{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-555d5a3314595396", "name": "Possibly dead Python function: create_reaction_morph", "shortDescription": {"text": "Possibly dead Python function: create_reaction_morph"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cde85d04bfbe404b", "name": "Possibly dead Python function: create_nope_flip", "shortDescription": {"text": "Possibly dead Python function: create_nope_flip"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb97778b0b3afa6f", "name": "Possibly dead Python function: apply_simple_mirror", "shortDescription": {"text": "Possibly dead Python function: apply_simple_mirror"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4807676cb7ed2a79", "name": "Possibly dead Python function: create_path_from_points", "shortDescription": {"text": "Possibly dead Python function: create_path_from_points"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d6b01a1a95d928d6", "name": "Possibly dead Python function: apply_trail_effect", "shortDescription": {"text": "Possibly dead Python function: apply_trail_effect"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-537b7afe3df0615f", "name": "Possibly dead Python function: create_fade_to_color", "shortDescription": {"text": "Possibly dead Python function: create_fade_to_color"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6bc7e226879d1555", "name": "Possibly dead Python function: create_breathing_animation", "shortDescription": {"text": "Possibly dead Python function: create_breathing_animation"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-651e64fe46440d2b", "name": "Possibly dead Python function: draw_text_with_shadow", "shortDescription": {"text": "Possibly dead Python function: draw_text_with_shadow"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d06e4c19c8bbe9b", "name": "Possibly dead Python function: draw_text_with_glow", "shortDescription": {"text": "Possibly dead Python function: draw_text_with_glow"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-debeca3b48c3e493", "name": "Possibly dead Python function: draw_text_in_box", "shortDescription": {"text": "Possibly dead Python function: draw_text_in_box"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-134a1548ada5ab69", "name": "Possibly dead Python function: scale_font_for_frame", "shortDescription": {"text": "Possibly dead Python function: scale_font_for_frame"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46992d3b4cc94ca1", "name": "Possibly dead Python function: ease_in_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-466e7dc3ed7d0cdf", "name": "Possibly dead Python function: ease_in_out_quad", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_quad"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43f4b77a48f330f3", "name": "Possibly dead Python function: ease_in_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a66cd94fa66581d", "name": "Possibly dead Python function: ease_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a204067c9363d8e9", "name": "Possibly dead Python function: ease_in_out_cubic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbd6c5773a4c582d", "name": "Possibly dead Python function: ease_in_out_bounce", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4232236647c0072b", "name": "Possibly dead Python function: ease_in_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea6303816dd6a3a5", "name": "Possibly dead Python function: ease_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d2bad836c123db8", "name": "Possibly dead Python function: ease_in_out_elastic", "shortDescription": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f360d212a4681a60", "name": "Possibly dead Python function: ease_back_in", "shortDescription": {"text": "Possibly dead Python function: ease_back_in"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3f5ebe3f474bfa7", "name": "Possibly dead Python function: ease_back_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a2be1abd363028f", "name": "Possibly dead Python function: ease_back_in_out", "shortDescription": {"text": "Possibly dead Python function: ease_back_in_out"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02b1dd5772664f89", "name": "Possibly dead Python function: apply_squash_stretch", "shortDescription": {"text": "Possibly dead Python function: apply_squash_stretch"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-208684c3ec08a1e3", "name": "Possibly dead Python function: emit_confetti", "shortDescription": {"text": "Possibly dead Python function: emit_confetti"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7483172e5cbef449", "name": "Possibly dead Python function: emit_sparkles", "shortDescription": {"text": "Possibly dead Python function: emit_sparkles"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e69d5c83d07da5e8", "name": "Possibly dead Python function: add_motion_blur", "shortDescription": {"text": "Possibly dead Python function: add_motion_blur"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d53a96bca1143a5", "name": "use defused xml \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:32", "shortDescription": {"text": "use defused xml \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:32"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security\nContext: production"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.55}}, {"id": "scanner-6bc5dc7fc10622d5", "name": "use defused xml \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:32", "shortDescription": {"text": "use defused xml \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:32"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security\nContext: production"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.55}}, {"id": "scanner-385781a76abbddf6", "name": "use defused xml \u2014 mcp-builder/scripts/evaluation.py:13", "shortDescription": {"text": "use defused xml \u2014 mcp-builder/scripts/evaluation.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security\nContext: production"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.55}}, {"id": "scanner-8e6999d84d17403f", "name": "subprocess shell true \u2014 webapp-testing/scripts/with_server.py:71", "shortDescription": {"text": "subprocess shell true \u2014 webapp-testing/scripts/with_server.py:71"}, "fullDescription": {"text": "Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.\n\nRule: python.lang.security.audit.subprocess-shell-true.subprocess-shell-true\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security\nContext: production"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.7}}, {"id": "scanner-a5c1fdb2fcc99d87", "name": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b02ece44c65226d5", "name": "Agent authority lacks a verifier contract: connect/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: connect/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42c9701e491b92d1", "name": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b881c8a96da40e02", "name": "Agent authority lacks a verifier contract: composio-skills/lever-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/lever-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e2c330d7a8efe31", "name": "Agent authority lacks a verifier contract: composio-skills/gorgias-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/gorgias-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9c24a14cbe5c371", "name": "Agent authority lacks a verifier contract: composio-skills/ahrefs-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/ahrefs-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c0c9257aaf30279", "name": "Agent authority lacks a verifier contract: composio-skills/microsoft-clarity-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/microsoft-clarity-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2896b49aeca15621", "name": "Agent authority lacks a verifier contract: composio-skills/replicate-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/replicate-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2126cf72d82a36e1", "name": "Agent authority lacks a verifier contract: composio-skills/semrush-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/semrush-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-549c3b8a36ea65c2", "name": "Agent authority lacks a verifier contract: composio-skills/facebook-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/facebook-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-801f5fd407952e1a", "name": "Agent authority lacks a verifier contract: composio-skills/clockify-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/clockify-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a890dc02ab724d0", "name": "Agent authority lacks a verifier contract: composio-skills/docker-hub-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/docker-hub-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fcf3f731f6dd5ebf", "name": "Agent authority lacks a verifier contract: composio-skills/groqcloud-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/groqcloud-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35ad0affc3f3d6d4", "name": "Agent authority lacks a verifier contract: composio-skills/pandadoc-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/pandadoc-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-396a27437b6865f7", "name": "Agent authority lacks a verifier contract: composio-skills/workday-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/workday-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efb93fac76e1add7", "name": "Agent authority lacks a verifier contract: composio-skills/shortcut-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/shortcut-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c464a186062ab90b", "name": "Agent authority lacks a verifier contract: composio-skills/omnisend-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/omnisend-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80ed9a9b475a3c4f", "name": "Agent authority lacks a verifier contract: composio-skills/productboard-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/productboard-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ec3d970793b7409", "name": "Agent authority lacks a verifier contract: composio-skills/attio-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/attio-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b4cda52bbe9ae729", "name": "Agent authority lacks a verifier contract: composio-skills/capsule-crm-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/capsule-crm-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aded63665f4796d5", "name": "Agent authority lacks a verifier contract: composio-skills/cloudinary-automation/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: composio-skills/cloudinary-automation/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68b16baf42105da0", "name": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2a92e8bd2918be1", "name": "Agent authority lacks a verifier contract: video-downloader/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: video-downloader/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3da6b66020806cdc", "name": "Agent authority lacks a verifier contract: mcp-builder/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: mcp-builder/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-402a1c33bc686ea4", "name": "Agent instruction contains unpinned remote install: document-skills/docx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: document-skills/docx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c95f7f072b68502d", "name": "Agent instruction contains unpinned remote install: document-skills/pptx/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: document-skills/pptx/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c55c0becfc8380d7", "name": "Agent authority lacks a verifier contract: content-research-writer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: content-research-writer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7112fe2b4ce5e5bf", "name": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43d6261b33768990", "name": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e0300106d518c0b", "name": "SkillSpector EA3 (excessive-agency) in artifacts-builder/LICENSE.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in artifacts-builder/LICENSE.txt"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: artifacts-builder\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-cf2f40900e009f98", "name": "SkillSpector EA3 (excessive-agency) in brand-guidelines/LICENSE.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in brand-guidelines/LICENSE.txt"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: brand-guidelines\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-f791a77722eb7e71", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/LICENSE.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/LICENSE.txt"}, "fullDescription": {"text": "not limited to\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-3b6580281fb1e59c", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/ArsenalSC-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/ArsenalSC-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-becd98dc085b3adb", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BigShoulders-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BigShoulders-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-99f395ee17656431", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Boldonse-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Boldonse-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-beb69caf4159382b", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BricolageGrotesque-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BricolageGrotesque-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-f031266dce153ee2", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/CrimsonPro-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/CrimsonPro-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-506942d30010cb87", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/DMMono-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/DMMono-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-8eba3e662c6a0a60", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/EricaOne-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/EricaOne-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-bc684cfea89ff579", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/GeistMono-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/GeistMono-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-4f0a0917898686be", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Gloock-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Gloock-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-5c97ea152f0c9169", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/IBMPlexMono-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/IBMPlexMono-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-6432c19bdbb7e3f1", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/InstrumentSans-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/InstrumentSans-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-1f825f2819b4adf5", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Italiana-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Italiana-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-5d23aec23d60eb38", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/JetBrainsMono-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/JetBrainsMono-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-e9eb69e2147e053d", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Jura-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Jura-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-294717e15eb47902", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/LibreBaskerville-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/LibreBaskerville-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-c84017e4603b9380", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Lora-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Lora-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-151f610be5bd41f4", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NationalPark-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NationalPark-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-7033501399f00b5a", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NothingYouCouldDo-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NothingYouCouldDo-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-e1cff60a14664e99", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Outfit-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Outfit-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-e594d37478a44a99", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PixelifySans-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PixelifySans-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-3f3b85b22191ba67", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PoiretOne-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PoiretOne-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-f7d419484d02119d", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/RedHatMono-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/RedHatMono-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-b1bb0532dcfdffdf", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Silkscreen-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Silkscreen-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-1df4486aa4bfe0ee", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/SmoochSans-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/SmoochSans-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-2280f15d09737d2f", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Tektur-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Tektur-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-b5def6b46b234d02", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/WorkSans-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/WorkSans-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-9ce99319950104b6", "name": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/YoungSerif-OFL.txt", "shortDescription": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/YoungSerif-OFL.txt"}, "fullDescription": {"text": "NOT LIMITED TO\n\nSkill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.\n\nSkill: canvas-design\nRule: EA3  Category: excessive-agency\nSeverity: LOW  Confidence: 0.70\n\nRemediation: Limit the skill's scope to its documented purpose. Remove instructions that enable the agent to perform actions outside its stated functionality."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 0.7}}, {"id": "scanner-4ca3f3f5f62f7c09", "name": "SkillSpector E2 (data-exfil) in connect/SKILL.md", "shortDescription": {"text": "SkillSpector E2 (data-exfil) in connect/SKILL.md"}, "fullDescription": {"text": "os.environ[\"COMPOSIO_API_KEY\"]\n\nCode accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.\n\nSkill: connect\nRule: E2  Category: data-exfil\nSeverity: HIGH  Confidence: 0.80\n\nRemediation: Avoid reading sensitive env vars (API keys, tokens) unless strictly required. Use secrets managers or secure config. Never log or transmit credentials."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 0.8}}, {"id": "scanner-8aba7038776a398d", "name": "SkillSpector EA2 (excessive-agency) in developer-growth-analysis/SKILL.md", "shortDescription": {"text": "SkillSpector EA2 (excessive-agency) in developer-growth-analysis/SKILL.md"}, "fullDescription": {"text": "automatically send\n\nSkill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.\n\nSkill: developer-growth-analysis\nRule: EA2  Category: excessive-agency\nSeverity: MEDIUM  Confidence: 0.80\n\nRemediation: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 0.8}}, {"id": "scanner-e637c415447867e4", "name": "Run SkillSpector's LLM-backed analysis in your own pipeline", "shortDescription": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "fullDescription": {"text": "Repobility ran SkillSpector's static rules server-side. The deeper LLM-backed analyzers \u2014 tool-poisoning (TP*), semantic security discovery (SSD*), developer-intent mismatch (SDI*) \u2014 are meant to run on YOUR machine with YOUR model; repobility never sends your code to an LLM. Recipe:\n\n# 1. Install SkillSpector in your own isolated env\npipx install \"skillspector @ git+https://github.com/NVIDIA/SkillSpector.git\"\n\n# 2. Point it at YOUR LLM pipeline (pick one) - your code stays on your machine\nexport SKILLSPECTOR_PROVIDER=anthropic && export ANTHROPIC_API_KEY=sk-ant-...\n# export SKILLSPECTOR_PROVIDER=openai   && export OPENAI_API_KEY=sk-...\n# export SKILLSPECTOR_PROVIDER=openai OPENAI_API_KEY=ollama OPENAI_BASE_URL=http://localhost:11434/v1 SKILLSPECTOR_MODEL=llama3.1:8b\n# export SKILLSPECTOR_PROVIDER=nv_build && export NVIDIA_INFERENCE_KEY=nvapi-...\n\n# 3. Run the LLM-backed scan per skill (omit --no-llm to enable the LLM analyzers)\nskillspector scan artifacts-builder --format sarif --outp"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54a467bd37cd551e", "name": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:69", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:69"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d327c0d5011a7bc0", "name": "Very large file: document-skills/docx/scripts/document.py (1276 lines)", "shortDescription": {"text": "Very large file: document-skills/docx/scripts/document.py (1276 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "5 test file(s) for 58 source file(s) (ratio 0.09). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 403 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 29 placeholder/mock markers across 5 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ab5ee47f92db5b1", "name": "Network/subprocess call without timeout or try/except \u2014 video-downloader/scripts/download_video.py:24", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 video-downloader/scripts/download_video.py:24"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-c8baecaa9155bb39", "name": "Network/subprocess call without timeout or try/except \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:153", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-cdd8b57216521017", "name": "Legacy-named symbol `xml_copy` in document-skills/docx/ooxml/scripts/validation/base.py:769", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in document-skills/docx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7005e5d9b1aeda3", "name": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/scripts/thumbnail.py:219", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/scripts/thumbnail.py:219"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-8cb50fdd795fabaa", "name": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:153", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-66bcf0e3890d1b08", "name": "Legacy-named symbol `xml_copy` in document-skills/pptx/ooxml/scripts/validation/base.py:769", "shortDescription": {"text": "Legacy-named symbol `xml_copy` in document-skills/pptx/ooxml/scripts/validation/base.py:769"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5fda89cfe86a831", "name": "Network/subprocess call without timeout or try/except \u2014 document-skills/xlsx/recalc.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/xlsx/recalc.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 0.85}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same substantial AST body hash:\ndocument-skills/docx/ooxml/scripts/validate.py:16:main, document-skills/pptx/ooxml/scripts/validate.py:16:main\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30747"}, "properties": {"repository": "ComposioHQ/awesome-claude-skills", "repoUrl": "https://github.com/ComposioHQ/awesome-claude-skills", "branch": "main"}, "results": [{"ruleId": "scanner-555d5a3314595396", "level": "note", "message": {"text": "Possibly dead Python function: create_reaction_morph"}, "properties": {"repobilityId": "81d9c0bef227427d", "scanner": "scanner-primary", "fingerprint": "555d5a3314595396", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/morph.py:200"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cde85d04bfbe404b", "level": "note", "message": {"text": "Possibly dead Python function: create_nope_flip"}, "properties": {"repobilityId": "8f8956c61bbf346d", "scanner": "scanner-primary", "fingerprint": "cde85d04bfbe404b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/flip.py:227"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb97778b0b3afa6f", "level": "note", "message": {"text": "Possibly dead Python function: apply_simple_mirror"}, "properties": {"repobilityId": "1b67ac63144e7c19", "scanner": "scanner-primary", "fingerprint": "fb97778b0b3afa6f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/kaleidoscope.py:86"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4807676cb7ed2a79", "level": "note", "message": {"text": "Possibly dead Python function: create_path_from_points"}, "properties": {"repobilityId": "93b989b7cbc34939", "scanner": "scanner-primary", "fingerprint": "4807676cb7ed2a79", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/move.py:160"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d6b01a1a95d928d6", "level": "note", "message": {"text": "Possibly dead Python function: apply_trail_effect"}, "properties": {"repobilityId": "3d6b18201d1d6736", "scanner": "scanner-primary", "fingerprint": "d6b01a1a95d928d6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/move.py:199"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-537b7afe3df0615f", "level": "note", "message": {"text": "Possibly dead Python function: create_fade_to_color"}, "properties": {"repobilityId": "29ab46bb41a7ca14", "scanner": "scanner-primary", "fingerprint": "537b7afe3df0615f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/fade.py:251"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6bc7e226879d1555", "level": "note", "message": {"text": "Possibly dead Python function: create_breathing_animation"}, "properties": {"repobilityId": "0093210793e4b91e", "scanner": "scanner-primary", "fingerprint": "6bc7e226879d1555", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/templates/pulse.py:188"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-651e64fe46440d2b", "level": "note", "message": {"text": "Possibly dead Python function: draw_text_with_shadow"}, "properties": {"repobilityId": "871d25a567babc55", "scanner": "scanner-primary", "fingerprint": "651e64fe46440d2b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/typography.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d06e4c19c8bbe9b", "level": "note", "message": {"text": "Possibly dead Python function: draw_text_with_glow"}, "properties": {"repobilityId": "22cd5d380d2a1cb3", "scanner": "scanner-primary", "fingerprint": "1d06e4c19c8bbe9b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/typography.py:164"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-debeca3b48c3e493", "level": "note", "message": {"text": "Possibly dead Python function: draw_text_in_box"}, "properties": {"repobilityId": "5d7afcc7104db0b0", "scanner": "scanner-primary", "fingerprint": "debeca3b48c3e493", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/typography.py:218"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-134a1548ada5ab69", "level": "note", "message": {"text": "Possibly dead Python function: scale_font_for_frame"}, "properties": {"repobilityId": "8639ec737aceed82", "scanner": "scanner-primary", "fingerprint": "134a1548ada5ab69", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/typography.py:339"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46992d3b4cc94ca1", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_quad"}, "properties": {"repobilityId": "9c54008225f34fad", "scanner": "scanner-primary", "fingerprint": "46992d3b4cc94ca1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:17"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-466e7dc3ed7d0cdf", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_quad"}, "properties": {"repobilityId": "142c853223e69301", "scanner": "scanner-primary", "fingerprint": "466e7dc3ed7d0cdf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43f4b77a48f330f3", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_cubic"}, "properties": {"repobilityId": "04c4b3dd3a4c80b5", "scanner": "scanner-primary", "fingerprint": "43f4b77a48f330f3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:34"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a66cd94fa66581d", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_cubic"}, "properties": {"repobilityId": "1527d30f50a4943b", "scanner": "scanner-primary", "fingerprint": "3a66cd94fa66581d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a204067c9363d8e9", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_cubic"}, "properties": {"repobilityId": "4e32e71f9a5016ac", "scanner": "scanner-primary", "fingerprint": "a204067c9363d8e9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:44"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbd6c5773a4c582d", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_bounce"}, "properties": {"repobilityId": "0185838c943af0e6", "scanner": "scanner-primary", "fingerprint": "bbd6c5773a4c582d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:71"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4232236647c0072b", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_elastic"}, "properties": {"repobilityId": "4a3d8bcbd5ff465b", "scanner": "scanner-primary", "fingerprint": "4232236647c0072b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:78"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea6303816dd6a3a5", "level": "note", "message": {"text": "Possibly dead Python function: ease_out_elastic"}, "properties": {"repobilityId": "fa5c6451007cfca8", "scanner": "scanner-primary", "fingerprint": "ea6303816dd6a3a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:85"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d2bad836c123db8", "level": "note", "message": {"text": "Possibly dead Python function: ease_in_out_elastic"}, "properties": {"repobilityId": "00839dd091318e93", "scanner": "scanner-primary", "fingerprint": "4d2bad836c123db8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f360d212a4681a60", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in"}, "properties": {"repobilityId": "56b2b016f0ad05d0", "scanner": "scanner-primary", "fingerprint": "f360d212a4681a60", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:140"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c3f5ebe3f474bfa7", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_out"}, "properties": {"repobilityId": "32646da19ba276ce", "scanner": "scanner-primary", "fingerprint": "c3f5ebe3f474bfa7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:147"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a2be1abd363028f", "level": "note", "message": {"text": "Possibly dead Python function: ease_back_in_out"}, "properties": {"repobilityId": "2b283166adb35df2", "scanner": "scanner-primary", "fingerprint": "0a2be1abd363028f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:154"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02b1dd5772664f89", "level": "note", "message": {"text": "Possibly dead Python function: apply_squash_stretch"}, "properties": {"repobilityId": "69472943e1b79017", "scanner": "scanner-primary", "fingerprint": "02b1dd5772664f89", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/easing.py:163"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-208684c3ec08a1e3", "level": "note", "message": {"text": "Possibly dead Python function: emit_confetti"}, "properties": {"repobilityId": "33332b6a306994c8", "scanner": "scanner-primary", "fingerprint": "208684c3ec08a1e3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/visual_effects.py:143"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7483172e5cbef449", "level": "note", "message": {"text": "Possibly dead Python function: emit_sparkles"}, "properties": {"repobilityId": "f608438dccc79c85", "scanner": "scanner-primary", "fingerprint": "7483172e5cbef449", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/visual_effects.py:171"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e69d5c83d07da5e8", "level": "note", "message": {"text": "Possibly dead Python function: add_motion_blur"}, "properties": {"repobilityId": "027405a70cf962b2", "scanner": "scanner-primary", "fingerprint": "e69d5c83d07da5e8", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/core/visual_effects.py:213"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d53a96bca1143a5", "level": "warning", "message": {"text": "use defused xml \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:32"}, "properties": {"repobilityId": "1f4b8d9eea64feb5", "scanner": "scanner-primary", "fingerprint": "4d53a96bca1143a5", "layer": "security", "severity": "medium", "confidence": 0.55, "tags": ["semgrep", "security", "python"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/docx/ooxml/scripts/validation/redlining.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-6bc5dc7fc10622d5", "level": "warning", "message": {"text": "use defused xml \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:32"}, "properties": {"repobilityId": "6e2ef2b09c9b49a1", "scanner": "scanner-primary", "fingerprint": "6bc5dc7fc10622d5", "layer": "security", "severity": "medium", "confidence": 0.55, "tags": ["semgrep", "security", "python"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/pptx/ooxml/scripts/validation/redlining.py"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-385781a76abbddf6", "level": "warning", "message": {"text": "use defused xml \u2014 mcp-builder/scripts/evaluation.py:13"}, "properties": {"repobilityId": "51b869181aae0038", "scanner": "scanner-primary", "fingerprint": "385781a76abbddf6", "layer": "security", "severity": "medium", "confidence": 0.55, "tags": ["semgrep", "security", "python"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "mcp-builder/scripts/evaluation.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-8e6999d84d17403f", "level": "error", "message": {"text": "subprocess shell true \u2014 webapp-testing/scripts/with_server.py:71"}, "properties": {"repobilityId": "c559fb74576b82af", "scanner": "scanner-primary", "fingerprint": "8e6999d84d17403f", "layer": "security", "severity": "high", "confidence": 0.7, "tags": ["semgrep", "security", "python"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "webapp-testing/scripts/with_server.py"}, "region": {"startLine": 71}}}]}, {"ruleId": "scanner-a5c1fdb2fcc99d87", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: invoice-organizer/SKILL.md"}, "properties": {"repobilityId": "857cf8946bde2419", "scanner": "scanner-primary", "fingerprint": "a5c1fdb2fcc99d87", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "invoice-organizer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b02ece44c65226d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: connect/SKILL.md"}, "properties": {"repobilityId": "30f9c73fb1a0a04b", "scanner": "scanner-primary", "fingerprint": "b02ece44c65226d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "connect/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42c9701e491b92d1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: lead-research-assistant/SKILL.md"}, "properties": {"repobilityId": "9b464f19b4086705", "scanner": "scanner-primary", "fingerprint": "42c9701e491b92d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "lead-research-assistant/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b881c8a96da40e02", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/lever-automation/SKILL.md"}, "properties": {"repobilityId": "a23a02b99a6ec1ba", "scanner": "scanner-primary", "fingerprint": "b881c8a96da40e02", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/lever-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e2c330d7a8efe31", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/gorgias-automation/SKILL.md"}, "properties": {"repobilityId": "0afbfd4f0ba3c27c", "scanner": "scanner-primary", "fingerprint": "1e2c330d7a8efe31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/gorgias-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9c24a14cbe5c371", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/ahrefs-automation/SKILL.md"}, "properties": {"repobilityId": "de43ba1f874bcc35", "scanner": "scanner-primary", "fingerprint": "d9c24a14cbe5c371", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/ahrefs-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c0c9257aaf30279", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/microsoft-clarity-automation/SKILL.md"}, "properties": {"repobilityId": "67e77cb336309ed9", "scanner": "scanner-primary", "fingerprint": "7c0c9257aaf30279", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/microsoft-clarity-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2896b49aeca15621", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/replicate-automation/SKILL.md"}, "properties": {"repobilityId": "61c2d81aa2820e50", "scanner": "scanner-primary", "fingerprint": "2896b49aeca15621", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/replicate-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2126cf72d82a36e1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/semrush-automation/SKILL.md"}, "properties": {"repobilityId": "6d97f3384dffa838", "scanner": "scanner-primary", "fingerprint": "2126cf72d82a36e1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/semrush-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-549c3b8a36ea65c2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/facebook-automation/SKILL.md"}, "properties": {"repobilityId": "8292f2b01289ca59", "scanner": "scanner-primary", "fingerprint": "549c3b8a36ea65c2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/facebook-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-801f5fd407952e1a", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/clockify-automation/SKILL.md"}, "properties": {"repobilityId": "e4b4ee7a96f05f07", "scanner": "scanner-primary", "fingerprint": "801f5fd407952e1a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/clockify-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a890dc02ab724d0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/docker-hub-automation/SKILL.md"}, "properties": {"repobilityId": "88452dcb1bc00eb1", "scanner": "scanner-primary", "fingerprint": "4a890dc02ab724d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/docker-hub-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcf3f731f6dd5ebf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/groqcloud-automation/SKILL.md"}, "properties": {"repobilityId": "2f5d9b2d137b8363", "scanner": "scanner-primary", "fingerprint": "fcf3f731f6dd5ebf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/groqcloud-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35ad0affc3f3d6d4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/pandadoc-automation/SKILL.md"}, "properties": {"repobilityId": "0540ad6b78351af5", "scanner": "scanner-primary", "fingerprint": "35ad0affc3f3d6d4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/pandadoc-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-396a27437b6865f7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/workday-automation/SKILL.md"}, "properties": {"repobilityId": "f8609a0d9fb61e34", "scanner": "scanner-primary", "fingerprint": "396a27437b6865f7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/workday-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-efb93fac76e1add7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/shortcut-automation/SKILL.md"}, "properties": {"repobilityId": "b8bb71d43bbe6e04", "scanner": "scanner-primary", "fingerprint": "efb93fac76e1add7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/shortcut-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c464a186062ab90b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/omnisend-automation/SKILL.md"}, "properties": {"repobilityId": "894899eaeb034e61", "scanner": "scanner-primary", "fingerprint": "c464a186062ab90b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/omnisend-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80ed9a9b475a3c4f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/productboard-automation/SKILL.md"}, "properties": {"repobilityId": "9bca72437776c2d0", "scanner": "scanner-primary", "fingerprint": "80ed9a9b475a3c4f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/productboard-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9ec3d970793b7409", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/attio-automation/SKILL.md"}, "properties": {"repobilityId": "a50b8f0742591eb5", "scanner": "scanner-primary", "fingerprint": "9ec3d970793b7409", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/attio-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4cda52bbe9ae729", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/capsule-crm-automation/SKILL.md"}, "properties": {"repobilityId": "1a7e81603896d78f", "scanner": "scanner-primary", "fingerprint": "b4cda52bbe9ae729", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/capsule-crm-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aded63665f4796d5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: composio-skills/cloudinary-automation/SKILL.md"}, "properties": {"repobilityId": "15ae7d74c7915c07", "scanner": "scanner-primary", "fingerprint": "aded63665f4796d5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "composio-skills/cloudinary-automation/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68b16baf42105da0", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: slack-gif-creator/SKILL.md"}, "properties": {"repobilityId": "af832145e8c7adae", "scanner": "scanner-primary", "fingerprint": "68b16baf42105da0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "slack-gif-creator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2a92e8bd2918be1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: video-downloader/SKILL.md"}, "properties": {"repobilityId": "94fccf6302e26347", "scanner": "scanner-primary", "fingerprint": "f2a92e8bd2918be1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "video-downloader/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3da6b66020806cdc", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: mcp-builder/SKILL.md"}, "properties": {"repobilityId": "ea97d71892cefc53", "scanner": "scanner-primary", "fingerprint": "3da6b66020806cdc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "mcp-builder/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-402a1c33bc686ea4", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: document-skills/docx/SKILL.md"}, "properties": {"repobilityId": "3d5829eaa20da5e0", "scanner": "scanner-primary", "fingerprint": "402a1c33bc686ea4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/docx/SKILL.md"}, "region": {"startLine": 194}}}]}, {"ruleId": "scanner-c95f7f072b68502d", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: document-skills/pptx/SKILL.md"}, "properties": {"repobilityId": "ded1c294fc33f7fd", "scanner": "scanner-primary", "fingerprint": "c95f7f072b68502d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/pptx/SKILL.md"}, "region": {"startLine": 478}}}]}, {"ruleId": "scanner-c55c0becfc8380d7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: content-research-writer/SKILL.md"}, "properties": {"repobilityId": "80ab5f227452d8f2", "scanner": "scanner-primary", "fingerprint": "c55c0becfc8380d7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "content-research-writer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7112fe2b4ce5e5bf", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: meeting-insights-analyzer/SKILL.md"}, "properties": {"repobilityId": "6c98bcde78f66a4f", "scanner": "scanner-primary", "fingerprint": "7112fe2b4ce5e5bf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meeting-insights-analyzer/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43d6261b33768990", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: changelog-generator/SKILL.md"}, "properties": {"repobilityId": "6df083a2485196b6", "scanner": "scanner-primary", "fingerprint": "43d6261b33768990", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "changelog-generator/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5e0300106d518c0b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in artifacts-builder/LICENSE.txt"}, "properties": {"repobilityId": "887468202be2206e", "scanner": "scanner-primary", "fingerprint": "5e0300106d518c0b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "artifacts-builder/LICENSE.txt"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-cf2f40900e009f98", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in brand-guidelines/LICENSE.txt"}, "properties": {"repobilityId": "1ddef375d49ea82a", "scanner": "scanner-primary", "fingerprint": "cf2f40900e009f98", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brand-guidelines/LICENSE.txt"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-f791a77722eb7e71", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/LICENSE.txt"}, "properties": {"repobilityId": "86a9a7bc0f0aec7f", "scanner": "scanner-primary", "fingerprint": "f791a77722eb7e71", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/LICENSE.txt"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-3b6580281fb1e59c", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/ArsenalSC-OFL.txt"}, "properties": {"repobilityId": "80e799542e7e9ad3", "scanner": "scanner-primary", "fingerprint": "3b6580281fb1e59c", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/ArsenalSC-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-becd98dc085b3adb", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BigShoulders-OFL.txt"}, "properties": {"repobilityId": "495a10a119a21cbd", "scanner": "scanner-primary", "fingerprint": "becd98dc085b3adb", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/BigShoulders-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-99f395ee17656431", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Boldonse-OFL.txt"}, "properties": {"repobilityId": "c04d88d852363fbb", "scanner": "scanner-primary", "fingerprint": "99f395ee17656431", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Boldonse-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-beb69caf4159382b", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/BricolageGrotesque-OFL.txt"}, "properties": {"repobilityId": "b29a9b1f1109bf75", "scanner": "scanner-primary", "fingerprint": "beb69caf4159382b", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/BricolageGrotesque-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-f031266dce153ee2", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/CrimsonPro-OFL.txt"}, "properties": {"repobilityId": "385da2e3588b1dc6", "scanner": "scanner-primary", "fingerprint": "f031266dce153ee2", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/CrimsonPro-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-506942d30010cb87", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/DMMono-OFL.txt"}, "properties": {"repobilityId": "98676654a3831ce0", "scanner": "scanner-primary", "fingerprint": "506942d30010cb87", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/DMMono-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-8eba3e662c6a0a60", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/EricaOne-OFL.txt"}, "properties": {"repobilityId": "1c7b55b7e16ebe63", "scanner": "scanner-primary", "fingerprint": "8eba3e662c6a0a60", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/EricaOne-OFL.txt"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-bc684cfea89ff579", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/GeistMono-OFL.txt"}, "properties": {"repobilityId": "0de9b273135495f9", "scanner": "scanner-primary", "fingerprint": "bc684cfea89ff579", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/GeistMono-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-4f0a0917898686be", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Gloock-OFL.txt"}, "properties": {"repobilityId": "c56b5ab175c41352", "scanner": "scanner-primary", "fingerprint": "4f0a0917898686be", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Gloock-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-5c97ea152f0c9169", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/IBMPlexMono-OFL.txt"}, "properties": {"repobilityId": "bb3bfb3572ce3c17", "scanner": "scanner-primary", "fingerprint": "5c97ea152f0c9169", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/IBMPlexMono-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-6432c19bdbb7e3f1", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/InstrumentSans-OFL.txt"}, "properties": {"repobilityId": "e9753c8227157dfb", "scanner": "scanner-primary", "fingerprint": "6432c19bdbb7e3f1", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/InstrumentSans-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-1f825f2819b4adf5", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Italiana-OFL.txt"}, "properties": {"repobilityId": "62bd8107c123b153", "scanner": "scanner-primary", "fingerprint": "1f825f2819b4adf5", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Italiana-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-5d23aec23d60eb38", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/JetBrainsMono-OFL.txt"}, "properties": {"repobilityId": "882521923e1a8a0c", "scanner": "scanner-primary", "fingerprint": "5d23aec23d60eb38", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/JetBrainsMono-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e9eb69e2147e053d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Jura-OFL.txt"}, "properties": {"repobilityId": "3368a6b979be1289", "scanner": "scanner-primary", "fingerprint": "e9eb69e2147e053d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Jura-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-294717e15eb47902", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/LibreBaskerville-OFL.txt"}, "properties": {"repobilityId": "4c6f3f5ac0c04e5f", "scanner": "scanner-primary", "fingerprint": "294717e15eb47902", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/LibreBaskerville-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-c84017e4603b9380", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Lora-OFL.txt"}, "properties": {"repobilityId": "a26096c40dda2a11", "scanner": "scanner-primary", "fingerprint": "c84017e4603b9380", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Lora-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-151f610be5bd41f4", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NationalPark-OFL.txt"}, "properties": {"repobilityId": "e27c00c05739516c", "scanner": "scanner-primary", "fingerprint": "151f610be5bd41f4", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/NationalPark-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-7033501399f00b5a", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/NothingYouCouldDo-OFL.txt"}, "properties": {"repobilityId": "c6c3c82ad599173f", "scanner": "scanner-primary", "fingerprint": "7033501399f00b5a", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/NothingYouCouldDo-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e1cff60a14664e99", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Outfit-OFL.txt"}, "properties": {"repobilityId": "644175879be5b91e", "scanner": "scanner-primary", "fingerprint": "e1cff60a14664e99", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Outfit-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e594d37478a44a99", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PixelifySans-OFL.txt"}, "properties": {"repobilityId": "44aca8576df65464", "scanner": "scanner-primary", "fingerprint": "e594d37478a44a99", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/PixelifySans-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-3f3b85b22191ba67", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/PoiretOne-OFL.txt"}, "properties": {"repobilityId": "39a967b933d96872", "scanner": "scanner-primary", "fingerprint": "3f3b85b22191ba67", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/PoiretOne-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-f7d419484d02119d", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/RedHatMono-OFL.txt"}, "properties": {"repobilityId": "c80f81c8798e28e2", "scanner": "scanner-primary", "fingerprint": "f7d419484d02119d", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/RedHatMono-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-b1bb0532dcfdffdf", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Silkscreen-OFL.txt"}, "properties": {"repobilityId": "c8c2297c63b98d3f", "scanner": "scanner-primary", "fingerprint": "b1bb0532dcfdffdf", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Silkscreen-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-1df4486aa4bfe0ee", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/SmoochSans-OFL.txt"}, "properties": {"repobilityId": "9ab2384aae1087d8", "scanner": "scanner-primary", "fingerprint": "1df4486aa4bfe0ee", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/SmoochSans-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-2280f15d09737d2f", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/Tektur-OFL.txt"}, "properties": {"repobilityId": "6ac1a4ec398d48e0", "scanner": "scanner-primary", "fingerprint": "2280f15d09737d2f", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/Tektur-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-b5def6b46b234d02", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/WorkSans-OFL.txt"}, "properties": {"repobilityId": "1d9dda762ce02e23", "scanner": "scanner-primary", "fingerprint": "b5def6b46b234d02", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/WorkSans-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-9ce99319950104b6", "level": "note", "message": {"text": "SkillSpector EA3 (excessive-agency) in canvas-design/canvas-fonts/YoungSerif-OFL.txt"}, "properties": {"repobilityId": "345930e4cddb5dd3", "scanner": "scanner-primary", "fingerprint": "9ce99319950104b6", "layer": "security", "severity": "low", "confidence": 0.7, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA3"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "canvas-design/canvas-fonts/YoungSerif-OFL.txt"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-4ca3f3f5f62f7c09", "level": "error", "message": {"text": "SkillSpector E2 (data-exfil) in connect/SKILL.md"}, "properties": {"repobilityId": "48a728e3287ecdde", "scanner": "scanner-primary", "fingerprint": "4ca3f3f5f62f7c09", "layer": "security", "severity": "high", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "data-exfil", "E2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "connect/SKILL.md"}, "region": {"startLine": 101}}}]}, {"ruleId": "scanner-8aba7038776a398d", "level": "warning", "message": {"text": "SkillSpector EA2 (excessive-agency) in developer-growth-analysis/SKILL.md"}, "properties": {"repobilityId": "7a1a9acb337a2a6d", "scanner": "scanner-primary", "fingerprint": "8aba7038776a398d", "layer": "security", "severity": "medium", "confidence": 0.8, "tags": ["skillspector", "mcp-skill", "excessive-agency", "EA2"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "developer-growth-analysis/SKILL.md"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-e637c415447867e4", "level": "none", "message": {"text": "Run SkillSpector's LLM-backed analysis in your own pipeline"}, "properties": {"repobilityId": "1936f198ff5212bf", "scanner": "scanner-primary", "fingerprint": "e637c415447867e4", "layer": "security", "severity": "info", "confidence": 1.0, "tags": ["skillspector", "mcp-skill", "llm-advisory", "ai-coder"]}}, {"ruleId": "scanner-54a467bd37cd551e", "level": "error", "message": {"text": "Insecure pattern 'subprocess_shell_true' in webapp-testing/scripts/with_server.py:69"}, "properties": {"repobilityId": "8c014690d0b8bee6", "scanner": "scanner-primary", "fingerprint": "54a467bd37cd551e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "webapp-testing/scripts/with_server.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "scanner-d327c0d5011a7bc0", "level": "note", "message": {"text": "Very large file: document-skills/docx/scripts/document.py (1276 lines)"}, "properties": {"repobilityId": "4f42bedb31929517", "scanner": "scanner-primary", "fingerprint": "d327c0d5011a7bc0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "e50ebc97ac63d892", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "326f32bd677932f2", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "bb5b7e59e27ecf8b", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-7ab5ee47f92db5b1", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 video-downloader/scripts/download_video.py:24"}, "properties": {"repobilityId": "67c9f57916c15671", "scanner": "scanner-primary", "fingerprint": "7ab5ee47f92db5b1", "layer": "quality", "severity": "medium", "confidence": 0.85, "tags": ["integrity", "fragile-runtime", "robustness"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "video-downloader/scripts/download_video.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-c8baecaa9155bb39", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/docx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "bc7801b7d2ada394", "scanner": "scanner-primary", "fingerprint": "c8baecaa9155bb39", "layer": "quality", "severity": "medium", "confidence": 0.85, "tags": ["integrity", "fragile-runtime", "robustness"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/docx/ooxml/scripts/validation/redlining.py"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-cdd8b57216521017", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in document-skills/docx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "a80475d0bb6463f8", "scanner": "scanner-primary", "fingerprint": "cdd8b57216521017", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d7005e5d9b1aeda3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/scripts/thumbnail.py:219"}, "properties": {"repobilityId": "ac914b36d23d4476", "scanner": "scanner-primary", "fingerprint": "d7005e5d9b1aeda3", "layer": "quality", "severity": "medium", "confidence": 0.85, "tags": ["integrity", "fragile-runtime", "robustness"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/pptx/scripts/thumbnail.py"}, "region": {"startLine": 219}}}]}, {"ruleId": "scanner-8cb50fdd795fabaa", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/pptx/ooxml/scripts/validation/redlining.py:153"}, "properties": {"repobilityId": "f207d5ed8b248c9f", "scanner": "scanner-primary", "fingerprint": "8cb50fdd795fabaa", "layer": "quality", "severity": "medium", "confidence": 0.85, "tags": ["integrity", "fragile-runtime", "robustness"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/pptx/ooxml/scripts/validation/redlining.py"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-66bcf0e3890d1b08", "level": "note", "message": {"text": "Legacy-named symbol `xml_copy` in document-skills/pptx/ooxml/scripts/validation/base.py:769"}, "properties": {"repobilityId": "bd79364542a29169", "scanner": "scanner-primary", "fingerprint": "66bcf0e3890d1b08", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e5fda89cfe86a831", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 document-skills/xlsx/recalc.py:92"}, "properties": {"repobilityId": "aca3a8cfcde5200e", "scanner": "scanner-primary", "fingerprint": "e5fda89cfe86a831", "layer": "quality", "severity": "medium", "confidence": 0.85, "tags": ["integrity", "fragile-runtime", "robustness"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "document-skills/xlsx/recalc.py"}, "region": {"startLine": 92}}}]}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "31a83134c5ac9026", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}