.md"}, "properties": {"repobilityId": "2c918dab77d0d0e8", "scanner": "scanner-primary", "fingerprint": "65de5b82769a3fde", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-aws-iam-permissions/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7267107a8f31296e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-bandwidth-throttling-attack-simulation/SKILL.md"}, "properties": {"repobilityId": "834ca6ce733e31d4", "scanner": "scanner-primary", "fingerprint": "7267107a8f31296e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-bandwidth-throttling-attack-simulation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e6e3c6e5be8380c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-intelligence-sharing-with-misp/SKILL.md"}, "properties": {"repobilityId": "5913d0c0289cdb38", "scanner": "scanner-primary", "fingerprint": "8e6e3c6e5be8380c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-intelligence-sharing-with-misp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e633a1f5ba1bb4b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-physical-intrusion-assessment/SKILL.md"}, "properties": {"repobilityId": "d41f3ee76809520b", "scanner": "scanner-primary", "fingerprint": "1e633a1f5ba1bb4b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-physical-intrusion-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46d085e2b30625b0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-for-json-web-token-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "bae9f5d766e13974", "scanner": "scanner-primary", "fingerprint": "46d085e2b30625b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-json-web-token-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddd41dc95dfd748b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/deploying-active-directory-honeytokens/SKILL.md"}, "properties": {"repobilityId": "11445eff6804e25c", "scanner": "scanner-primary", "fingerprint": "ddd41dc95dfd748b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-active-directory-honeytokens/SKILL.md"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-6a38e0896d5bbb55", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-supply-chain-security-with-in-toto/SKILL.md"}, "properties": {"repobilityId": "5368f099a2c442a3", "scanner": "scanner-primary", "fingerprint": "6a38e0896d5bbb55", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-supply-chain-security-with-in-toto/SKILL.md"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-862dfc4e30555226", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-macie-for-data-classification/SKILL.md"}, "properties": {"repobilityId": "dafe788c55e708ef", "scanner": "scanner-primary", "fingerprint": "862dfc4e30555226", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-macie-for-data-classification/SKILL.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-919875c339285fa4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-api-security-with-owasp-top-10/SKILL.md"}, "properties": {"repobilityId": "d93fd59a80275711", "scanner": "scanner-primary", "fingerprint": "919875c339285fa4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-api-security-with-owasp-top-10/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1635f6cf77bb0a39", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "properties": {"repobilityId": "5ce855685932364e", "scanner": "scanner-primary", "fingerprint": "1635f6cf77bb0a39", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-0e5bac659b583a07", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "properties": {"repobilityId": "494cad3b556d9267", "scanner": "scanner-primary", "fingerprint": "0e5bac659b583a07", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-automated-malware-analysis-with-cape/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-97291f1bb6d46333", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-csrf-attack-simulation/SKILL.md"}, "properties": {"repobilityId": "42cb9a31c5448484", "scanner": "scanner-primary", "fingerprint": "97291f1bb6d46333", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-csrf-attack-simulation/SKILL.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-3e664e3cbe02171a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-csrf-attack-simulation/SKILL.md"}, "properties": {"repobilityId": "7d57bb0111eacf4a", "scanner": "scanner-primary", "fingerprint": "3e664e3cbe02171a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-csrf-attack-simulation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3552bd22cfbc9e74", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/exploiting-jwt-algorithm-confusion-attack/SKILL.md"}, "properties": {"repobilityId": "9939e8814ca51540", "scanner": "scanner-primary", "fingerprint": "3552bd22cfbc9e74", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-jwt-algorithm-confusion-attack/SKILL.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-fcd16d7ad5a54ce7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-nopac-cve-2021-42278-42287/SKILL.md"}, "properties": {"repobilityId": "f69e1863248e7aea", "scanner": "scanner-primary", "fingerprint": "fcd16d7ad5a54ce7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-nopac-cve-2021-42278-42287/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0cffa6b881f51d6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/testing-oauth2-implementation-flaws/SKILL.md"}, "properties": {"repobilityId": "1b3b9af727705c9b", "scanner": "scanner-primary", "fingerprint": "e0cffa6b881f51d6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-oauth2-implementation-flaws/SKILL.md"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-d3e4bce38fd83afb", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/remediating-s3-bucket-misconfiguration/SKILL.md"}, "properties": {"repobilityId": "af0c6d0f2fcf3502", "scanner": "scanner-primary", "fingerprint": "d3e4bce38fd83afb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/remediating-s3-bucket-misconfiguration/SKILL.md"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-778062ddd2430550", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-iot-security-assessment/SKILL.md"}, "properties": {"repobilityId": "42cccee2d2aae3c8", "scanner": "scanner-primary", "fingerprint": "778062ddd2430550", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-iot-security-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-050605ae1181943a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/performing-iot-security-assessment/SKILL.md"}, "properties": {"repobilityId": "18f050ddb3c304ff", "scanner": "scanner-primary", "fingerprint": "050605ae1181943a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-iot-security-assessment/SKILL.md"}, "region": {"startLine": 154}}}]}, {"ruleId": "scanner-9ca884941f1f1e54", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-semgrep-for-custom-sast-rules/SKILL.md"}, "properties": {"repobilityId": "ad7b1097a26ac1fc", "scanner": "scanner-primary", "fingerprint": "9ca884941f1f1e54", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-semgrep-for-custom-sast-rules/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42f540cf59d43209", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-registry-persistence-mechanisms/SKILL.md"}, "properties": {"repobilityId": "c29d72438d08540b", "scanner": "scanner-primary", "fingerprint": "42f540cf59d43209", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-registry-persistence-mechanisms/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f6c20ee57a63654c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "properties": {"repobilityId": "c3c63e72c6f7cd17", "scanner": "scanner-primary", "fingerprint": "f6c20ee57a63654c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-4f5fdc0916c755ef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "properties": {"repobilityId": "c8006a5b98ca4129", "scanner": "scanner-primary", "fingerprint": "4f5fdc0916c755ef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-trust-with-hashicorp-boundary/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-faea0a82d1a51484", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-kerberoasting-with-impacket/SKILL.md"}, "properties": {"repobilityId": "1bd5b9b48ee33a71", "scanner": "scanner-primary", "fingerprint": "faea0a82d1a51484", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-kerberoasting-with-impacket/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-114b0635d42a9515", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-iso-27001-information-security-management/SKILL.md"}, "properties": {"repobilityId": "fe5c48062cd1449d", "scanner": "scanner-primary", "fingerprint": "114b0635d42a9515", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-iso-27001-information-security-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c5d7c1a57dee945", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-ssl-tls-inspection-configuration/SKILL.md"}, "properties": {"repobilityId": "2987beefaf17cda3", "scanner": "scanner-primary", "fingerprint": "3c5d7c1a57dee945", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ssl-tls-inspection-configuration/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-637e72e685d82d47", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-security-posture-management/SKILL.md"}, "properties": {"repobilityId": "df52953e5403c7ca", "scanner": "scanner-primary", "fingerprint": "637e72e685d82d47", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-security-posture-management/SKILL.md"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-16d6e09d661b2d88", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-fileless-attacks-on-endpoints/SKILL.md"}, "properties": {"repobilityId": "e58bb6a76911edf3", "scanner": "scanner-primary", "fingerprint": "16d6e09d661b2d88", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-fileless-attacks-on-endpoints/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84718ac004081aef", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-aws-lambda-execution-roles/SKILL.md"}, "properties": {"repobilityId": "4284d1440ac14c7f", "scanner": "scanner-primary", "fingerprint": "84718ac004081aef", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-aws-lambda-execution-roles/SKILL.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-d1938065f69171d3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-insider-threat-behaviors/SKILL.md"}, "properties": {"repobilityId": "8c3be905b59ba157", "scanner": "scanner-primary", "fingerprint": "d1938065f69171d3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-insider-threat-behaviors/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-921e8300b078f09e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-cloud-threats-with-guardduty/SKILL.md"}, "properties": {"repobilityId": "f9e1643d0d9991df", "scanner": "scanner-primary", "fingerprint": "921e8300b078f09e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-cloud-threats-with-guardduty/SKILL.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-351695ad950fc503", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-secrets-management-with-vault/SKILL.md"}, "properties": {"repobilityId": "f2ffbd0962d10743", "scanner": "scanner-primary", "fingerprint": "351695ad950fc503", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-secrets-management-with-vault/SKILL.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-9a76adb839df2224", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-compromised-cloud-credentials/SKILL.md"}, "properties": {"repobilityId": "54140f12bf25c817", "scanner": "scanner-primary", "fingerprint": "9a76adb839df2224", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-compromised-cloud-credentials/SKILL.md"}, "region": {"startLine": 280}}}]}, {"ruleId": "scanner-527b960e7c361a34", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-service-account-credential-rotation/SKILL.md"}, "properties": {"repobilityId": "548d164dcdebd6cd", "scanner": "scanner-primary", "fingerprint": "527b960e7c361a34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-service-account-credential-rotation/SKILL.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-a7462a98346b1106", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-of-malware/SKILL.md"}, "properties": {"repobilityId": "fa5d0e8858ac502d", "scanner": "scanner-primary", "fingerprint": "a7462a98346b1106", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-traffic-of-malware/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5184c1c0ab3a418e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-data-loss-prevention-with-microsoft-purview/SKILL.md"}, "properties": {"repobilityId": "667c3f940c716ef7", "scanner": "scanner-primary", "fingerprint": "5184c1c0ab3a418e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-data-loss-prevention-with-microsoft-purview/SKILL.md"}, "region": {"startLine": 437}}}]}, {"ruleId": "scanner-1698fb55be8ea345", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-mobile-api-authentication/SKILL.md"}, "properties": {"repobilityId": "a14393aca0a14643", "scanner": "scanner-primary", "fingerprint": "1698fb55be8ea345", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-mobile-api-authentication/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98c67e469d96b804", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-constrained-delegation-abuse/SKILL.md"}, "properties": {"repobilityId": "2c28d896ca23c3b6", "scanner": "scanner-primary", "fingerprint": "98c67e469d96b804", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-constrained-delegation-abuse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5b0b4b79a0e7cece", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "properties": {"repobilityId": "e409cd1f1ca400b4", "scanner": "scanner-primary", "fingerprint": "5b0b4b79a0e7cece", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-ef4f230d1e4c287d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-attack-surface-management/SKILL.md"}, "properties": {"repobilityId": "2c9e095a6099ee03", "scanner": "scanner-primary", "fingerprint": "ef4f230d1e4c287d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-attack-surface-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfa256a4c8af98e8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/configuring-windows-event-logging-for-detection/SKILL.md"}, "properties": {"repobilityId": "c8538e46829175f8", "scanner": "scanner-primary", "fingerprint": "bfa256a4c8af98e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-windows-event-logging-for-detection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1eede3cf353037b8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-canary-tokens-for-network-intrusion/SKILL.md"}, "properties": {"repobilityId": "a3c42847cab719a2", "scanner": "scanner-primary", "fingerprint": "1eede3cf353037b8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-canary-tokens-for-network-intrusion/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-d408207eba2c4ea5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-web-cache-deception-attack/SKILL.md"}, "properties": {"repobilityId": "3f49f29f3c3b8887", "scanner": "scanner-primary", "fingerprint": "d408207eba2c4ea5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-web-cache-deception-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2314c0cce0fac5c6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-pass-the-ticket-attack/SKILL.md"}, "properties": {"repobilityId": "eb375166f9702a9e", "scanner": "scanner-primary", "fingerprint": "2314c0cce0fac5c6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-pass-the-ticket-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49d7da547c83c287", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/scanning-container-images-with-grype/SKILL.md"}, "properties": {"repobilityId": "42f2483a88f4a53e", "scanner": "scanner-primary", "fingerprint": "49d7da547c83c287", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/scanning-container-images-with-grype/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-b00f9cddbdd908b5", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/exploiting-bgp-hijacking-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "88705ee90988f341", "scanner": "scanner-primary", "fingerprint": "b00f9cddbdd908b5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-bgp-hijacking-vulnerabilities/SKILL.md"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-e285238d5655dbe3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-ssl-stripping-attack/SKILL.md"}, "properties": {"repobilityId": "aca61ada06b0b0bc", "scanner": "scanner-primary", "fingerprint": "e285238d5655dbe3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ssl-stripping-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b1ffaf52ca9f184", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-wmi-persistence/SKILL.md"}, "properties": {"repobilityId": "5a42feb7183d88ff", "scanner": "scanner-primary", "fingerprint": "1b1ffaf52ca9f184", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-wmi-persistence/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0bb036e4dad61786", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-ssl-tls-security-assessment/SKILL.md"}, "properties": {"repobilityId": "04347474ae60737b", "scanner": "scanner-primary", "fingerprint": "0bb036e4dad61786", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ssl-tls-security-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68b4f903a43b7afd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-gcp-vpc-firewall-rules/SKILL.md"}, "properties": {"repobilityId": "cfe1f294e3b83e90", "scanner": "scanner-primary", "fingerprint": "68b4f903a43b7afd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-gcp-vpc-firewall-rules/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc24cb4ed2b8b313", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-prototype-pollution-in-javascript/SKILL.md"}, "properties": {"repobilityId": "615aa95541af2bd1", "scanner": "scanner-primary", "fingerprint": "fc24cb4ed2b8b313", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-prototype-pollution-in-javascript/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4174ca62deb39730", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-arp-poisoning-in-network-traffic/SKILL.md"}, "properties": {"repobilityId": "d1087f374f1c4988", "scanner": "scanner-primary", "fingerprint": "4174ca62deb39730", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-arp-poisoning-in-network-traffic/SKILL.md"}, "region": {"startLine": 353}}}]}, {"ruleId": "scanner-9062cf7a7a8c66f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-thick-client-application-penetration-test/SKILL.md"}, "properties": {"repobilityId": "c05dc3c4cb234cfb", "scanner": "scanner-primary", "fingerprint": "9062cf7a7a8c66f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-thick-client-application-penetration-test/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-771fbf0266abf514", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/auditing-foundry-smart-contract-security/SKILL.md"}, "properties": {"repobilityId": "5ab214122afa2482", "scanner": "scanner-primary", "fingerprint": "771fbf0266abf514", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-foundry-smart-contract-security/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-9a727beafe32d97f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-endpoint-vulnerability-remediation/SKILL.md"}, "properties": {"repobilityId": "db7a4594c0793b26", "scanner": "scanner-primary", "fingerprint": "9a727beafe32d97f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-endpoint-vulnerability-remediation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1dcd6f982a63436e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-storage-forensic-acquisition/SKILL.md"}, "properties": {"repobilityId": "b181b0bfdd93d294", "scanner": "scanner-primary", "fingerprint": "1dcd6f982a63436e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-storage-forensic-acquisition/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-2a13a5d9b42d9749", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-malware-ioc-extraction/SKILL.md"}, "properties": {"repobilityId": "aec077e318e60e03", "scanner": "scanner-primary", "fingerprint": "2a13a5d9b42d9749", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-ioc-extraction/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-315ad2fb188d8417", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/deploying-palo-alto-prisma-access-zero-trust/SKILL.md"}, "properties": {"repobilityId": "25edf09f240dd33b", "scanner": "scanner-primary", "fingerprint": "315ad2fb188d8417", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-palo-alto-prisma-access-zero-trust/SKILL.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-1367bb14714beba8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-rapid7-insightvm-for-scanning/SKILL.md"}, "properties": {"repobilityId": "b13f80b81e7d2299", "scanner": "scanner-primary", "fingerprint": "1367bb14714beba8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-rapid7-insightvm-for-scanning/SKILL.md"}, "region": {"startLine": 181}}}]}, {"ruleId": "scanner-fde546bd9c52baea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "properties": {"repobilityId": "d2222ede4bc95fb5", "scanner": "scanner-primary", "fingerprint": "fde546bd9c52baea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-680a89da11636b9e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-infrastructure-as-code-security-scanning/SKILL.md"}, "properties": {"repobilityId": "fe3b55941cf15fe4", "scanner": "scanner-primary", "fingerprint": "680a89da11636b9e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-infrastructure-as-code-security-scanning/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03c346165e4fc8d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-memory-forensics-with-volatility3-plugins/SKILL.md"}, "properties": {"repobilityId": "0b82b8e5249cf6cb", "scanner": "scanner-primary", "fingerprint": "03c346165e4fc8d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-memory-forensics-with-volatility3-plugins/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-667dc98116d671c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-type-juggling-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "8e18d84ee37cbe01", "scanner": "scanner-primary", "fingerprint": "667dc98116d671c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-type-juggling-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fbbf58c4000918a6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/testing-api-authentication-weaknesses/SKILL.md"}, "properties": {"repobilityId": "f485ec7c9a63f46f", "scanner": "scanner-primary", "fingerprint": "fbbf58c4000918a6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-api-authentication-weaknesses/SKILL.md"}, "region": {"startLine": 179}}}]}, {"ruleId": "scanner-ab86b6ff9d3d94f2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-nist-csf-maturity-assessment/SKILL.md"}, "properties": {"repobilityId": "d226b75d1c4525ff", "scanner": "scanner-primary", "fingerprint": "ab86b6ff9d3d94f2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-nist-csf-maturity-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfc4a9c854dadde7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-epss-score-for-vulnerability-prioritization/SKILL.md"}, "properties": {"repobilityId": "fba9e6b373323112", "scanner": "scanner-primary", "fingerprint": "cfc4a9c854dadde7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-epss-score-for-vulnerability-prioritization/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-153253b4add28b6d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-misconfigured-azure-storage/SKILL.md"}, "properties": {"repobilityId": "d3c73a8d7709b5cb", "scanner": "scanner-primary", "fingerprint": "153253b4add28b6d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-misconfigured-azure-storage/SKILL.md"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-0da3cd5d4b7cac33", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-vulnerability-scanning-with-nessus/SKILL.md"}, "properties": {"repobilityId": "bea67eab2f957e4d", "scanner": "scanner-primary", "fingerprint": "0da3cd5d4b7cac33", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-vulnerability-scanning-with-nessus/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f810769a29b8d0e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-s7comm-protocol-security-analysis/SKILL.md"}, "properties": {"repobilityId": "f091c8c5e9f54c12", "scanner": "scanner-primary", "fingerprint": "f810769a29b8d0e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-s7comm-protocol-security-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-159103f2fe69b03b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/executing-phishing-simulation-campaign/SKILL.md"}, "properties": {"repobilityId": "626b8a59fdcfc0e8", "scanner": "scanner-primary", "fingerprint": "159103f2fe69b03b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/executing-phishing-simulation-campaign/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7535811906e4ae02", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-for-host-header-injection/SKILL.md"}, "properties": {"repobilityId": "05544e62158c4bfb", "scanner": "scanner-primary", "fingerprint": "7535811906e4ae02", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-host-header-injection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4c698ea3f7cd995", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "properties": {"repobilityId": "220540692e375e56", "scanner": "scanner-primary", "fingerprint": "b4c698ea3f7cd995", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-304480449c3654b2", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "properties": {"repobilityId": "1ef97412c62cfe6f", "scanner": "scanner-primary", "fingerprint": "304480449c3654b2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-def47a63328f4336", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-deception-technology-deployment/SKILL.md"}, "properties": {"repobilityId": "75447cfc3d0cfea7", "scanner": "scanner-primary", "fingerprint": "def47a63328f4336", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/SKILL.md"}, "region": {"startLine": 181}}}]}, {"ruleId": "scanner-051420b8f7a85112", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-deception-technology-deployment/SKILL.md"}, "properties": {"repobilityId": "416aae2c0d7f501a", "scanner": "scanner-primary", "fingerprint": "051420b8f7a85112", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-deception-technology-deployment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d850d0e711c43f8", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "properties": {"repobilityId": "e1fc20d214570945", "scanner": "scanner-primary", "fingerprint": "7d850d0e711c43f8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-f6d1cf685ab48ee2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "properties": {"repobilityId": "c959d41382a848a8", "scanner": "scanner-primary", "fingerprint": "f6d1cf685ab48ee2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-brand-monitoring-for-impersonation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-264cccda8b8d13db", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-broken-link-hijacking/SKILL.md"}, "properties": {"repobilityId": "ce54315540227c71", "scanner": "scanner-primary", "fingerprint": "264cccda8b8d13db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-link-hijacking/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1922d09a0a1f00f3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-serverless-function-injection/SKILL.md"}, "properties": {"repobilityId": "d4b5becf815cf227", "scanner": "scanner-primary", "fingerprint": "1922d09a0a1f00f3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 355}}}]}, {"ruleId": "scanner-6a17a1b000bc362e", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/detecting-serverless-function-injection/SKILL.md"}, "properties": {"repobilityId": "f7e9e67d8c7d8dad", "scanner": "scanner-primary", "fingerprint": "6a17a1b000bc362e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 477}}}]}, {"ruleId": "scanner-9b98a66b0804af1c", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-zero-standing-privilege-with-cyberark/SKILL.md"}, "properties": {"repobilityId": "d69aea82da2adef7", "scanner": "scanner-primary", "fingerprint": "9b98a66b0804af1c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-standing-privilege-with-cyberark/SKILL.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-108563e8e5812208", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/implementing-bgp-security-with-rpki/SKILL.md"}, "properties": {"repobilityId": "20db9b0374515aed", "scanner": "scanner-primary", "fingerprint": "108563e8e5812208", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-bgp-security-with-rpki/SKILL.md"}, "region": {"startLine": 132}}}]}, {"ruleId": "scanner-d2198f02a50c4f74", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "properties": {"repobilityId": "26dd4e5d678f797d", "scanner": "scanner-primary", "fingerprint": "d2198f02a50c4f74", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-29d4c41d5b3a98bc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "properties": {"repobilityId": "322f9d4e1c6aabe3", "scanner": "scanner-primary", "fingerprint": "29d4c41d5b3a98bc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-vulnerability-posture-management/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-36150a34164bbd93", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "properties": {"repobilityId": "c51a53692853300a", "scanner": "scanner-primary", "fingerprint": "36150a34164bbd93", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-b27da57637604ea4", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-agentless-vulnerability-scanning/SKILL.md"}, "properties": {"repobilityId": "3f1d8b3d724cce55", "scanner": "scanner-primary", "fingerprint": "b27da57637604ea4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-agentless-vulnerability-scanning/SKILL.md"}, "region": {"startLine": 123}}}]}, {"ruleId": "scanner-8e14b9358e017c0b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-network-access-control/SKILL.md"}, "properties": {"repobilityId": "80f247061e95e8a5", "scanner": "scanner-primary", "fingerprint": "8e14b9358e017c0b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-network-access-control/SKILL.md"}, "region": {"startLine": 63}}}]}, {"ruleId": "scanner-f273311b53f4ca10", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-fuzz-testing-in-cicd-with-aflplusplus/SKILL.md"}, "properties": {"repobilityId": "aa2c41e838fc879c", "scanner": "scanner-primary", "fingerprint": "f273311b53f4ca10", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-fuzz-testing-in-cicd-with-aflplusplus/SKILL.md"}, "region": {"startLine": 195}}}]}, {"ruleId": "scanner-b33be32bbf6980a6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-anomalies-in-industrial-control-systems/SKILL.md"}, "properties": {"repobilityId": "29f5d0e567857073", "scanner": "scanner-primary", "fingerprint": "b33be32bbf6980a6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-anomalies-in-industrial-control-systems/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-375bf28f1ff73212", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-cloud-trail-log-analysis/SKILL.md"}, "properties": {"repobilityId": "c916d51c29b6e6f2", "scanner": "scanner-primary", "fingerprint": "375bf28f1ff73212", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-cloud-trail-log-analysis/SKILL.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-18ba0de854fcc8ea", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "properties": {"repobilityId": "01df8e322f7157fd", "scanner": "scanner-primary", "fingerprint": "18ba0de854fcc8ea", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "region": {"startLine": 487}}}]}, {"ruleId": "scanner-ee840fd69b79b4f0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "properties": {"repobilityId": "af72152a92266878", "scanner": "scanner-primary", "fingerprint": "ee840fd69b79b4f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-dcom-lateral-movement/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b702e165b44177c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-dcsync-attack-in-active-directory/SKILL.md"}, "properties": {"repobilityId": "15c2e104d1e2beae", "scanner": "scanner-primary", "fingerprint": "4b702e165b44177c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-dcsync-attack-in-active-directory/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e04df10d23b874a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-mimikatz-execution-patterns/SKILL.md"}, "properties": {"repobilityId": "572808101068ed21", "scanner": "scanner-primary", "fingerprint": "1e04df10d23b874a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-mimikatz-execution-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-574630693f040adb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/collecting-threat-intelligence-with-misp/SKILL.md"}, "properties": {"repobilityId": "49859e6ed072ac15", "scanner": "scanner-primary", "fingerprint": "574630693f040adb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/collecting-threat-intelligence-with-misp/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e584014d45a534b7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/performing-api-security-testing-with-postman/SKILL.md"}, "properties": {"repobilityId": "1eb92e405b86a095", "scanner": "scanner-primary", "fingerprint": "e584014d45a534b7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-api-security-testing-with-postman/SKILL.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-a648a0e903cee4d7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-mass-assignment-in-rest-apis/SKILL.md"}, "properties": {"repobilityId": "8e52b3f41cf8de44", "scanner": "scanner-primary", "fingerprint": "a648a0e903cee4d7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-mass-assignment-in-rest-apis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c8ff1821bc7dc46e", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "properties": {"repobilityId": "b142c3df6b0f5e07", "scanner": "scanner-primary", "fingerprint": "c8ff1821bc7dc46e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-dbc49262564f44b8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "properties": {"repobilityId": "b6d73729c109714a", "scanner": "scanner-primary", "fingerprint": "dbc49262564f44b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-data-storage-in-mobile/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90d2cc09bac13f24", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/configuring-identity-aware-proxy-with-google-iap/SKILL.md"}, "properties": {"repobilityId": "4a8ed6050809d7a2", "scanner": "scanner-primary", "fingerprint": "90d2cc09bac13f24", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-identity-aware-proxy-with-google-iap/SKILL.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-1bc7d1a8aa9fc8e6", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "properties": {"repobilityId": "4363788187125dcc", "scanner": "scanner-primary", "fingerprint": "1bc7d1a8aa9fc8e6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-66a1d6536a774d95", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "properties": {"repobilityId": "bc7e85ac5e8f6e3a", "scanner": "scanner-primary", "fingerprint": "66a1d6536a774d95", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "region": {"startLine": 317}}}]}, {"ruleId": "scanner-204f680cc41cc869", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-data-exfiltration-indicators/SKILL.md"}, "properties": {"repobilityId": "1213d703a97bc914", "scanner": "scanner-primary", "fingerprint": "204f680cc41cc869", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-data-exfiltration-indicators/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e351b2b1cd9cc6f5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-spearphishing-indicators/SKILL.md"}, "properties": {"repobilityId": "0864990f0702cb24", "scanner": "scanner-primary", "fingerprint": "e351b2b1cd9cc6f5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-spearphishing-indicators/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-424bf48b2f250aad", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/configuring-zscaler-private-access-for-ztna/SKILL.md"}, "properties": {"repobilityId": "d113a5b1c5e0f6be", "scanner": "scanner-primary", "fingerprint": "424bf48b2f250aad", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-zscaler-private-access-for-ztna/SKILL.md"}, "region": {"startLine": 229}}}]}, {"ruleId": "scanner-27c5a629a46fde3b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-purple-team-atomic-testing/SKILL.md"}, "properties": {"repobilityId": "1c03586d64696c23", "scanner": "scanner-primary", "fingerprint": "27c5a629a46fde3b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-purple-team-atomic-testing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41a2e0437225d332", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-gateway-security-controls/SKILL.md"}, "properties": {"repobilityId": "708468d837f312ae", "scanner": "scanner-primary", "fingerprint": "41a2e0437225d332", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-gateway-security-controls/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-3c3d4374e3808307", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-threat-modeling-with-owasp-threat-dragon/SKILL.md"}, "properties": {"repobilityId": "d49c12d9bcd203d9", "scanner": "scanner-primary", "fingerprint": "3c3d4374e3808307", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-modeling-with-owasp-threat-dragon/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7b2309c606138f5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-modbus-protocol-anomalies/SKILL.md"}, "properties": {"repobilityId": "8ea1945883ddd43a", "scanner": "scanner-primary", "fingerprint": "e7b2309c606138f5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-modbus-protocol-anomalies/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78859ae2a0d79073", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "properties": {"repobilityId": "d6814eedef1afd62", "scanner": "scanner-primary", "fingerprint": "78859ae2a0d79073", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-9f3e2cd32f801702", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "properties": {"repobilityId": "c4268c343e9a6b6d", "scanner": "scanner-primary", "fingerprint": "9f3e2cd32f801702", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-cyber-risk-assessment-with-nist-800-30/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79d6f3c3b6926a49", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/executing-red-team-exercise/SKILL.md"}, "properties": {"repobilityId": "085968b9019ef5be", "scanner": "scanner-primary", "fingerprint": "79d6f3c3b6926a49", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/executing-red-team-exercise/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-baf768c7072a79e4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/performing-serverless-function-security-review/SKILL.md"}, "properties": {"repobilityId": "51bd48d313cc2ac0", "scanner": "scanner-primary", "fingerprint": "baf768c7072a79e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-serverless-function-security-review/SKILL.md"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-89bbeee469eac6e6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/deobfuscating-powershell-obfuscated-malware/SKILL.md"}, "properties": {"repobilityId": "335f824f0e309a07", "scanner": "scanner-primary", "fingerprint": "89bbeee469eac6e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-powershell-obfuscated-malware/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a38553d3667c9ece", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-leak-site-intelligence/SKILL.md"}, "properties": {"repobilityId": "a36ff001ad6f4587", "scanner": "scanner-primary", "fingerprint": "a38553d3667c9ece", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ransomware-leak-site-intelligence/SKILL.md"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-1b868b59d236ed39", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-file-integrity-monitoring-with-aide/SKILL.md"}, "properties": {"repobilityId": "10a3478737ea55c7", "scanner": "scanner-primary", "fingerprint": "1b868b59d236ed39", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-file-integrity-monitoring-with-aide/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5426cc55bbff9add", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-fileless-malware-techniques/SKILL.md"}, "properties": {"repobilityId": "0595b2e32a060f17", "scanner": "scanner-primary", "fingerprint": "5426cc55bbff9add", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-fileless-malware-techniques/SKILL.md"}, "region": {"startLine": 193}}}]}, {"ruleId": "scanner-797ce298752e2d1b", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "1f239be89989deb9", "scanner": "scanner-primary", "fingerprint": "797ce298752e2d1b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-3ee75d76d79e00b7", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "16eeadb8bfc7b553", "scanner": "scanner-primary", "fingerprint": "3ee75d76d79e00b7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-websocket-vulnerabilities/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-ef3b287b16158100", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-gcp-binary-authorization/SKILL.md"}, "properties": {"repobilityId": "79ce9dc7c17c723b", "scanner": "scanner-primary", "fingerprint": "ef3b287b16158100", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-gcp-binary-authorization/SKILL.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-c6881c254052ec46", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-privilege-escalation-attempts/SKILL.md"}, "properties": {"repobilityId": "8e21c5c34b6b1bd3", "scanner": "scanner-primary", "fingerprint": "c6881c254052ec46", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-privilege-escalation-attempts/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7cfa05f4677ef925", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-cloud-log-forensics-with-athena/SKILL.md"}, "properties": {"repobilityId": "62d3354e83c21d51", "scanner": "scanner-primary", "fingerprint": "7cfa05f4677ef925", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-log-forensics-with-athena/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-421269816cf347f4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-man-in-the-middle-attack-simulation/SKILL.md"}, "properties": {"repobilityId": "2b2d85ed60867c37", "scanner": "scanner-primary", "fingerprint": "421269816cf347f4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-man-in-the-middle-attack-simulation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1457747b1e95e0a1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-aws-privilege-escalation-assessment/SKILL.md"}, "properties": {"repobilityId": "f7ce0026faca9964", "scanner": "scanner-primary", "fingerprint": "1457747b1e95e0a1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-aws-privilege-escalation-assessment/SKILL.md"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-b18a180c2b9285e5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-spearphishing-simulation-campaign/SKILL.md"}, "properties": {"repobilityId": "ab37847ceb616a04", "scanner": "scanner-primary", "fingerprint": "b18a180c2b9285e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-spearphishing-simulation-campaign/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6de5c8e702f58a7", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-paste-site-monitoring-for-credentials/SKILL.md"}, "properties": {"repobilityId": "768d44fe3847d722", "scanner": "scanner-primary", "fingerprint": "b6de5c8e702f58a7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-paste-site-monitoring-for-credentials/SKILL.md"}, "region": {"startLine": 271}}}]}, {"ruleId": "scanner-cfad4c2ddd2420ba", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "properties": {"repobilityId": "0dfe7de5319c5f63", "scanner": "scanner-primary", "fingerprint": "cfad4c2ddd2420ba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-928f0272cb964b8b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "properties": {"repobilityId": "170253cd6a268a7a", "scanner": "scanner-primary", "fingerprint": "928f0272cb964b8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-iam-permission-boundaries/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1161829ac53f1511", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-command-and-control-beaconing/SKILL.md"}, "properties": {"repobilityId": "e130cc543eee5906", "scanner": "scanner-primary", "fingerprint": "1161829ac53f1511", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-command-and-control-beaconing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-066bc44b426bcd82", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/securing-container-registry-images/SKILL.md"}, "properties": {"repobilityId": "3d25b961c9d72f35", "scanner": "scanner-primary", "fingerprint": "066bc44b426bcd82", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-container-registry-images/SKILL.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-79b3d037e5fe1bdb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-device-posture-assessment-in-zero-trust/SKILL.md"}, "properties": {"repobilityId": "fff1d75a1383d529", "scanner": "scanner-primary", "fingerprint": "79b3d037e5fe1bdb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-device-posture-assessment-in-zero-trust/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-324b1556d03a2a02", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-windows-registry-for-artifacts/SKILL.md"}, "properties": {"repobilityId": "fff7502fead508af", "scanner": "scanner-primary", "fingerprint": "324b1556d03a2a02", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-registry-for-artifacts/SKILL.md"}, "region": {"startLine": 177}}}]}, {"ruleId": "scanner-3060401ff72a3fa4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-suspicious-powershell-execution/SKILL.md"}, "properties": {"repobilityId": "60186648a9d8be11", "scanner": "scanner-primary", "fingerprint": "3060401ff72a3fa4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-suspicious-powershell-execution/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7430d913fac033ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/auditing-tls-certificate-transparency-logs/SKILL.md"}, "properties": {"repobilityId": "df746c402b743ae8", "scanner": "scanner-primary", "fingerprint": "7430d913fac033ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-tls-certificate-transparency-logs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cfa1eff92d4b8b8c", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/hardening-docker-daemon-configuration/SKILL.md"}, "properties": {"repobilityId": "545ba0e01fc1bb4a", "scanner": "scanner-primary", "fingerprint": "cfa1eff92d4b8b8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hardening-docker-daemon-configuration/SKILL.md"}, "region": {"startLine": 246}}}]}, {"ruleId": "scanner-6d1594b79fb9d3c3", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/exploiting-oauth-misconfiguration/SKILL.md"}, "properties": {"repobilityId": "ed66d57f81b74967", "scanner": "scanner-primary", "fingerprint": "6d1594b79fb9d3c3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-oauth-misconfiguration/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-05b7ac3cd6b24562", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/auditing-cloud-with-cis-benchmarks/SKILL.md"}, "properties": {"repobilityId": "c96863cc9c63cb29", "scanner": "scanner-primary", "fingerprint": "05b7ac3cd6b24562", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/auditing-cloud-with-cis-benchmarks/SKILL.md"}, "region": {"startLine": 164}}}]}, {"ruleId": "scanner-8230893f659eb2b2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-graphql-introspection-attack/SKILL.md"}, "properties": {"repobilityId": "6d9f5cc9e0b25ec0", "scanner": "scanner-primary", "fingerprint": "8230893f659eb2b2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-introspection-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7c21e708eafdb54", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-api-key-security-controls/SKILL.md"}, "properties": {"repobilityId": "cbddbe9596ef790d", "scanner": "scanner-primary", "fingerprint": "b7c21e708eafdb54", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-api-key-security-controls/SKILL.md"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-6522ff6ac7257eeb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-email-forwarding-rules-attack/SKILL.md"}, "properties": {"repobilityId": "0c47708765b56994", "scanner": "scanner-primary", "fingerprint": "6522ff6ac7257eeb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-email-forwarding-rules-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ba19c5b508d5f67", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/testing-jwt-token-security/SKILL.md"}, "properties": {"repobilityId": "5fb889fbbd6032f7", "scanner": "scanner-primary", "fingerprint": "1ba19c5b508d5f67", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-jwt-token-security/SKILL.md"}, "region": {"startLine": 181}}}]}, {"ruleId": "scanner-307d17904576db0a", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/implementing-privileged-session-monitoring/SKILL.md"}, "properties": {"repobilityId": "eaeda3aec4a17f7b", "scanner": "scanner-primary", "fingerprint": "307d17904576db0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-privileged-session-monitoring/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-b74cc15c6d0c6db0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-hipaa-security-rule-safeguards/SKILL.md"}, "properties": {"repobilityId": "86b63a8408259fcc", "scanner": "scanner-primary", "fingerprint": "b74cc15c6d0c6db0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hipaa-security-rule-safeguards/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81605e0593353c41", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-sqlite-database-forensics/SKILL.md"}, "properties": {"repobilityId": "ceee1e95c3399f12", "scanner": "scanner-primary", "fingerprint": "81605e0593353c41", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-sqlite-database-forensics/SKILL.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-f25205b64985f560", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-hashicorp-vault-dynamic-secrets/SKILL.md"}, "properties": {"repobilityId": "bdfc5c58e31a2343", "scanner": "scanner-primary", "fingerprint": "f25205b64985f560", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hashicorp-vault-dynamic-secrets/SKILL.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-2e5a6376984782ff", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-graphql-depth-limit-attack/SKILL.md"}, "properties": {"repobilityId": "47139750f298ac92", "scanner": "scanner-primary", "fingerprint": "2e5a6376984782ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-graphql-depth-limit-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-552c06eaca246a43", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-with-wireshark/SKILL.md"}, "properties": {"repobilityId": "8e537bd8b90b7683", "scanner": "scanner-primary", "fingerprint": "552c06eaca246a43", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-traffic-with-wireshark/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2ece3374594c9d9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-gcp-security-assessment-with-forseti/SKILL.md"}, "properties": {"repobilityId": "58298bb56c518fe1", "scanner": "scanner-primary", "fingerprint": "a2ece3374594c9d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-gcp-security-assessment-with-forseti/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b8c4a1793634a073", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-kubernetes-penetration-testing/SKILL.md"}, "properties": {"repobilityId": "a24ccced5a578d6e", "scanner": "scanner-primary", "fingerprint": "b8c4a1793634a073", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-kubernetes-penetration-testing/SKILL.md"}, "region": {"startLine": 199}}}]}, {"ruleId": "scanner-588a7e293a5af650", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-beyondcorp-zero-trust-access-model/SKILL.md"}, "properties": {"repobilityId": "a83ab508305c5e7c", "scanner": "scanner-primary", "fingerprint": "588a7e293a5af650", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-beyondcorp-zero-trust-access-model/SKILL.md"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-cecf54f20773430d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "properties": {"repobilityId": "7414aa52918579db", "scanner": "scanner-primary", "fingerprint": "cecf54f20773430d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "region": {"startLine": 212}}}]}, {"ruleId": "scanner-53eb50b6225e1e77", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "properties": {"repobilityId": "4edb95c82477c546", "scanner": "scanner-primary", "fingerprint": "53eb50b6225e1e77", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ransomware-encryption-mechanisms/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f602803fff8af63", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-mtls-for-zero-trust-services/SKILL.md"}, "properties": {"repobilityId": "b265f2fcaf405834", "scanner": "scanner-primary", "fingerprint": "3f602803fff8af63", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-mtls-for-zero-trust-services/SKILL.md"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-04a4ffad6da290c2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-patch-management-workflow/SKILL.md"}, "properties": {"repobilityId": "ea7d29a837969143", "scanner": "scanner-primary", "fingerprint": "04a4ffad6da290c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-patch-management-workflow/SKILL.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-b991475d645d7b32", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-patch-management-workflow/SKILL.md"}, "properties": {"repobilityId": "9eed1e48644fd618", "scanner": "scanner-primary", "fingerprint": "b991475d645d7b32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-patch-management-workflow/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2d21f3385f67cb7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-ot-network-security-assessment/SKILL.md"}, "properties": {"repobilityId": "a0463644561a2b08", "scanner": "scanner-primary", "fingerprint": "e2d21f3385f67cb7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ot-network-security-assessment/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26c5a56037b4cae9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/testing-for-open-redirect-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "85bbb855f4dbd601", "scanner": "scanner-primary", "fingerprint": "26c5a56037b4cae9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-open-redirect-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03bf52db10986baa", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-attacks-on-scada-systems/SKILL.md"}, "properties": {"repobilityId": "8a8c930b0e91bf02", "scanner": "scanner-primary", "fingerprint": "03bf52db10986baa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-attacks-on-scada-systems/SKILL.md"}, "region": {"startLine": 582}}}]}, {"ruleId": "scanner-105c54dbe56afe89", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/detecting-attacks-on-scada-systems/SKILL.md"}, "properties": {"repobilityId": "50d0ccbdd5bed994", "scanner": "scanner-primary", "fingerprint": "105c54dbe56afe89", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-attacks-on-scada-systems/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8224ff785e8d1682", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-web-cache-poisoning-attack/SKILL.md"}, "properties": {"repobilityId": "661287013fce0ab1", "scanner": "scanner-primary", "fingerprint": "8224ff785e8d1682", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-web-cache-poisoning-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e118ec89d52a2491", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-cloud-penetration-testing-with-pacu/SKILL.md"}, "properties": {"repobilityId": "d680a13fe17c9f7b", "scanner": "scanner-primary", "fingerprint": "e118ec89d52a2491", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cloud-penetration-testing-with-pacu/SKILL.md"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-e4105eaf696a0647", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md"}, "properties": {"repobilityId": "5c1c359fc14dd354", "scanner": "scanner-primary", "fingerprint": "e4105eaf696a0647", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4543e5385e95491a", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/deploying-osquery-for-endpoint-monitoring/SKILL.md"}, "properties": {"repobilityId": "014ce5913ea7cad1", "scanner": "scanner-primary", "fingerprint": "4543e5385e95491a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-osquery-for-endpoint-monitoring/SKILL.md"}, "region": {"startLine": 59}}}]}, {"ruleId": "scanner-5972bf7f727fe992", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "properties": {"repobilityId": "6b2a165e59a5c687", "scanner": "scanner-primary", "fingerprint": "5972bf7f727fe992", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-f040f594cb073977", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "properties": {"repobilityId": "e5c47fd73779f808", "scanner": "scanner-primary", "fingerprint": "f040f594cb073977", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-tailscale-for-zero-trust-vpn/SKILL.md"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-0309978a6ee1fb12", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: skills/performing-sca-dependency-scanning-with-snyk/SKILL.md"}, "properties": {"repobilityId": "aaa1cfd11aaf2270", "scanner": "scanner-primary", "fingerprint": "0309978a6ee1fb12", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-sca-dependency-scanning-with-snyk/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-49161214200b9a48", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-vulnerability-dashboard-with-defectdojo/SKILL.md"}, "properties": {"repobilityId": "8818e27cb2ec1863", "scanner": "scanner-primary", "fingerprint": "49161214200b9a48", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-vulnerability-dashboard-with-defectdojo/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-338410ea9bc05fcc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-mobile-app-penetration-test/SKILL.md"}, "properties": {"repobilityId": "1a3a10252de1dd3c", "scanner": "scanner-primary", "fingerprint": "338410ea9bc05fcc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-mobile-app-penetration-test/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-691ecb46dcdafac2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "properties": {"repobilityId": "05ccfcd7771ec3f3", "scanner": "scanner-primary", "fingerprint": "691ecb46dcdafac2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-1ccf5a7018966e17", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-domain-persistence-with-dcsync/SKILL.md"}, "properties": {"repobilityId": "effe493401e1620e", "scanner": "scanner-primary", "fingerprint": "1ccf5a7018966e17", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-domain-persistence-with-dcsync/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-743841f5a14580ee", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-oauth-scope-minimization-review/SKILL.md"}, "properties": {"repobilityId": "f7bf34e4c64fcc89", "scanner": "scanner-primary", "fingerprint": "743841f5a14580ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-oauth-scope-minimization-review/SKILL.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-67a4161ea9c51d35", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-container-registry-with-harbor/SKILL.md"}, "properties": {"repobilityId": "69beee78b5643226", "scanner": "scanner-primary", "fingerprint": "67a4161ea9c51d35", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-container-registry-with-harbor/SKILL.md"}, "region": {"startLine": 213}}}]}, {"ruleId": "scanner-9cd671e0f7bae52d", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "properties": {"repobilityId": "ff2808f973c7bbff", "scanner": "scanner-primary", "fingerprint": "9cd671e0f7bae52d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-4c014f87d9ea2b43", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "properties": {"repobilityId": "016646ee72c3ed01", "scanner": "scanner-primary", "fingerprint": "4c014f87d9ea2b43", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/extracting-config-from-agent-tesla-rat/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73997d18e9d86ab1", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-http-parameter-pollution-attack/SKILL.md"}, "properties": {"repobilityId": "8362933b6cbe004d", "scanner": "scanner-primary", "fingerprint": "73997d18e9d86ab1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-http-parameter-pollution-attack/SKILL.md"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-6b44b3f7683d1f8c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-http-parameter-pollution-attack/SKILL.md"}, "properties": {"repobilityId": "fe9692f005d5925b", "scanner": "scanner-primary", "fingerprint": "6b44b3f7683d1f8c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-http-parameter-pollution-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd1040b7bda7cbce", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-zerologon-vulnerability-cve-2020-1472/SKILL.md"}, "properties": {"repobilityId": "9a1ef002e221e0b0", "scanner": "scanner-primary", "fingerprint": "fd1040b7bda7cbce", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-zerologon-vulnerability-cve-2020-1472/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6d22fb9e65f0eea", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/conducting-internal-reconnaissance-with-bloodhound-ce/SKILL.md"}, "properties": {"repobilityId": "676aade925847e84", "scanner": "scanner-primary", "fingerprint": "a6d22fb9e65f0eea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-internal-reconnaissance-with-bloodhound-ce/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-96fba27871de0868", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "properties": {"repobilityId": "244ef8a0b61541f5", "scanner": "scanner-primary", "fingerprint": "96fba27871de0868", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-2200de7d487dfffa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "properties": {"repobilityId": "75584ac55c06074f", "scanner": "scanner-primary", "fingerprint": "2200de7d487dfffa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-active-directory-bloodhound-analysis/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a23f29a8144ea59a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-usb-device-control-policy/SKILL.md"}, "properties": {"repobilityId": "f3150b7dd8f7faea", "scanner": "scanner-primary", "fingerprint": "a23f29a8144ea59a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-usb-device-control-policy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eddb276c0b306422", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-vlan-hopping-attack/SKILL.md"}, "properties": {"repobilityId": "d5dc0d9c4e4961b5", "scanner": "scanner-primary", "fingerprint": "eddb276c0b306422", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-vlan-hopping-attack/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c08285f59b427cd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-soar-playbook-for-phishing/SKILL.md"}, "properties": {"repobilityId": "31a86036df7b5b6a", "scanner": "scanner-primary", "fingerprint": "8c08285f59b427cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-soar-playbook-for-phishing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc28b08ef429047e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/analyzing-network-traffic-for-incidents/SKILL.md"}, "properties": {"repobilityId": "304bcf20756e0b34", "scanner": "scanner-primary", "fingerprint": "cc28b08ef429047e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-network-traffic-for-incidents/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a396eabbb76b6f62", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/deobfuscating-javascript-malware/SKILL.md"}, "properties": {"repobilityId": "620dab346b2b2dc5", "scanner": "scanner-primary", "fingerprint": "a396eabbb76b6f62", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b2dae6915730004e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/implementing-vulnerability-management-with-greenbone/SKILL.md"}, "properties": {"repobilityId": "1d65591f4a0b58b4", "scanner": "scanner-primary", "fingerprint": "b2dae6915730004e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-vulnerability-management-with-greenbone/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f2556792ed173bc", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/detecting-lateral-movement-in-network/SKILL.md"}, "properties": {"repobilityId": "e5d1690c77ace5c3", "scanner": "scanner-primary", "fingerprint": "5f2556792ed173bc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-lateral-movement-in-network/SKILL.md"}, "region": {"startLine": 241}}}]}, {"ruleId": "scanner-971a51e5bd5e93a0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/investigating-phishing-email-incident/SKILL.md"}, "properties": {"repobilityId": "7e80ba732be6381c", "scanner": "scanner-primary", "fingerprint": "971a51e5bd5e93a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/investigating-phishing-email-incident/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62b5e9b341de2cd6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-red-team-with-covenant/SKILL.md"}, "properties": {"repobilityId": "2d4e0880b6965491", "scanner": "scanner-primary", "fingerprint": "62b5e9b341de2cd6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-red-team-with-covenant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ee0c89d34282a75", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/implementing-aws-config-rules-for-compliance/SKILL.md"}, "properties": {"repobilityId": "111c07b9529f78b7", "scanner": "scanner-primary", "fingerprint": "8ee0c89d34282a75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-aws-config-rules-for-compliance/SKILL.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-3191a7aebf9b8ed9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-webshell-activity/SKILL.md"}, "properties": {"repobilityId": "e2756d8bed0da583", "scanner": "scanner-primary", "fingerprint": "3191a7aebf9b8ed9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-webshell-activity/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8a892cb159dddf2", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/securing-serverless-functions/SKILL.md"}, "properties": {"repobilityId": "288f0ddb05aed1f5", "scanner": "scanner-primary", "fingerprint": "e8a892cb159dddf2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-serverless-functions/SKILL.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-2bc2cdae06ff6f6c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-shadow-copy-deletion/SKILL.md"}, "properties": {"repobilityId": "8399618fd46ebac4", "scanner": "scanner-primary", "fingerprint": "2bc2cdae06ff6f6c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-shadow-copy-deletion/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a97f70ea243528c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-scheduled-task-persistence/SKILL.md"}, "properties": {"repobilityId": "535e1ba3a60d6073", "scanner": "scanner-primary", "fingerprint": "4a97f70ea243528c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-scheduled-task-persistence/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e251f2c960f89f04", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-dns-tunneling-with-zeek/SKILL.md"}, "properties": {"repobilityId": "a2d19199f20b5629", "scanner": "scanner-primary", "fingerprint": "e251f2c960f89f04", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-dns-tunneling-with-zeek/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f9cb47afd44f47b1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/exploiting-api-injection-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "1312a3192b7b79ed", "scanner": "scanner-primary", "fingerprint": "f9cb47afd44f47b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-api-injection-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8070fa245541d9fe", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-privilege-escalation-on-linux/SKILL.md"}, "properties": {"repobilityId": "e55fed8445851945", "scanner": "scanner-primary", "fingerprint": "8070fa245541d9fe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-privilege-escalation-on-linux/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a645bf4fddc698b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/hunting-for-living-off-the-cloud-techniques/SKILL.md"}, "properties": {"repobilityId": "76b884e1f615d51b", "scanner": "scanner-primary", "fingerprint": "3a645bf4fddc698b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/hunting-for-living-off-the-cloud-techniques/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1cefd28ac747303", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/performing-web-application-firewall-bypass/SKILL.md"}, "properties": {"repobilityId": "58096b9deea08025", "scanner": "scanner-primary", "fingerprint": "e1cefd28ac747303", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-web-application-firewall-bypass/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ca6e345694a4430", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: skills/building-cloud-siem-with-sentinel/SKILL.md"}, "properties": {"repobilityId": "780711561a4373f1", "scanner": "scanner-primary", "fingerprint": "5ca6e345694a4430", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-cloud-siem-with-sentinel/SKILL.md"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-75f9e8ad3d3ade1b", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/achieving-cmmc-level-2-compliance/SKILL.md"}, "properties": {"repobilityId": "c2d9b9ad2b2ec0e5", "scanner": "scanner-primary", "fingerprint": "75f9e8ad3d3ade1b", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9372981ae9f8c3d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE"}, "properties": {"repobilityId": "c5272454b7f54206", "scanner": "scanner-primary", "fingerprint": "b9372981ae9f8c3d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-b9372981ae9f8c3d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE"}, "properties": {"repobilityId": "c5272454b7f54206", "scanner": "scanner-primary", "fingerprint": "b9372981ae9f8c3d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-b9372981ae9f8c3d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE"}, "properties": {"repobilityId": "c5272454b7f54206", "scanner": "scanner-primary", "fingerprint": "b9372981ae9f8c3d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-b9372981ae9f8c3d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/achieving-cmmc-level-2-compliance/LICENSE"}, "properties": {"repobilityId": "c5272454b7f54206", "scanner": "scanner-primary", "fingerprint": "b9372981ae9f8c3d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/achieving-cmmc-level-2-compliance/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-c17faa92f10a0726", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "1a2dc1306ca36f49", "scanner": "scanner-primary", "fingerprint": "c17faa92f10a0726", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-c17faa92f10a0726", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "1a2dc1306ca36f49", "scanner": "scanner-primary", "fingerprint": "c17faa92f10a0726", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-c17faa92f10a0726", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "1a2dc1306ca36f49", "scanner": "scanner-primary", "fingerprint": "c17faa92f10a0726", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-c17faa92f10a0726", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "1a2dc1306ca36f49", "scanner": "scanner-primary", "fingerprint": "c17faa92f10a0726", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-065ac8f34c1b35bf", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "properties": {"repobilityId": "db88c80744998234", "scanner": "scanner-primary", "fingerprint": "065ac8f34c1b35bf", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d8d86f73af81ba23", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "properties": {"repobilityId": "16f82008fcf129d9", "scanner": "scanner-primary", "fingerprint": "d8d86f73af81ba23", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-d8d86f73af81ba23", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "properties": {"repobilityId": "16f82008fcf129d9", "scanner": "scanner-primary", "fingerprint": "d8d86f73af81ba23", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-d8d86f73af81ba23", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "properties": {"repobilityId": "16f82008fcf129d9", "scanner": "scanner-primary", "fingerprint": "d8d86f73af81ba23", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-d8d86f73af81ba23", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "properties": {"repobilityId": "16f82008fcf129d9", "scanner": "scanner-primary", "fingerprint": "d8d86f73af81ba23", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-6b1fbcddd3313c76", "level": "warning", "message": {"text": "SkillSpector MP2 (memory-poisoning) in skills/acquiring-disk-image-with-dd-and-dcfldd/references/api-reference.md"}, "properties": {"repobilityId": "8310e4713ce46f16", "scanner": "scanner-primary", "fingerprint": "6b1fbcddd3313c76", "layer": "security", "severity": "medium", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "memory-poisoning", "MP2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/references/api-reference.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-6f6d4fe0ee427a39", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "2922ea2bafa2c120", "scanner": "scanner-primary", "fingerprint": "6f6d4fe0ee427a39", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-6f6d4fe0ee427a39", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "2922ea2bafa2c120", "scanner": "scanner-primary", "fingerprint": "6f6d4fe0ee427a39", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-c1b6010a06e0c429", "level": "warning", "message": {"text": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "properties": {"repobilityId": "839c650003d1e235", "scanner": "scanner-primary", "fingerprint": "c1b6010a06e0c429", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-ebd1cec286c2bc61", "level": "warning", "message": {"text": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "933ec789c4fb75f2", "scanner": "scanner-primary", "fingerprint": "ebd1cec286c2bc61", "layer": "security", "severity": "medium", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-ebd1cec286c2bc61", "level": "warning", "message": {"text": "SkillSpector PE2 (priv-esc) in skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "properties": {"repobilityId": "933ec789c4fb75f2", "scanner": "scanner-primary", "fingerprint": "ebd1cec286c2bc61", "layer": "security", "severity": "medium", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-a7b03d5163a07a84", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "properties": {"repobilityId": "c5c0418d8a7ec7d6", "scanner": "scanner-primary", "fingerprint": "a7b03d5163a07a84", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8e8696eb5dfa5f6", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE"}, "properties": {"repobilityId": "ca8309acb1f53f07", "scanner": "scanner-primary", "fingerprint": "e8e8696eb5dfa5f6", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-e8e8696eb5dfa5f6", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE"}, "properties": {"repobilityId": "ca8309acb1f53f07", "scanner": "scanner-primary", "fingerprint": "e8e8696eb5dfa5f6", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-e8e8696eb5dfa5f6", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE"}, "properties": {"repobilityId": "ca8309acb1f53f07", "scanner": "scanner-primary", "fingerprint": "e8e8696eb5dfa5f6", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-e8e8696eb5dfa5f6", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-active-directory-acl-abuse/LICENSE"}, "properties": {"repobilityId": "ca8309acb1f53f07", "scanner": "scanner-primary", "fingerprint": "e8e8696eb5dfa5f6", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-aa26ee5bb93d1bb9", "level": "note", "message": {"text": "SkillSpector PE1 (priv-esc) in skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "properties": {"repobilityId": "738219d4a8e94caa", "scanner": "scanner-primary", "fingerprint": "aa26ee5bb93d1bb9", "layer": "security", "severity": "low", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/scripts/agent.py"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-546a75cbb64ed4cc", "level": "error", "message": {"text": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "properties": {"repobilityId": "100c2b3e876964cd", "scanner": "scanner-primary", "fingerprint": "546a75cbb64ed4cc", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "yara", "YR4"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/SKILL.md"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-f83c35fce06c9bfd", "level": "error", "message": {"text": "SkillSpector YR4 (yara) in skills/analyzing-active-directory-acl-abuse/references/api-reference.md"}, "properties": {"repobilityId": "ecbba42307fccbc3", "scanner": "scanner-primary", "fingerprint": "f83c35fce06c9bfd", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "yara", "YR4"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-active-directory-acl-abuse/references/api-reference.md"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-9ad4adafe9402c5b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE"}, "properties": {"repobilityId": "ae8cb19ffd663f15", "scanner": "scanner-primary", "fingerprint": "9ad4adafe9402c5b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-android-malware-with-apktool/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-9ad4adafe9402c5b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE"}, "properties": {"repobilityId": "ae8cb19ffd663f15", "scanner": "scanner-primary", "fingerprint": "9ad4adafe9402c5b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-android-malware-with-apktool/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-9ad4adafe9402c5b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE"}, "properties": {"repobilityId": "ae8cb19ffd663f15", "scanner": "scanner-primary", "fingerprint": "9ad4adafe9402c5b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-android-malware-with-apktool/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-9ad4adafe9402c5b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-android-malware-with-apktool/LICENSE"}, "properties": {"repobilityId": "ae8cb19ffd663f15", "scanner": "scanner-primary", "fingerprint": "9ad4adafe9402c5b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-android-malware-with-apktool/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-04c1da8f0a79c890", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-api-gateway-access-logs/SKILL.md"}, "properties": {"repobilityId": "47b9a94ded9927ad", "scanner": "scanner-primary", "fingerprint": "04c1da8f0a79c890", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df4b960a8af11144", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE"}, "properties": {"repobilityId": "34e0a40111480849", "scanner": "scanner-primary", "fingerprint": "df4b960a8af11144", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-df4b960a8af11144", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE"}, "properties": {"repobilityId": "34e0a40111480849", "scanner": "scanner-primary", "fingerprint": "df4b960a8af11144", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-df4b960a8af11144", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE"}, "properties": {"repobilityId": "34e0a40111480849", "scanner": "scanner-primary", "fingerprint": "df4b960a8af11144", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-df4b960a8af11144", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-api-gateway-access-logs/LICENSE"}, "properties": {"repobilityId": "34e0a40111480849", "scanner": "scanner-primary", "fingerprint": "df4b960a8af11144", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-f7156e117dc9fb1d", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-api-gateway-access-logs/scripts/agent.py"}, "properties": {"repobilityId": "e2656f2e371d9126", "scanner": "scanner-primary", "fingerprint": "f7156e117dc9fb1d", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-api-gateway-access-logs/scripts/agent.py"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-cdab8b70c2f54235", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-apt-group-with-mitre-navigator/SKILL.md"}, "properties": {"repobilityId": "b1c3912701fc5c3e", "scanner": "scanner-primary", "fingerprint": "cdab8b70c2f54235", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54bc0ba6245b5ea4", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "properties": {"repobilityId": "07b878af539ad37d", "scanner": "scanner-primary", "fingerprint": "54bc0ba6245b5ea4", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-54bc0ba6245b5ea4", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "properties": {"repobilityId": "07b878af539ad37d", "scanner": "scanner-primary", "fingerprint": "54bc0ba6245b5ea4", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-54bc0ba6245b5ea4", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "properties": {"repobilityId": "07b878af539ad37d", "scanner": "scanner-primary", "fingerprint": "54bc0ba6245b5ea4", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-54bc0ba6245b5ea4", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "properties": {"repobilityId": "07b878af539ad37d", "scanner": "scanner-primary", "fingerprint": "54bc0ba6245b5ea4", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-apt-group-with-mitre-navigator/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-2dac6dbf9a6c104b", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-azure-activity-logs-for-threats/SKILL.md"}, "properties": {"repobilityId": "67b9dd2dcb47e15f", "scanner": "scanner-primary", "fingerprint": "2dac6dbf9a6c104b", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1bc871784777e165", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "properties": {"repobilityId": "9683b4b0e8e46ba1", "scanner": "scanner-primary", "fingerprint": "1bc871784777e165", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-1bc871784777e165", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "properties": {"repobilityId": "9683b4b0e8e46ba1", "scanner": "scanner-primary", "fingerprint": "1bc871784777e165", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-1bc871784777e165", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "properties": {"repobilityId": "9683b4b0e8e46ba1", "scanner": "scanner-primary", "fingerprint": "1bc871784777e165", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-1bc871784777e165", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "properties": {"repobilityId": "9683b4b0e8e46ba1", "scanner": "scanner-primary", "fingerprint": "1bc871784777e165", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-e3a3d7b4aa5f31c4", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py"}, "properties": {"repobilityId": "77fb981040aa4c81", "scanner": "scanner-primary", "fingerprint": "e3a3d7b4aa5f31c4", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-d4994f49407b29fa", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "properties": {"repobilityId": "879656d6bc9db507", "scanner": "scanner-primary", "fingerprint": "d4994f49407b29fa", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-008567785e55b5b0", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-bootkit-and-rootkit-samples/SKILL.md"}, "properties": {"repobilityId": "7917d6b800e787f8", "scanner": "scanner-primary", "fingerprint": "008567785e55b5b0", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f02dfb6bb42d85c7", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "properties": {"repobilityId": "1f7a36e28354a3dd", "scanner": "scanner-primary", "fingerprint": "f02dfb6bb42d85c7", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-f02dfb6bb42d85c7", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "properties": {"repobilityId": "1f7a36e28354a3dd", "scanner": "scanner-primary", "fingerprint": "f02dfb6bb42d85c7", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-f02dfb6bb42d85c7", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "properties": {"repobilityId": "1f7a36e28354a3dd", "scanner": "scanner-primary", "fingerprint": "f02dfb6bb42d85c7", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-f02dfb6bb42d85c7", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "properties": {"repobilityId": "1f7a36e28354a3dd", "scanner": "scanner-primary", "fingerprint": "f02dfb6bb42d85c7", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-36a6c343a30e8cb4", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "properties": {"repobilityId": "9fd695349c99c7e5", "scanner": "scanner-primary", "fingerprint": "36a6c343a30e8cb4", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "scanner-7320d46662beeaa2", "level": "error", "message": {"text": "SkillSpector RA1 (rogue-agent) in skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "properties": {"repobilityId": "5d1b1a13274f3e55", "scanner": "scanner-primary", "fingerprint": "7320d46662beeaa2", "layer": "security", "severity": "high", "confidence": 0.9, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py"}, "region": {"startLine": 102}}}]}, {"ruleId": "scanner-d7b2274e75f83c0d", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "properties": {"repobilityId": "d2a32e86db10567a", "scanner": "scanner-primary", "fingerprint": "d7b2274e75f83c0d", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ca35541513a601c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "properties": {"repobilityId": "9637c0335601dca2", "scanner": "scanner-primary", "fingerprint": "1ca35541513a601c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-1ca35541513a601c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "properties": {"repobilityId": "9637c0335601dca2", "scanner": "scanner-primary", "fingerprint": "1ca35541513a601c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-1ca35541513a601c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "properties": {"repobilityId": "9637c0335601dca2", "scanner": "scanner-primary", "fingerprint": "1ca35541513a601c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-1ca35541513a601c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "properties": {"repobilityId": "9637c0335601dca2", "scanner": "scanner-primary", "fingerprint": "1ca35541513a601c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-0f5a9a5a1e86a234", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "properties": {"repobilityId": "c388ed94a6a5977c", "scanner": "scanner-primary", "fingerprint": "0f5a9a5a1e86a234", "layer": "security", "severity": "high", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-browser-forensics-with-hindsight/SKILL.md"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-54f332bad079f6cf", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-campaign-attribution-evidence/SKILL.md"}, "properties": {"repobilityId": "8ab3b4bdc5cad045", "scanner": "scanner-primary", "fingerprint": "54f332bad079f6cf", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b62fdc4c50878366", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-campaign-attribution-evidence/references/api-reference.md"}, "properties": {"repobilityId": "e917665aad6d9d10", "scanner": "scanner-primary", "fingerprint": "b62fdc4c50878366", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/references/api-reference.md"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-b62fdc4c50878366", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-campaign-attribution-evidence/references/api-reference.md"}, "properties": {"repobilityId": "e917665aad6d9d10", "scanner": "scanner-primary", "fingerprint": "b62fdc4c50878366", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/references/api-reference.md"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-eb472752aa0bd151", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE"}, "properties": {"repobilityId": "66eca606f7300e2f", "scanner": "scanner-primary", "fingerprint": "eb472752aa0bd151", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-eb472752aa0bd151", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE"}, "properties": {"repobilityId": "66eca606f7300e2f", "scanner": "scanner-primary", "fingerprint": "eb472752aa0bd151", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-eb472752aa0bd151", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE"}, "properties": {"repobilityId": "66eca606f7300e2f", "scanner": "scanner-primary", "fingerprint": "eb472752aa0bd151", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-eb472752aa0bd151", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-campaign-attribution-evidence/LICENSE"}, "properties": {"repobilityId": "66eca606f7300e2f", "scanner": "scanner-primary", "fingerprint": "eb472752aa0bd151", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-campaign-attribution-evidence/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-668f506baa809c72", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-certificate-transparency-for-phishing/SKILL.md"}, "properties": {"repobilityId": "4181390887c09467", "scanner": "scanner-primary", "fingerprint": "668f506baa809c72", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e07faaf860a09c9", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "properties": {"repobilityId": "2c71880a679d6a73", "scanner": "scanner-primary", "fingerprint": "0e07faaf860a09c9", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-0e07faaf860a09c9", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "properties": {"repobilityId": "2c71880a679d6a73", "scanner": "scanner-primary", "fingerprint": "0e07faaf860a09c9", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-0e07faaf860a09c9", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "properties": {"repobilityId": "2c71880a679d6a73", "scanner": "scanner-primary", "fingerprint": "0e07faaf860a09c9", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-0e07faaf860a09c9", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "properties": {"repobilityId": "2c71880a679d6a73", "scanner": "scanner-primary", "fingerprint": "0e07faaf860a09c9", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-certificate-transparency-for-phishing/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-70c05ff5cd8c42f8", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "properties": {"repobilityId": "671849adf0ed4e6f", "scanner": "scanner-primary", "fingerprint": "70c05ff5cd8c42f8", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-da2010864da303c3", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "properties": {"repobilityId": "4b32579214382aaa", "scanner": "scanner-primary", "fingerprint": "da2010864da303c3", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc48100ca25c6f89", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "properties": {"repobilityId": "10724e7bdce5c313", "scanner": "scanner-primary", "fingerprint": "cc48100ca25c6f89", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-cc48100ca25c6f89", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "properties": {"repobilityId": "10724e7bdce5c313", "scanner": "scanner-primary", "fingerprint": "cc48100ca25c6f89", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-cc48100ca25c6f89", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "properties": {"repobilityId": "10724e7bdce5c313", "scanner": "scanner-primary", "fingerprint": "cc48100ca25c6f89", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-cc48100ca25c6f89", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "properties": {"repobilityId": "10724e7bdce5c313", "scanner": "scanner-primary", "fingerprint": "cc48100ca25c6f89", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-282daae6148424be", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "properties": {"repobilityId": "f7998746bbb4d46c", "scanner": "scanner-primary", "fingerprint": "282daae6148424be", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cloud-storage-access-patterns/scripts/agent.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-322313680a83dc85", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "properties": {"repobilityId": "67fc29cdff29d180", "scanner": "scanner-primary", "fingerprint": "322313680a83dc85", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-091fb0e67a0c43cd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "properties": {"repobilityId": "3af306430336b0c9", "scanner": "scanner-primary", "fingerprint": "091fb0e67a0c43cd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-091fb0e67a0c43cd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "properties": {"repobilityId": "3af306430336b0c9", "scanner": "scanner-primary", "fingerprint": "091fb0e67a0c43cd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-091fb0e67a0c43cd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "properties": {"repobilityId": "3af306430336b0c9", "scanner": "scanner-primary", "fingerprint": "091fb0e67a0c43cd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-091fb0e67a0c43cd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "properties": {"repobilityId": "3af306430336b0c9", "scanner": "scanner-primary", "fingerprint": "091fb0e67a0c43cd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-565e5cc9bbddaef6", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "properties": {"repobilityId": "1ce870ba098c74fb", "scanner": "scanner-primary", "fingerprint": "565e5cc9bbddaef6", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/SKILL.md"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-4826e756a174df06", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/assets/template.md"}, "properties": {"repobilityId": "e73124fe479e8134", "scanner": "scanner-primary", "fingerprint": "4826e756a174df06", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/assets/template.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-d2d0540bd5a11b73", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/api-reference.md"}, "properties": {"repobilityId": "3d3af7534d46122a", "scanner": "scanner-primary", "fingerprint": "d2d0540bd5a11b73", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/references/api-reference.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-6ae4eea8457eedf4", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/references/standards.md"}, "properties": {"repobilityId": "adfa22bb549266b1", "scanner": "scanner-primary", "fingerprint": "6ae4eea8457eedf4", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/references/standards.md"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-66256e40eefcb912", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py"}, "properties": {"repobilityId": "09ddefeb71c679de", "scanner": "scanner-primary", "fingerprint": "66256e40eefcb912", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/scripts/agent.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-d3e90bfa61ef242e", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py"}, "properties": {"repobilityId": "462c0dc55d53a55d", "scanner": "scanner-primary", "fingerprint": "d3e90bfa61ef242e", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobalt-strike-beacon-configuration/scripts/process.py"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-260dbd3ff1d0908f", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "properties": {"repobilityId": "93f1834b24ab7f57", "scanner": "scanner-primary", "fingerprint": "260dbd3ff1d0908f", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64e2c800aaa687bc", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "properties": {"repobilityId": "d1fbb3431813cbbb", "scanner": "scanner-primary", "fingerprint": "64e2c800aaa687bc", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-64e2c800aaa687bc", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "properties": {"repobilityId": "d1fbb3431813cbbb", "scanner": "scanner-primary", "fingerprint": "64e2c800aaa687bc", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-64e2c800aaa687bc", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "properties": {"repobilityId": "d1fbb3431813cbbb", "scanner": "scanner-primary", "fingerprint": "64e2c800aaa687bc", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-64e2c800aaa687bc", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "properties": {"repobilityId": "d1fbb3431813cbbb", "scanner": "scanner-primary", "fingerprint": "64e2c800aaa687bc", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-5de8c744c458d8fc", "level": "error", "message": {"text": "SkillSpector P6 (prompt-injection) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "properties": {"repobilityId": "55dda14eb574ddf6", "scanner": "scanner-primary", "fingerprint": "5de8c744c458d8fc", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "prompt-injection", "P6"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "region": {"startLine": 178}}}]}, {"ruleId": "scanner-8e76b2177fadc8c8", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "properties": {"repobilityId": "f0b7ecff9e8e81e5", "scanner": "scanner-primary", "fingerprint": "8e76b2177fadc8c8", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/SKILL.md"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-8085a23107cc67da", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/references/api-reference.md"}, "properties": {"repobilityId": "0d6110619a8d0246", "scanner": "scanner-primary", "fingerprint": "8085a23107cc67da", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/references/api-reference.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07745b3a04d11b51", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "properties": {"repobilityId": "b01f5d0a6dd84b03", "scanner": "scanner-primary", "fingerprint": "07745b3a04d11b51", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cobaltstrike-malleable-c2-profiles/scripts/agent.py"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-ec3001e5e6db3c98", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-command-and-control-communication/SKILL.md"}, "properties": {"repobilityId": "d7370de80614155b", "scanner": "scanner-primary", "fingerprint": "ec3001e5e6db3c98", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a615ca579e4f874", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-command-and-control-communication/SKILL.md"}, "properties": {"repobilityId": "dd2b3ca6f22a920e", "scanner": "scanner-primary", "fingerprint": "2a615ca579e4f874", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/SKILL.md"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-e49fd0f736577689", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE"}, "properties": {"repobilityId": "05264b7b08a4d6df", "scanner": "scanner-primary", "fingerprint": "e49fd0f736577689", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-e49fd0f736577689", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE"}, "properties": {"repobilityId": "05264b7b08a4d6df", "scanner": "scanner-primary", "fingerprint": "e49fd0f736577689", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-e49fd0f736577689", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE"}, "properties": {"repobilityId": "05264b7b08a4d6df", "scanner": "scanner-primary", "fingerprint": "e49fd0f736577689", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-e49fd0f736577689", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-command-and-control-communication/LICENSE"}, "properties": {"repobilityId": "05264b7b08a4d6df", "scanner": "scanner-primary", "fingerprint": "e49fd0f736577689", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-dacddd080a3cd4d7", "level": "error", "message": {"text": "SkillSpector P6 (prompt-injection) in skills/analyzing-command-and-control-communication/scripts/agent.py"}, "properties": {"repobilityId": "f1e5671f1216ff59", "scanner": "scanner-primary", "fingerprint": "dacddd080a3cd4d7", "layer": "security", "severity": "high", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "prompt-injection", "P6"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/scripts/agent.py"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-fda4b681659c8cf7", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/SKILL.md"}, "properties": {"repobilityId": "c521a040c8ec39b0", "scanner": "scanner-primary", "fingerprint": "fda4b681659c8cf7", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/SKILL.md"}, "region": {"startLine": 188}}}]}, {"ruleId": "scanner-7b237355c3bbd7d9", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/references/api-reference.md"}, "properties": {"repobilityId": "d11dce6fd443d41c", "scanner": "scanner-primary", "fingerprint": "7b237355c3bbd7d9", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/references/api-reference.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-2e03fae5aa171dd5", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-command-and-control-communication/scripts/agent.py"}, "properties": {"repobilityId": "58475985aa675c9c", "scanner": "scanner-primary", "fingerprint": "2e03fae5aa171dd5", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-command-and-control-communication/scripts/agent.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "scanner-ebe610bbbde1cdbc", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-cyber-kill-chain/references/api-reference.md"}, "properties": {"repobilityId": "fcf6f5cf496ce8c8", "scanner": "scanner-primary", "fingerprint": "ebe610bbbde1cdbc", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/references/api-reference.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-ecf7ba54a6efe736", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE"}, "properties": {"repobilityId": "0f7323eada5c93e2", "scanner": "scanner-primary", "fingerprint": "ecf7ba54a6efe736", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-ecf7ba54a6efe736", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE"}, "properties": {"repobilityId": "0f7323eada5c93e2", "scanner": "scanner-primary", "fingerprint": "ecf7ba54a6efe736", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-ecf7ba54a6efe736", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE"}, "properties": {"repobilityId": "0f7323eada5c93e2", "scanner": "scanner-primary", "fingerprint": "ecf7ba54a6efe736", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-ecf7ba54a6efe736", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-cyber-kill-chain/LICENSE"}, "properties": {"repobilityId": "0f7323eada5c93e2", "scanner": "scanner-primary", "fingerprint": "ecf7ba54a6efe736", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-e5ae1e2c3d30264d", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-cyber-kill-chain/scripts/agent.py"}, "properties": {"repobilityId": "e927f2156ead871d", "scanner": "scanner-primary", "fingerprint": "e5ae1e2c3d30264d", "layer": "security", "severity": "high", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-cyber-kill-chain/scripts/agent.py"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-d164ca0eb8977231", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "2902f9079702ffa7", "scanner": "scanner-primary", "fingerprint": "d164ca0eb8977231", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-d164ca0eb8977231", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "2902f9079702ffa7", "scanner": "scanner-primary", "fingerprint": "d164ca0eb8977231", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-d164ca0eb8977231", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "2902f9079702ffa7", "scanner": "scanner-primary", "fingerprint": "d164ca0eb8977231", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-d164ca0eb8977231", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "2902f9079702ffa7", "scanner": "scanner-primary", "fingerprint": "d164ca0eb8977231", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-d164ca0eb8977231", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "2902f9079702ffa7", "scanner": "scanner-primary", "fingerprint": "d164ca0eb8977231", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-d1f2b3945b2bfecb", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "properties": {"repobilityId": "6e395c936f5c37c3", "scanner": "scanner-primary", "fingerprint": "d1f2b3945b2bfecb", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8657a161e461219f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE"}, "properties": {"repobilityId": "41c0c9d2d029e54d", "scanner": "scanner-primary", "fingerprint": "8657a161e461219f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-8657a161e461219f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE"}, "properties": {"repobilityId": "41c0c9d2d029e54d", "scanner": "scanner-primary", "fingerprint": "8657a161e461219f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-8657a161e461219f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE"}, "properties": {"repobilityId": "41c0c9d2d029e54d", "scanner": "scanner-primary", "fingerprint": "8657a161e461219f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-8657a161e461219f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-disk-image-with-autopsy/LICENSE"}, "properties": {"repobilityId": "41c0c9d2d029e54d", "scanner": "scanner-primary", "fingerprint": "8657a161e461219f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-2c0f2a25b12ce127", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "c7aa15fd96642167", "scanner": "scanner-primary", "fingerprint": "2c0f2a25b12ce127", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-2c0f2a25b12ce127", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "properties": {"repobilityId": "c7aa15fd96642167", "scanner": "scanner-primary", "fingerprint": "2c0f2a25b12ce127", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-disk-image-with-autopsy/scripts/agent.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-b34c4134d9ee9699", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-dns-logs-for-exfiltration/SKILL.md"}, "properties": {"repobilityId": "e8cae39b92988545", "scanner": "scanner-primary", "fingerprint": "b34c4134d9ee9699", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f85f950e11d4caaa", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-dns-logs-for-exfiltration/references/api-reference.md"}, "properties": {"repobilityId": "647adc3299b62746", "scanner": "scanner-primary", "fingerprint": "f85f950e11d4caaa", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/references/api-reference.md"}, "region": {"startLine": 91}}}]}, {"ruleId": "scanner-ae1f068b84880f88", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "properties": {"repobilityId": "8fc19221e8cc2bbf", "scanner": "scanner-primary", "fingerprint": "ae1f068b84880f88", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-ae1f068b84880f88", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "properties": {"repobilityId": "8fc19221e8cc2bbf", "scanner": "scanner-primary", "fingerprint": "ae1f068b84880f88", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-ae1f068b84880f88", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "properties": {"repobilityId": "8fc19221e8cc2bbf", "scanner": "scanner-primary", "fingerprint": "ae1f068b84880f88", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-ae1f068b84880f88", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "properties": {"repobilityId": "8fc19221e8cc2bbf", "scanner": "scanner-primary", "fingerprint": "ae1f068b84880f88", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-dns-logs-for-exfiltration/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-a75dbdf81a6bce69", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "properties": {"repobilityId": "754634cf462bba40", "scanner": "scanner-primary", "fingerprint": "a75dbdf81a6bce69", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-a75dbdf81a6bce69", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "properties": {"repobilityId": "754634cf462bba40", "scanner": "scanner-primary", "fingerprint": "a75dbdf81a6bce69", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 141}}}]}, {"ruleId": "scanner-0fb9b06afb861e66", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "3aa0527768bbc2d4", "scanner": "scanner-primary", "fingerprint": "0fb9b06afb861e66", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd9b23f6bfb5f705", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE"}, "properties": {"repobilityId": "d1a1c575c9b15853", "scanner": "scanner-primary", "fingerprint": "bd9b23f6bfb5f705", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-bd9b23f6bfb5f705", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE"}, "properties": {"repobilityId": "d1a1c575c9b15853", "scanner": "scanner-primary", "fingerprint": "bd9b23f6bfb5f705", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-bd9b23f6bfb5f705", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE"}, "properties": {"repobilityId": "d1a1c575c9b15853", "scanner": "scanner-primary", "fingerprint": "bd9b23f6bfb5f705", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-bd9b23f6bfb5f705", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-docker-container-forensics/LICENSE"}, "properties": {"repobilityId": "d1a1c575c9b15853", "scanner": "scanner-primary", "fingerprint": "bd9b23f6bfb5f705", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-fe0813d56f30f842", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "properties": {"repobilityId": "7bdd09c1ee3e1f6d", "scanner": "scanner-primary", "fingerprint": "fe0813d56f30f842", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-660c020d7766a2bf", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "068d81df1ac4e10e", "scanner": "scanner-primary", "fingerprint": "660c020d7766a2bf", "layer": "security", "severity": "high", "confidence": 0.9, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 338}}}]}, {"ruleId": "scanner-660c020d7766a2bf", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "068d81df1ac4e10e", "scanner": "scanner-primary", "fingerprint": "660c020d7766a2bf", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-660c020d7766a2bf", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "068d81df1ac4e10e", "scanner": "scanner-primary", "fingerprint": "660c020d7766a2bf", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 237}}}]}, {"ruleId": "scanner-660c020d7766a2bf", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "068d81df1ac4e10e", "scanner": "scanner-primary", "fingerprint": "660c020d7766a2bf", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 237}}}]}, {"ruleId": "scanner-c63feaeb2a5b50db", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "properties": {"repobilityId": "9f7cdf199c74242f", "scanner": "scanner-primary", "fingerprint": "c63feaeb2a5b50db", "layer": "security", "severity": "high", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-c63feaeb2a5b50db", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-docker-container-forensics/scripts/agent.py"}, "properties": {"repobilityId": "9f7cdf199c74242f", "scanner": "scanner-primary", "fingerprint": "c63feaeb2a5b50db", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/scripts/agent.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-0211d683798a4a3a", "level": "error", "message": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "23c0742f3fe17508", "scanner": "scanner-primary", "fingerprint": "0211d683798a4a3a", "layer": "security", "severity": "high", "confidence": 0.9, "tags": ["skillspector", "mcp-skill", "supply-chain", "SC2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-0211d683798a4a3a", "level": "note", "message": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "23c0742f3fe17508", "scanner": "scanner-primary", "fingerprint": "0211d683798a4a3a", "layer": "security", "severity": "low", "confidence": 0.15, "tags": ["skillspector", "mcp-skill", "supply-chain", "SC2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-e7168333a2e317ab", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-docker-container-forensics/SKILL.md"}, "properties": {"repobilityId": "81fe75b6c57f10ae", "scanner": "scanner-primary", "fingerprint": "e7168333a2e317ab", "layer": "security", "severity": "high", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-docker-container-forensics/SKILL.md"}, "region": {"startLine": 337}}}]}, {"ruleId": "scanner-099d7e0c406d2b59", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "properties": {"repobilityId": "ab99e51ff0c998fd", "scanner": "scanner-primary", "fingerprint": "099d7e0c406d2b59", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-0f4f18f4f2c549e4", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "properties": {"repobilityId": "8e5ac3fcd1867d0e", "scanner": "scanner-primary", "fingerprint": "0f4f18f4f2c549e4", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18767570e484f25e", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "properties": {"repobilityId": "cde7f4e4fd56bdc6", "scanner": "scanner-primary", "fingerprint": "18767570e484f25e", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-86a71f89693a70d6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "properties": {"repobilityId": "ae2d13d5e4d4d836", "scanner": "scanner-primary", "fingerprint": "86a71f89693a70d6", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-86a71f89693a70d6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "properties": {"repobilityId": "ae2d13d5e4d4d836", "scanner": "scanner-primary", "fingerprint": "86a71f89693a70d6", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-86a71f89693a70d6", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "properties": {"repobilityId": "ae2d13d5e4d4d836", "scanner": "scanner-primary", "fingerprint": "86a71f89693a70d6", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/references/api-reference.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-934fd564d398a71c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "properties": {"repobilityId": "db2dd2d0f61c912a", "scanner": "scanner-primary", "fingerprint": "934fd564d398a71c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-934fd564d398a71c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "properties": {"repobilityId": "db2dd2d0f61c912a", "scanner": "scanner-primary", "fingerprint": "934fd564d398a71c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-934fd564d398a71c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "properties": {"repobilityId": "db2dd2d0f61c912a", "scanner": "scanner-primary", "fingerprint": "934fd564d398a71c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-934fd564d398a71c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "properties": {"repobilityId": "db2dd2d0f61c912a", "scanner": "scanner-primary", "fingerprint": "934fd564d398a71c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-f63bc411f917a017", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "properties": {"repobilityId": "a1427e9b59d35c0f", "scanner": "scanner-primary", "fingerprint": "f63bc411f917a017", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/scripts/agent.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-7dd8d4d00ebb07cd", "level": "error", "message": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "properties": {"repobilityId": "8bfc06027e15dc6c", "scanner": "scanner-primary", "fingerprint": "7dd8d4d00ebb07cd", "layer": "security", "severity": "high", "confidence": 0.9, "tags": ["skillspector", "mcp-skill", "supply-chain", "SC2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "region": {"startLine": 196}}}]}, {"ruleId": "scanner-7dd8d4d00ebb07cd", "level": "error", "message": {"text": "SkillSpector SC2 (supply-chain) in skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "properties": {"repobilityId": "8bfc06027e15dc6c", "scanner": "scanner-primary", "fingerprint": "7dd8d4d00ebb07cd", "layer": "security", "severity": "high", "confidence": 0.9, "tags": ["skillspector", "mcp-skill", "supply-chain", "SC2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-email-headers-for-phishing-investigation/SKILL.md"}, "region": {"startLine": 232}}}]}, {"ruleId": "scanner-69dae0debac6f7cb", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "properties": {"repobilityId": "1b266455797ca0bc", "scanner": "scanner-primary", "fingerprint": "69dae0debac6f7cb", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-69dae0debac6f7cb", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "properties": {"repobilityId": "1b266455797ca0bc", "scanner": "scanner-primary", "fingerprint": "69dae0debac6f7cb", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-c7db67b99093d31f", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md"}, "properties": {"repobilityId": "7a0dad5f1f53cd62", "scanner": "scanner-primary", "fingerprint": "c7db67b99093d31f", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3386d96f6f36c73", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "properties": {"repobilityId": "5b5ed304aa99690a", "scanner": "scanner-primary", "fingerprint": "d3386d96f6f36c73", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-d3386d96f6f36c73", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "properties": {"repobilityId": "5b5ed304aa99690a", "scanner": "scanner-primary", "fingerprint": "d3386d96f6f36c73", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-d3386d96f6f36c73", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "properties": {"repobilityId": "5b5ed304aa99690a", "scanner": "scanner-primary", "fingerprint": "d3386d96f6f36c73", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-d3386d96f6f36c73", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "properties": {"repobilityId": "5b5ed304aa99690a", "scanner": "scanner-primary", "fingerprint": "d3386d96f6f36c73", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-4a7437f64dfee6f5", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "properties": {"repobilityId": "0adbfd31358d4572", "scanner": "scanner-primary", "fingerprint": "4a7437f64dfee6f5", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-4a7437f64dfee6f5", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "properties": {"repobilityId": "0adbfd31358d4572", "scanner": "scanner-primary", "fingerprint": "4a7437f64dfee6f5", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ethereum-smart-contract-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-20e5e8ac9311ac56", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-golang-malware-with-ghidra/SKILL.md"}, "properties": {"repobilityId": "8e061d559b4a49e4", "scanner": "scanner-primary", "fingerprint": "20e5e8ac9311ac56", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d44b366aefa662f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "properties": {"repobilityId": "875f9cc5e9253eb8", "scanner": "scanner-primary", "fingerprint": "1d44b366aefa662f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-1d44b366aefa662f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "properties": {"repobilityId": "875f9cc5e9253eb8", "scanner": "scanner-primary", "fingerprint": "1d44b366aefa662f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-1d44b366aefa662f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "properties": {"repobilityId": "875f9cc5e9253eb8", "scanner": "scanner-primary", "fingerprint": "1d44b366aefa662f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-1d44b366aefa662f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "properties": {"repobilityId": "875f9cc5e9253eb8", "scanner": "scanner-primary", "fingerprint": "1d44b366aefa662f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-d973ba759c56f9f8", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/api-reference.md"}, "properties": {"repobilityId": "02ea4e40e16ca711", "scanner": "scanner-primary", "fingerprint": "d973ba759c56f9f8", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/references/api-reference.md"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-ded798d8c7574ae8", "level": "error", "message": {"text": "SkillSpector YR1 (yara) in skills/analyzing-golang-malware-with-ghidra/references/standards.md"}, "properties": {"repobilityId": "e3a14ad8cfe4da57", "scanner": "scanner-primary", "fingerprint": "ded798d8c7574ae8", "layer": "security", "severity": "critical", "confidence": 0.85, "tags": ["skillspector", "mcp-skill", "yara", "YR1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-golang-malware-with-ghidra/references/standards.md"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-c30eaffdca496874", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "properties": {"repobilityId": "33f8ef08a2ec3c20", "scanner": "scanner-primary", "fingerprint": "c30eaffdca496874", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-69cb24258cca91d3", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-heap-spray-exploitation/SKILL.md"}, "properties": {"repobilityId": "a8018cf9541a99c9", "scanner": "scanner-primary", "fingerprint": "69cb24258cca91d3", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a5e5ee95afdc3c8", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE"}, "properties": {"repobilityId": "c38a29b6e05a73cb", "scanner": "scanner-primary", "fingerprint": "8a5e5ee95afdc3c8", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-8a5e5ee95afdc3c8", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE"}, "properties": {"repobilityId": "c38a29b6e05a73cb", "scanner": "scanner-primary", "fingerprint": "8a5e5ee95afdc3c8", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-8a5e5ee95afdc3c8", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE"}, "properties": {"repobilityId": "c38a29b6e05a73cb", "scanner": "scanner-primary", "fingerprint": "8a5e5ee95afdc3c8", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-8a5e5ee95afdc3c8", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-heap-spray-exploitation/LICENSE"}, "properties": {"repobilityId": "c38a29b6e05a73cb", "scanner": "scanner-primary", "fingerprint": "8a5e5ee95afdc3c8", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-24a2210ecf1855e8", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "properties": {"repobilityId": "53cef250a9f713db", "scanner": "scanner-primary", "fingerprint": "24a2210ecf1855e8", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-heap-spray-exploitation/scripts/agent.py"}, "region": {"startLine": 55}}}]}, {"ruleId": "scanner-0345a197bd01cc59", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-indicators-of-compromise/SKILL.md"}, "properties": {"repobilityId": "8c56ca0b094303a3", "scanner": "scanner-primary", "fingerprint": "0345a197bd01cc59", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-212fb9b65164a55c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/SKILL.md"}, "properties": {"repobilityId": "d49f50e4c76c0619", "scanner": "scanner-primary", "fingerprint": "212fb9b65164a55c", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-212fb9b65164a55c", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/SKILL.md"}, "properties": {"repobilityId": "d49f50e4c76c0619", "scanner": "scanner-primary", "fingerprint": "212fb9b65164a55c", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-fcfdc583460573cd", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "properties": {"repobilityId": "a7b05b03a6d5a9ab", "scanner": "scanner-primary", "fingerprint": "fcfdc583460573cd", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-fcfdc583460573cd", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "properties": {"repobilityId": "a7b05b03a6d5a9ab", "scanner": "scanner-primary", "fingerprint": "fcfdc583460573cd", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-fcfdc583460573cd", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "properties": {"repobilityId": "a7b05b03a6d5a9ab", "scanner": "scanner-primary", "fingerprint": "fcfdc583460573cd", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-fcfdc583460573cd", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "properties": {"repobilityId": "a7b05b03a6d5a9ab", "scanner": "scanner-primary", "fingerprint": "fcfdc583460573cd", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-fcfdc583460573cd", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "properties": {"repobilityId": "a7b05b03a6d5a9ab", "scanner": "scanner-primary", "fingerprint": "fcfdc583460573cd", "layer": "security", "severity": "medium", "confidence": 0.5, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/references/api-reference.md"}, "region": {"startLine": 93}}}]}, {"ruleId": "scanner-92fe0b7531a42c12", "level": "warning", "message": {"text": "SkillSpector E1 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "properties": {"repobilityId": "e1671a0f839e7613", "scanner": "scanner-primary", "fingerprint": "92fe0b7531a42c12", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "data-exfil", "E1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-2f68e62609c734ee", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "properties": {"repobilityId": "294b2af93c8368aa", "scanner": "scanner-primary", "fingerprint": "2f68e62609c734ee", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 238}}}]}, {"ruleId": "scanner-2f68e62609c734ee", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "properties": {"repobilityId": "294b2af93c8368aa", "scanner": "scanner-primary", "fingerprint": "2f68e62609c734ee", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 239}}}]}, {"ruleId": "scanner-d26ef5fde2f7f148", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE"}, "properties": {"repobilityId": "ec3b33422057e410", "scanner": "scanner-primary", "fingerprint": "d26ef5fde2f7f148", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-d26ef5fde2f7f148", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE"}, "properties": {"repobilityId": "ec3b33422057e410", "scanner": "scanner-primary", "fingerprint": "d26ef5fde2f7f148", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-d26ef5fde2f7f148", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE"}, "properties": {"repobilityId": "ec3b33422057e410", "scanner": "scanner-primary", "fingerprint": "d26ef5fde2f7f148", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-d26ef5fde2f7f148", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-indicators-of-compromise/LICENSE"}, "properties": {"repobilityId": "ec3b33422057e410", "scanner": "scanner-primary", "fingerprint": "d26ef5fde2f7f148", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-717958e77bcdfdf4", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "60196f88c77562be", "scanner": "scanner-primary", "fingerprint": "717958e77bcdfdf4", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-717958e77bcdfdf4", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "60196f88c77562be", "scanner": "scanner-primary", "fingerprint": "717958e77bcdfdf4", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-3d01e1e75d06dd93", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "02305c48544d8bb8", "scanner": "scanner-primary", "fingerprint": "3d01e1e75d06dd93", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-3d01e1e75d06dd93", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "02305c48544d8bb8", "scanner": "scanner-primary", "fingerprint": "3d01e1e75d06dd93", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-3d01e1e75d06dd93", "level": "warning", "message": {"text": "SkillSpector AST4 (behavioral-ast) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "02305c48544d8bb8", "scanner": "scanner-primary", "fingerprint": "3d01e1e75d06dd93", "layer": "security", "severity": "medium", "confidence": 0.6, "tags": ["skillspector", "mcp-skill", "behavioral-ast", "AST4", "code-exec"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-e54201b52731bf2e", "level": "warning", "message": {"text": "SkillSpector LP3 (mcp-least-priv) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "b0b4dac4043df914", "scanner": "scanner-primary", "fingerprint": "e54201b52731bf2e", "layer": "security", "severity": "medium", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "mcp-least-priv", "LP3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38fb14d9030597bd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE"}, "properties": {"repobilityId": "4426feacbc11585e", "scanner": "scanner-primary", "fingerprint": "38fb14d9030597bd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/LICENSE"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-38fb14d9030597bd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE"}, "properties": {"repobilityId": "4426feacbc11585e", "scanner": "scanner-primary", "fingerprint": "38fb14d9030597bd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/LICENSE"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-38fb14d9030597bd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE"}, "properties": {"repobilityId": "4426feacbc11585e", "scanner": "scanner-primary", "fingerprint": "38fb14d9030597bd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/LICENSE"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-38fb14d9030597bd", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in skills/analyzing-ios-app-security-with-objection/LICENSE"}, "properties": {"repobilityId": "4426feacbc11585e", "scanner": "scanner-primary", "fingerprint": "38fb14d9030597bd", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/LICENSE"}, "region": {"startLine": 161}}}]}, {"ruleId": "scanner-cb99acb8123d750e", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "49fd5ec544464588", "scanner": "scanner-primary", "fingerprint": "cb99acb8123d750e", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-cb99acb8123d750e", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "49fd5ec544464588", "scanner": "scanner-primary", "fingerprint": "cb99acb8123d750e", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-6d54d0dbf891b513", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "9bff648a55df18f2", "scanner": "scanner-primary", "fingerprint": "6d54d0dbf891b513", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-6d54d0dbf891b513", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "9bff648a55df18f2", "scanner": "scanner-primary", "fingerprint": "6d54d0dbf891b513", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-6d54d0dbf891b513", "level": "error", "message": {"text": "SkillSpector OH1 (output-handling) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "9bff648a55df18f2", "scanner": "scanner-primary", "fingerprint": "6d54d0dbf891b513", "layer": "security", "severity": "high", "confidence": 0.95, "tags": ["skillspector", "mcp-skill", "output-handling", "OH1"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-8a73ee41e2dae72a", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "ca63bc6d8451b35a", "scanner": "scanner-primary", "fingerprint": "8a73ee41e2dae72a", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-7c8b37fcab9dfc90", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/assets/template.md"}, "properties": {"repobilityId": "460010909318e753", "scanner": "scanner-primary", "fingerprint": "7c8b37fcab9dfc90", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/assets/template.md"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-7c8b37fcab9dfc90", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/assets/template.md"}, "properties": {"repobilityId": "460010909318e753", "scanner": "scanner-primary", "fingerprint": "7c8b37fcab9dfc90", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/assets/template.md"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-7c9b9e6e7c25eb01", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "ac98d945fecd5c3c", "scanner": "scanner-primary", "fingerprint": "7c9b9e6e7c25eb01", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-7c9b9e6e7c25eb01", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "ac98d945fecd5c3c", "scanner": "scanner-primary", "fingerprint": "7c9b9e6e7c25eb01", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-b8112a4e9eb9ba8c", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "393142fdcfde1106", "scanner": "scanner-primary", "fingerprint": "b8112a4e9eb9ba8c", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 155}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-917c18bab4dfdd80", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "9ff6a0d90decfb4b", "scanner": "scanner-primary", "fingerprint": "917c18bab4dfdd80", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 182}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 250}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 267}}}]}, {"ruleId": "scanner-c1c171b209211466", "level": "error", "message": {"text": "SkillSpector PE3 (priv-esc) in skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "properties": {"repobilityId": "2d51a06b55a377c3", "scanner": "scanner-primary", "fingerprint": "c1c171b209211466", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "priv-esc", "PE3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/process.py"}, "region": {"startLine": 267}}}]}, {"ruleId": "scanner-8524d2f13aa056cf", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "88c1565e367023b6", "scanner": "scanner-primary", "fingerprint": "8524d2f13aa056cf", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-8524d2f13aa056cf", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "properties": {"repobilityId": "88c1565e367023b6", "scanner": "scanner-primary", "fingerprint": "8524d2f13aa056cf", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/SKILL.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-d1547653862a7e64", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "properties": {"repobilityId": "4ef5651bfa96906f", "scanner": "scanner-primary", "fingerprint": "d1547653862a7e64", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/api-reference.md"}, "region": {"startLine": 103}}}]}, {"ruleId": "scanner-475ee9d59f193782", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "819d7e1fa1dfe340", "scanner": "scanner-primary", "fingerprint": "475ee9d59f193782", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-475ee9d59f193782", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "819d7e1fa1dfe340", "scanner": "scanner-primary", "fingerprint": "475ee9d59f193782", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-475ee9d59f193782", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "properties": {"repobilityId": "819d7e1fa1dfe340", "scanner": "scanner-primary", "fingerprint": "475ee9d59f193782", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/references/standards.md"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-adb1fa26e2371bf5", "level": "warning", "message": {"text": "SkillSpector RA2 (rogue-agent) in skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "properties": {"repobilityId": "a4d301bbaab55402", "scanner": "scanner-primary", "fingerprint": "adb1fa26e2371bf5", "layer": "security", "severity": "medium", "confidence": 0.75, "tags": ["skillspector", "mcp-skill", "rogue-agent", "RA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-ios-app-security-with-objection/scripts/agent.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "scanner-e637c415447867e4", "level": "none", "message": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "properties": {"repobilityId": "1936f198ff5212bf", "scanner": "scanner-primary", "fingerprint": "e637c415447867e4", "layer": "security", "severity": "info", "confidence": 1.0, "tags": ["skillspector", "mcp-skill", "llm-advisory", "ai-coder"]}}, {"ruleId": "scanner-bf9c9f0ba9a6e9a0", "level": "warning", "message": {"text": "Privileged port 389 in use"}, "properties": {"repobilityId": "48549cc0de858dc0", "scanner": "scanner-primary", "fingerprint": "bf9c9f0ba9a6e9a0", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-ldap-security-hardening/scripts/agent.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-638577cdafde8519", "level": "warning", "message": {"text": "Privileged port 636 in use"}, "properties": {"repobilityId": "75eec1c07d535674", "scanner": "scanner-primary", "fingerprint": "638577cdafde8519", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-ldap-security-hardening/scripts/agent.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8616624dad731a6c", "level": "warning", "message": {"text": "Privileged port 139 in use"}, "properties": {"repobilityId": "c81ee9322b7ef8b6", "scanner": "scanner-primary", "fingerprint": "8616624dad731a6c", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-network-penetration-test/scripts/agent.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1fade756ad884e3d", "level": "warning", "message": {"text": "Privileged port 587 in use"}, "properties": {"repobilityId": "a87a96c3b2e62c08", "scanner": "scanner-primary", "fingerprint": "1fade756ad884e3d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-red-team-phishing-with-gophish/scripts/agent.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3724199996f8b334", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py:80"}, "properties": {"repobilityId": "7eddf6e9f1cdbca6", "scanner": "scanner-primary", "fingerprint": "3724199996f8b334", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-excessive-data-exposure-in-api/scripts/agent.py"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-48f9a187706e0ec2", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/SKILL.md:72"}, "properties": {"repobilityId": "5c29cd9caaef8261", "scanner": "scanner-primary", "fingerprint": "48f9a187706e0ec2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-hash-cracking-with-hashcat/SKILL.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-8866de2df9be032c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/process.py:33"}, "properties": {"repobilityId": "f7730ba826d7b94b", "scanner": "scanner-primary", "fingerprint": "8866de2df9be032c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-hash-cracking-with-hashcat/scripts/process.py"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-97c8d848e6a11013", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-hash-cracking-with-hashcat/scripts/agent.py:14"}, "properties": {"repobilityId": "d4c9510cd76fd805", "scanner": "scanner-primary", "fingerprint": "97c8d848e6a11013", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-hash-cracking-with-hashcat/scripts/agent.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-e69e7ccada40cd6c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:117"}, "properties": {"repobilityId": "2f036994127b935e", "scanner": "scanner-primary", "fingerprint": "e69e7ccada40cd6c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-5451c846b5ea3078", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:114"}, "properties": {"repobilityId": "7611cdfae4feaf8d", "scanner": "scanner-primary", "fingerprint": "5451c846b5ea3078", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-9c8d4562ece4f9f3", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py:116"}, "properties": {"repobilityId": "b727727ae72bc399", "scanner": "scanner-primary", "fingerprint": "9c8d4562ece4f9f3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-supply-chain-malware-artifacts/scripts/agent.py"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-261cbe3c08df8840", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/SKILL.md:139"}, "properties": {"repobilityId": "ecd2e68919d254a7", "scanner": "scanner-primary", "fingerprint": "261cbe3c08df8840", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-system-artifacts/SKILL.md"}, "region": {"startLine": 139}}}]}, {"ruleId": "scanner-c6550de3c6e46215", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-system-artifacts/scripts/agent.py:67"}, "properties": {"repobilityId": "08b997e23e6299a7", "scanner": "scanner-primary", "fingerprint": "c6550de3c6e46215", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-system-artifacts/scripts/agent.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-0a49c49252daa5ca", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/implementing-ticketing-system-for-incidents/SKILL.md:362"}, "properties": {"repobilityId": "342ce015df3ca0af", "scanner": "scanner-primary", "fingerprint": "0a49c49252daa5ca", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-ticketing-system-for-incidents/SKILL.md"}, "region": {"startLine": 362}}}]}, {"ruleId": "scanner-31e285289a12ee39", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/implementing-devsecops-security-scanning/SKILL.md:153"}, "properties": {"repobilityId": "20ba7daa29524ecf", "scanner": "scanner-primary", "fingerprint": "31e285289a12ee39", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-devsecops-security-scanning/SKILL.md"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-abcea91858429314", "level": "error", "message": {"text": "Possible secret in skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "properties": {"repobilityId": "df64e940c30d364e", "scanner": "scanner-primary", "fingerprint": "abcea91858429314", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-abcea91858429314", "level": "error", "message": {"text": "Possible secret in skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "properties": {"repobilityId": "d1a383f6b3bdbc3b", "scanner": "scanner-primary", "fingerprint": "abcea91858429314", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-secret-scanning-with-gitleaks/SKILL.md"}, "region": {"startLine": 259}}}]}, {"ruleId": "scanner-5a357e0be724bde1", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/SKILL.md:71"}, "properties": {"repobilityId": "3cd79e35294178f3", "scanner": "scanner-primary", "fingerprint": "5a357e0be724bde1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/collecting-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-a54368952a0c2a8f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/collecting-indicators-of-compromise/scripts/agent.py:121"}, "properties": {"repobilityId": "34df51540b17fd79", "scanner": "scanner-primary", "fingerprint": "a54368952a0c2a8f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/collecting-indicators-of-compromise/scripts/agent.py"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-0e49b1ab8c2d98fc", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-security-headers-audit/scripts/agent.py:89"}, "properties": {"repobilityId": "a22f724a84df1741", "scanner": "scanner-primary", "fingerprint": "0e49b1ab8c2d98fc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-security-headers-audit/scripts/agent.py"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-b2bf2d56d137168a", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/SKILL.md:65"}, "properties": {"repobilityId": "c639c0e0278a1ac1", "scanner": "scanner-primary", "fingerprint": "b2bf2d56d137168a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-alert-fatigue-reduction/SKILL.md"}, "region": {"startLine": 65}}}]}, {"ruleId": "scanner-613be3a88cdf5103", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/implementing-alert-fatigue-reduction/scripts/agent.py:27"}, "properties": {"repobilityId": "88f07f1fd3d252d7", "scanner": "scanner-primary", "fingerprint": "613be3a88cdf5103", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-alert-fatigue-reduction/scripts/agent.py"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-30aea01f44ba1570", "level": "error", "message": {"text": "Possible secret in skills/implementing-security-information-sharing-with-stix2/SKILL.md"}, "properties": {"repobilityId": "e204bae8dbdc44a1", "scanner": "scanner-primary", "fingerprint": "30aea01f44ba1570", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-security-information-sharing-with-stix2/SKILL.md"}, "region": {"startLine": 298}}}]}, {"ruleId": "scanner-30aea01f44ba1570", "level": "error", "message": {"text": "Possible secret in skills/implementing-security-information-sharing-with-stix2/SKILL.md"}, "properties": {"repobilityId": "e204bae8dbdc44a1", "scanner": "scanner-primary", "fingerprint": "30aea01f44ba1570", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-security-information-sharing-with-stix2/SKILL.md"}, "region": {"startLine": 312}}}]}, {"ruleId": "scanner-1149f105639cd89c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/implementing-security-information-sharing-with-stix2/scripts/agent.py:46"}, "properties": {"repobilityId": "b0e7fc1599db6f7f", "scanner": "scanner-primary", "fingerprint": "1149f105639cd89c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-security-information-sharing-with-stix2/scripts/agent.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-ae165ae93e7cd72d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/analyzing-pdf-malware-with-pdfid/SKILL.md:342"}, "properties": {"repobilityId": "df702c7b5991adab", "scanner": "scanner-primary", "fingerprint": "ae165ae93e7cd72d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-pdf-malware-with-pdfid/SKILL.md"}, "region": {"startLine": 342}}}]}, {"ruleId": "scanner-ee5aa0ddff04ea19", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/bypassing-authentication-with-forced-browsing/scripts/agent.py:40"}, "properties": {"repobilityId": "037afc6972b59a09", "scanner": "scanner-primary", "fingerprint": "ee5aa0ddff04ea19", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/bypassing-authentication-with-forced-browsing/scripts/agent.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-d1394c09c4fc7b16", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/automating-ioc-enrichment/scripts/agent.py:165"}, "properties": {"repobilityId": "635226855f369a71", "scanner": "scanner-primary", "fingerprint": "d1394c09c4fc7b16", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/automating-ioc-enrichment/scripts/agent.py"}, "region": {"startLine": 165}}}]}, {"ruleId": "scanner-e34675d046a04b65", "level": "error", "message": {"text": "Possible secret in skills/processing-stix-taxii-feeds/SKILL.md"}, "properties": {"repobilityId": "0ba53adf3f2f04d0", "scanner": "scanner-primary", "fingerprint": "e34675d046a04b65", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/processing-stix-taxii-feeds/SKILL.md"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-e34675d046a04b65", "level": "error", "message": {"text": "Possible secret in skills/processing-stix-taxii-feeds/SKILL.md"}, "properties": {"repobilityId": "0ba53adf3f2f04d0", "scanner": "scanner-primary", "fingerprint": "e34675d046a04b65", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/processing-stix-taxii-feeds/SKILL.md"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-ba76bb7d557cf4ce", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/processing-stix-taxii-feeds/scripts/agent.py:157"}, "properties": {"repobilityId": "06deabf3339fe617", "scanner": "scanner-primary", "fingerprint": "ba76bb7d557cf4ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/processing-stix-taxii-feeds/scripts/agent.py"}, "region": {"startLine": 157}}}]}, {"ruleId": "scanner-ff9dfb7530cfe836", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-function-level-authorization/scripts/agent.py:32"}, "properties": {"repobilityId": "400bda63431006e6", "scanner": "scanner-primary", "fingerprint": "ff9dfb7530cfe836", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-function-level-authorization/scripts/agent.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-51515dffdd0d9e15", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/investigating-insider-threat-indicators/SKILL.md:104"}, "properties": {"repobilityId": "7de4c1d57dd20df2", "scanner": "scanner-primary", "fingerprint": "51515dffdd0d9e15", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/investigating-insider-threat-indicators/SKILL.md"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-5df52492ca4c0643", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-threat-hunting-with-yara-rules/scripts/agent.py:58"}, "properties": {"repobilityId": "e817cfaa848996a5", "scanner": "scanner-primary", "fingerprint": "5df52492ca4c0643", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-hunting-with-yara-rules/scripts/agent.py"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-e185d2fd4ef69b63", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-hash-enrichment-with-virustotal/SKILL.md:36"}, "properties": {"repobilityId": "64b502a634ffdb9e", "scanner": "scanner-primary", "fingerprint": "e185d2fd4ef69b63", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-hash-enrichment-with-virustotal/SKILL.md"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-d37e1709d309d807", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/implementing-pci-dss-compliance-controls/scripts/agent.py:42"}, "properties": {"repobilityId": "2c0772475ba5781b", "scanner": "scanner-primary", "fingerprint": "d37e1709d309d807", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-pci-dss-compliance-controls/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-82856413370cfe5a", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-race-condition-vulnerabilities/scripts/agent.py:26"}, "properties": {"repobilityId": "078b507499eb0eec", "scanner": "scanner-primary", "fingerprint": "82856413370cfe5a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-race-condition-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-12dd211c14f494e9", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-disk-forensics-investigation/scripts/agent.py:219"}, "properties": {"repobilityId": "8ebe53f0d466d579", "scanner": "scanner-primary", "fingerprint": "12dd211c14f494e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-disk-forensics-investigation/scripts/agent.py"}, "region": {"startLine": 219}}}]}, {"ruleId": "scanner-224329845d5267a8", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/detecting-ntlm-relay-with-event-correlation/SKILL.md:434"}, "properties": {"repobilityId": "2562137861150660", "scanner": "scanner-primary", "fingerprint": "224329845d5267a8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-ntlm-relay-with-event-correlation/SKILL.md"}, "region": {"startLine": 434}}}]}, {"ruleId": "scanner-9da3a32b3ed97cee", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py:45"}, "properties": {"repobilityId": "9c8a5eaf58b57226", "scanner": "scanner-primary", "fingerprint": "9da3a32b3ed97cee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-nosql-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-ae1d333a38c7c3af", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/reverse-engineering-malware-with-ghidra/SKILL.md:185"}, "properties": {"repobilityId": "76a3ed243ce13dc2", "scanner": "scanner-primary", "fingerprint": "ae1d333a38c7c3af", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-malware-with-ghidra/SKILL.md"}, "region": {"startLine": 185}}}]}, {"ruleId": "scanner-c80c5a805583f48a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/exploiting-sql-injection-vulnerabilities/SKILL.md:160"}, "properties": {"repobilityId": "57308273508d6c2a", "scanner": "scanner-primary", "fingerprint": "c80c5a805583f48a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-sql-injection-vulnerabilities/SKILL.md"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-c6b76c628db5df34", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py:146"}, "properties": {"repobilityId": "0aa200aacc5e476e", "scanner": "scanner-primary", "fingerprint": "c6b76c628db5df34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-sql-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-020e2cb44a255dbe", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/configuring-suricata-for-network-monitoring/SKILL.md:361"}, "properties": {"repobilityId": "88f69168a0e60fa1", "scanner": "scanner-primary", "fingerprint": "020e2cb44a255dbe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-suricata-for-network-monitoring/SKILL.md"}, "region": {"startLine": 361}}}]}, {"ruleId": "scanner-66d2b3faf285c8de", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-broken-access-control/scripts/agent.py:24"}, "properties": {"repobilityId": "c6f14f91b6dad9ea", "scanner": "scanner-primary", "fingerprint": "66d2b3faf285c8de", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-broken-access-control/scripts/agent.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-ddb369a72c9f375f", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-business-logic-vulnerabilities/scripts/agent.py:30"}, "properties": {"repobilityId": "2b00f7627e186fb7", "scanner": "scanner-primary", "fingerprint": "ddb369a72c9f375f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-business-logic-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-b35a9536965f50b9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-false-positive-reduction-in-siem/SKILL.md:75"}, "properties": {"repobilityId": "8e2961f4ef0192cc", "scanner": "scanner-primary", "fingerprint": "b35a9536965f50b9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-false-positive-reduction-in-siem/SKILL.md"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-07fda3723d17304f", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-server-side-request-forgery/scripts/agent.py:50"}, "properties": {"repobilityId": "4db1f6a482953403", "scanner": "scanner-primary", "fingerprint": "07fda3723d17304f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-server-side-request-forgery/scripts/agent.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-dc034dd6b70b15d0", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-platform/scripts/agent.py:19"}, "properties": {"repobilityId": "ca3fe788b62ff9b1", "scanner": "scanner-primary", "fingerprint": "dc034dd6b70b15d0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-threat-intelligence-platform/scripts/agent.py"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-59a21a2eb5196469", "level": "error", "message": {"text": "Possible secret in skills/exploiting-active-directory-with-bloodhound/scripts/agent.py"}, "properties": {"repobilityId": "5b18825e74843545", "scanner": "scanner-primary", "fingerprint": "59a21a2eb5196469", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-active-directory-with-bloodhound/scripts/agent.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-72015d374dd7a774", "level": "error", "message": {"text": "Possible secret in skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "properties": {"repobilityId": "ee7d3b90b63ce563", "scanner": "scanner-primary", "fingerprint": "72015d374dd7a774", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "region": {"startLine": 242}}}]}, {"ruleId": "scanner-72015d374dd7a774", "level": "error", "message": {"text": "Possible secret in skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "properties": {"repobilityId": "ee7d3b90b63ce563", "scanner": "scanner-primary", "fingerprint": "72015d374dd7a774", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "region": {"startLine": 280}}}]}, {"ruleId": "scanner-20e295cca0ce6bea", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/deploying-active-directory-honeytokens/scripts/agent.py:52"}, "properties": {"repobilityId": "4b49200cbb9ee739", "scanner": "scanner-primary", "fingerprint": "20e295cca0ce6bea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deploying-active-directory-honeytokens/scripts/agent.py"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-7da6a313ba510655", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/reverse-engineering-android-malware-with-jadx/SKILL.md:353"}, "properties": {"repobilityId": "d8e7a8592368a3c7", "scanner": "scanner-primary", "fingerprint": "7da6a313ba510655", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/reverse-engineering-android-malware-with-jadx/SKILL.md"}, "region": {"startLine": 353}}}]}, {"ruleId": "scanner-c1e761591a1063ce", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py:35"}, "properties": {"repobilityId": "ae8e4be713ad3699", "scanner": "scanner-primary", "fingerprint": "c1e761591a1063ce", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-vulnerabilities-with-metasploit-framework/scripts/process.py"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-de922eda452beba2", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/SKILL.md:74"}, "properties": {"repobilityId": "4df1ddf30ff950a6", "scanner": "scanner-primary", "fingerprint": "de922eda452beba2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-golden-ticket-attacks-in-kerberos-logs/SKILL.md"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-dcbc14ca909ac66f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/detecting-golden-ticket-attacks-in-kerberos-logs/scripts/agent.py:19"}, "properties": {"repobilityId": "d90b5b2cb45cad81", "scanner": "scanner-primary", "fingerprint": "dcbc14ca909ac66f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-golden-ticket-attacks-in-kerberos-logs/scripts/agent.py"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-a4f753eff8e529ab", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/implementing-mitre-attack-coverage-mapping/SKILL.md:279"}, "properties": {"repobilityId": "bdbbe64b369a5dd9", "scanner": "scanner-primary", "fingerprint": "a4f753eff8e529ab", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-mitre-attack-coverage-mapping/SKILL.md"}, "region": {"startLine": 279}}}]}, {"ruleId": "scanner-44b66e45fe756481", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-user-behavior-analytics/SKILL.md:71"}, "properties": {"repobilityId": "3763aeb3d055d419", "scanner": "scanner-primary", "fingerprint": "44b66e45fe756481", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-user-behavior-analytics/SKILL.md"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-d8ebb09427272a76", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-iot-security-assessment/SKILL.md:153"}, "properties": {"repobilityId": "40d60b4933c3df5e", "scanner": "scanner-primary", "fingerprint": "d8ebb09427272a76", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-iot-security-assessment/SKILL.md"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-7bad5208ce739b08", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-linux-elf-malware/scripts/agent.py:197"}, "properties": {"repobilityId": "fc2f155f43a4c9c6", "scanner": "scanner-primary", "fingerprint": "7bad5208ce739b08", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-linux-elf-malware/scripts/agent.py"}, "region": {"startLine": 197}}}]}, {"ruleId": "scanner-3a3ec8b16c3dda4a", "level": "error", "message": {"text": "Possible secret in skills/implementing-secrets-management-with-vault/SKILL.md"}, "properties": {"repobilityId": "33b49cecd5448b59", "scanner": "scanner-primary", "fingerprint": "3a3ec8b16c3dda4a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-secrets-management-with-vault/SKILL.md"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-d9525237dd661c75", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-insecure-deserialization/scripts/agent.py:51"}, "properties": {"repobilityId": "93fbf471e93a64ac", "scanner": "scanner-primary", "fingerprint": "d9525237dd661c75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-insecure-deserialization/scripts/agent.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-06655c2cfa4e45e4", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/building-detection-rule-with-splunk-spl/SKILL.md:82"}, "properties": {"repobilityId": "08535a762f07c092", "scanner": "scanner-primary", "fingerprint": "06655c2cfa4e45e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-detection-rule-with-splunk-spl/SKILL.md"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-8fe1f4543d7b838d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities/SKILL.md:110"}, "properties": {"repobilityId": "b088f32cd34a246d", "scanner": "scanner-primary", "fingerprint": "8fe1f4543d7b838d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities/SKILL.md"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-d94f0bf2e1dd4d39", "level": "note", "message": {"text": "Insecure pattern 'document_write' in skills/testing-for-xss-vulnerabilities/SKILL.md:109"}, "properties": {"repobilityId": "aa5476ddeb48f20b", "scanner": "scanner-primary", "fingerprint": "d94f0bf2e1dd4d39", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities/SKILL.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-0ed528f916c508e1", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in skills/testing-for-xss-vulnerabilities/SKILL.md:111"}, "properties": {"repobilityId": "c3ca100f7c803b3f", "scanner": "scanner-primary", "fingerprint": "0ed528f916c508e1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities/SKILL.md"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-1882adb57d9fd1ac", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities/scripts/agent.py:70"}, "properties": {"repobilityId": "d23fc8e554653fe7", "scanner": "scanner-primary", "fingerprint": "1882adb57d9fd1ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-3b3934b6aed6a426", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-api-inventory-and-discovery/SKILL.md:185"}, "properties": {"repobilityId": "cc4c25b568c83d1c", "scanner": "scanner-primary", "fingerprint": "3b3934b6aed6a426", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-api-inventory-and-discovery/SKILL.md"}, "region": {"startLine": 185}}}]}, {"ruleId": "scanner-ca546fd1ffc84dd3", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py:41"}, "properties": {"repobilityId": "dc336afe511877dd", "scanner": "scanner-primary", "fingerprint": "ca546fd1ffc84dd3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-prototype-pollution-in-javascript/scripts/agent.py"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-e3cc5e9095e806d4", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-sensitive-data-exposure/scripts/agent.py:37"}, "properties": {"repobilityId": "42dab8df76fbd088", "scanner": "scanner-primary", "fingerprint": "e3cc5e9095e806d4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-sensitive-data-exposure/scripts/agent.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-7b785458a6ad80c0", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py:191"}, "properties": {"repobilityId": "c3f23771b1c5a03c", "scanner": "scanner-primary", "fingerprint": "7b785458a6ad80c0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-static-malware-analysis-with-pe-studio/scripts/agent.py"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-2450efaeec021f46", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/SKILL.md:58"}, "properties": {"repobilityId": "99dee91e38dcfafe", "scanner": "scanner-primary", "fingerprint": "2450efaeec021f46", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-ioc-extraction/SKILL.md"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-771cee32e76ee6e7", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-ioc-extraction/scripts/process.py:323"}, "properties": {"repobilityId": "6f3688090e925ffa", "scanner": "scanner-primary", "fingerprint": "771cee32e76ee6e7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-ioc-extraction/scripts/process.py"}, "region": {"startLine": 323}}}]}, {"ruleId": "scanner-4fddc067874d0f66", "level": "error", "message": {"text": "Possible secret in skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "properties": {"repobilityId": "24bbb3b7590c4b18", "scanner": "scanner-primary", "fingerprint": "4fddc067874d0f66", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "region": {"startLine": 268}}}]}, {"ruleId": "scanner-4fddc067874d0f66", "level": "error", "message": {"text": "Possible secret in skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "properties": {"repobilityId": "24bbb3b7590c4b18", "scanner": "scanner-primary", "fingerprint": "4fddc067874d0f66", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-wifi-password-cracking-with-aircrack/SKILL.md"}, "region": {"startLine": 273}}}]}, {"ruleId": "scanner-7e9527548895a18a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-malware-persistence-with-autoruns/scripts/agent.py:57"}, "properties": {"repobilityId": "146bd16a3993ba84", "scanner": "scanner-primary", "fingerprint": "7e9527548895a18a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-malware-persistence-with-autoruns/scripts/agent.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "scanner-58d0fbf3c1ed787b", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:51"}, "properties": {"repobilityId": "c63cbde3599b7b82", "scanner": "scanner-primary", "fingerprint": "58d0fbf3c1ed787b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-1bc99a8c5bb53f17", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py:16"}, "properties": {"repobilityId": "3bc3e453c2b57656", "scanner": "scanner-primary", "fingerprint": "1bc99a8c5bb53f17", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-type-juggling-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-6ace672ac61fbb84", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/SKILL.md:131"}, "properties": {"repobilityId": "22aea7ace8aa1d90", "scanner": "scanner-primary", "fingerprint": "6ace672ac61fbb84", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-soc-metrics-and-kpi-tracking/SKILL.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-b3741ea487ef3591", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/building-soc-metrics-and-kpi-tracking/scripts/agent.py:106"}, "properties": {"repobilityId": "46cda49721b4ef1a", "scanner": "scanner-primary", "fingerprint": "b3741ea487ef3591", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-soc-metrics-and-kpi-tracking/scripts/agent.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-aa9bd90ea5d25b69", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-vulnerability-scanning-with-nessus/scripts/agent.py:24"}, "properties": {"repobilityId": "df96803af4cce987", "scanner": "scanner-primary", "fingerprint": "aa9bd90ea5d25b69", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-vulnerability-scanning-with-nessus/scripts/agent.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-7fca54e1c2b0f4e3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/building-soc-playbook-for-ransomware/scripts/agent.py:113"}, "properties": {"repobilityId": "c9da8ddc7c6eb318", "scanner": "scanner-primary", "fingerprint": "7fca54e1c2b0f4e3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-soc-playbook-for-ransomware/scripts/agent.py"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-89bfaa8b41196b11", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/validating-backup-integrity-for-recovery/SKILL.md:202"}, "properties": {"repobilityId": "7a32f051c6d87f8a", "scanner": "scanner-primary", "fingerprint": "89bfaa8b41196b11", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/validating-backup-integrity-for-recovery/SKILL.md"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-3704feaa5253ba20", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/building-incident-response-dashboard/scripts/agent.py:106"}, "properties": {"repobilityId": "a73cbe606bb19488", "scanner": "scanner-primary", "fingerprint": "3704feaa5253ba20", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-incident-response-dashboard/scripts/agent.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-8da85104656ac0a9", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-broken-link-hijacking/scripts/agent.py:51"}, "properties": {"repobilityId": "64f95afe629f4095", "scanner": "scanner-primary", "fingerprint": "8da85104656ac0a9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-broken-link-hijacking/scripts/agent.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-bb4df92168306c4e", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/SKILL.md:106"}, "properties": {"repobilityId": "cfb3bb48d0218dc7", "scanner": "scanner-primary", "fingerprint": "bb4df92168306c4e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-d14121b3c61a1bc1", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/SKILL.md:118"}, "properties": {"repobilityId": "ed6239dac8af4b77", "scanner": "scanner-primary", "fingerprint": "d14121b3c61a1bc1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-3ea5045eb5cb8550", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/SKILL.md:108"}, "properties": {"repobilityId": "ee444f2acfad0fd5", "scanner": "scanner-primary", "fingerprint": "3ea5045eb5cb8550", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-8aac54851ed23b5e", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/SKILL.md:109"}, "properties": {"repobilityId": "d0204d0b65b0d3fa", "scanner": "scanner-primary", "fingerprint": "8aac54851ed23b5e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-660a1f994edeb512", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/SKILL.md:107"}, "properties": {"repobilityId": "36acdbdd551c506a", "scanner": "scanner-primary", "fingerprint": "660a1f994edeb512", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 107}}}]}, {"ruleId": "scanner-37d5086e1e4483ff", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/SKILL.md:42"}, "properties": {"repobilityId": "b8c3f4d0a9b60404", "scanner": "scanner-primary", "fingerprint": "37d5086e1e4483ff", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/SKILL.md"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-eee91101cfbb2952", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/detecting-serverless-function-injection/scripts/agent.py:30"}, "properties": {"repobilityId": "3fdfdfd0781ce391", "scanner": "scanner-primary", "fingerprint": "eee91101cfbb2952", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-5d703caf953766b8", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in skills/detecting-serverless-function-injection/scripts/agent.py:46"}, "properties": {"repobilityId": "3cf47476742e42f4", "scanner": "scanner-primary", "fingerprint": "5d703caf953766b8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-672e3947bdfc80f5", "level": "error", "message": {"text": "Insecure pattern 'python_os_system' in skills/detecting-serverless-function-injection/scripts/agent.py:32"}, "properties": {"repobilityId": "d9df425c49fe5151", "scanner": "scanner-primary", "fingerprint": "672e3947bdfc80f5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "python_os_system"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-098dbebaee35fe00", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skills/detecting-serverless-function-injection/scripts/agent.py:34"}, "properties": {"repobilityId": "85b91f8bac445949", "scanner": "scanner-primary", "fingerprint": "098dbebaee35fe00", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-151fabbecf1aed53", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/detecting-serverless-function-injection/scripts/agent.py:31"}, "properties": {"repobilityId": "a370b4bb30524839", "scanner": "scanner-primary", "fingerprint": "151fabbecf1aed53", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-f8ca4bbcfae16278", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in skills/detecting-serverless-function-injection/scripts/agent.py:47"}, "properties": {"repobilityId": "c9b335bed22f71d9", "scanner": "scanner-primary", "fingerprint": "f8ca4bbcfae16278", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-serverless-function-injection/scripts/agent.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-9627bbc7c57e84db", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py:99"}, "properties": {"repobilityId": "925e449b37025b8b", "scanner": "scanner-primary", "fingerprint": "9627bbc7c57e84db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-threat-emulation-with-atomic-red-team/scripts/agent.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-5c1c7564f3909843", "level": "error", "message": {"text": "Possible secret in skills/implementing-network-access-control/SKILL.md"}, "properties": {"repobilityId": "3ad68ad1bd537378", "scanner": "scanner-primary", "fingerprint": "5c1c7564f3909843", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-network-access-control/SKILL.md"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-5c1c7564f3909843", "level": "error", "message": {"text": "Possible secret in skills/implementing-network-access-control/SKILL.md"}, "properties": {"repobilityId": "3ad68ad1bd537378", "scanner": "scanner-primary", "fingerprint": "5c1c7564f3909843", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-network-access-control/SKILL.md"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-c50db86de04f5371", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/implementing-network-access-control/SKILL.md:162"}, "properties": {"repobilityId": "df8258555fb4068b", "scanner": "scanner-primary", "fingerprint": "c50db86de04f5371", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-network-access-control/SKILL.md"}, "region": {"startLine": 162}}}]}, {"ruleId": "scanner-2a36838bb138d143", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/SKILL.md:72"}, "properties": {"repobilityId": "7262ba2503a6341e", "scanner": "scanner-primary", "fingerprint": "2a36838bb138d143", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/SKILL.md"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-4cae52d5e54c71de", "level": "error", "message": {"text": "Possible secret in skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "properties": {"repobilityId": "fc3f944d973ef548", "scanner": "scanner-primary", "fingerprint": "4cae52d5e54c71de", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-4cae52d5e54c71de", "level": "error", "message": {"text": "Possible secret in skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "properties": {"repobilityId": "4bef19b837770e8e", "scanner": "scanner-primary", "fingerprint": "4cae52d5e54c71de", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "region": {"startLine": 282}}}]}, {"ruleId": "scanner-4cae52d5e54c71de", "level": "error", "message": {"text": "Possible secret in skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "properties": {"repobilityId": "3741659f3bb931ae", "scanner": "scanner-primary", "fingerprint": "4cae52d5e54c71de", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "region": {"startLine": 281}}}]}, {"ruleId": "scanner-377c5f68f60fce93", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/process.py:47"}, "properties": {"repobilityId": "c8e2fd6dab7a6aec", "scanner": "scanner-primary", "fingerprint": "377c5f68f60fce93", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/scripts/process.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-ce37f4e50a06e1f2", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-cryptographic-audit-of-application/scripts/agent.py:28"}, "properties": {"repobilityId": "4dec18f03b4c7733", "scanner": "scanner-primary", "fingerprint": "ce37f4e50a06e1f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-cryptographic-audit-of-application/scripts/agent.py"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-dedd065a35c44b49", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-indicators-of-compromise/SKILL.md:87"}, "properties": {"repobilityId": "dcba345a66ee5f28", "scanner": "scanner-primary", "fingerprint": "dedd065a35c44b49", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-indicators-of-compromise/SKILL.md"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-47a2a1e2be9521ba", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py:29"}, "properties": {"repobilityId": "a96f825ea66197f1", "scanner": "scanner-primary", "fingerprint": "47a2a1e2be9521ba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-mass-assignment-in-rest-apis/scripts/agent.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-5ca531ffe0592518", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md:44"}, "properties": {"repobilityId": "3f25591e46f986b1", "scanner": "scanner-primary", "fingerprint": "5ca531ffe0592518", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/acquiring-disk-image-with-dd-and-dcfldd/SKILL.md"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-c41aa87af7233c00", "level": "error", "message": {"text": "Possible secret in skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py"}, "properties": {"repobilityId": "6e6fc09526585eec", "scanner": "scanner-primary", "fingerprint": "c41aa87af7233c00", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-wireless-security-assessment-with-kismet/scripts/agent.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-91df70e770c8b88f", "level": "error", "message": {"text": "Possible secret in skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "properties": {"repobilityId": "c54234bd316a844d", "scanner": "scanner-primary", "fingerprint": "91df70e770c8b88f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-91df70e770c8b88f", "level": "error", "message": {"text": "Possible secret in skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "properties": {"repobilityId": "c54234bd316a844d", "scanner": "scanner-primary", "fingerprint": "91df70e770c8b88f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/SKILL.md"}, "region": {"startLine": 134}}}]}, {"ruleId": "scanner-00e798a1fe1b4676", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py:26"}, "properties": {"repobilityId": "436b1d91086c8382", "scanner": "scanner-primary", "fingerprint": "00e798a1fe1b4676", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-red-team-c2-infrastructure-with-havoc/scripts/agent.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-15ba18ac3154ad63", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/SKILL.md:98"}, "properties": {"repobilityId": "f7baba22e266d016", "scanner": "scanner-primary", "fingerprint": "15ba18ac3154ad63", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-red-team-phishing-with-gophish/SKILL.md"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-c34b286b12e06e6b", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-phishing-with-gophish/scripts/agent.py:20"}, "properties": {"repobilityId": "71ff1dd5a1ba62dc", "scanner": "scanner-primary", "fingerprint": "c34b286b12e06e6b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-red-team-phishing-with-gophish/scripts/agent.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-4c05c9303e2d8ebe", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-serverless-function-security-review/SKILL.md:217"}, "properties": {"repobilityId": "031732263c957ff2", "scanner": "scanner-primary", "fingerprint": "4c05c9303e2d8ebe", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-serverless-function-security-review/SKILL.md"}, "region": {"startLine": 217}}}]}, {"ruleId": "scanner-29f3c7ed4189107d", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in skills/performing-serverless-function-security-review/SKILL.md:217"}, "properties": {"repobilityId": "9ea1d07f09649a0f", "scanner": "scanner-primary", "fingerprint": "29f3c7ed4189107d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-serverless-function-security-review/SKILL.md"}, "region": {"startLine": 217}}}]}, {"ruleId": "scanner-081a53b510f89614", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-websocket-vulnerabilities/scripts/agent.py:33"}, "properties": {"repobilityId": "1bc1fea4845778b5", "scanner": "scanner-primary", "fingerprint": "081a53b510f89614", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-websocket-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-11bfb3caa87fead3", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py:82"}, "properties": {"repobilityId": "710fb193be02d3ec", "scanner": "scanner-primary", "fingerprint": "11bfb3caa87fead3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-man-in-the-middle-attack-simulation/scripts/agent.py"}, "region": {"startLine": 82}}}]}, {"ruleId": "scanner-18333df95c3b24d2", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-spearphishing-simulation-campaign/scripts/agent.py:29"}, "properties": {"repobilityId": "10053fb672221d8c", "scanner": "scanner-primary", "fingerprint": "18333df95c3b24d2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-spearphishing-simulation-campaign/scripts/agent.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-bbe8ab8dd1ceba37", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in skills/implementing-scim-provisioning-with-okta/scripts/process.py:470"}, "properties": {"repobilityId": "e6c7487b6303369e", "scanner": "scanner-primary", "fingerprint": "bbe8ab8dd1ceba37", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 470}}}]}, {"ruleId": "scanner-4521ba6968b96e68", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-endpoint-forensics-investigation/scripts/process.py:60"}, "properties": {"repobilityId": "c976cdbc2216d694", "scanner": "scanner-primary", "fingerprint": "4521ba6968b96e68", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-endpoint-forensics-investigation/scripts/process.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-4c57d2fbacb1658a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-network-traffic-analysis-with-zeek/SKILL.md:81"}, "properties": {"repobilityId": "44b520a558fa0d0b", "scanner": "scanner-primary", "fingerprint": "4c57d2fbacb1658a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-network-traffic-analysis-with-zeek/SKILL.md"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-2ef021498f7502bb", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/detecting-anomalous-authentication-patterns/SKILL.md:584"}, "properties": {"repobilityId": "476954ab0d614aa3", "scanner": "scanner-primary", "fingerprint": "2ef021498f7502bb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/detecting-anomalous-authentication-patterns/SKILL.md"}, "region": {"startLine": 584}}}]}, {"ruleId": "scanner-1477b0db332d609f", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py:42"}, "properties": {"repobilityId": "cb6412716d7e6c3c", "scanner": "scanner-primary", "fingerprint": "1477b0db332d609f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-ssrf-vulnerability-exploitation/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-32e7cb9fbe699f34", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-oauth-misconfiguration/scripts/agent.py:29"}, "properties": {"repobilityId": "96efef5785432c69", "scanner": "scanner-primary", "fingerprint": "32e7cb9fbe699f34", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-oauth-misconfiguration/scripts/agent.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-2e54fde5ea14d603", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-enrichment-in-splunk/scripts/agent.py:87"}, "properties": {"repobilityId": "05e1805514a19d4c", "scanner": "scanner-primary", "fingerprint": "2e54fde5ea14d603", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-threat-intelligence-enrichment-in-splunk/scripts/agent.py"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-5bfa7f3b84369304", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/building-threat-intelligence-feed-integration/SKILL.md:189"}, "properties": {"repobilityId": "9761d9f119c63b61", "scanner": "scanner-primary", "fingerprint": "5bfa7f3b84369304", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-threat-intelligence-feed-integration/SKILL.md"}, "region": {"startLine": 189}}}]}, {"ruleId": "scanner-d703cd088667c2cd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/implementing-siem-use-cases-for-detection/SKILL.md:243"}, "properties": {"repobilityId": "ab78edcb372dea9b", "scanner": "scanner-primary", "fingerprint": "d703cd088667c2cd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-siem-use-cases-for-detection/SKILL.md"}, "region": {"startLine": 243}}}]}, {"ruleId": "scanner-18f4486135d16780", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in skills/performing-content-security-policy-bypass/SKILL.md:85"}, "properties": {"repobilityId": "a03b17370d2cf421", "scanner": "scanner-primary", "fingerprint": "18f4486135d16780", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-content-security-policy-bypass/SKILL.md"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-6f432a356215d544", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/performing-content-security-policy-bypass/scripts/agent.py:149"}, "properties": {"repobilityId": "593920ae373f0e6d", "scanner": "scanner-primary", "fingerprint": "6f432a356215d544", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-content-security-policy-bypass/scripts/agent.py"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-faaf47ab85464052", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/conducting-external-reconnaissance-with-osint/scripts/agent.py:126"}, "properties": {"repobilityId": "a57f36a9b41b4187", "scanner": "scanner-primary", "fingerprint": "faaf47ab85464052", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/conducting-external-reconnaissance-with-osint/scripts/agent.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-f915d9a91972fb56", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-firmware-extraction-with-binwalk/scripts/agent.py:341"}, "properties": {"repobilityId": "06f2d53620b4af21", "scanner": "scanner-primary", "fingerprint": "f915d9a91972fb56", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-firmware-extraction-with-binwalk/scripts/agent.py"}, "region": {"startLine": 341}}}]}, {"ruleId": "scanner-9b27516d813e2514", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-web-cache-poisoning-attack/scripts/agent.py:29"}, "properties": {"repobilityId": "01677b432c84e2a9", "scanner": "scanner-primary", "fingerprint": "9b27516d813e2514", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-web-cache-poisoning-attack/scripts/agent.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-61a3c5635aca4094", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/analyzing-windows-amcache-artifacts/SKILL.md:121"}, "properties": {"repobilityId": "09d388c710e23cc2", "scanner": "scanner-primary", "fingerprint": "61a3c5635aca4094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-amcache-artifacts/SKILL.md"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-f128a10bdfb50b0a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md:266"}, "properties": {"repobilityId": "af42871b1af3a742", "scanner": "scanner-primary", "fingerprint": "f128a10bdfb50b0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-windows-artifact-analysis-with-eric-zimmerman-tools/SKILL.md"}, "region": {"startLine": 266}}}]}, {"ruleId": "scanner-00d45a035714a6d3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/configuring-tls-1-3-for-secure-communications/scripts/process.py:146"}, "properties": {"repobilityId": "05c10820e2b9e39d", "scanner": "scanner-primary", "fingerprint": "00d45a035714a6d3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/configuring-tls-1-3-for-secure-communications/scripts/process.py"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-664f15d296308c32", "level": "error", "message": {"text": "Possible secret in skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py"}, "properties": {"repobilityId": "0cdffe0cf2d0f65d", "scanner": "scanner-primary", "fingerprint": "664f15d296308c32", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-00624cee66073a3e", "level": "error", "message": {"text": "Possible secret in skills/securing-container-registry-with-harbor/scripts/agent.py"}, "properties": {"repobilityId": "4cfe587ed4d16ad5", "scanner": "scanner-primary", "fingerprint": "00624cee66073a3e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/securing-container-registry-with-harbor/scripts/agent.py"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-303dbfbd60a6d9e3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-vlan-hopping-attack/SKILL.md:198"}, "properties": {"repobilityId": "f480563b20721210", "scanner": "scanner-primary", "fingerprint": "303dbfbd60a6d9e3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-vlan-hopping-attack/SKILL.md"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-8f8105f82ae48544", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/analyzing-windows-event-logs-in-splunk/SKILL.md:104"}, "properties": {"repobilityId": "8616a2d0dff8801e", "scanner": "scanner-primary", "fingerprint": "8f8105f82ae48544", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/analyzing-windows-event-logs-in-splunk/SKILL.md"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-6e3fd94b85c12824", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/deobfuscating-javascript-malware/SKILL.md:117"}, "properties": {"repobilityId": "3052a4cb14daf24e", "scanner": "scanner-primary", "fingerprint": "6e3fd94b85c12824", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/SKILL.md"}, "region": {"startLine": 117}}}]}, {"ruleId": "scanner-0de7545b452b4b03", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/SKILL.md:119"}, "properties": {"repobilityId": "965c3542abf8a11d", "scanner": "scanner-primary", "fingerprint": "0de7545b452b4b03", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/SKILL.md"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-c376a4cde2b8482d", "level": "note", "message": {"text": "Insecure pattern 'document_write' in skills/deobfuscating-javascript-malware/SKILL.md:120"}, "properties": {"repobilityId": "4970d9f61a5d91a7", "scanner": "scanner-primary", "fingerprint": "c376a4cde2b8482d", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/SKILL.md"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-11160960b02d32e5", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in skills/deobfuscating-javascript-malware/scripts/agent.py:94"}, "properties": {"repobilityId": "d409a6b4963135f7", "scanner": "scanner-primary", "fingerprint": "11160960b02d32e5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/deobfuscating-javascript-malware/scripts/agent.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-e6ba41d4a2e8f698", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/performing-malware-triage-with-yara/SKILL.md:311"}, "properties": {"repobilityId": "74aaf937a8e0b6ce", "scanner": "scanner-primary", "fingerprint": "e6ba41d4a2e8f698", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-malware-triage-with-yara/SKILL.md"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-b8e68f6173780ab3", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/investigating-phishing-email-incident/SKILL.md:160"}, "properties": {"repobilityId": "a151116c60045173", "scanner": "scanner-primary", "fingerprint": "b8e68f6173780ab3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/investigating-phishing-email-incident/SKILL.md"}, "region": {"startLine": 160}}}]}, {"ruleId": "scanner-9cfa87a2aa233675", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/performing-red-team-with-covenant/scripts/agent.py:42"}, "properties": {"repobilityId": "511a2c16ca1cdc5c", "scanner": "scanner-primary", "fingerprint": "9cfa87a2aa233675", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/performing-red-team-with-covenant/scripts/agent.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-da0afc2a04e4c7d5", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:143"}, "properties": {"repobilityId": "5b69b6814e814aeb", "scanner": "scanner-primary", "fingerprint": "da0afc2a04e4c7d5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py"}, "region": {"startLine": 143}}}]}, {"ruleId": "scanner-dfffa49603ca746f", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py:36"}, "properties": {"repobilityId": "8431a6b04b57996a", "scanner": "scanner-primary", "fingerprint": "dfffa49603ca746f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xss-vulnerabilities-with-burpsuite/scripts/agent.py"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-f052df5cc7ece6ac", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in skills/building-ioc-enrichment-pipeline-with-opencti/scripts/agent.py:119"}, "properties": {"repobilityId": "ce907ab3df40f053", "scanner": "scanner-primary", "fingerprint": "f052df5cc7ece6ac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/building-ioc-enrichment-pipeline-with-opencti/scripts/agent.py"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-9613aa283b92b5e4", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py:75"}, "properties": {"repobilityId": "293b0bca464f2330", "scanner": "scanner-primary", "fingerprint": "9613aa283b92b5e4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/testing-for-xxe-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "scanner-97244cafdc63731d", "level": "error", "message": {"text": "Insecure pattern 'tls_verify_false' in skills/exploiting-api-injection-vulnerabilities/scripts/agent.py:47"}, "properties": {"repobilityId": "cfad7ca6123c1a49", "scanner": "scanner-primary", "fingerprint": "97244cafdc63731d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "tls_verify_false"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/exploiting-api-injection-vulnerabilities/scripts/agent.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-3b610b8d09925933", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "3cfb384df7e4fe6e", "scanner": "scanner-primary", "fingerprint": "3b610b8d09925933", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/sync-marketplace-version.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0beb0742a8ffc80d", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "04f1f55d030d7381", "scanner": "scanner-primary", "fingerprint": "0beb0742a8ffc80d", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/update-index.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05c8d792ec02190b", "level": "note", "message": {"text": "Very large file: skills/implementing-gdpr-data-subject-access-request/scripts/agent.py (1503 lines)"}, "properties": {"repobilityId": "ed10a95690672669", "scanner": "scanner-primary", "fingerprint": "05c8d792ec02190b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3d3e103d8b4ce5ae", "level": "note", "message": {"text": "Very large file: skills/performing-privacy-impact-assessment/scripts/agent.py (1413 lines)"}, "properties": {"repobilityId": "c1efb9165e82bbff", "scanner": "scanner-primary", "fingerprint": "3d3e103d8b4ce5ae", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c283c7ba0130b0f9", "level": "note", "message": {"text": "Very large file: skills/deploying-active-directory-honeytokens/scripts/agent.py (1321 lines)"}, "properties": {"repobilityId": "c40bac31b7953b34", "scanner": "scanner-primary", "fingerprint": "c283c7ba0130b0f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-aa9b919be997e083", "level": "note", "message": {"text": "Very large file: skills/performing-post-quantum-cryptography-migration/scripts/agent.py (1568 lines)"}, "properties": {"repobilityId": "1493d08d9d52afa9", "scanner": "scanner-primary", "fingerprint": "aa9b919be997e083", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "951e1b0e6db726d6", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "5c46238a0e024f4a", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "31f44164c3c93258", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-11825279136b53a3", "level": "warning", "message": {"text": "CI is configured but no tests are detected"}, "properties": {"repobilityId": "86da019a495023dc", "scanner": "scanner-primary", "fingerprint": "11825279136b53a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "ci", "config-theater", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "9f6810bcaf43bf1e", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "a620ed75463dc491", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-a2c147f603caf86c", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/securing-helm-chart-deployments/scripts/process.py:94"}, "properties": {"repobilityId": "3ebb0152da91ffef", "scanner": "scanner-primary", "fingerprint": "a2c147f603caf86c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c2e1ff3f24ced2a0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-image-provenance-verification-with-cosign/scripts/process.py:17"}, "properties": {"repobilityId": "a27233d13a138f2c", "scanner": "scanner-primary", "fingerprint": "c2e1ff3f24ced2a0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b861ef4abbe2ffaf", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-kubernetes-network-policy-with-calico/scripts/process.py:21"}, "properties": {"repobilityId": "119fb1bfe4c63a2d", "scanner": "scanner-primary", "fingerprint": "b861ef4abbe2ffaf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3910c5c4cdfc3e89", "level": "note", "message": {"text": "Legacy-named symbol `users_with_backup` in skills/implementing-hardware-security-key-authentication/scripts/agent.py:881"}, "properties": {"repobilityId": "2b0d0d0c0b89918d", "scanner": "scanner-primary", "fingerprint": "3910c5c4cdfc3e89", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7d70c301cc4d8859", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-access-recertification-with-saviynt/scripts/process.py:36"}, "properties": {"repobilityId": "a2bbefda83205fab", "scanner": "scanner-primary", "fingerprint": "7d70c301cc4d8859", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bf1a714137fdb912", "level": "note", "message": {"text": "Legacy-named symbol `svc_backup` in skills/implementing-privileged-access-management-with-cyberark/scripts/process.py:366"}, "properties": {"repobilityId": "ad99b869a8322fbc", "scanner": "scanner-primary", "fingerprint": "bf1a714137fdb912", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-67755f15d67169eb", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-siem-correlation-rules-for-apt/scripts/agent.py:174"}, "properties": {"repobilityId": "477a6c90d05252d6", "scanner": "scanner-primary", "fingerprint": "67755f15d67169eb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2696cf7f5d209f2f", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-pod-security-admission-controller/scripts/process.py:31"}, "properties": {"repobilityId": "9f55090efc0194c8", "scanner": "scanner-primary", "fingerprint": "2696cf7f5d209f2f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-698fa1ccfd5e30ad", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-opa-gatekeeper-for-policy-enforcement/scripts/process.py:152"}, "properties": {"repobilityId": "73305e0233f2b425", "scanner": "scanner-primary", "fingerprint": "698fa1ccfd5e30ad", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-12ca7b1ba64149da", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-incident-response-playbook/scripts/agent.py:145"}, "properties": {"repobilityId": "bad6f77d17efc579", "scanner": "scanner-primary", "fingerprint": "12ca7b1ba64149da", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9e91e41de7fc8fb0", "level": "note", "message": {"text": "Legacy-named symbol `phone_v2` in skills/performing-mobile-device-forensics-with-cellebrite/scripts/agent.py:87"}, "properties": {"repobilityId": "9091ecf56fc3c7de", "scanner": "scanner-primary", "fingerprint": "9e91e41de7fc8fb0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0fdcfab9c5d3923a", "level": "note", "message": {"text": "Legacy-named symbol `df_copy` in skills/analyzing-api-gateway-access-logs/scripts/agent.py:100"}, "properties": {"repobilityId": "7bec1f683c024cc6", "scanner": "scanner-primary", "fingerprint": "0fdcfab9c5d3923a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a208d026f3b7a88a", "level": "note", "message": {"text": "Legacy-named symbol `remove_revoked_deprecated` in skills/mapping-mitre-attack-techniques/scripts/agent.py:27"}, "properties": {"repobilityId": "a6750cd078ff4d43", "scanner": "scanner-primary", "fingerprint": "a208d026f3b7a88a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1001c44bc91498e0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-just-in-time-access-provisioning/scripts/process.py:168"}, "properties": {"repobilityId": "140d30bcfcb61334", "scanner": "scanner-primary", "fingerprint": "1001c44bc91498e0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-704ec3f8532adaf4", "level": "note", "message": {"text": "Legacy-named symbol `days_unused` in skills/implementing-just-in-time-access-provisioning/scripts/agent.py:76"}, "properties": {"repobilityId": "687b14fe4e1e03b3", "scanner": "scanner-primary", "fingerprint": "704ec3f8532adaf4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c4ef3ef6cb9f708c", "level": "note", "message": {"text": "Legacy-named symbol `directory_v1` in skills/implementing-google-workspace-admin-security/scripts/agent.py:26"}, "properties": {"repobilityId": "dae1435dc7f0608d", "scanner": "scanner-primary", "fingerprint": "c4ef3ef6cb9f708c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-89ca80b7f28138de", "level": "note", "message": {"text": "Legacy-named symbol `is_legacy` in skills/implementing-zero-trust-network-access-with-zscaler/scripts/process.py:372"}, "properties": {"repobilityId": "01c4c0bd46198440", "scanner": "scanner-primary", "fingerprint": "89ca80b7f28138de", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-78b73b085731a295", "level": "note", "message": {"text": "Legacy-named symbol `malware_ir_v2` in skills/triaging-security-incident-with-ir-playbook/scripts/process.py:38"}, "properties": {"repobilityId": "67a14f816b981ff9", "scanner": "scanner-primary", "fingerprint": "78b73b085731a295", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6ba0f3a13e662184", "level": "note", "message": {"text": "Legacy-named symbol `asset_v1` in skills/auditing-gcp-iam-permissions/scripts/agent.py:8"}, "properties": {"repobilityId": "b49eee2c4e458790", "scanner": "scanner-primary", "fingerprint": "6ba0f3a13e662184", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3c16df1553d75d92", "level": "note", "message": {"text": "Legacy-named symbol `net_v1` in skills/securing-kubernetes-on-cloud/scripts/agent.py:121"}, "properties": {"repobilityId": "750d562018576bc7", "scanner": "scanner-primary", "fingerprint": "3c16df1553d75d92", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b8b89cf62e5cbd42", "level": "note", "message": {"text": "Legacy-named symbol `manifest_copy` in skills/implementing-digital-signatures-with-ed25519/scripts/process.py:216"}, "properties": {"repobilityId": "1a41124c04145e87", "scanner": "scanner-primary", "fingerprint": "b8b89cf62e5cbd42", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1975e4a451ca3aa5", "level": "note", "message": {"text": "Legacy-named symbol `svc_backup` in skills/performing-service-account-audit/scripts/process.py:247"}, "properties": {"repobilityId": "f86e7c38de05dd46", "scanner": "scanner-primary", "fingerprint": "1975e4a451ca3aa5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0c1d0db84de04023", "level": "note", "message": {"text": "Legacy-named symbol `add_backup_copy` in skills/implementing-ransomware-backup-strategy/scripts/process.py:76"}, "properties": {"repobilityId": "e5ca0d2d1d8093d6", "scanner": "scanner-primary", "fingerprint": "0c1d0db84de04023", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fdc244a74ef94357", "level": "note", "message": {"text": "Legacy-named symbol `immutable_backup` in skills/implementing-ransomware-backup-strategy/scripts/agent.py:145"}, "properties": {"repobilityId": "b068dc5e400b9953", "scanner": "scanner-primary", "fingerprint": "fdc244a74ef94357", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-41999abed715806a", "level": "note", "message": {"text": "Legacy-named symbol `restore_from_backup` in skills/performing-ransomware-tabletop-exercise/scripts/agent.py:41"}, "properties": {"repobilityId": "2f8a8cd3be0fad30", "scanner": "scanner-primary", "fingerprint": "41999abed715806a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a60f01328f0b65ec", "level": "note", "message": {"text": "Legacy-named symbol `exchange_legacy` in skills/deploying-active-directory-honeytokens/scripts/agent.py:59"}, "properties": {"repobilityId": "301c62ade635a168", "scanner": "scanner-primary", "fingerprint": "a60f01328f0b65ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6056cd94231c8055", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scripts/process.py:54"}, "properties": {"repobilityId": "fe4034baaa4508d9", "scanner": "scanner-primary", "fingerprint": "6056cd94231c8055", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-342a7abd0a77c3c0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-azure-ad-privileged-identity-management/scripts/agent.py:33"}, "properties": {"repobilityId": "91b7a18436168842", "scanner": "scanner-primary", "fingerprint": "342a7abd0a77c3c0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e36c45ef4eacefb2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-azure-service-principal-abuse/scripts/agent.py:30"}, "properties": {"repobilityId": "f56524b1d57be8d8", "scanner": "scanner-primary", "fingerprint": "e36c45ef4eacefb2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-67291f8eccda914d", "level": "note", "message": {"text": "Legacy-named symbol `dlp_v2` in skills/implementing-cloud-dlp-for-data-protection/scripts/agent.py:15"}, "properties": {"repobilityId": "5dd3d83b9924ef4d", "scanner": "scanner-primary", "fingerprint": "67291f8eccda914d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-952dd45290da7c61", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/scanning-infrastructure-with-nessus/scripts/process.py:49"}, "properties": {"repobilityId": "e5069ec5f81e931d", "scanner": "scanner-primary", "fingerprint": "952dd45290da7c61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a09f3fce76e1ad2a", "level": "note", "message": {"text": "Legacy-named symbol `check_cloudhsm_backup` in skills/configuring-hsm-for-key-storage/scripts/agent.py:74"}, "properties": {"repobilityId": "9d5737479792b680", "scanner": "scanner-primary", "fingerprint": "a09f3fce76e1ad2a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0bde2e4b35d4a81a", "level": "note", "message": {"text": "Legacy-named symbol `svc_backup` in skills/exploiting-kerberoasting-with-impacket/scripts/process.py:311"}, "properties": {"repobilityId": "d9c634f3e3d752a1", "scanner": "scanner-primary", "fingerprint": "0bde2e4b35d4a81a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7b599f9840fa1e65", "level": "note", "message": {"text": "Legacy-named symbol `usb_mass_copy` in skills/detecting-insider-threat-behaviors/scripts/agent.py:19"}, "properties": {"repobilityId": "a5b259fa59c8b2cb", "scanner": "scanner-primary", "fingerprint": "7b599f9840fa1e65", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6b93106eac52060b", "level": "note", "message": {"text": "Legacy-named symbol `iam_v1` in skills/performing-service-account-credential-rotation/scripts/process.py:105"}, "properties": {"repobilityId": "2126231385c96e7e", "scanner": "scanner-primary", "fingerprint": "6b93106eac52060b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e27b660650e380d1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-service-account-credential-rotation/scripts/agent.py:59"}, "properties": {"repobilityId": "b3e9d126d244a469", "scanner": "scanner-primary", "fingerprint": "e27b660650e380d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-966b23b6bf447570", "level": "note", "message": {"text": "Legacy-named symbol `alerts_v2` in skills/implementing-data-loss-prevention-with-microsoft-purview/scripts/agent.py:60"}, "properties": {"repobilityId": "1723be6f0953f433", "scanner": "scanner-primary", "fingerprint": "966b23b6bf447570", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-bc7162323fbc4789", "level": "note", "message": {"text": "Legacy-named symbol `days_old` in skills/detecting-typosquatting-packages-in-npm-pypi/scripts/agent.py:271"}, "properties": {"repobilityId": "6e9b262672e99e98", "scanner": "scanner-primary", "fingerprint": "bc7162323fbc4789", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9ab6eae7fdf578c2", "level": "note", "message": {"text": "Legacy-named symbol `net_v1` in skills/implementing-container-network-policies-with-calico/scripts/agent.py:46"}, "properties": {"repobilityId": "efcddf76d5a890a9", "scanner": "scanner-primary", "fingerprint": "9ab6eae7fdf578c2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8847c0a89b602bb1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-mobile-app-certificate-pinning-bypass/scripts/process.py:145"}, "properties": {"repobilityId": "95332bacb42ff3b5", "scanner": "scanner-primary", "fingerprint": "8847c0a89b602bb1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e8676648e8db6b45", "level": "note", "message": {"text": "Legacy-named symbol `compute_v1` in skills/implementing-gcp-vpc-firewall-rules/scripts/agent.py:10"}, "properties": {"repobilityId": "b7d9ec40f200985a", "scanner": "scanner-primary", "fingerprint": "e8676648e8db6b45", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4cd4b8cb405af340", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-privilege-escalation-in-kubernetes-pods/scripts/process.py:24"}, "properties": {"repobilityId": "0fd6f9e23e9ec168", "scanner": "scanner-primary", "fingerprint": "4cd4b8cb405af340", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-706a700b98b2948c", "level": "note", "message": {"text": "Legacy-named symbol `list_objects_v2` in skills/performing-cloud-storage-forensic-acquisition/scripts/agent.py:41"}, "properties": {"repobilityId": "6de772f8f879ebb0", "scanner": "scanner-primary", "fingerprint": "706a700b98b2948c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-004ddd6259ce59a8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-wifi-password-cracking-with-aircrack/scripts/agent.py:49"}, "properties": {"repobilityId": "19d3de41df016115", "scanner": "scanner-primary", "fingerprint": "004ddd6259ce59a8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b8a57e226b0ba2d6", "level": "note", "message": {"text": "Legacy-named symbol `verify_backup` in skills/recovering-from-ransomware-attack/scripts/agent.py:46"}, "properties": {"repobilityId": "20b6b3b4d0a9ca4d", "scanner": "scanner-primary", "fingerprint": "b8a57e226b0ba2d6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-29cc33578e1eeb2e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-soc-playbook-for-ransomware/scripts/agent.py:76"}, "properties": {"repobilityId": "a8faa1bf15dcece3", "scanner": "scanner-primary", "fingerprint": "29cc33578e1eeb2e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-75d8dd20a655ab22", "level": "note", "message": {"text": "Legacy-named symbol `admin_legacy` in skills/performing-deception-technology-deployment/scripts/agent.py:23"}, "properties": {"repobilityId": "ca8e1d2e91d4a6a5", "scanner": "scanner-primary", "fingerprint": "75d8dd20a655ab22", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f0d3191b79265718", "level": "note", "message": {"text": "Stub function `log_message` (body is just `pass`/`return`) \u2014 skills/performing-deception-technology-deployment/scripts/agent.py:151"}, "properties": {"repobilityId": "580ef67faeb36914", "scanner": "scanner-primary", "fingerprint": "f0d3191b79265718", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-0824e4b92e990c3c", "level": "note", "message": {"text": "Legacy-named symbol `validate_backup` in skills/validating-backup-integrity-for-recovery/scripts/agent.py:196"}, "properties": {"repobilityId": "63d0e657ea4d0051", "scanner": "scanner-primary", "fingerprint": "0824e4b92e990c3c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4beef40ebf147077", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-serverless-function-injection/scripts/agent.py:35"}, "properties": {"repobilityId": "62fefe1c14052d5d", "scanner": "scanner-primary", "fingerprint": "4beef40ebf147077", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5315cb02f4936a79", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-aws-account-enumeration-with-scout-suite/scripts/process.py:37"}, "properties": {"repobilityId": "deb1710a12346a5a", "scanner": "scanner-primary", "fingerprint": "5315cb02f4936a79", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8c56f46d072d1ae2", "level": "note", "message": {"text": "Legacy-named symbol `tls_v1` in skills/performing-cryptographic-audit-of-application/scripts/agent.py:69"}, "properties": {"repobilityId": "54b5dad1c2468337", "scanner": "scanner-primary", "fingerprint": "8c56f46d072d1ae2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-042e153a9fc7e366", "level": "note", "message": {"text": "Legacy-named symbol `iap_v1` in skills/configuring-identity-aware-proxy-with-google-iap/scripts/agent.py:10"}, "properties": {"repobilityId": "b3137de47a968244", "scanner": "scanner-primary", "fingerprint": "042e153a9fc7e366", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e8b6c995eced040b", "level": "note", "message": {"text": "Legacy-named symbol `svc_backup` in skills/deploying-ransomware-canary-files/scripts/agent.py:56"}, "properties": {"repobilityId": "dcb30f9e961983b4", "scanner": "scanner-primary", "fingerprint": "e8b6c995eced040b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-688ad3fea4f0e447", "level": "note", "message": {"text": "Legacy-named symbol `x_mitre_deprecated` in skills/building-threat-hunt-hypothesis-framework/scripts/agent.py:125"}, "properties": {"repobilityId": "65a75136c9620627", "scanner": "scanner-primary", "fingerprint": "688ad3fea4f0e447", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b98a4bc006ace1ac", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-device-posture-assessment-in-zero-trust/scripts/process.py:49"}, "properties": {"repobilityId": "08f8cc166510c16f", "scanner": "scanner-primary", "fingerprint": "b98a4bc006ace1ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b20f0b47f852fa97", "level": "note", "message": {"text": "Legacy-named symbol `includeDeprecated` in skills/performing-graphql-introspection-attack/scripts/agent.py:22"}, "properties": {"repobilityId": "829ff5e0cc8908f7", "scanner": "scanner-primary", "fingerprint": "b20f0b47f852fa97", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1f15ae233305ab63", "level": "note", "message": {"text": "Legacy-named symbol `securitycenter_v1` in skills/performing-gcp-security-assessment-with-forseti/scripts/agent.py:12"}, "properties": {"repobilityId": "befc17b4757d9209", "scanner": "scanner-primary", "fingerprint": "1f15ae233305ab63", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-53f82e2235d932ac", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-identity-federation-with-saml-azure-ad/scripts/process.py:47"}, "properties": {"repobilityId": "b9e4b37acb8e08e9", "scanner": "scanner-primary", "fingerprint": "53f82e2235d932ac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7cf0e3d99d9d4600", "level": "note", "message": {"text": "Legacy-named symbol `sbom_path_old` in skills/analyzing-sbom-for-supply-chain-vulnerabilities/scripts/agent.py:649"}, "properties": {"repobilityId": "bd0df744b0bc202e", "scanner": "scanner-primary", "fingerprint": "7cf0e3d99d9d4600", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1489fb1bcd823744", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/detecting-container-escape-with-falco-rules/scripts/process.py:162"}, "properties": {"repobilityId": "6bb643b614c4cfc5", "scanner": "scanner-primary", "fingerprint": "1489fb1bcd823744", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9da285e580bd3a89", "level": "note", "message": {"text": "Legacy-named symbol `restic_backup` in skills/implementing-immutable-backup-with-restic/scripts/agent.py:24"}, "properties": {"repobilityId": "7b06061f4cdb69d8", "scanner": "scanner-primary", "fingerprint": "9da285e580bd3a89", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1a4deb8b01c8b393", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/implementing-aqua-security-for-container-scanning/scripts/process.py:25"}, "properties": {"repobilityId": "068a9b1dfce355e5", "scanner": "scanner-primary", "fingerprint": "1a4deb8b01c8b393", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-eee4b5a5ea70c9b1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/performing-sca-dependency-scanning-with-snyk/scripts/process.py:256"}, "properties": {"repobilityId": "ff20519317ab970c", "scanner": "scanner-primary", "fingerprint": "eee4b5a5ea70c9b1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0c0a96cd0b4f7d39", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 skills/building-vulnerability-dashboard-with-defectdojo/scripts/process.py:63"}, "properties": {"repobilityId": "a5da535e583d49c3", "scanner": "scanner-primary", "fingerprint": "0c0a96cd0b4f7d39", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "8854e53b9d53ffb6", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "699fdfee23f3c3b2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7db069bb8f10f02f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-f341860ab6a90be6", "level": "note", "message": {"text": "Near-duplicate function bodies in 17 places"}, "properties": {"repobilityId": "741cd8707d47f8e0", "scanner": "scanner-primary", "fingerprint": "f341860ab6a90be6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-122053f21232d80c", "level": "note", "message": {"text": "Near-duplicate function bodies in 14 places"}, "properties": {"repobilityId": "124712e3d7e19aca", "scanner": "scanner-primary", "fingerprint": "122053f21232d80c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d6eed23182aefb54", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c1616b60f98f8dbc", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "42119115d29b21e7", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "17c79d5858f6310a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "12a069e98e9c5c3f", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "af76f6a5b6721edd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "1fe30cb874852539", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "4b3eb6cb59df9ee0", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "e85f08fbb55d3ab7", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ea929918777e8acf", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "f838db9e26948db4", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "dd1d252b102429d0", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8b63e26c021f20f5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ca013fdfad7a80d1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "687670cb94d95a20", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-ab0af7851343cacc", "level": "error", "message": {"text": "Flask mutation route `register_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:565"}, "properties": {"repobilityId": "4493e55b1f5b850d", "scanner": "scanner-primary", "fingerprint": "ab0af7851343cacc", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 565}}}]}, {"ruleId": "scanner-567e98ea3d6d917f", "level": "error", "message": {"text": "Flask mutation route `register_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:606"}, "properties": {"repobilityId": "1f20485d0c684a5b", "scanner": "scanner-primary", "fingerprint": "567e98ea3d6d917f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 606}}}]}, {"ruleId": "scanner-5f2ee5f86828fd1e", "level": "error", "message": {"text": "Flask mutation route `authenticate_begin` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:663"}, "properties": {"repobilityId": "3b180f9f8ef7b692", "scanner": "scanner-primary", "fingerprint": "5f2ee5f86828fd1e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 663}}}]}, {"ruleId": "scanner-ef1da8f8d3311843", "level": "error", "message": {"text": "Flask mutation route `authenticate_complete` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:691"}, "properties": {"repobilityId": "f81b6c882f687bf9", "scanner": "scanner-primary", "fingerprint": "ef1da8f8d3311843", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 691}}}]}, {"ruleId": "scanner-5b56bc6cd0c0b747", "level": "error", "message": {"text": "Flask mutation route `revoke_key` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:800"}, "properties": {"repobilityId": "ce986f6fa112fffa", "scanner": "scanner-primary", "fingerprint": "5b56bc6cd0c0b747", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 800}}}]}, {"ruleId": "scanner-496419302d293bef", "level": "error", "message": {"text": "Flask mutation route `update_key_label` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:823"}, "properties": {"repobilityId": "b2a9e73424e141d9", "scanner": "scanner-primary", "fingerprint": "496419302d293bef", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 823}}}]}, {"ruleId": "scanner-07ec8b74bf503c7f", "level": "error", "message": {"text": "Flask mutation route `recover_account` without `@login_required` \u2014 skills/implementing-hardware-security-key-authentication/scripts/agent.py:844"}, "properties": {"repobilityId": "7be515af02c278c1", "scanner": "scanner-primary", "fingerprint": "07ec8b74bf503c7f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-hardware-security-key-authentication/scripts/agent.py"}, "region": {"startLine": 844}}}]}, {"ruleId": "scanner-d81567606189b74c", "level": "error", "message": {"text": "Flask mutation route `create_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:169"}, "properties": {"repobilityId": "a645c2d8b5ed9a89", "scanner": "scanner-primary", "fingerprint": "d81567606189b74c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 169}}}]}, {"ruleId": "scanner-00ef4cde0426aa28", "level": "error", "message": {"text": "Flask mutation route `replace_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:237"}, "properties": {"repobilityId": "35d9a5733e11c528", "scanner": "scanner-primary", "fingerprint": "00ef4cde0426aa28", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 237}}}]}, {"ruleId": "scanner-1868a52be306de8a", "level": "error", "message": {"text": "Flask mutation route `patch_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:265"}, "properties": {"repobilityId": "86c3fcd3459f7c47", "scanner": "scanner-primary", "fingerprint": "1868a52be306de8a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-27965f08074f4de9", "level": "error", "message": {"text": "Flask mutation route `delete_user` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:301"}, "properties": {"repobilityId": "69d04bbbe4f47f4a", "scanner": "scanner-primary", "fingerprint": "27965f08074f4de9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 301}}}]}, {"ruleId": "scanner-9d5d99f08d8a2784", "level": "error", "message": {"text": "Flask mutation route `create_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:315"}, "properties": {"repobilityId": "a6f3601094badbba", "scanner": "scanner-primary", "fingerprint": "9d5d99f08d8a2784", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 315}}}]}, {"ruleId": "scanner-ffe49422f4135e02", "level": "error", "message": {"text": "Flask mutation route `patch_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:373"}, "properties": {"repobilityId": "bb918c6b99addf96", "scanner": "scanner-primary", "fingerprint": "ffe49422f4135e02", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 373}}}]}, {"ruleId": "scanner-40f5ea8d213e0df5", "level": "error", "message": {"text": "Flask mutation route `delete_group` without `@login_required` \u2014 skills/implementing-scim-provisioning-with-okta/scripts/process.py:411"}, "properties": {"repobilityId": "4b6cdbd775d345bf", "scanner": "scanner-primary", "fingerprint": "40f5ea8d213e0df5", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/implementing-scim-provisioning-with-okta/scripts/process.py"}, "region": {"startLine": 411}}}]}]}]}